cita88 Privacy Policy

1 Introduction and Scope

This Privacy Policy applies to all personal data processed by cita88 in connection with your use of the cita88 online casino and sportsbook platform accessible at https://cita88.co ("the Platform"). It applies whether you access the Platform via a web browser on a desktop device or a mobile device, or through any other supported access method.

cita88 acts as the data controller with respect to the personal data described in this Policy. We process personal data in accordance with the data protection requirements imposed by our international gaming licence and applicable data protection law.

This Policy should be read alongside the cita88 Terms & Conditions, which govern your use of the Platform more broadly. Terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2 Personal Data We Collect

cita88 collects the following categories of personal data in connection with the operation of the Platform:

2.1 Registration and Identity Data

• Full legal name as stated on your government-issued identification document (Malaysian MyKad or equivalent)
• Date of birth (for mandatory age verification — cita88 is strictly for players aged 21 and above)
• Residential address
• Email address
• Mobile telephone number (Malaysian registered numbers supported)
• Copies of identity documents and, where required, proof of address documents submitted during KYC verification

2.2 Financial Data

• Payment method details used for deposits and withdrawals, including FPX account identifiers, Touch n Go eWallet identifiers, Boost account identifiers, and bank account information for Maybank, CIMB, and Public Bank transfers
• Transaction records including deposit and withdrawal amounts, dates, and reference numbers
• Verification documents relating to payment method ownership where required

2.3 Gaming Activity Data

• Game session records including games played, bet amounts, outcomes, and session duration
• Sportsbook betting records including markets wagered on, odds accepted, and settlement outcomes
• Bonus and promotional offer redemption records

2.4 Technical and Device Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser type
• Session login and logout timestamps
• Platform interaction logs for security monitoring purposes

2.5 Communications Data

• Records of customer support interactions via live chat or email
• Records of voluntary communications you send to cita88 support staff

3 How We Use Your Personal Data

cita88 uses the personal data we collect for the following purposes:

• Account administration: Creating, maintaining, and managing your cita88 account, processing your cita88 login requests, and providing access to Platform features.
• Identity and age verification: Fulfilling our mandatory KYC obligations under our gaming licence, including confirming that all players are aged 21 or above.
• Payment processing: Processing deposits and withdrawals through your selected payment channels and maintaining accurate transaction records.
• Fraud prevention and security: Detecting and investigating suspicious activity, preventing unauthorised account access, and protecting the integrity of the Platform.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other compliance obligations imposed by our licensing authority.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion, deposit limit, and session limit requests.
• Customer support: Responding to your queries, resolving disputes, and improving service quality.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the design, functionality, and game selection of the cita88 Platform.
• Communications: Sending you service-related notifications including account alerts, transaction confirmations, and, where you have opted in, promotional communications about cita88 offers.

4 Legal Basis for Processing

cita88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the cita88 Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with our gaming licence requirements, including KYC verification, AML obligations, and responsible gaming mandates.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications, where you have expressly opted in. You may withdraw this consent at any time via your account settings or by contacting our support team.

5 Data Sharing and Third Parties

cita88 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: We share relevant payment data with FPX, Touch n Go eWallet, Boost, and partnering Malaysian banks solely to process your deposits and withdrawals.
• KYC and identity verification providers: We may use third-party services to verify identity documents. These providers process your data solely for this purpose under strict data processing agreements.
• Game content providers: Game studios whose titles are hosted on the cita88 Platform may receive anonymised session data for the purpose of game performance monitoring and regulatory compliance.
• Regulatory and law enforcement authorities: We may be required by law, court order, or instruction from our licensing authority to disclose personal data to competent authorities. We will not inform you of such disclosure where doing so would be unlawful.
• Professional advisers: Legal, audit, and compliance advisers who are contractually bound to maintain the confidentiality of information shared with them.

All third parties with whom cita88 shares personal data are required to handle that data securely and in accordance with applicable data protection standards.

6 Cookies and Tracking Technologies

The cita88 Platform uses cookies and similar technologies to operate core platform functions, maintain your session following cita88 login, remember your language and display preferences, and analyse overall platform performance through aggregated metrics.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without rendering the Platform inoperable.
• Functional cookies: Store your preferences such as language setting and session persistence for returning users.
• Analytics cookies: Collect anonymised data about how visitors use the Platform to help us improve performance and user experience. No personally identifiable data is stored in analytics cookies.

cita88 does not deploy third-party advertising or tracking cookies. You can manage or disable cookies via your browser settings, though doing so may affect your ability to use certain features of the Platform.

7 Data Retention

cita88 retains your personal data for as long as your account remains active and for a period thereafter as required by our licensing authority and applicable law. Specifically:

• Account registration and KYC data is retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years following the resolution of the relevant query.
• Technical and device data used for security monitoring is retained for up to twelve (12) months.

Where retention beyond the above periods is required by law or regulation, data will be retained for the requisite additional period only.

8 Data Security

cita88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cita88 Platform.
• Encryption of sensitive data at rest, including identity document copies and payment data.
• Access controls limiting personal data access to authorised personnel with a demonstrated operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for internal systems accessing personal data.

Notwithstanding the above, no security system is impenetrable. cita88 cannot guarantee the absolute security of your data. You are responsible for maintaining the security of your cita88 login credentials and for notifying us immediately of any suspected unauthorised account access.

9 Your Data Protection Rights

Subject to applicable law and our licensing obligations, you have the following rights in relation to your personal data held by cita88:

• Right of access: You may request a copy of the personal data cita88 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to cita88.
• Right to object: You may object to processing based on legitimate interests. Where processing is for direct marketing purposes, this right is absolute.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact the cita88 support team using the contact details in Section 13. We will respond to your request within a reasonable period and in any event within the timeframe required by applicable law. We may need to verify your identity before processing your request.

10 Children and Age Restriction

The cita88 Platform is strictly restricted to persons aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account and delete all related personal data in accordance with our regulatory obligations.

If you believe that a person under the age of 21 has registered an account or submitted personal data to cita88, please contact our support team immediately so that we can take appropriate action.

11 International Data Transfers

cita88's primary servers are operated within the jurisdiction of our licensing authority. In certain circumstances, personal data may be processed by service providers in other jurisdictions, including third-party payment processors and KYC verification providers. Where such transfers occur, cita88 ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that require the recipient to apply data protection standards no less stringent than those described in this Policy.

12 Amendments to This Policy

cita88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or legal obligations. Where material changes are made, we will provide reasonable notice to registered players via the email address on file or via an on-platform notification. The "Effective" date at the top of this Policy indicates when the current version came into effect. Your continued use of the cita88 Platform following the effective date of an updated Policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data cita88 holds about you, please contact us: