Sigma168 collects personal information solely for the purpose of operating a safe and responsible online gaming platform. We only collect data that is genuinely necessary — nothing more.
The following are the categories of information that may be collected when you use the sigma168 platform:
- Registration Information: Full name, date of birth, email address, mobile number, and encrypted password when you open a new account.
- Identity Verification Documents (KYC): A copy of your national identity card (MyKad), passport or other accepted identity document, a selfie, and proof of address such as a utility bill or recent bank statement.
- Financial Information: Bank account number, bank name, DuitNow details, and other payment information required to process deposits and withdrawals.
- Gaming Activity Data: Wagering records, transaction history, account balance, game session dates and times, and bonus usage details.
- Technical Data: IP address, browser type and version, device operating system, screen resolution, cookie data, and session information automatically generated while you browse our platform.
- Communications: Records of all correspondence between you and the sigma168 customer support team, including live chat, email, and support tickets.
Data Minimisation Principle: sigma168 only collects information that is strictly necessary for the stated purpose. We do not collect sensitive data such as medical information, political views, or religious beliefs unless you choose to share such information voluntarily.
Data from trusted third parties, such as identity verification providers and payment processors, may also be shared with us to help verify your identity and process financial transactions more securely.
Every piece of information we collect is used for a clear and legitimate purpose. sigma168 uses your personal data for the following purposes:
- Account Management: Open, verify, and manage your player account, including the KYC process required for regulatory compliance.
- Transaction Processing: Process deposits, withdrawals, and all other financial transactions quickly and securely via DuitNow, FPX, and other supported payment methods.
- Platform Security: Detect and prevent fraud, money laundering, unauthorized access, account abuse, and other illegal activities that could compromise the safety of other players.
- Customer Support: Provide accurate and prompt assistance when you contact our support team, by referencing your interaction history.
- Platform Improvements: Analyze aggregated usage patterns to improve the interface, user experience, and overall platform performance.
- Legal Compliance: Meet legal obligations, including reporting requirements to relevant authorities under applicable law in Malaysia.
- Service Communications: Send important notifications regarding your account, security updates, promotional information (if you have consented), and changes to the terms of service.
Direct Marketing: sigma168 will only send you marketing communications if you have given explicit consent. You may unsubscribe from marketing emails at any time using the unsubscribe link included in every promotional email.
Sigma168 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations in which we may need to share your information with certain parties:
- Service Providers: Third parties that help us operate the platform — such as identity verification providers, payment processors, cloud service providers, and cybersecurity firms. All such providers are bound by strict confidentiality agreements.
- Game Providers: Game provider companies supplying slots, live casino, and fish shooting content may receive the minimum technical data required to run the games correctly.
- Legal Authority: sigma168 will disclose information to authorities only when required by a court order, warrant, or valid legal obligation — and we will notify you if permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction, provided the receiving party upholds equivalent data protection standards.
Data Processing Agreement: Every third-party provider with access to your data is required to sign a Data Processing Agreement (DPA) that binds them to the same privacy and security standards as sigma168.
Sigma168 has no control over the privacy practices of third parties that you access through links or integrations within our platform. We encourage you to read the privacy policy of each third-party platform before sharing any information.
Protecting your personal data is sigma168's top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always safeguarded from unauthorized access, loss, or misuse.
- 256-bit SSL Encryption: All communications between your device and sigma168 servers are encrypted using the latest TLS protocol, ensuring no third party can intercept or read your data in transit.
- Encrypted Data Storage: Sensitive data such as financial information and identification documents are stored in encrypted databases with multiple layers of security.
- Strict Access Control: Only authorised sigma168 staff with a legitimate business need may access players' personal data. All access is automatically logged and monitored.
- Two-Factor Authentication (2FA): sigma168 offers an additional layer of security through 2FA for player accounts. We strongly encourage all players to enable this feature.
- Regular Security Audits: The sigma168 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms to identify and address any vulnerabilities.
- Real-Time Threat Monitoring: Our automated threat detection system operates 24/7 to identify suspicious activity and respond immediately.
Shared Responsibility: While sigma168 takes all reasonable steps to protect your data, account security also depends on your own actions. Make sure you use a strong password, do not share your login credentials, and always log out after each gaming session — especially on shared devices.
Sigma168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.
The following are the types of cookies used by sigma168:
- Essential Cookies: Required for core platform functions such as login, security sessions, and language settings. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies: Collect anonymous data on how visitors use our platform, helping us identify the most visited pages and technical issues that need fixing.
- Functional Cookies: Remember your preferences such as language, screen resolution, and other personal settings to provide a more personalized experience.
- Analytics Cookies: Used to understand aggregate usage patterns for platform improvement purposes. This data is not used to identify any individual personally.
How to Manage Cookies: You can manage and delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the sigma168 platform. For more information, refer to your web browser's help documentation.
Sigma168 does not use third-party tracking technologies for targeted advertising or to collect data across other websites you visit.
Sigma168 fully recognises and respects your rights regarding personal data. Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:
| Your Rights |
Description |
Status |
| Right of Access |
Request a copy of the personal data we hold about you in a readable format. |
Available |
| Right to Rectification |
Request correction of any personal data that is inaccurate, incomplete, or outdated. |
Available |
| Right to Erasure |
Request deletion of your personal data under certain circumstances, subject to our legal obligations. |
Available |
| Right to Restriction |
Request that we restrict the processing of your personal data under certain circumstances. |
Available |
| Right to Portability |
Receive your personal data in a structured, machine-readable format. |
Available |
| Right to Object |
Object to the processing of your data for direct marketing purposes at any time. |
Available |
To submit any request relating to the rights above, please contact the sigma168 Data Protection Officer by email at [email protected]. We will process your request within 30 days of receipt.
Identity Verification: To protect your data, sigma168 may need to verify your identity before processing any personal data-related request. This is a safeguard implemented in your best interest.
Sigma168 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.
- Active Account Data: For as long as your account remains active, all profile and transaction data is fully retained to ensure uninterrupted service delivery.
- Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting and Anti-Money Laundering (AMLA) legal requirements.
- KYC Documents: Retained for a minimum of five (5) years following account closure, or longer if required by the relevant authorities.
- Security Logs: Retained for two (2) years for the purpose of investigating potential security incidents.
- Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
When data is no longer required, sigma168 will delete or anonymise it using secure, irreversible methods, ensuring your information does not fall into the wrong hands.
Sigma168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements. We are committed to informing you of any material changes.
- Material changes will be clearly displayed on this page along with the new effective date.
- Registered players will be notified via in-platform notifications or their registered email when significant amendments are made.
- Continued use of the sigma168 platform after amendments are published will be considered acceptance of the updated terms.
- If you do not agree with the amendments, you have the right to close your account and request deletion of the relevant data.
Latest Version: This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. The Malay language version is the authoritative and final version for all matters relating to the sigma168 Privacy Policy.
If you have any questions, concerns, or complaints regarding how sigma168 handles your personal data, our Data Protection team is ready to assist you.
- Data Protection Email: [email protected]
- Target Response Time: Within 3 business days for general enquiries; 30 days for formal data rights requests.
- Live Support: Live chat is available 24/7 through the sigma168 platform for immediate enquiries.
We take every privacy complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant authority under applicable law.