Responsible Disclosure Policy

At STM Lottery Sdn Bhd, protecting our players and their data is our highest priority. We welcome reports of potential security vulnerabilities from the security community and the public.

How to Report

If you discover a vulnerability, please contact us through:

• Web Feedback Form: Click Here.

When reporting, please include a clear description, steps to reproduce, and your contact details.

Our Commitment

• We will acknowledge your report within 5 business days.
• We will investigate and work to remediate confirmed issues quickly.
• We may publicly recognize your contribution (with your consent).

Guidelines for Researchers

• Test responsibly − avoid actions that disrupt services or affect other players.
• Do not access, alter, or delete data that is not yours.
• Give us reasonable time to fix the issue before public disclosure.

Safe Harbor

If you act in good faith and comply with this policy, we will not take legal action against you for reporting vulnerabilities. Thank you for helping us keep our gaming systems secure.