🔒 PRIVACY POLICY

Cita66 Privacy Policy – Data Protection Commitment Malaysian Players

Cita66 takes your privacy seriously. This document clearly sets out the types of data we collect, the purposes for which it is used, how we protect it, and your rights as the owner of that data. We believe transparency is the foundation of genuine trust.

Updated: January 2026 256-bit SSL Malay (ms-MY)

Cita66's Privacy Commitment to Malaysian Players

Six core principles that form the foundation of cita66's approach to protecting the data and privacy of every member.

🔐
Bank-Grade Encryption

All data transmitted between your device and cita66's servers is protected by 256-bit SSL encryption — the same security standard used by leading banks in Malaysia. Your personal information and financial details remain unreadable to any unauthorised party.

🚫
No Sale of Data to Third Parties

Cita66 has never sold, rented, or transferred members' personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we use it solely for the purposes explicitly stated in this policy.

✅
Minimal Data Collection

Cita66 only collects data that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. This principle of data minimisation is a core part of our privacy commitment.

👁️
Full Transparency

The cita66 Privacy Policy is written in plain, easy-to-understand English — not confusing legal jargon. We want you to genuinely understand what happens to your data, not simply click "Agree" without knowing what you're consenting to.

🛡️
24/7 Security Monitoring

The cita66 security team monitors our systems around the clock to detect and respond to any threats or attempted data breaches. Independent security audits are conducted on a regular basis to ensure our data protection standards remain current.

⚖️
User Rights Respected

You have the right to access, correct, delete, or transfer the personal data cita66 holds about you. Data-related requests will be processed within 14 business days. Contact our support team to find out more about how to exercise these rights.

Introduction: This Privacy Policy explains how cita66 collects, uses, stores, and protects your personal information when you use our platform. By registering for or using any cita66 service — including slots, poker, blackjack, e-sports, Virtual Sports, and live matches — you agree to this Privacy Policy. Please read it carefully and contact us if you have any questions.

1. Personal Data We Collect

Cita66 collects your personal data in several ways — whether provided directly by you during registration, collected automatically as you use the platform, or received from payment processors that help us handle your transactions.

Data you provide directly to us:

  • Your full name as it appears on your Malaysian identity card
  • An active Malaysian phone number (used for OTP verification)
  • Email address (for account notifications and service communications)
  • Date of birth (for 18+ age verification)
  • Copy of identity card or other identity document (if requested during the KYC process)
  • Bank account or eWallet details for withdrawal of winnings
  • Information you provide when contacting the cita66 support team

Data collected automatically while you use the cita66 platform:

  • Your device's IP address and general location information (state/city)
  • Device type, operating system, and web browser version used
  • Login records — time, date, and duration of each session
  • Gaming activity records – game types played, bet amounts, outcomes
  • Financial transaction records — all deposits and withdrawals made
  • Cookie and related tracking technology data (see Section 5 for more information)
Note: cita66 does not collect credit or debit card numbers directly. All transactions are processed through secure third-party payment processors — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX Malaysia — each of which maintains its own privacy and data protection policies.

2. How We Use Your Personal Data

Cita66 uses collected personal data solely for the legitimate, stated purposes listed below. We do not use your data for any purpose beyond those listed without first obtaining your explicit consent.

Purpose of Use Clarification
Registration & Account Verification Processing new registrations, verifying member identity, and ensuring the 18+ age requirement is met before access is granted.
Financial Transaction Processing Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as processing withdrawals of winnings to your bank account or eWallet.
Account Security Sending SMS OTPs to verify logins and transactions, detecting suspicious activity, and protecting your account from unauthorised access.
Customer Support Assisting in the resolution of enquiries, complaints, or technical issues you encounter, and maintaining communication records for reference and service improvement purposes.
Legal Compliance Fulfilling legal obligations related to KYC, anti-money laundering, and other reporting requirements mandated under Malaysian law.
Personalise Your Experience Personalising game recommendations and promotional offers based on your playing patterns on cita66, to make the offers you receive more relevant.
Service Communications Sending you account-related notifications, policy updates, promotional information, and cita66 platform news via SMS or email (you can unsubscribe at any time).

All data processing activities we carry out are based on a valid legal basis — whether that is contractual necessity (to provide the services you signed up for), legal obligations, or cita66's legitimate interests in operating the platform safely and responsibly.

3. How cita66 Protects Your Data

The security of your personal data is cita66's top priority. We continually invest in the latest security infrastructure to ensure your information is always protected against any threat, whether external or from within our own organisation.

  • 256-bit SSL Encryption: All data communications between your browser and cita66's servers are encrypted using TLS 1.3 protocol with 256-bit keys — the same standard used by Malaysia's major banks such as Maybank and CIMB.
  • Secure Servers: Member data is stored in physically secured data centres with strict access controls. Only authorised personnel are permitted to access the data storage systems.
  • Internal Access Controls: cita66 staff may only access the personal data of members that is necessary to carry out their duties — the need-to-know principle is strictly observed.
  • Continuous Monitoring: cita66's automated monitoring system operates around the clock to detect any unauthorised access attempts, cyberattacks, or unusual activity within our systems.
  • Independent Security Audit: cita66 conducts periodic independent third-party security audits to identify and address any vulnerabilities before they can be exploited.
  • Staff Training: All cita66 staff who handle member personal data undergo comprehensive data protection training and sign legally binding confidentiality agreements.
Shared Responsibility: While cita66 implements comprehensive security measures on our end, the security of your account also depends on your own actions. Use a strong, unique password, enable two-factor authentication where available, never share your login credentials, and contact us immediately if you suspect any unauthorised activity on your cita66 account.

4. Sharing Data with Third Parties

Cita66 does not sell, rent, or transfer members' personal data to any third party for marketing purposes. However, in the course of operating the platform, there are specific situations where we need to share certain data with the following parties solely to enable us to provide services to you:

  1. Payment Processors: The transaction information required is shared with the payment processors we use — such as eWallet providers and FPX Malaysia — solely for the purpose of processing your deposits and withdrawals. These providers are held to strict financial security standards and have their own confidentiality obligations.
  2. Game Software Providers: Minimal technical data may be shared with third-party game software providers that power certain games on the cita66 platform, to ensure continuity and game integrity. These providers are bound by legally enforceable data protection agreements.
  3. Law Enforcement Authorities: cita66 will disclose personal data to Malaysian authorities where required by law, court order, or direction from a relevant regulatory agency. This includes investigations relating to money laundering or other illegal activities.
  4. Technical Service Providers: IT infrastructure service providers that help us operate the platform — such as trusted cloud computing services — may process your data as data processors acting on cita66's instructions. They are not permitted to use that data for any other purpose.

In all of the above cases, cita66 ensures that the relevant parties comply with data protection standards equivalent to or higher than those we apply ourselves. Legally binding data processing agreements are signed with all third-party service providers that handle cita66 member data.

Cross-Border Data Transfers: If any of our service providers operate outside Malaysia, cita66 ensures that any cross-border data transfers comply with applicable data protection requirements and that adequate protection standards are in place at the data's destination.

5. Cookies and Tracking Technologies

The cita66 platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and help us understand how the platform is used so we can continue to improve it.

Types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the cita66 platform to function properly — including login session cookies, security cookies, and cookies that store your language preferences. These cookies cannot be disabled.
  • Functional Cookies: Saving your personalisation preferences such as account settings and game display choices so you do not need to reconfigure them each time you log in to cita66.
  • Analytics Cookies: These help us understand how members use the cita66 platform — which pages are visited most often, how much time is spent on them, and where technical issues occur. This information is used in aggregate and anonymised form for platform improvements.
  • Marketing Cookies (Optional): Enabling us to display cita66 offers and promotions that are more relevant to your gaming interests. You can disable this cookie category from your browser settings without affecting the core functionality of the platform.

You can manage cookie settings through your web browser. Most browsers allow you to view, delete, or block cookies. However, disabling essential cookies may affect the functionality of the cita66 platform and your gaming experience. For specific instructions on managing cookies based on your browser type, refer to your browser's help section.

Smartphone Note: If you access cita66 via an Android or iOS smartphone browser, cookie settings are managed through your mobile browser settings. The method for managing cookies may vary slightly between Chrome, Safari, Firefox, and other browsers.

6. Your Rights as a Data Owner

As a cita66 member, you have certain rights regarding the personal data we hold about you. cita66 is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe. Your rights are as follows:

Right of Access

You have the right to request a copy of all personal data that cita66 holds about you. We will provide that data in a human-readable format within 14 working days of receiving your request.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Simple updates such as your phone number or email address can be made directly from your account dashboard.

Right to Erasure

You may request the deletion of your personal data from cita66's systems. Please note that certain data must be retained for a specified period to meet legal obligations before it can be fully deleted.

Right to Object

You may object to the processing of your personal data for specific purposes such as direct marketing. Once an objection is received, we will stop using your data for that purpose immediately.

Right to Data Portability

You may request your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another platform should you choose to do so.

Right to Restrict Processing

In certain circumstances, you may request that cita66 restrict the processing of your data — for example, while a dispute over data accuracy is being resolved, or while you are considering whether to object to the processing.

To exercise any of the rights above, contact the cita66 privacy team by email at support@cita66.site or via live chat. Please include your account details and clearly state which right you wish to exercise. We will verify your identity before processing any data-related request to ensure the security of your information.

7. Data Retention Period

Cita66 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by Malaysian law. We do not keep data longer than necessary.

  • Active Account Data: For as long as your cita66 account remains active — profile data, contact information, and activity records are retained to enable us to provide our services to you and comply with related legal obligations.
  • Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of seven years following the transaction date, in compliance with Malaysian financial reporting and anti-money laundering legislation.
  • Gaming Activity Records: Gaming activity logs are retained for three years for the purposes of dispute resolution, security audits, and platform improvement.
  • Support Communication Data: Records of conversations with the cita66 support team are retained for two years for quality control purposes and for reference should a similar issue arise in the future.
  • Data After Account Closure: When your cita66 account is closed, certain data must be retained for the period required under Malaysian law before it is permanently deleted. Optional marketing data will be deleted within 30 days of the account closure date.

Once the applicable retention period has expired, cita66 will securely delete or anonymise your data so that it can no longer be linked to your personal identity. The deletion process is carried out using methods that comply with recognised information security standards.

Children's Data: cita66 does not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected, it will be deleted immediately and the account in question will be closed. If you believe a minor has registered on our platform, please contact us right away.

8. Policy Amendments & How to Contact Us

Cita66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service enhancements. The date of the last update will always be displayed at the top of this document.

When there are material changes to this Privacy Policy — that is, changes that significantly affect how your data is used — cita66 will notify you via in-account notification, SMS, or email using the contact details you registered with. Continued use of the cita66 platform after the amendment notice has been sent will be considered your acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data at cita66, you can reach us through the following channels:

  • Live Chat: Available on the cita66 website — 24 hours a day, seven days a week in Malay
  • WhatsApp: Number available upon logging in to your cita66 account — typical response time under 15 minutes
  • Email: support@cita66.site – for more detailed privacy inquiries, response within 24 business hours

When contacting us regarding data privacy, please include your cita66 account username and a clear description of your query or request. We will verify your identity before processing any request involving access to or modification of your personal data.

Related Documents: For a comprehensive understanding of how we handle your data and protect you as a user, please also read Terms & Conditions and Responsible Gaming Policy cita66.

Why Your Privacy Matters to cita66

More than just a legal obligation — privacy is a core part of who we are.

In today's digital world, personal data is extraordinarily valuable. When you register with cita66, you entrust us with your personal information — your name, phone number, banking details — and we do not take that trust lightly. Our commitment to privacy goes beyond mere legal compliance; it is about building a genuine relationship of trust with every Malaysian player who chooses cita66 as their gaming platform.

When you make a deposit via Touch 'n Go eWallet or DuitNow, or withdraw winnings through Maybank2u or CIMB Clicks, those transactions are handled with the highest level of security we can implement. 256-bit SSL encryption is more than a technical term — it means that even if someone were to intercept the data communication between your device and the cita66 server, all they would see is unreadable data without the encryption key that only we hold.

Many active Malaysian players who enjoy slots, poker, blackjack, or placing bets on live matches at cita66 ask whether their gaming records are shared. The answer is a firm no — your activity records on cita66 are private and are not shared with any external party unless required by court order or Malaysian law. cita66 does not sell your gameplay data to advertisers, analytics companies, or any commercial third party.

We also understand that online gaming carries an added layer of privacy sensitivity. Not everyone is comfortable with those around them knowing they play on a platform like cita66. For this reason, we do not run any marketing campaigns that could publicly reveal a member's identity, and all marketing communications from cita66 are sent privately to you alone through your chosen channels.

For new players just getting started with cita66, the most important privacy aspect to understand relates to the KYC process. When cita66 requests identity verification documents such as a copy of your identity card, this is not merely a bureaucratic formality — it is a protective measure ensuring that no one else can use your identity to open an account or withdraw funds from an account in your name. Documents you submit are stored securely and protected in the same way as all other data.

Cita66 operates on the principle that your privacy should be protected by default — meaning the strictest privacy settings are applied automatically without you needing to change anything. You may choose to share more information if you want added benefits such as more accurate game recommendations, but you are never required to do so. The choice is yours.

Above all, trust is cita66's most valuable asset. Without your trust, we have nothing. That is why we continue to invest in data security, conduct regular independent audits, and make an open commitment that your data will never be sold or misused. If you have any questions about how we handle your privacy, please reach out — we will always respond honestly and transparently.

FAQ – cita66 Privacy Policy

Answers to the questions Malaysian players ask most frequently about data privacy at cita66.

Absolutely not. cita66 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes. Any data we share with external parties is strictly limited to payment processors (such as eWallet providers and FPX) required to process your transactions, and law enforcement authorities where required by Malaysian law. All third parties we work with are subject to binding data protection agreements.

Yes, you can request the deletion of your personal data by contacting the cita66 support team via live chat or email at support@cita66.site. Please note, however, that certain data — particularly financial transaction records — must be retained for a minimum period required under Malaysian law (typically seven years) before it can be fully deleted. This data is kept solely to meet legal obligations and is not used for any other purpose. Deletion requests will be processed within 14 business days.

When your cita66 account is closed, optional marketing data such as promotional preferences will be deleted within 30 days. Financial transaction records must be retained to fulfil legal obligations for seven years. Basic account data is kept for the period required by law, after which it will be securely deleted or anonymised. During the mandatory retention period, your data will not be used for any marketing or commercial purpose — it is kept solely to comply with legal requirements.

When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX Malaysia, the transaction is completed directly through your eWallet provider's or bank's secure interface — not through cita66 directly. cita66 does not see or store your eWallet account number or bank login credentials. We only receive confirmation that the payment was successful. All data communication is encrypted with 256-bit SSL throughout the process.

Yes. This is your right of access as the data owner. Contact the cita66 team by email at support@cita66.site with the subject line "Data Access Request" and include your account username. We will first verify your identity, then provide a copy of the personal data we hold about you in a readable format. This request is processed within 14 business days at no charge.

Cookies used by cita66 operate exclusively within the cita66.site domain. We do not use third-party cookies to track your activity across other websites on the internet. The analytics cookies we use collect data in aggregated, anonymised form strictly for internal platform improvement purposes. You can disable non-essential cookies through your web browser settings at any time without affecting the core functionality of the cita66 platform.

Your Data Is Safe at cita66 – Play with Confidence

Register today and enjoy a gaming platform that is not only entertaining, but also protects your privacy to the highest security standards. Minimum deposit of just RM10 via eWallet or FPX Malaysia.

✅ 256-bit SSL Encryption ✅ Data Never Sold ✅ 24/7 Malay-Language Support ✅ 18+ Only
Bahasa Melayu