This Privacy Policy explains how cita33 collects, uses, stores, and protects the personal information of users who access and use the cita33 Platform. Your privacy matters to us and we are committed to handling your data responsibly.
All personal data collected by cita33 is stored on encrypted servers with access controls restricting visibility to authorised personnel only. Your information is never stored in plain text.
cita33 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data exists to support your account, not to generate advertising revenue.
cita33 recognises your right to access, correct, and request deletion of your personal data. Requests are handled within a reasonable timeframe, subject to legal obligations relating to gaming and financial record-keeping.
Every connection between your device and the cita33 Platform is protected by 256-bit SSL/TLS encryption. Personal and financial data transmitted during login, deposits, and withdrawals cannot be intercepted.
cita33 processes personal data in accordance with applicable data protection obligations under its international gaming licence framework, including retention requirements mandated by anti-money-laundering regulations.
Promotional communications from cita33 are optional. You may unsubscribe from marketing emails at any time through your Account settings. Transactional and security communications are not affected by marketing opt-out.
cita33 ("we", "us", "our") operates the online gaming platform accessible at cita33.win (the "Platform"). We are committed to protecting the privacy and personal information of all users who access, register with, or otherwise interact with the Platform.
This Privacy Policy sets out in clear terms what personal data cita33 collects, the purposes for which it is used, how it is stored and protected, and the rights available to you as a data subject. This Policy applies to all users of the cita33 Platform, including those based in Malaysia and any other jurisdiction from which the Platform is accessed.
By using the cita33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform.
This Privacy Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
For the purposes of this Privacy Policy, cita33 acts as the data controller in respect of personal data collected through the Platform. The data controller is responsible for determining the purposes and means of processing personal data submitted by users.
Where cita33 engages third-party service providers to process data on its behalf — such as payment processors, identity verification services, and game software providers — those parties act as data processors and are subject to contractual obligations that require them to process data only in accordance with cita33's instructions and applicable data protection standards.
cita33 collects personal data through several channels. The categories of data collected, their source, and the context in which they are gathered are described below.
| Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Account registration; KYC verification |
| Contact Data | Email address, mobile number, residential address | Account registration; correspondence |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history | Deposits; withdrawals; payment processing |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Platform access; security monitoring |
| Gaming Data | Bet history, game session data, win/loss records, bonus usage | Platform use; responsible gaming monitoring |
| Communications Data | Support chat transcripts, emails, feedback submissions | Customer support interactions |
| Marketing Preferences | Communication opt-in/opt-out status, promotional redemption history | Promotional communications management |
cita33 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where strictly required to comply with responsible gaming obligations (for example, where a user discloses a gambling-related health concern when requesting self-exclusion).
cita33 processes personal data only for legitimate and specified purposes. The primary uses of personal data collected by cita33 are as follows:
cita33 processes personal data on the following legal bases:
cita33 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
All third-party data processors engaged by cita33 are required to process personal data only in accordance with cita33's documented instructions and applicable data protection standards. cita33 conducts due diligence on third-party processors prior to engagement.
The cita33 Platform uses cookies and similar tracking technologies to support Platform functionality, maintain session state, analyse usage patterns, and enhance security. The types of cookies used by cita33 include:
You may configure your browser to reject or delete cookies, though this may affect the functionality of the cita33 Platform. By continuing to use the Platform, you consent to the use of cookies as described above.
cita33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal retention obligations. Specific retention periods are as follows:
Upon expiry of the applicable retention period, cita33 will securely delete or anonymise personal data in accordance with its data disposal procedures.
cita33 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Notwithstanding the above measures, no data transmission or storage system is entirely immune from security risk. Users are responsible for maintaining the security of their own devices and cita33 Account credentials.
Subject to applicable legal limitations — including restrictions imposed by gaming regulation and AML compliance obligations — cita33 recognises the following rights in relation to your personal data:
To exercise any of the above rights, please contact cita33 Customer Support. We will respond to verified requests within a reasonable timeframe and in any event within thirty (30) days of receipt.
The cita33 Platform is strictly intended for persons aged 21 years and above. cita33 does not knowingly collect personal data from any person under the age of 21. If cita33 becomes aware that personal data has been collected from an individual under the minimum age, that data will be deleted and the associated Account closed immediately.
If you believe that a minor may have registered with cita33 or that personal data of a minor has been collected without appropriate consent, please contact our Customer Support team immediately so that the matter can be investigated and rectified.
In the course of providing services, cita33 may transfer personal data to recipients located outside of Malaysia, including to the jurisdictions where cita33's licensed game providers and payment processors operate. Where such transfers occur, cita33 ensures that appropriate safeguards are in place to protect the data, including standard contractual clauses, data processing agreements, or other mechanisms recognised under applicable data protection frameworks.
By using the cita33 Platform, you acknowledge and consent to such international transfers where necessary for the provision of the services you have requested.
cita33 reserves the right to update or modify this Privacy Policy at any time. Where changes are material, cita33 will notify registered users via email or prominent Platform notification prior to the changes taking effect. The "Last Updated" date at the head of this document reflects the date of the most recent revision.
Your continued use of the cita33 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept any revision, you must discontinue use of the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or cita33's data protection practices, please contact our Customer Support team using the following details:
When submitting a data rights request, please include your registered username or email address and a description of your request to allow us to locate your Account and respond efficiently.
Your personal data is handled with the same care we apply to your MYR balance. Transparent policies, secure systems, and a support team ready to answer your questions — that's the cita33 standard.
Sign In to cita33