PRIVACY POLICY

Citi88 Privacy Policy – Personal Data Protection for Malaysia Members

At citi88, we take your privacy seriously. This document transparently explains how we manage and protect your personal information throughout your time with us.

Last Updated: 1 January 2026
256-bit SSL
Bank-Grade Encryption
Secure Data
No Sharing Without Consent
Full Rights
Your Data Controls
No Third-Party Advertising
Data Not Sold

Citi88's Privacy Commitment to You

Six privacy commitments that citi88 upholds across every aspect of our members' personal data management.

Your Data Is Never Sold to Third Parties

Citi88 has never and will never sell, rent, or disclose your personal information to any third party for marketing or commercial purposes without your consent.

Bank-Grade 256-bit SSL Encryption

All data transmitted between your device and citi88's servers is protected by 256-bit SSL encryption technology — the same standard used by leading financial institutions in Malaysia.

You Control Your Own Data

Citi88 gives you full control over your personal data — you have the right to access, correct, or request deletion of your data at any time by contacting our team.

Secure Data Storage

Your personal data is stored on secure servers protected by a multi-layer firewall system, strict access controls, and continuous security monitoring by the citi88 IT team.

Full Transparency in Data Use

Citi88 is transparent about exactly how your data is used. There is no hidden data usage — all purposes are clearly stated in this policy.

Immediate Notification of Any Risk

In the event of any security incident affecting your data, citi88 is committed to notifying you promptly and taking all necessary remedial action without delay.

1Introduction & Scope of This Policy

This Privacy Policy is issued by citi88 and applies to all users, visitors, and registered members of the citi88 platform in Malaysia. We are committed to protecting your privacy and managing your personal data responsibly, transparently, and in line with industry best practices.

By browsing the citi88 website, registering as a member, making deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or other Malaysian payment methods, playing games, or interacting with any feature on our platform, you agree that citi88 may collect and use your information as described in this policy.

Important Note: This Privacy Policy forms part of Terms & Conditions citi88. By using our platform, you agree to both documents simultaneously.

If you disagree with any part of this policy, we encourage you to contact the citi88 support team for further clarification before continuing to use our platform.

2Types of Personal Data We Collect

Citi88 collects your personal data only to the extent necessary to provide our services safely and effectively. The types of data we collect are as follows:

2.1 Information You Provide Directly

Full name
Email address
Phone number
Date of birth
Residential address
MyKad / Passport Number
Payment account information
Identity verification documents

2.2 Automatically Collected Information

When you use the citi88 platform, our systems automatically record certain technical information to ensure a smooth and secure user experience:

  • IP address and device location information
  • The type and version of the web browser you use
  • Device type — smartphone, tablet, or computer
  • Your device's operating system
  • Pages visited and time spent on citi88
  • Betting activity records and game history
  • Deposit and withdrawal transaction logs

2.3 Information from Other Sources

In certain cases, citi88 may receive information about you from legitimate third-party sources, such as identity verification (KYC) service providers or fraud prevention bodies, solely for the purpose of security and account verification.

3How citi88 Uses Your Data

Citi88 uses collected personal data for specific, legitimate, and transparent purposes. We do not use your data beyond what is necessary for the following:

  • Account Management: Creating, managing, and maintaining your citi88 account, processing registrations, and handling identity verification (KYC).
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing your withdrawal requests.
  • Gaming Services Provision: Allows you to access and play online slots, Live Casino, Sports Betting, e-sports, Lottery, and all other games on citi88.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-account usage, and bonus abuse on the citi88 platform.
  • Customer Support: Enables the citi88 support team to assist you in resolving any technical issues or account-related enquiries.
  • Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
  • Platform Improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the performance, design, and features of citi88.
  • Service Communications: Sending important notifications about your account, security updates, and relevant promotional information (you may unsubscribe at any time).
Legal Basis for Data Processing: citi88 processes your personal data on three legal bases: (1) the performance of a contract between you and citi88, (2) legal obligations binding on us, and (3) the legitimate interests of citi88 in operating its business safely and effectively.

4Data Sharing and Disclosure

Citi88 does not sell, lease, or disclose your personal information to third parties for their marketing or commercial purposes. However, in limited and specific circumstances, citi88 may share your data with the following parties:

4.1 Trusted Service Providers

Citi88 works with a select group of trusted third-party service providers to assist in operating our platform. These providers are only permitted to use your data for purposes specified by citi88 and are bound by strict confidentiality agreements. They include:

  • Licensed game providers (Pragmatic Play, Evolution Gaming, PG Soft, JILI, and others) for game content delivery
  • Payment processors to manage deposit and withdrawal transactions
  • Identity verification (KYC) service providers for authenticating documents
  • Information technology infrastructure and cybersecurity service providers

4.2 Legal Requirements

Citi88 may disclose your data when required by law, court order, or directive from a competent authority in Malaysia. In such circumstances, citi88 will disclose only the information necessary and will notify you if permitted to do so by law.

Our Commitment: In all cases, citi88 shares only the minimum data necessary for the specific purpose and ensures all receiving parties adhere to stringent data protection standards.

5Data Security Measures

Citi88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or inadvertent disclosure. These measures include:

  • 256-bit SSL Encryption: All data communications between your browser and citi88 servers are encrypted using 256-bit SSL/TLS technology.
  • Secure Password Storage: Your citi88 account password is stored in hashed form and is unreadable even to our internal staff.
  • Layered Access Controls: Access to sensitive member data within the citi88 system is restricted to authorised personnel only and requires multi-factor authentication.
  • Multi-Layer Firewall System: citi88's server infrastructure is protected by an advanced firewall system that continuously monitors and filters all network traffic.
  • 24/7 Security Monitoring: citi88's IT security team monitors our systems around the clock to detect any threats or suspicious activity.
  • Regular Audits: citi88's security system undergoes independent security audits on a regular basis to identify and address any vulnerabilities.
Shared Responsibility: While citi88 takes all reasonable steps to protect your data, account security also depends on you. Please ensure your password is strong, unique, and not shared with anyone.

6Cookies & Tracking Technologies

Citi88 uses cookies and similar tracking technologies to enhance your experience on our platform, understand usage patterns, and ensure the security of your login session. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the citi88 platform and you may be unable to log in or use certain features.

7International Data Transfers

In the course of its operations, citi88 may transfer your personal data to servers or service providers located outside Malaysia. Such transfers may occur in connection with the delivery of gaming services, payment processing, or data storage at licensed data centres.

Citi88 ensures that all international data transfers are conducted in compliance with data protection standards equal to or higher than those required in Malaysia, through appropriate mechanisms such as standard data transfer agreements and prescribed contractual clauses.

Protection Guarantee: Regardless of where your data is stored or processed, citi88 ensures it always receives a consistent level of protection in line with the commitments set out in this Privacy Policy.

8Data Retention & Deletion Periods

Citi88 does not retain your personal data for longer than is necessary for the purposes set out in this policy, or longer than required by applicable law. citi88's data retention guidelines are as follows:

  • Active Account Data: Retained for the duration your citi88 account remains active, plus any additional period required by law following account closure.
  • Financial Transaction Records: Retained for a minimum of 7 years following the transaction date, in accordance with Malaysian financial regulatory requirements.
  • Security Activity Logs: Retained for 12 months for security investigation purposes if required.
  • Identity Verification Records (KYC): Retained for 5 years after account closure in accordance with anti-money laundering requirements.

Once the designated retention period has expired, citi88 will permanently delete or anonymise your data using secure methods.

9Your Rights as a Data Subject

As a data subject, you have certain rights regarding your personal data that citi88 respects and facilitates. The following are the rights available to you:

Right of Access

You have the right to request and obtain a copy of the personal data citi88 holds about you at any time.

Right to Rectification

You have the right to request the correction of any inaccurate or incomplete data held by citi88.

Right to Erasure

You may request that citi88 delete your personal data under certain circumstances, subject to our legal obligations.

Right to Object to Processing

You have the right to object to certain types of data processing, such as the use of your data for marketing communications.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another provider if needed.

Right to Restrict Processing

You may request that citi88 restrict the processing of your data in certain circumstances while a dispute is being resolved.

How to Submit a Request: To exercise any of the above rights, please contact the citi88 privacy team by email at support@citi88.ws. We will process your request within 30 business days.

10Child Protection

Citi88 is a betting platform intended exclusively for individuals aged 21 and above. We do not knowingly collect or process any personal data from individuals under the age of 21.

If you are a parent or guardian and believe that your minor child has used the citi88 platform or provided us with their personal information, please contact the citi88 support team immediately. We will take prompt action to delete the relevant information and close the account.

Parental Advisory: citi88 encourages parents and guardians to monitor their children's online activity and make use of parental control tools available on their devices to prevent unauthorised access to online betting platforms.

11Third-Party Links & Services

The citi88 platform may contain links to third-party game providers or payment service providers. Please note that citi88's Privacy Policy applies solely to the citi88 platform and does not cover the privacy practices of those third parties.

Each game provider and payment provider partnering with citi88 has its own privacy policy. citi88 encourages you to read the privacy policy of any third party you interact with through our platform.

Citi88 is not responsible for the privacy practices, content, or security of any third-party websites or services you may access through our platform.

12Contact the citi88 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by citi88, please do not hesitate to reach us through the following channels:

Support Email

Send your privacy enquiries to support@citi88.ws and we will respond within 1–2 business days.

24/7 Live Chat

For immediate assistance, use the live chat feature within your citi88 platform. Our team is available around the clock to help.

Privacy Policy Amendments: citi88 reserves the right to update this Privacy Policy from time to time. You will be notified of any significant changes via email or platform notification. The date of the latest update is always displayed at the top of this page. Continued use of the citi88 platform following any amendments constitutes acceptance of the updated policy.

Your Data Is Protected. Play with Peace of Mind at citi88.

Join over 500,000 Malaysian members who play safely and confidently at citi88 — a platform that puts your privacy and security first.

Bahasa Melayu