citi88 Privacy Policy

1. Information We Collect

During the registration process and use of the citi88 platform, we collect various types of personal information to ensure services that are secure, legitimate and compliant with identity verification requirements. This information includes:

• Identity Information: Full name, date of birth, identification card number (MyKad), mobile phone number and email address.
• Financial Information: e-wallet account details (Touch 'n Go, Boost, ShopeePay), bank account numbers for FPX, and cryptocurrency wallet addresses (USDT, BTC, ETH) for deposit and withdrawal purposes only.
• Technical Information: IP address, device type, operating system, web browser used, and login session data.
• Platform Activity Data: Betting history, transaction records, game preferences, and interactions with customer service.
• Communications: Records of live chat sessions and emails exchanged between players and our support team.

We collect only information that is relevant and necessary for the stated purposes. We do not collect more data than is required.

2. Purpose of Using Information

Personal information collected by citi88 is used solely for the following purposes:

• Player identity verification and compliance with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Processing deposits, withdrawals and other financial transactions accurately and securely.
• Providing effective customer service in Malay and English.
• Sending account-related information, bonuses, platform updates and security notifications.
• Identifying and preventing fraudulent activity, account misuse or unauthorised access attempts.
• Complying with legal obligations and reporting requirements under citi88's international licensing.
• Improving products, services and the overall user experience.

3. Sharing Information with Third Parties

citi88 does not sell or rent player personal information to any third party. However, in certain situations, we may share information with:

• Payment Service Providers: To facilitate transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, ShopeePay and cryptocurrency processors. These providers are bound by strict confidentiality agreements.
• Game Software Providers: To the minimum extent necessary to ensure games function properly and legitimately.
• Regulatory Authorities: Where required by law, court order or the direction of an authorised regulatory body.
• Technical Partners: IT infrastructure, hosting and cybersecurity service providers who are bound by equally strict confidentiality terms.

All data sharing is conducted on a minimum-necessary basis and is subject to binding data processing agreements.

4. Use of Cookies and Tracking Technologies

The citi88 website uses cookies and similar technologies to improve your browsing experience. Cookies allow our platform to recognise your preference settings, maintain login sessions and analyse usage patterns in aggregate.

There are two types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting website functionality.
• Analytical Cookies: Help us understand how players interact with the platform for improvement purposes. You may choose to disallow these cookies through your browser settings.

By continuing to use the citi88 platform, you agree to the use of cookies as described. Guidance on managing cookies is available in your web browser's documentation.

5. Data Retention Period

citi88 retains player personal information for as long as the account is active or as long as necessary to fulfil the purposes set out in this Policy. In certain situations, we are required to retain certain records for a longer period based on legal requirements, including:

• Financial transaction records are retained for a minimum of five years for AML compliance purposes.
• Identity verification records (KYC) are retained throughout the active account period and up to five years after account closure.
• Customer service communication logs are retained for a reasonable period for reference and dispute resolution.

After the specified retention period has ended, data will be deleted or anonymised in a secure and irreversible manner.

6. Personal Information Security

We implement comprehensive technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction. These measures include:

• Encryption of data in transit using the latest TLS/SSL protocols.
• Encryption of data at rest using industry-recognised algorithms.
• Role-based access controls with multi-factor authentication for staff.
• Continuous monitoring for suspicious activity and intrusion attempts.
• Regular security audits by independent and experienced third parties.
• Cybersecurity awareness training for all staff who handle player data.

While we take all reasonable precautions, no system is entirely perfect. Should a security incident involving your data occur, we are committed to notifying you within a reasonable timeframe and taking immediate remedial action.

7. Protection of Underage Players

The citi88 platform is intended solely for individuals aged 21 and above. We do not actively collect personal information from individuals under 21 years of age. A strict identity verification (KYC) process is carried out during registration to ensure compliance with this age requirement.

Should we find that information has been collected from someone below the stipulated age, the account in question will be suspended immediately and the data will be deleted in accordance with established procedures. Parents or guardians who find that their child may have registered an account with citi88 are encouraged to contact our support team immediately.

8. Cross-Border Data Transfers

As a platform operating under international licensing, some player data may be processed or stored outside Malaysia by our service providers. In all such cases, we ensure that:

• Data transfers are made only to parties that provide an equivalent or higher level of data protection.
• Binding contractual agreements are in place for every cross-border data transfer.
• Additional protective measures are taken when data is transferred to jurisdictions with differing levels of protection.

9. Changes to This Privacy Policy

citi88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements or player feedback. Any significant changes will be communicated to registered players via email or in-platform notification.

The latest version of this Privacy Policy is always available on the citi88 website. It is the player's responsibility to review this Policy from time to time. Continued use of the citi88 platform after notification of changes is considered acceptance of the updated terms.