cita888 Privacy Policy

1 Information We Collect

In operating our online gambling platform, cita888 collects various categories of personal information from members. This collection is done directly through the registration process, platform use, and through automated technology.

Registration and Identity Verification Information

When registering an account, we collect information such as the following:

• Full name as shown on your identity card (MyKad) or passport
• Date of birth (to confirm you are 21 years of age or older)
• Valid identity card or passport number
• Active email address
• Mobile phone number
• Your chosen username and password

Financial and Transaction Information

To process deposits and withdrawals, we collect information relating to your chosen payment method, including details related to Touch 'n Go eWallet, DuitNow, FPX or cryptocurrency wallets. We do not store your bank account number directly — processing is handled through encrypted payment channels.

Platform Usage Information

• Betting history and game activity
• Deposit and withdrawal transaction records
• Access time logs and session duration
• Game preferences and account settings

Technical Information

• IP address and network location
• Device type, operating system and web browser
• Cookie data and session identifiers
• Website referral and usage analytics data

2 How We Use Your Data

Personal information collected is used by cita888 responsibly for legitimate and necessary purposes only. The following are the main purposes for which your data is used:

• Verify your identity during registration and each time you log in to protect account security
• Process deposits and withdrawals accurately and securely through your chosen payment method
• Manage promotions, bonuses and VIP programmes related to your account
• Provide customer support via live chat and email in Malay and English
• Ensure compliance with legal and licensing requirements, including anti-money laundering measures
• Send important notifications relating to your account, transactions and platform updates
• Analyse usage patterns to improve the user experience and platform stability
• Implement responsible gambling measures including detecting risky betting patterns

cita888 does not use your data to make automated decisions that significantly affect you without human review. We also do not use your personal data to build third-party advertising profiles.

3 Legal Basis for Data Processing

The processing of personal data by cita888 is based on a clear and recognised legal basis. We process your data based on:

Contract Performance

When you register an account and accept our Terms and Conditions, a contract is formed between you and cita888. Data processing required to deliver services — including account management, transaction processing and service communications — is necessary to perform that contract.

Legitimate Interests

We have a legitimate interest in ensuring platform security, detecting fraud, preventing unauthorised access and maintaining the integrity of betting operations. These interests do not override your fundamental rights.

Legal Obligations

As a licensed gambling operator, we are required by law to verify member identities, retain transaction records and report suspicious activity to the relevant authorities when required.

Consent

For certain processing such as sending marketing communications about offers and promotions, we rely on your consent. You may withdraw this consent at any time.

4 Data Sharing and Disclosure

cita888 does not sell, rent or trade your personal information to any third party for marketing purposes. However, there are limited situations where we share data for operational needs:

Payment Service Providers

To process deposits and withdrawals, required transaction information is shared with approved payment processors. This includes data needed to process transactions via Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency platforms. All such providers are bound by strict confidentiality agreements.

Game Software Providers

Game providers integrated with the cita888 platform receive minimal and limited session data — only what is required to display games correctly and record betting results.

Regulatory Authorities and Law Enforcement

We may be required to disclose information to the relevant authorities when required by law, court order or to assist in financial crime and money laundering investigations.

5 Personal Information Security

The security of your data is a priority for cita888. We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, alteration or unintended disclosure.

• TLS/SSL encryption for all communications between your device and our servers
• Password storage using secure cryptographic hashing methods
• Internal access controls based on a need-to-know-only principle for staff
• Continuous security monitoring and periodic system audits
• Established incident response procedures in the event of a data breach
• Separation of test environments from live production data

While we take all reasonable measures, no security system can be guaranteed one hundred percent. We encourage you to also protect your account by choosing a strong password and not sharing your login details with anyone.

6 Data Retention Period

cita888 retains your personal information for as long as your account is active or for the period required for the purposes described in this Policy. The criteria that determine the retention period include:

• Legal and regulatory requirements that mandate the retention of financial transaction records
• The need to resolve any outstanding disputes or claims
• Statutory limitation periods relating to legal liability
• Internal audit requirements and licensing framework compliance

When your account is closed at your request or due to a terms violation, your data will be retained for the minimum period required by applicable law, after which it will be securely deleted or anonymised.

7 Your Rights Regarding Personal Data

As a cita888 member and data subject, you have the following rights regarding your personal information. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

Right of Access

You have the right to request a copy of the personal information we hold about you, along with information on how it is processed.

Right to Rectification

If your information is inaccurate or incomplete, you have the right to request a correction. For basic account information, you can do this directly through your profile settings.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. Please note that we may need to retain some data to comply with legal obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations, such as while you are disputing the accuracy of information we hold.

Right to Withdraw Consent

For processing based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our customer support team via live chat or email. We will respond within the required timeframe and may need to verify your identity first.

8 Cookies and Tracking Technologies

cita888 uses cookies and similar tracking technologies to improve the user experience, maintain login sessions and analyse platform usage. Below are the categories of cookies we use:

Essential Cookies

These cookies are required for basic platform functions such as session authentication, security and language preferences. They cannot be disabled without affecting your ability to use the platform.

Functional Cookies

These cookies store your preferences such as display settings, game choices and interface preferences so you do not need to set them again each time.

Analytics Cookies

We use aggregated analytics data to understand platform usage patterns, identify areas that need improvement and optimise website performance. This data cannot identify you individually.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect platform functionality.

9 Cross-Border Data Transfers

As an online gambling platform operating under international licensing, cita888's operations and technical infrastructure may involve the transfer or processing of data outside Malaysia. In such situations, we ensure:

• Data is transferred only to countries or organisations that offer an adequate level of data protection
• The use of standard contractual clauses or recognised transfer mechanisms to ensure continued protection
• All international data recipients are bound by equivalent confidentiality and security obligations
• Cryptocurrency transfers comply with the required KYC and AML procedures

By using the cita888 platform, you acknowledge and agree that your data may be transferred and processed outside your country of residence, subject to the protections stated above.

10 Changes to This Privacy Policy

cita888 reserves the right to update or modify this Privacy Policy at any time. Changes may occur as a result of legal developments, changes in business practices or platform improvements. We will notify you of material changes through:

• A notice on the platform's login page
• An email to the address registered to your account
• A visible update to the effective date at the top of this Policy

Continued use of the platform after changes take effect will be considered acceptance of the updated terms. We encourage you to review this Policy periodically. If you do not agree with the changes made, you have the right to close your account in accordance with the procedures set out in the Terms and Conditions.

11 Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, the cita888 support team is ready to assist you.

Our support is available 24 hours a day, 7 days a week via live chat on the platform and email in Bahasa Melayu and English. For privacy-related enquiries, please include "Pertanyaan Privasi" or "Privacy Inquiry" in the subject line of your message so it is directed to the relevant team promptly.