Cita33 Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction

Cita33 ("we", "Platform") takes the privacy of every member who entrusts us with their personal information very seriously. As an online betting platform operating for the Malaysia market, we understand that trust is the foundation of our long-term relationship with our members.

This Privacy Policy is drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in data handling. We are committed to ensuring your personal information is handled responsibly, transparently, and securely at all times.

If you have any questions about how we handle your personal data, the cita33 Privacy team is reachable through our customer support channels, which operate 24/7.

2 Information We Collect

Cita33 collects your personal information through several means throughout your use of our platform. The types of information we collect are as follows:

Account Registration Information:

• Full name as per official identification document
• Date of birth for age verification
• Active email address
• Malaysia mobile phone number
• Account password (stored in encrypted form and unreadable by our staff)

KYC Verification Information:

• A valid copy of MyKad, passport, or driving licence
• Proof of current residential address (recent utility bill or bank statement)
• Bank account or digital wallet details for transaction purposes
• Selfie photo for facial identity verification purposes

Platform Activity Information:

• Records of gameplay, bets, wins, and losses
• Deposit and withdrawal history
• IP address and device information used
• Login session data including timestamp and approximate location
• Account preferences and settings

3 How We Use Your Information

The personal information we collect is used solely for legitimate, stated purposes. Below is how your personal data is used at cita33:

Specifically, your information is used for the following purposes:

• Create and manage your member account
• Process deposits and withdrawals securely
• Verify your identity through the KYC process
• Contact you regarding your account, transactions, or important updates
• Detect and prevent fraud, money laundering, and suspicious activity
• Fulfil legal and regulatory compliance obligations
• Improve user experience and platform services
• Send relevant promotional information (with your consent)

4 Information Sharing

Cita33 does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where information sharing may occur:

Trusted Service Providers:

We share necessary information with service providers who assist us in operating the platform, including payment processors, identity verification providers, and cloud service providers. All such third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements:

We may be required to disclose your personal information to the relevant authorities when mandated by law, court order, or to comply with applicable regulatory requirements. In such situations, we only disclose information that is strictly necessary.

Fraud Prevention:

For fraud prevention and to protect the security of the platform and other members, we may share necessary information with fraud detection service providers and relevant industry bodies.

5 Data Security

Protecting your personal data is a responsibility we take very seriously. cita33 implements multiple layers of technical and organisational security to keep your data safe at all times:

• Data Encryption: All data transmitted through our platform is protected with 256-bit SSL/TLS encryption. Sensitive data stored in our databases is also encrypted using AES-256 standards.
• Access Control: Access to member personal data is granted only to staff who require it to perform their duties, and all access is logged for audit purposes.
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
• Two-Factor Authentication (2FA): cita33 fully supports 2FA as an additional security layer for your account.
• Periodic Security Audits: We conduct regular penetration testing and security audits with independent third parties to ensure our systems remain up to date.
• Secure Servers: Your data is stored in certified data centres that meet the highest physical and cybersecurity standards.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. If you suspect your account has been compromised, please contact our support team immediately.

6 Cookies & Tracking Technologies

Cita33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how members use the platform so we can improve it. Data is collected anonymously.
• Functional Cookies: Allow the platform to remember your preferences such as language, region, and display settings.
• Analytics Cookies: Used to understand overall usage patterns for service improvement purposes.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality. More information on managing cookies can be found in your web browser documentation.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and our privacy policy, you have the following rights regarding your personal data:

8 Data Retention

Cita33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for 5 years after termination of the business relationship or as required by applicable regulations.
• Activity Logs: Retained for 2 years for security and fraud detection purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our security procedures.

9 Children's Privacy

Cita33 is an online betting platform open only to individuals aged 18 and above. We do not knowingly collect or process personal data from children or underage individuals.

If we discover that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on our platform are advised to contact our customer support immediately.

10 Links to Third-Party Sites

The cita33 platform may contain links to third-party websites or services not operated by us. This Privacy Policy applies to the cita33 platform only and does not cover those third-party websites.

We encourage you to read the privacy policy of any third-party website you visit via links from our platform. cita33 is not responsible for the privacy practices or content of third-party websites.

11 Privacy Policy Changes

Cita33 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

• Notifications within the cita33 platform
• Email to your registered address at least 7 days before the changes take effect
• A prominent notice on our website's home page

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the platform after changes take effect constitutes your acceptance of the updated terms.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the cita33 Data Protection Officer (DPO) through the following channels:

• Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• FAQ Page: Visit our FAQ section for answers to frequently asked questions

We are committed to addressing every enquiry seriously and providing a response within 3 working days. For formal complaints regarding data protection, you also have the right to submit a complaint to Malaysia's Personal Data Protection Department (JPDP).