Protected Under Malaysia's PDPA 2010

Cita66 Privacy Policy — Personal Data Protection for Malaysian Players

Cita66 takes our responsibility to protect your personal data seriously. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your information as a cita66 platform user — all in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

Updated: January 2026 Bahasa Melayu Applicable to Malaysia

Cita66's Privacy Commitment to Malaysian Players

Six core principles that shape how cita66 handles and protects your data every day.

🔒

Industry-Standard SSL Encryption

All data transmitted between your device and cita66's servers is protected with 256-bit SSL encryption. This means your login credentials, account information, and financial transactions cannot be intercepted or read by unauthorised parties while in transit.

🇲🇾

Malaysia PDPA 2010 Compliance

Cita66 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally guaranteed rights to access, correct, and control the personal data we hold about you.

🚫

No Sale of Data to Third Parties

Cita66 has never sold, rented, or disclosed your personal data to advertisers, data brokers, or any third party for commercial purposes, and never will. Your data belongs to you — it is not a business asset for us to trade at will.

👁️

Full Transparency in Data Collection

Cita66 is always transparent about what data we collect and why. There is no hidden data collection or vague purpose. Every piece of information we request during registration or platform use has a clear reason, explained openly in this policy.

🛡️

Strict Data Access Controls

Only cita66 staff who genuinely require access to user data to carry out their authorised duties are permitted to do so. All access is logged and monitored. Our staff are bound by strict confidentiality agreements regarding user data.

⚙️

User Control Over Personal Data

You have the right to access, correct, or request deletion of your personal data that we hold, at any time. Any data-related requests can be submitted by email to support@cita66.run, and we are committed to responding within a reasonable timeframe.

1. Introduction

This Privacy Policy is published by cita66 ("we", "Platform") to explain our privacy practices regarding the collection, use, storage, protection, and disclosure of personal data belonging to cita66 platform users who are players based in Malaysia.

Cita66 understands that your trust is the foundation of our relationship. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, place a bet on an MPL Malaysia or Liga Super match, or play live Baccarat — you are entrusting us with your information. That is a responsibility we do not take lightly.

Important Note: By registering an account or continuing to use the cita66 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you have any objections, please contact us at support@cita66.run before continuing to use the platform.

This policy applies to all cita66 users who access the platform via our website or mobile app from Malaysia. It should be read alongside our Terms & Conditions. In the event of any conflict between these documents, the provisions of this Privacy Policy shall prevail for all matters relating to personal data.

Cita66 is the data controller for all personal data we collect from our users. This means we determine the purposes and means of processing your data, and we bear full responsibility for ensuring that processing is lawful, fair, and transparent in accordance with Malaysia's PDPA 2010.

2. Personal Data We Collect

Cita66 only collects data that is genuinely necessary for the purposes described in this policy. We do not practise excessive or purposeless data collection. The following are the categories of data we collect:

Data Category Example Information Status
Identity Information Full name, identity card number (for KYC), date of birth, selfie photo (for verification) Mandatory
Contact Information Email address, Malaysian phone number, residential address Mandatory
Financial Data Payment methods (TnG, GrabPay, DuitNow, FPX), deposit and withdrawal records, transaction history Mandatory
Platform Activity Data Betting history, games played, bonuses used, and login and logout records Mandatory
Technical Data IP address, device type, operating system, web browser, session cookie data Mandatory
Communication Preferences Preferred language, notification preferences, promotional opt-ins Preferences

"Mandatory" data is required to operate your cita66 account and to comply with legal requirements including anti-money laundering (AML) and KYC obligations. "Optional" data helps us deliver a more personalised experience but does not affect the core functionality of your account if not provided.

cita66 does not collect data classified as "sensitive" under Malaysia's PDPA, such as health information, biometric data (except where required for KYC), or information relating to political views and religion. Any request for such data, if it arises, will be accompanied by a clear explanation of the specific need and purpose.

3. How We Use Your Data

Cita66 uses your personal data solely for legitimate purposes as set out here. We do not process your data for any other purpose without your consent or a valid legal basis.

  • Account Management: Creating and maintaining your cita66 account, processing registrations, verifying identity, and managing login and account security
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX, managing winnings withdrawals, and maintaining accurate financial records
  • Service Provision: Displaying odds, accepting bets on your chosen sports (Malaysia Super League, MPL, BWF badminton, IPL cricket), and managing Live Casino and slots gameplay
  • Customer Support: Handling enquiries and complaints, resolving technical issues, and providing account-related assistance via live chat or email in Bahasa Melayu
  • Legal Compliance: Meeting KYC requirements, preventing fraud and money laundering, and complying with statutory reporting obligations in force in Malaysia
  • Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling, enforcing user-set limits, and triggering proactive communications where relevant
  • Marketing Communications: Sending information about bonus offers and promotions for major tournaments such as the Thomas Cup or MPL Grand Final — only if you have opted in to receive them
  • Platform Improvement: Analysing aggregated and anonymised usage patterns to improve the cita66 platform's interface, performance, and user experience

We will not use your data for automated profiling that adversely affects your rights without clear notice and a choice being given to you. Decisions that significantly affect your account will always involve appropriate human review.

4. Legal Basis for Data Processing

Under Malaysia's PDPA 2010, cita66 must have a valid legal basis for processing your personal data. Depending on the type of processing involved, we rely on one or more of the following legal bases:

  • Consent: For optional marketing communications and certain non-mandatory data processing activities — you provide consent actively and may withdraw it at any time
  • Contractual Performance: Processing required to fulfil our contractual obligations to you as a cita66 user — including deposit processing, withdrawals, and account management
  • Legitimate Interests: Processing for the purposes of platform security, fraud prevention, and service improvement that does not adversely affect your fundamental rights
  • Legal Obligations: Processing required to comply with Malaysian law, including AML and KYC requirements and reporting to relevant authorities where mandated
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent or submit any request relating to the legal basis for processing your data, contact us at support@cita66.run.

5. Disclosure of Data to Third Parties

Cita66 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data in order to operate the platform properly:

  • Payment Service Providers: Required transaction information is shared with Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, and local banks (Maybank2u, CIMB Clicks, RHB, Bank Islam, Hong Leong Bank) solely for the purpose of processing your deposits and withdrawals
  • Platform Technology Providers: Hosting, cybersecurity, and technical infrastructure service providers that support the operation of the cita66 platform — all bound by strict data protection agreements
  • Game Providers: Live casino and slots game providers who require minimal session data to operate their games within the cita66 platform
  • Authorities: cita66 will disclose your data to Malaysian authorities if required by law, court order, or valid legal process — we will notify you in advance unless prohibited from doing so by law
  • Identity Verification Services: Third-party KYC service providers used to verify user identities for AML compliance — data is shared only to the minimum extent necessary

All third parties who receive your data from cita66 are bound by data protection agreements requiring them to safeguard your data to a standard at least equivalent to the protection we provide. They are not permitted to use your data for any purpose other than those specified in those agreements.

cita66 does not transfer Malaysian users' personal data overseas without adequate safeguards in place. Where cross-border data transfers are necessary, we ensure the recipient country offers an equivalent level of data protection, or we apply appropriate contractual protection mechanisms.

6. Data Security at cita66

Cita66 continually invests in technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. This is not merely a legal obligation — it is a core commitment to our Malaysian players.

  • 256-bit SSL encryption for all data in transit between your device and cita66 servers
  • Encryption of sensitive data at rest, including financial details and personal identification information
  • Two-factor authentication (2FA) is available and encouraged for all cita66 accounts
  • Regular security scans and penetration testing by independent security experts
  • 24/7 monitoring for suspicious activity and potential security threats
  • Strict internal access controls — only staff who need to do so may access user data
  • A comprehensive incident response plan to address any security breach swiftly and effectively

While we take all reasonable measures to protect your data, no system is entirely infallible. In the event of a data security breach that affects your rights, cita66 will notify you and the relevant authorities as required by applicable law, within the stipulated timeframe.

You also play an important role in keeping your cita66 account secure. Use a strong, unique password, enable two-factor authentication, never share your login details with anyone, and contact us immediately at support@cita66.run if you suspect any unauthorised activity on your account.

7. Data Retention Periods

Cita66 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law. Our principle is simple: keep only what is needed, for only as long as necessary.

  • Active Account Data: Retained for as long as your account remains active on the cita66 platform and is needed to provide ongoing services to you
  • Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with Malaysian AML and accounting legal requirements — this includes deposit records via Touch 'n Go, GrabPay, DuitNow, and winnings withdrawals
  • KYC & Identity Records: Retained for 5 years after account closure, or longer if required by AML obligations and applicable laws
  • Support Communication Logs: Retained for 2 years for reference and continuity of customer support services
  • Technical Data & System Logs: Retained for 90 days for security purposes, technical troubleshooting, and incident investigation

Once the applicable retention period has expired, your data will be securely deleted or anonymised in a way that can no longer be linked back to you. Deletion is carried out automatically according to the schedule set out in cita66's internal data management policy.

8. Cookies & Tracking Technologies

The cita66 platform uses cookies and similar tracking technologies to deliver a better user experience, ensure the platform functions correctly, and understand how users interact with our platform.

  • Essential Cookies: Required for core cita66 platform functions such as login authentication, session management, and account security. Cannot be disabled without affecting platform functionality
  • Performance Cookies: Collects anonymised data on how you use the cita66 platform to help us identify and resolve technical issues and optimise performance
  • Functional Cookies: Storing your preferences such as language, display settings, and login information (if you select "remember me") for a more convenient experience
  • Session Cookies: Temporary cookies that are automatically deleted when you close your web browser — used to maintain your login session while you are active on the platform

You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the cita66 platform and prevent you from logging in or completing transactions. cita66 does not use third-party cookies for targeted advertising.

9. Your Rights Under Malaysia's PDPA

As a cita66 platform user based in Malaysia, you have specific rights over your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia. cita66 is committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request access to the personal data we hold about you, including a copy of that data and information on how it is being used. Data access requests can be submitted by email to support@cita66.run.

Right to Rectification

If you find that the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Log in to your cita66 account to update basic information, or contact our support team for more substantial changes.

Right to Withdraw Consent

Where data processing is based on your consent (such as receiving marketing communications), you may withdraw that consent at any time. Withdrawal will not affect your account, but you may no longer receive updates on the latest bonuses and promotions.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose. However, we may be unable to fulfil such requests in full where there is a legal obligation to retain the data (such as financial transaction records).

Right to Object to Processing

In certain circumstances, you have the right to object to cita66's processing of your data — particularly where processing is based on legitimate interests. We will assess each objection and provide a clear response within a reasonable timeframe.

How to Submit a Request

All privacy rights requests can be submitted by email to support@cita66.run. Please include your full name, cita66 account number, and a clear description of your request. cita66 will respond within 21 business days of receiving a complete request.

10. Children's Privacy

The cita66 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that we have unknowingly collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on the cita66 platform, please contact us immediately at support@cita66.run so we can take the appropriate action.

cita66 uses an age verification process during registration and KYC procedures to prevent underage users from signing up. However, we acknowledge that these measures are not foolproof and rely on the cooperation of parents and guardians to ensure children do not access this platform. If you are a parent or guardian concerned about a child's access to online betting platforms, please contact us for further guidance.

11. Privacy Policy Amendments

Cita66 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technological developments, or changes to our operational practices. We are committed to keeping you informed of any significant changes.

For material and significant amendments — those that may affect how we use your data or your privacy rights — cita66 will provide at least 30 days' notice before the changes take effect, via in-platform notification or email to your registered address.

For minor changes that do not materially affect your privacy rights (such as improved wording or spelling corrections), we will update this document with the latest revision date without issuing a specific notice.

Continued use of the cita66 platform after an amended policy takes effect constitutes your acceptance of the updated policy. If you do not agree with the changes made, you may close your account and withdraw your account balance before the amendment's effective date.

12. Contact Us About Privacy

If you have any questions, concerns, or wish to submit a request related to this Privacy Policy or how cita66 handles your personal data, our team is ready to help.

Privacy & Data Protection Email

Support@cita66.run

Live Chat Support

Available 24/7 within the cita66 platform — Bahasa Malaysia

Response Time

Within 21 business days for formal data requests

For general account or service enquiries, the cita66 support team operates 24/7. For formal privacy complaints that cannot be resolved through our internal channels, you have the right to refer the matter to the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority in Malaysia.

Thank you for trusting cita66 with your personal data. We will continue working hard to make sure that trust is always well placed.

Document version: January 2026 • cita66 Malaysia
Read Terms & Conditions

A Summary of Your Privacy Rights at cita66

You have full control over your personal data. Here is how to exercise it.

View Your Data

Request a copy of all personal data cita66 holds about you. We will provide a complete report in a clear, readable format within 21 working days.

Correct Your Data

If any information in your cita66 account is inaccurate, you can update it yourself via your account settings, or contact our support team for changes that require additional verification.

Opt Out of Promotions

Withdraw your consent to marketing communications at any time through your cita66 account settings or by contacting our support team. You can continue to use the platform in full without receiving promotional content.

Frequently Asked Questions — cita66 Privacy Policy

Questions our users frequently ask about how cita66 protects their privacy.

No. cita66 does not sell, rent, or disclose your personal data to any third-party companies for their own advertising or marketing purposes. Your data is shared only with the service providers we directly use to operate the platform — such as payment processors (Touch 'n Go, DuitNow, FPX) and game providers — and all of them are bound by strict data protection agreements.

When you close your cita66 account, your data is not deleted immediately. We are required to retain certain records — such as financial transaction records for a minimum of 7 years and KYC records for 5 years after account closure — as mandated by Malaysian law on AML and accounting. Data not subject to these legal retention requirements will be deleted or anonymised within a defined period after account closure. For more details on the specific data we retain, contact us at support@cita66.run.

Yes. All transaction information — including deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX — is transmitted over an encrypted SSL connection. cita66 does not store your e-wallet account numbers or banking details directly; payment processing is handled by registered, secure payment gateways. We only retain records of transaction amounts, timestamps, and statuses for account and financial record-keeping purposes.

You may request the deletion of your personal data by emailing support@cita66.run. However, we may not be able to fulfil such requests in full in every case. Data subject to legal retention obligations (such as financial transaction records required for AML compliance and accounting purposes) must be kept for the period stipulated under Malaysian law, even after a deletion request is made. We will clearly inform you of which data can be deleted and which data we are required to retain, along with the reasons.

In the event of a data security breach affecting the personal information of cita66 users, we have a comprehensive incident response protocol in place. We will promptly identify the scope and impact of the breach, take steps to stop and contain the incident, notify affected users via email or in-platform notification in a timely manner, report to the relevant authorities in accordance with Malaysian legal requirements, and provide guidance on steps you can take to protect yourself. We will not conceal any significant data breach from affected users.

Cita66 Related Documents & Policies

Read other important documents that complement this Privacy Policy.

Join cita66 with Confidence

Your Data Is Safe. Register for Free & Start Playing Today!

Now you know how cita66 protects your personal data. Register a free account, deposit via Touch 'n Go or DuitNow in 60 seconds, and enjoy a welcome bonus of up to RM500. Your privacy is assured — so your focus can stay entirely on the game.

Cita66 Data Protection Notice

Your personal data is fully protected under Malaysia's Personal Data Protection Act 2010 (PDPA). cita66 will not disclose or sell your information to any third party without your consent. For any privacy-related enquiries, contact us at support@cita66.run. For more information on the Terms & Conditions governing use of the platform, please read Terms & Conditions us.

Bahasa Melayu