Privacy Policy citi88 — Malaysia Data Protection

This Privacy Policy is issued by citi88 ("we", "the Company" or "citi88"), which operates an online casino platform at citi88.bet. This Policy outlines our privacy practices and explains how we handle the personal data of users ("you", "member") who use our services.

We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. This Privacy Policy applies to all personal data collected through:

• The official citi88.bet website and all associated subdomains.
• The citi88 mobile app, available for download.
• Interactions with our customer support team via live chat, email, or phone.
• Participation in our promotions, contests, or membership programmes.
• Financial transactions including deposits and withdrawals via Malaysian eWallets and online banking.

By registering a citi88 account or continuing to use our platform after this Privacy Policy has been updated, you are deemed to have given informed consent to the collection and use of your personal data as described herein.

Citi88 collects your personal data only when necessary to deliver high-quality services and comply with legal requirements. The following are the categories of data we collect:

We do not collect sensitive personal data such as your health information, religious beliefs, or political views, except where required by law or with your explicit consent.

Citi88 collects your personal data through a variety of transparent and lawful methods. The following are the primary ways data collection occurs:

• Account Registration: When you register a new account at citi88.bet, you will be required to provide basic information such as your name, email, phone number, and password.
• Identity Verification (KYC): To meet compliance requirements, we may request identity verification documents such as a copy of your Malaysian MyKad or passport.
• Financial Transactions: Every time you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), your transaction details are automatically recorded.
• Platform Usage: Technical data such as IP addresses, log records, and cookies are collected automatically as you browse and use the citi88 platform.
• Support Interactions: When you contact our support team via live chat or email, those conversations are recorded for quality assurance and audit purposes.
• Campaigns & Promotions: If you participate in any citi88 contest or promotion, additional information may be collected for prize fulfilment and eligibility verification purposes.

Every piece of data we collect serves a clear and legitimate purpose. citi88 uses your personal data for the following:

• Account Management: Creating, verifying, and managing your citi88 account, including processing logins and security settings.
• Payment Processing: Processing deposits and withdrawals to your Malaysian eWallet or bank account securely and promptly.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and statutory reporting requirements as prescribed in Malaysia.
• Platform Security: Detecting and preventing fraud, suspicious activity, multi-account usage, and cybersecurity threats against the citi88 platform.
• Responsible Gambling: Monitoring your gaming behaviour to identify signs of problem gambling and offering appropriate self-exclusion and control tools.
• Service Improvement: Analysing aggregated usage data to improve the user experience, platform speed, and variety of games offered.
• Marketing Communications: Sending promotional information, bonus offers, and the latest updates about citi88 — only to members who have given their consent to receive such communications.
• Customer Support: Resolving member-reported queries, complaints, and technical issues with greater efficiency and effectiveness.

Citi88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data in limited and controlled circumstances as follows:

• Payment Providers: Transaction information is shared with authorised payment processors such as DuitNow, FPX, and eWallet gateway providers to facilitate your deposits and withdrawals.
• Game Providers: Minimal technical data is shared with our licensed game providers to ensure smooth and secure gameplay.
• Legal Authorities: citi88 will disclose your personal data to the relevant authorities when required by Malaysian law, a court warrant, or a lawful enforcement order.
• Auditors & Professional Advisors: Professional third parties such as auditors, legal counsel, or security specialists appointed by citi88 may access your data within the scope of their work, subject to strict confidentiality agreements.
• Business Transfers: If citi88 is involved in a merger, acquisition, or asset sale, member personal data may be transferred as part of that transaction, with advance notice given to affected members.

All third parties that receive your personal data from citi88 are required to uphold data protection standards equivalent to or higher than those we apply.

Citi88 invests heavily in data security infrastructure to ensure your personal information is always protected against unauthorised access, loss, or misuse.

• SSL/TLS Encryption: All data transmitted between your browser and citi88's servers is encrypted using industry-standard 256-bit SSL/TLS protocol.
• Two-Factor Authentication (2FA): citi88 members are encouraged to enable 2FA as an additional security layer to protect their accounts from unauthorised access.
• Internal Access Controls: Member personal data is accessible only to authorised citi88 staff who require such access within the scope of their legitimate duties.
• Regular Security Audits: citi88's systems and infrastructure undergo regular independent security audits to identify and address any vulnerabilities.
• Secure Data Storage: Personal data is stored on servers protected by enterprise-grade firewalls, intrusion detection systems, and regular data backups.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data held by citi88:

To exercise any of the rights above, please contact us by email at privacy@citi88.bet including your account number and request details.

Citi88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the citi88 platform.

Citi88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: For the duration your account remains active with citi88, plus a further 5 years following account closure for compliance and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Communication Records: Support chat history and emails are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data & Logs: Server logs and technical data are retained for 12 months before being automatically deleted or anonymised.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

Once the retention period expires, your personal data will be securely deleted using methods that ensure it cannot be recovered or accessed again.

If you have any questions or concerns, or wish to exercise your rights under Malaysia's PDPA regarding how citi88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@citi88.bet — for personal data enquiries and requests.
• General Support Email: support@citi88.bet — for any account and service-related issues.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the citi88 platform.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access rights, the response period is 21 business days as required under Malaysia's PDPA.