Sambal88 takes seriously its responsibility to protect the personal data of every player who trusts our platform. This document transparently explains the types of data we collect, how it is used, who it may be shared with, and what rights you have as the owner of that data. Please read it carefully before registering.
1 January 2026
V2.4 – Latest update
Bahasa Melayu (ms-MY)
Malaysia – PDPA 2010
256-bit SSL at all times
Six core principles that guide how Sambal88 manages the personal data of Malaysian players
Every bit of data transmitted between your device and sambal88's servers is protected by 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's major banking institutions. Your login details, TNG eWallet or DuitNow payment information, and personal data cannot be intercepted by any third party during transmission.
Sambal88 has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. The data you provide to Sambal88 during registration and use of the platform is used solely for platform operations – it is not an additional revenue stream for us.
The sambal88 Privacy Policy is developed in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means we have a legal obligation to protect your data and to uphold your rights over it. sambal88 takes these obligations seriously — going beyond mere minimum legal compliance.
Every Sambal88 player has control over their own personal data. You may request access to the data we hold, correct inaccurate information, request a restriction on data processing, or apply for complete deletion of your data – all of which can be done via our support email or the account settings menu.
Sambal88 does not retain your data indefinitely without clear justification. Each data category has a defined retention period based on operational requirements, Malaysian financial compliance obligations, and our legitimate interests. Once the purpose for retention is no longer relevant, data is securely deleted from our systems.
In the unlikely event of a data security breach affecting players' personal information, sambal88 is committed to notifying affected players within 72 hours of confirming the breach — in line with international data protection industry best practices.
This Privacy Policy was last updated on 1 January 2026 (Version 2.4). By registering or continuing to use the sambal88 platform, you confirm that you have read and understood this policy. sambal88 complies with Malaysia's Personal Data Protection Act (PDPA) 2010 in all aspects of player personal data management.
Sambal88 collects players' personal data only for legitimate purposes related to platform operations. The following are the main categories of data we may collect:
Data Minimisation Principle: Sambal88 only collects data that is genuinely necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs or political views. Any data collected without clear justification identified during internal audits will be deleted.
The personal data sambal88 collects is used for the following purposes, all of which are directly related to platform operations and the player experience:
| Purpose of Use | Legal Basis | Revocable? |
|---|---|---|
| Managing accounts and identity verification (KYC) | Contract | No |
| Processing deposits and withdrawals in MYR | Contract | No |
| Providing gaming and betting services | Contract | No |
| Fraud detection and security protection | Legitimate Interest | No |
| Anti-money laundering compliance | Legal Obligation | No |
| Customer support and complaint resolution | Contract | No |
| Responsible gambling management | Legitimate Interest | No |
| Send promotional and bonus-related notifications | Consent | Yes – withdrawable |
| Player satisfaction surveys (optional) | Consent | Yes – withdrawable |
For legitimate purposes Consent (such as promotional notifications), you may withdraw your consent at any time without affecting your account or your access to the sambal88 platform. Withdrawn consent is not retroactive — it does not invalidate any data processing that took place prior to the date of withdrawal.
Sambal88 does not sell or disclose players' personal data to third parties for marketing purposes. However, in the course of platform operations, data may be shared with the following limited categories of third parties:
Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive only the minimum data necessary to deliver games to you – including session IDs and betting information. These providers are bound by strict data protection agreements with Sambal88 and are not permitted to use this data for any other purpose.
To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, transaction information must be shared with the relevant payment providers. These providers are regulated by Bank Negara Malaysia and uphold stringent data protection standards.
Sambal88 is required under Malaysian law to disclose certain information to the relevant authorities upon receipt of a lawful order — such as in investigations into financial fraud or money laundering. Such disclosures do not require your consent and will not be communicated to you if doing so would obstruct the investigation.
Sambal88 will not disclose your data to: third-party marketing companies, data brokers, external advertisers, or any entity that has no direct operational relationship with the delivery of Sambal88's services to you.
Sambal88 implements multiple layers of technical and organisational security to protect players' personal data from unauthorised access, alteration, disclosure or destruction:
While sambal88 takes all reasonable security measures, no online system can be guaranteed 100% secure against every threat. Players also have a role in safeguarding their own accounts — use a strong password, enable 2FA, and never share your login details with anyone.
Sambal88 uses cookies and similar tracking technologies to enhance the player experience on our platform. The following types of cookies are used:
These cookies are essential for the basic functionality of the Sambal88 platform and cannot be disabled. They include login session cookies, security tokens, and language preferences. Without these cookies, the platform cannot function properly.
These cookies help us understand how players use the platform — which pages are visited most often, where players encounter difficulties, and how to improve the overall experience. This data is collected in aggregate and is not linked to your individual identity.
These cookies save your preferences — such as preferred table limits, display settings, and game preferences — so you do not have to reconfigure them each time you log in to sambal88.
You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect core functionality of the Sambal88 platform and your gaming experience. Cookies are temporary – they are deleted when you close your session or when their set expiry period lapses.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a Sambal88 player have the following rights regarding your personal data:
You have the right to request a copy of the personal data sambal88 holds about you. Requests will be processed within 21 business days. One free request is permitted every 12 months.
If the data we hold about you is inaccurate or out of date, you have the right to request a correction. Contact Sambal88 support with the correct information and any supporting documents if required.
You may request the deletion of your personal data when it is no longer needed for the original purpose of collection, or when you withdraw your consent. Please note that certain data must be retained for Malaysian financial regulatory compliance and cannot be deleted on request.
You can request that Sambal88 stop processing your data for specific purposes such as direct marketing – this will not affect your access to the platform as long as your account remains active.
You have the right to receive the data you have provided to Sambal88 in a machine-readable format (such as CSV or JSON) for transfer to another platform should you close your account.
If you are not satisfied with how Sambal88 has handled your data after contacting us, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) as the relevant regulatory authority.
To exercise any of the above rights, please contact us by email at support@sambal88.click with the subject line "Personal Data Rights Request", along with your account number and details of your request.
Sambal88 retains players' personal data only for as long as necessary for the stated purposes. The following is a guide to retention periods by data category:
After permanent account closure, Sambal88 will delete or anonymise your personal data that is no longer required for legal compliance within 30 days of the account closure date.
In certain circumstances, Sambal88 players' personal data may be processed or stored outside Malaysia, particularly by international game service providers such as Evolution Gaming or Pragmatic Play, which operate across multiple global data centres.
When this occurs, Sambal88 ensures that:
Sambal88 does not transfer complete player data lists or personal player profiles to any entity outside Malaysia. Only technical data necessary for the delivery of specific games may be processed by the relevant international providers.
The Sambal88 platform is for players aged 18 and above only. We do not knowingly collect any personal data from individuals under the age of 18.
If sambal88 discovers that personal data belonging to a child or minor under the age of 18 has been inadvertently collected through a manipulated registration process, we will:
If you become aware that someone under the age of 18 has registered or attempted to register on Sambal88, please report it immediately to our support team at support@sambal88.click.
Sambal88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or new platform features. Any amendments will:
Continued use of the Sambal88 platform after the effective date of any amendment constitutes acceptance of the updated privacy terms. We recommend that players review this page every few months.
For amendments that materially affect your rights — such as changes to how data is shared or longer retention periods — Sambal88 will request your consent again before those amendments apply to your existing data.
For any questions, concerns, or requests relating to this Privacy Policy or the management of your personal data at Sambal88, please contact us:
All privacy-related communications are handled by a team trained in the requirements of Malaysia's PDPA 2010. Requests involving data deletion or transfer require additional identity verification before we are able to process them.
For most Malaysians, choosing an online casino or Sports Betting platform is about more than just game selection or bonuses. It is also about trust — can this platform be trusted with your personal information? Can you rest easy knowing your phone number, eWallet details, and transaction records are stored securely and will not be sold to any third party?
At Sambal88, the answer to both questions is yes. We recognise that personal data is a trust you place in us, not something we have purchased from you. When you register with your MyKad number and Malaysian phone number, you are trusting Sambal88 to handle that information responsibly. We do not take that trust lightly.
Malaysia's Personal Data Protection Act (PDPA) 2010 is the legislation governing how companies handle the personal data of Malaysians. It grants you legally enforceable rights — including the right to know what data is held about you, the right to correct inaccurate data, and the right to request deletion under certain circumstances. Sambal88 complies with the PDPA not merely because it is a legal requirement — we genuinely believe in the principles behind it as the right way to do business.
This means that when you contact Sambal88 support and request information about the data we hold on you, we will provide it in a format you can understand, within the timeframe prescribed by law. This is not a courtesy on our part – it is your right, guaranteed under Malaysian law.
One of the top concerns for Malaysian online casino players is the security of their payment information. When you make a deposit via Touch 'n Go eWallet or DuitNow, your transaction data is transmitted over a connection protected by 256-bit SSL encryption. This means that even if someone managed to intercept the communication between your device and Sambal88's servers, the data captured would be completely unreadable without the encryption key held solely by Sambal88.
Sambal88 does not store your eWallet PIN or password. We only retain the transaction records that are necessary — amount, date, and status — not your payment security details. Deposit and withdrawal processes are handled through a secure interface provided by Bank Negara Malaysia-approved payment providers.
One aspect of data use that other platforms sometimes leave unexplained is the use of gaming activity data for responsible gambling purposes. At sambal88, we use your gaming session data — how long you play, how often you play, and your betting patterns — to identify early signs of problem gambling. This is not about surveillance or penalising you. It is a proactive protection system.
If our systems detect patterns of concern, you may receive a notification from Sambal88 suggesting you explore the self-management tools available. You are free to disregard these notifications — we respect your autonomy. But we believe it is better to inform than to stay silent when the data shows signs that warrant attention.
When a player decides to close their sambal88 account, we initiate a clear and transparent process. Data that is no longer required for legal compliance is deleted or anonymised within 30 days. Financial transaction records are retained for 7 years as required under Malaysian financial law — a requirement that applies to all financial institutions and payment platforms in Malaysia, not something specific to sambal88.
Usernames previously associated with closed accounts cannot be reused by other players — this is an additional security measure to prevent identity confusion. All data retained after account closure is stored in a more restricted environment with stricter access controls compared to active account data.
The most frequently asked questions by Malaysian players about privacy and data protection