Privacy Policy

Citi88 Privacy Policy – Member Data Protection

Your privacy is our priority. This document explains in detail how citi88 collects, uses, stores, and protects your personal information as a member of our platform in Malaysia.

Last Updated: 1 January 2026
Your Data Is Safe
Protected with 256-bit SSL encryption and internationally certified security infrastructure.

This Privacy Policy is formulated in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. citi88 is fully committed to protecting the privacy and data security of all our members.

1Introduction

Welcome to the citi88 Privacy Policy. We understand that your trust is the most valuable asset we safeguard. When you register and use the citi88 platform, you entrust us with your personal information — and we take that responsibility very seriously.

This Privacy Policy explains in detail how citi88 collects, processes, stores, shares, and protects your personal information. It also outlines the rights you hold regarding your personal data and how you may exercise those rights.

By registering an account or continuing to use the citi88 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact the support team for assistance with account closure.

This policy applies to all services provided by citi88, including the official website, mobile app, online games, financial transactions, and all customer support channels.

2Information Collected

Citi88 collects various categories of personal information to ensure our platform operates properly, securely, and in compliance with relevant legal requirements. The information we collect falls into two main categories:

Information you provide directly:

  • Full name as shown on official identification documents
  • Date of birth and gender
  • Mobile phone number and email address
  • Bank account or e-wallet details for withdrawal purposes
  • Copies of identity verification documents (MyKad, passport) during the KYC process
  • Information you share via live chat or customer support email

Information collected automatically:

  • IP address and approximate location based on IP
  • Web browser type, operating system, and device used
  • Login log data including time, date, and in-session activity
  • Betting history, deposits, and withdrawals
  • Cookie data and website tracking technologies
  • Technical performance data of the platform during gaming sessions

Citi88 never collect credit card numbers or sensitive financial information directly. All payment transactions are processed through integrated, certified third-party payment gateways.

The following table summarizes the types of data collected and the purpose of each collection:

Data Category Example Primary Purpose
Identity Data Name, date of birth, ID number KYC verification & fraud prevention
Contact Data Phone number, email Communication & customer support
Financial Data Bank name, account number Withdrawal processing
Technical Data IP, browser, device Security & fraud detection
Activity Data Betting history, login records Legal compliance & auditing

3How Your Data Is Used

Every piece of information we collect is used only for legitimate and specific purposes. citi88 will not use your personal data beyond the scope stated in this policy. The purposes for which we use your data include:

  • Account Management: Enabling you to register, login, and manage your gaming account securely.
  • Transaction Processing: Verifying your identity to ensure deposits and withdrawals are processed quickly and accurately.
  • KYC & AML Compliance: Meeting legal requirements for Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
  • Platform Security: Detecting and preventing fraudulent activity, account intrusions, or system abuse.
  • Service Improvement: Analyzing usage patterns to improve the gaming experience, platform performance, and the relevance of promotional offers.
  • Service Communications: Sending important notifications regarding your account, transactions, policy changes, or relevant promotions.
  • Customer Support: Helping resolve complaints, inquiries, or technical issues you report to our support team.
  • Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and provide appropriate assistance.

Citi88 ensures that every instance of data processing has a solid legal basis, whether grounded in your consent, contractual necessity, legal obligation, or the company's legitimate interests that do not override your privacy rights.

4Information Sharing

Citi88 does not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. However, there are a limited number of situations where we may need to share your data with certain parties:

  • Payment Service Providers: Integrated payment gateways (such as FPX, DuitNow, Touch 'n Go) receive the information necessary to process your financial transactions. They are subject to their own privacy policies and security standards.
  • Game Software Providers: Third-party game providers may receive certain session data for the purpose of win verification and game fairness auditing.
  • Regulatory Authority: citi88 is required to disclose information when ordered to do so by a court, regulatory body, or legitimate law enforcement agency in Malaysia or a relevant jurisdiction.
  • Professional Consultant: Lawyers, accountants, and auditors bound by professional confidentiality obligations in carrying out their duties for citi88.
  • Business Restructuring: Should citi88 be involved in a merger, acquisition, or asset sale, member information may be transferred as part of those assets, with appropriate notice given to members.

All third parties that receive personal data from citi88 members are required to sign data processing agreements that bind them to security and privacy standards equivalent to those of citi88.

5Storage & Security

Citi88 employs internationally certified security infrastructure to protect the personal data of all members. Key security measures we have in place include:

  • 256-bit SSL Encryption: All data transmitted between your device and citi88 servers is encrypted using the tamper-proof TLS 1.3 standard.
  • Encrypted Data Storage: Passwords are stored as one-way hashes using the bcrypt algorithm. Other sensitive data is stored in AES-256 encrypted format.
  • Layered Access Controls: Only citi88 staff with specific authorisation and a legitimate job requirement may access members' personal data.
  • 24/7 Monitoring: A real-time intrusion detection system continuously monitors our infrastructure to identify and respond to any security threats.
  • Regular Backups: Data is regularly backed up to redundant data centres at separate physical locations to ensure service continuity.

Regarding retention periods, citi88 retains your personal data for as long as your account is active or as long as necessary for the purposes stated in this policy. After account closure, data will be retained for seven (7) years to meet legal and audit requirements, after which it will be securely deleted or anonymised.

Citi88's primary servers are hosted in certified data centers compliant with ISO 27001 and SOC 2 Type II standards, ensuring the highest level of physical and digital security for all member data.

6Cookies & Tracking Technologies

Citi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions such as login sessions, security verification, and language preferences. Cannot be disabled.
  • Performance Cookies: Collecting anonymized information about how visitors use our website for analytics and improvement purposes.
  • Functional Cookies: Remembering your preferences and settings such as favorite game types, display resolution, and other preferences.
  • Marketing Cookies: Used to display relevant promotions and offers based on your activity and interests on the platform.

You may manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the citi88 platform and your overall gaming experience.

7Your Privacy Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you as a data subject have the following rights regarding your personal information held by citi88:

  • Right to Access: You have the right to request a copy of the personal information we hold about you.
  • Right to Rectification: You have the right to request that we correct any personal information that is inaccurate or out of date.
  • Right to Object to Processing: You have the right to object to the processing of your data for specific purposes such as direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
  • Right to Enquiry: You have the right to enquire with us about how your data is processed and our privacy policy.

To exercise any of the above rights, please contact the citi88 support team via live chat or email. We will process your request within 14 working days from the date of receipt. For more complex cases, this period may be extended to up to 30 days, with notice provided to you.

8Child Protection

Citi88 is an adult entertainment platform that exclusively for individuals aged 18 and above only. We do not knowingly collect or process personal information from individuals under the age of 18.

If we find that personal information of a minor under the age of 18 has been collected without the knowledge of a parent or legal guardian, we will take immediate steps to delete that information and close the associated account. Parents or guardians who discover their child has registered on the citi88 platform should contact our support team immediately.

9Third-Party Links

The citi88 platform may contain links to third-party websites or services, including game providers, payment providers, and platform partners. This Privacy Policy applies to the citi88 platform only.

Citi88 is not responsible for the privacy practices or content of those third-party websites. We encourage you to read and understand the privacy policies of those websites before providing any personal information to them. The presence of links to third-party websites does not imply that citi88 endorses or validates their content or practices.

10Policy Amendments

Citi88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable laws, business practices, or technology. Any material changes will be communicated to members via in-platform notifications or their registered email at least 14 days before the changes take effect.

The latest version of this Privacy Policy is always available on the /privacy-policy and the "Updated" date at the top of the document will reflect the date of the most recent changes. Your continued use of the citi88 platform after changes take effect will be considered your acceptance of the amended terms.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how citi88 handles your personal data, please contact our Data Protection Officer through the following channels:

  • Live Chat: Available 24/7 directly through the citi88 platform
  • Telegram: Through official citi88 support channels
  • Email: [email protected]

We are committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. Your well-being and trust are at the core of everything we do at citi88.

For all requests related to data access rights, information corrections, or privacy complaints, please clearly state your full name, account number, and request details to help us respond as quickly as possible.

How citi88 Protects Your Data

Six core pillars of data protection forming the foundation of citi88's privacy commitment to every member in Malaysia.

Top-Level Encryption

All data transmitted between your device and the citi88 platform is protected with 256-bit SSL encryption using TLS 1.3 — the same technology used by leading financial institutions worldwide.

Secure KYC Process

Your identity verification documents are processed through an integrated KYC system with end-to-end encryption. Copies of your documents are never stored in unencrypted form and are only accessed by authorised personnel.

No Data Sales

Citi88 has never and will never sell, rent, or disclose your personal data to advertisers or third-party data brokers. Your privacy is not a business commodity for us — it is our responsibility.

24/7 Security Monitoring

Our real-time threat detection system continuously monitors the citi88 infrastructure around the clock. Any suspicious activity involving your account will be identified and addressed promptly before it affects you.

Malaysia PDPA Compliance

All citi88 data management practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). You have clear legal rights regarding your data, and we respect those rights.

Your Data, Your Control

Through your citi88 account, you can update your personal information, manage communication preferences, and request data access or corrections at any time. Full control is always in your hands.

Privacy Rights You Hold as a citi88 Member

We respect and facilitate the exercise of your privacy rights under Malaysia's PDPA.

Data Access Right

You have the right to request and receive a complete copy of all personal information citi88 holds about you. Requests will be processed within 14 working days.

Right to Rectification

If your personal information is inaccurate or has changed, you have the right to request that citi88 correct or update your records promptly.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time without providing any justification.

Right to Withdraw Consent

Where data processing relies on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

Right to Enquiry

You may enquire about how your data is processed, which parties receive your data, and how long your data is retained.

Right to Complain

If you believe your privacy rights have been violated, you have the right to file a complaint with citi88 or directly with the Malaysia Personal Data Protection Department.

Privacy Policy FAQ

Answers to the most frequently asked questions by citi88 members regarding privacy and data protection.

citi88 does not sell or share your personal information with third parties for marketing purposes. We only share necessary data with payment service providers to process your transactions, game providers for win verification, and law enforcement authorities when required by law. All third parties involved are subject to binding data protection agreements.

Your personal data is retained for as long as your account is active on the citi88 platform. After account closure, data will be retained for seven (7) years to meet mandatory legal and audit requirements. After that period, all data will be permanently deleted or securely anonymised in accordance with our security procedures.

You may submit a data access request via 24/7 live chat or the citi88 support email. Please include your full name and account number in the request. Our team will process your request within 14 working days and provide a complete copy of your personal data in a readable format.

When you close your citi88 account, we will immediately disable your access to the platform. Your personal data will be retained for seven years for legal compliance and audit purposes. During this period, access to your data is restricted to authorised personnel only. Once the retention period ends, your data will be permanently deleted or anonymised.

Yes, citi88 is fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of member personal data management. We have an appointed Data Protection Officer, documented data handling procedures, and an ongoing staff training programme to ensure PDPA compliance at all times.

citi88 uses 256-bit SSL encryption for all data transmissions, bcrypt-hashed password storage, 24/7 security monitoring, a real-time intrusion detection system, and layered access controls. Our servers are housed in ISO 27001-certified data centres. In the event of any security breach involving your data, we will notify you within 72 hours in line with industry best practices.

Play Safe, Play with Confidence

Your data is protected. Your wins are guaranteed. Join millions of citi88 members enjoying a safe, fair, and responsible online gaming experience in Malaysia.

256-bit SSL Protected Data
Malaysia PDPA Compliance
Privacy Guaranteed
Bahasa Melayu