Privacy Policy Citi88 — Malaysia Member Data Protection

Citi88 takes seriously our responsibility toward the privacy of every member who trusts our platform. This Privacy Policy is provided to give full clarity on how we manage your personal information, in accordance with applicable data protection regulations in Malaysia.

As an online entertainment platform serving hundreds of thousands of members across Malaysia, we understand that member trust is our most valuable asset. Every decision we make regarding data management prioritizes the interests and security of our members.

This policy applies to all services offered through the official citi88 website at https://citi88.xyz, the citi88 mobile app for Android and iOS, and all official citi88 communication channels including live chat and support email. If you have any questions about how we manage your data, our team is available to assist at any time.

Citi88 only collects data that is strictly necessary to provide members with a safe, seamless, and quality service. The following are the categories of data we collect:

The information you provide during registration forms the foundation of our relationship. Additional information may be requested during the KYC (Know Your Customer) process to meet applicable compliance requirements for online financial and entertainment platforms in Malaysia.

Citi88 uses member personal data solely for lawful and transparent purposes. The following describes how we use the information you provide:

• Account Management: Creating, verifying, and managing member accounts, including secure login processes and account recovery.
• Transaction Processing: Verifying and processing deposits, withdrawals, and all financial transactions in your account quickly and securely.
• Identity Verification (KYC): Verifying member identity to prevent fraud, money laundering, and platform abuse.
• Customer Support: Providing relevant and accurate assistance to members when contacting our support team via live chat or email.
• Platform Security: Detecting and preventing suspicious activity, cyberattacks, or unauthorized access attempts to member accounts.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support related to responsible gaming habits.
• Service Improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve the user experience on the platform.
• Promotional Communications: Sending relevant offers, promotions, and updates — only to members who have consented to receive marketing communications.
• Legal Compliance: Meeting legal obligations and regulatory compliance requirements applicable to the citi88 platform's operations.

Citi88 does not use member data for automated profiling that could negatively affect your rights or opportunities without human intervention.

Citi88 understands that members place great trust in us to manage their personal data. We never sell member personal data to any party for commercial purposes. However, in certain limited situations, we may share data with the following parties:

• Payment Service Providers: Required transaction data is shared with trusted payment providers such as FPX, TNG eWallet, and major Malaysian banks solely to process your transactions.
• Technical Service Providers: Technology partners that help operate platform infrastructure, cloud services, and security systems — all bound by strict confidentiality agreements.
• Identity Verification Providers: Trusted third parties that assist with the KYC verification process to ensure the authenticity of member identities.
• Legal Authorities: Government agencies or law enforcement authorities when required by court order or applicable legislation in Malaysia.

Should citi88 be involved in any business merger, acquisition, or asset sale, members will be notified in advance and your privacy rights will continue to be protected by the new entity taking over the platform.

Citi88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with our platform. The following are the types of cookies we use:

• Session Cookies (Essential): Required to maintain your login status during an active session. Without this cookie, you would need to log in again each time you navigate to a new page. This cookie cannot be disabled.
• Preference Cookies (Functional): Storing personal settings such as your preferred language, display mode, and favorite game configurations for a more comfortable experience.
• Performance Cookies (Analytics): Collecting information on how pages are used — which pages are visited most frequently, time spent on each page, and navigation paths. This data is used in aggregate for platform improvements.
• Security Cookies: Helping identify suspicious sessions, unauthorized login attempts, and protecting your account from unauthorized access.

You can control and manage cookie settings through your internet browser. However, disabling certain cookies may affect platform functionality or your gaming experience. citi88 does not use third-party cookies for targeted advertising purposes.

Citi88 continually invests in security infrastructure to ensure member personal data is always protected. The security measures we implement include:

• 256-bit SSL Encryption for all data communications between member devices and citi88 servers.
• Encryption at rest for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available to members who wish to add an extra layer of security to their account.
• 24/7 security monitoring by a dedicated cybersecurity team that monitors for any unusual activity.
• Penetration testing conducted regularly by independent security experts to identify and patch system vulnerabilities.
• Role-based access control ensuring only authorized personnel can access member data, and only for legitimate work purposes.
• Regular data backups stored securely at separate locations for disaster recovery.

As a citi88 member, you have clear rights regarding your personal data. We respect and facilitate the exercise of these rights:

The citi88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we discover or are informed that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the relevant account.

If you are a parent or guardian who believes your child has registered an account on the citi88 platform, please contact us immediately at [email protected] so we can take appropriate action to protect the interests of the minor concerned.

Citi88 retains member personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration the account remains active and for a minimum of 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial legislation and anti-money laundering requirements in Malaysia.
• Security Logs: Retained for 12 months for investigation purposes in the event of a security incident or dispute.
• Support Communication Data: Live chat and email conversation records are retained for 2 years for reference and service improvement purposes.
• Marketing Data: Deleted within 30 days after a member withdraws consent to receive marketing communications.

Once the specified retention period has ended, data will be securely deleted using methods that ensure it cannot be recovered or accessed by any party.

Citi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in data protection technology.

Each time a significant amendment is made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the citi88 platform for at least 14 days before changes take effect.
• Sending email notifications to registered members for amendments that have a significant impact on their privacy rights.

Continued use of the citi88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 directly within the platform after logging in to your account.
• Response Time: Privacy-related inquiries are typically answered within 5 business days.

For inquiries related to exercising your privacy rights (access, correction, deletion, and so on), please clearly state the type of request, your account number, and the reason for the request. This will help us process it more quickly and accurately.

Citi88 is committed to resolving every privacy complaint fairly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.