Starback88 Privacy Policy

This Privacy Policy ("Policy") is published by Starback88 ("the Platform", "we", "us", "our") and applies to all personal data collected from users ("you", "User", "Player") in connection with your registration, account management, and use of the services available at starback88.cam (the "Platform") and associated sub-domains and digital properties.

Starback88 operates as an online betting and casino entertainment platform primarily serving Malaysian players and other eligible users internationally. In doing so, we process personal data in accordance with applicable data protection principles, including the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection frameworks.

By registering an account with Starback88, or by continuing to use our Services following any update to this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use our Services.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

Starback88 collects only the personal data that is necessary for the provision of our Services, compliance with applicable legal obligations, and the fulfilment of our contractual obligations to you. The categories of personal data we collect include:

3.1 Registration & Identity Data

When you create an account, we collect your full legal name, date of birth, residential address (including city, state, and postcode — relevant for Malaysian users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations), email address, and mobile telephone number.

3.2 KYC & Verification Data

To comply with anti-money-laundering (AML) and responsible gambling obligations, we collect copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's Licence), proof of address documents (utility bills or bank statements dated within three months), and selfie photographs where required for biometric identity verification.

3.3 Financial & Transaction Data

We collect records of deposits, withdrawals, and betting/gaming transactions, including payment method identifiers (e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account identifiers for Maybank, CIMB, Public Bank, Hong Leong; cryptocurrency wallet addresses for USDT, BTC, ETH; and FPX/DuitNow reference numbers). Full financial account credentials such as banking passwords and card PINs are never collected by Starback88.

3.4 Device & Technical Data

We automatically collect IP address, browser type and version, operating system, device identifiers, session duration data, pages visited, and referring URLs when you access our Platform. This data is used for security, fraud detection, platform optimisation, and regulatory compliance purposes.

3.5 Communications Data

Records of your communications with our support team via live chat, email, or WhatsApp — including query content, resolution records, and associated timestamps — are retained for quality assurance, dispute resolution, and regulatory record-keeping purposes.

3.6 Responsible Gambling Data

Where you interact with our responsible gambling tools — including deposit limits, session reminders, or self-exclusion requests — we record the settings applied and the dates of any changes for compliance and player protection purposes.

Starback88 processes your personal data for the following specific purposes:

Starback88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you, including account management, payment processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, responsible gambling obligations, and financial reporting requirements under laws applicable to the jurisdictions in which we operate.
• Legitimate Interest: Processing carried out in pursuit of Starback88's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and dispute resolution, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which we have obtained your explicit prior consent, specifically the sending of marketing and promotional communications. You may withdraw consent for marketing communications at any time by contacting our support team.

Starback88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may disclose your personal data to the following categories of recipients, strictly for the purposes described:

• Payment Service Providers: Personal and financial data is shared with payment processors as necessary to execute deposit and withdrawal transactions. This includes integration with Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processing services. These providers act as Data Processors bound by contractual data protection obligations.
• KYC & Identity Verification Partners: Identity document data may be shared with third-party KYC verification service providers engaged to carry out identity and address verification checks on Starback88's behalf.
• Fraud Prevention & Security Services: Device and transaction data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the platform and its users.
• Regulatory Authorities: Starback88 may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or government authorities where required by applicable law or regulatory order. Such disclosures are made only to the extent strictly required by applicable legal obligations.
• IT Infrastructure Providers: Personal data is processed by hosting, cloud computing, and IT infrastructure providers engaged by Starback88. All such providers are subject to contractual data processing agreements incorporating appropriate technical and organisational security measures.
• Professional Advisors: Legal counsel, auditors, and other professional advisors may access personal data on a strictly need-to-know basis in connection with the provision of their professional services to Starback88.

Starback88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC & Verification Documents: Retained for a minimum of five (5) years from the date of verification, in compliance with applicable AML regulations.
• Financial & Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, consistent with financial record-keeping obligations.
• Communications Records: Retained for a minimum of three (3) years from the date of the last communication, or until the resolution of any pending dispute related to those communications.
• Device & Technical Data: Retained for a maximum of twelve (12) months from the date of collection, unless required for longer periods in connection with ongoing fraud or security investigations.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years following its withdrawal, as evidence of compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with Starback88's data disposal procedures.

Starback88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and Starback88's servers is encrypted using 256-bit Transport Layer Security (TLS) protocol. Look for the padlock icon and HTTPS prefix in your browser's address bar when accessing starback88.cam.
• Encryption at Rest: Personal data and KYC documents stored on Starback88's servers are encrypted at rest using industry-standard encryption methods.
• Access Controls: Access to personal data is strictly limited to Starback88 personnel who require it in the performance of their duties. Role-based access controls and multi-factor authentication are enforced on all administrative systems.
• Regular Security Audits: Starback88's infrastructure is subject to regular security assessments, penetration testing, and vulnerability scanning by qualified security professionals.
• Incident Response: Starback88 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable legal requirements.

While Starback88 employs robust security measures, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access promptly.

Starback88 uses cookies and similar tracking technologies on our platform. A cookie is a small text file stored on your device that enables certain platform functions and helps us understand how users interact with our Services.

9.1 Cookie Categories

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These include session authentication cookies, security tokens, and fraud prevention identifiers. These cookies cannot be disabled without materially impairing platform functionality.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data is used to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and responsible gambling settings, so that you do not need to re-enter them on each visit.

9.2 Cookie Management

You may manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) provide cookie management controls in their privacy settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. Starback88 does not use cookies for third-party advertising purposes.

Subject to applicable law, you have the following rights in respect of your personal data held by Starback88. To exercise any of these rights, please contact us using the details in Section 14.

Starback88's Services are strictly available to individuals aged 21 years and above only. We do not knowingly collect personal data from individuals below the age of 21. Our registration process includes an age declaration requirement, and KYC identity verification is used to confirm the age of registered users.

If Starback88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and suspend the associated account. If you believe that a minor has registered on our platform, please notify us immediately at [email protected] (plain text — not a link).

In the course of operating Starback88's platform and associated services, your personal data may be transferred to and processed in countries outside of Malaysia. This may occur in connection with cloud infrastructure providers, KYC verification partners, or cybersecurity service providers located in other jurisdictions.

Where personal data is transferred internationally, Starback88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Malaysian PDPA. These safeguards include:

• Contractual data transfer agreements incorporating standard data protection clauses between Starback88 and the receiving party.
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection for the specific categories of data transferred.
• Implementation of additional technical and organisational security measures where required to supplement contractual protections.

Starback88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — meaning they significantly affect your rights or the way we process your data — we will notify registered users via the email address associated with their account, or via an in-platform notification, at least 14 days before the revised Policy takes effect. For non-material amendments, the updated Policy will be effective from the date of publication on this page.

Your continued use of the Starback88 platform following the effective date of any revision constitutes your acceptance of the amended Privacy Policy. If you disagree with any revision, please discontinue use of the platform and contact us to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Starback88, please contact our support team through the following channels. All data-related requests are handled by personnel with data protection responsibilities.