Privacy Policy cita66 — Malaysia Member Data Protection

Cita66 only collects information that is strictly necessary to provide you with a safe, efficient, and responsible service. The following are the categories of information we collect:

All information collected is for lawful purposes clearly stated in Section 3 below. cita66 does not collect sensitive personal information such as health records, religious beliefs, or political affiliations.

Your personal data is collected through several different channels as you interact with the cita66 platform:

• During Registration: You directly provide information such as your name, email, phone number, and bank account details during the new account registration process.
• During the KYC Process: Identity verification documents are voluntarily uploaded by you when submitting your first withdrawal request to ensure transaction security.
• During Platform Use: Activity data such as betting history, total deposits and withdrawals, and active session times are collected automatically by our system.
• Via Cookies & Tracking Technologies: Cookies and similar technologies are used to record your preferences, maintain login sessions, and analyse usage patterns for platform improvement purposes.
• Direct Communication: When you contact our support team via live chat or email, the content of those conversations is stored for reference and quality control purposes.
• Automatic Technical Data: Your IP address, device information, and browser data are collected automatically each time you access the cita66 platform as a security measure.

Cita66 uses your personal data solely for lawful, legitimate purposes relevant to the platform's operations. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your member account, including identity verification, password resets, and personal information updates.
• Transaction Processing: Verifying, processing, and recording all deposits, withdrawals, and financial transactions made through the platform.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, duplicate accounts, or any fraud attempts that could compromise the security of the platform and other members.
• Legal Compliance: Fulfilling obligations under Malaysian law, including PDPA 2010, anti-money laundering (AML) requirements, and directives from the relevant authorities.
• Customer Service: Providing you with technical support and assistance when needed through various communication channels.
• Responsible Marketing: Sending promotional information, bonus offers, and platform updates — with the option to opt out of such communications at any time.
• Platform Enhancements: Analysing usage patterns in aggregate (not individually) to improve the design, performance, and user experience of the cita66 platform.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and offering appropriate assistance to members who need it.

Cita66 will not use your data for any purpose other than those stated above without first obtaining your explicit consent.

Cita66 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in certain limited situations, your information may be shared with the following parties:

• Payment Service Providers: Banking institutions and e-wallet operators that process your financial transactions require the minimum information necessary to complete those transactions.
• Technical Solutions Providers: Technology companies supporting our platform's operations — such as cloud computing services and cybersecurity providers — are bound by strict confidentiality agreements.
• Legal Authority: Where required by Malaysian law, court order, or lawful direction from an enforcement authority, cita66 will disclose the necessary information.
• Audit & Compliance Providers: Independent auditors and certification bodies that assess our platform's security compliance and industry standards.

In all data sharing situations, cita66 ensures that recipients are bound by adequate data protection agreements and receive only the minimum information necessary for the specified purpose.

The security of your personal data is cita66's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected to the highest standard.

The security measures we implement include:

• Data Encryption in Transit: All communication between your device and cita66's servers is secured by TLS 1.3 protocol with AES-256-bit encryption.
• Data Encryption at Rest: Sensitive personal data stored in our database is also encrypted using the latest industry standards.
• Layered Access Control: Only authorized personnel may access member personal data, and every access is logged and continuously monitored.
• 24/7 Threat Monitoring: Intrusion detection systems (IDS) and next-generation firewalls monitor network traffic in real time to detect suspicious activity.
• Periodic Data Backups: Member data is automatically and regularly backed up to a separate secure location to prevent data loss due to system failure.
• Penetration Testing: Security audits and penetration testing are conducted periodically by independent parties to identify and address any potential vulnerabilities.

Cita66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the cita66 website.

Types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session and remembering your language preference. They cannot be disabled without affecting basic website functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, and buttons clicked — to help us understand and improve the user experience.
• Functional Cookies: Remembering your settings and preferences, such as your last used username, preferred currency, and preferred display format.
• Security Cookies: Used to verify user identity, prevent unauthorised access, and detect suspicious behaviour such as brute-force attacks.

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may affect your ability to fully use the features of the cita66 platform.

Cita66 does not retain your personal data longer than necessary for the purpose it was collected, or to fulfil relevant legal obligations. Data retention periods are as follows:

Once the retention period has ended, your data will be securely deleted or anonymised using methods that ensure it can no longer be linked to any specific individual.

As a cita66 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly through your account portal.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data — however, this is subject to data retention obligations prescribed by law.
• Right to Withdraw Consent: You may withdraw consent for the use of your data for marketing purposes at any time, with no conditions or penalties.
• Right to Lodge a Complaint: If you believe cita66 has violated your privacy rights, you may file a complaint with us or with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact our privacy team at [email protected] by clearly stating your request along with your account number for identity verification.

Cita66 is a betting platform intended solely for individuals aged 18 and above. We do not accept registrations from underage individuals and do not knowingly collect any personal information from children.

Should cita66 discover that personal information from an individual under the age of 18 has been collected, we will take the following action immediately:

• Closing the relevant account without any notice.
• Deleting all personal data of the individual concerned from our systems.
• Where necessary, reporting the matter to the relevant authorities in accordance with our legal obligations.

Parents and guardians who suspect their children have accessed the cita66 platform should contact us immediately at [email protected] and we will take immediate action.

The cita66 platform may contain links to third-party websites in certain contexts, such as sports rules guides or legal references. It is important for you to know that:

• Cita66 is not responsible for the privacy policies or data protection practices of any linked third-party websites.
• Clicking on third-party links is at your own risk — we encourage you to read the privacy policy of every website you visit.
• The presence of links to external websites does not mean cita66 endorses or recommends the content or practices of those sites.

For the safest experience, we recommend always exercising caution when leaving the cita66 platform and never sharing your login credentials on any other website.

Cita66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, new legal requirements, or improvements to our data protection practices. Any material amendments will be communicated to you through the following methods:

• In-platform notification upon next login.
• Email to the address registered in your account.
• Notice prominently displayed on the cita66 homepage.

The "Updated" date displayed at the top of this page will always reflect the latest version of our Privacy Policy. We encourage you to review this page from time to time to stay informed on how we protect your information.

Your continued use of the cita66 platform after any amendments are published will be deemed as your acceptance of the updated policy. If you disagree with any changes, please contact us before continuing to use the platform.

We are always ready to answer any questions, concerns, or requests you have regarding your privacy and personal data protection at cita66.

If you wish to:

• Submitting a request to access or delete personal data,
• Reporting privacy concerns or data breaches,
• Obtaining further clarification on any part of this Privacy Policy,
• Withdrawing marketing consent,

Please contact our Data Protection Officer via email at [email protected] by stating the following in your email: full name, cita66 account number, and a clear description of your request.