Last updated: June 2026 | Applies to all citi88 account holders and visitors to citi88.win | Governing data controller: citi88
How citi88 treats your personal data — the short version
citi88 collects only the personal data that is strictly necessary to provide our services, comply with regulatory obligations, and protect the security of your account. We do not harvest data beyond what is needed to deliver a safe and functional gaming experience.
All personal data held by citi88 is stored on encrypted servers protected by industry-standard security controls. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. citi88 conducts regular security reviews of all data storage systems.
citi88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared only with service providers who support citi88's operations (payment processors, fraud detection services) and only under strict data processing agreements.
citi88 recognises your rights to access, correct, and in certain circumstances request deletion of your personal data. Requests can be submitted to our support team and will be actioned within thirty (30) days, subject to applicable legal and regulatory retention obligations.
citi88 uses cookies and similar technologies to maintain your login session, personalise your experience, and analyse Platform usage. You may control cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.
citi88 will update this Privacy Policy as required by changes in our data practices or applicable law. Material changes will be communicated to registered account holders. The current version is always available at citi88.win/privacy-policy.
IMPORTANT: This Privacy Policy ("Policy") describes how citi88 ("citi88", "we", "us", "our") collects, uses, stores, discloses, and protects personal data about users ("you", "your") of the citi88 website at citi88.win and all associated services (the "Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
1.1 citi88 is committed to protecting the privacy and personal data of all individuals who interact with the Platform. This Policy sets out the basis on which citi88 processes personal data in connection with the operation of Malaysia's trusted online casino and sports betting platform.
1.2 This Policy applies to all personal data collected from registered account holders, prospective members, and visitors to citi88.win, whether accessed from Kuala Lumpur, Penang, Johor Bahru, or anywhere else.
1.3 This Policy should be read together with the citi88 Terms and Conditions, available at citi88.win/terms-conditions.
2.1 For the purposes of applicable data protection legislation, the data controller responsible for your personal data is citi88, operating the Platform at citi88.win under applicable international gaming authority guidelines.
2.2 All enquiries relating to this Policy or to the processing of your personal data may be directed to the citi88 support team at the contact details set out in Section 15 of this Policy.
3.1 Registration Data. When you create a citi88 account, we collect your full name, date of birth, residential address, email address, and mobile telephone number. This data is required to establish and maintain your account.
3.2 Identity Verification Data. citi88 is required by its regulatory obligations to verify the identity and age of account holders. Accordingly, we may collect copies of government-issued identity documents (such as a Malaysian MyKad or passport) and proof of address.
3.3 Financial Data. To process deposits and withdrawals, citi88 collects details of your payment method, including bank account or e-wallet identifiers (such as your Touch n Go eWallet or Boost account reference, or your Maybank, CIMB, or Public Bank account details). citi88 does not store full card numbers.
3.4 Transactional Data. We maintain records of all deposits, withdrawals, bets placed, game sessions, and bonus redemptions associated with your citi88 account.
3.5 Technical Data. When you access the Platform, we automatically collect your IP address, device type, operating system, browser type and version, and session activity logs.
3.6 Communication Data. Records of your communications with citi88 support, including live chat transcripts and email correspondence, are retained for quality assurance and dispute resolution purposes.
3.7 Behavioural Data. We collect data on how you navigate and use the Platform, including pages visited, games played, session durations, and betting patterns. This data is used to improve Platform functionality and to support responsible gaming monitoring obligations.
4.1 Directly from You. Most personal data we hold is provided directly by you when you register an account, submit an identity verification request, make a deposit or withdrawal, contact support, or participate in a promotion.
4.2 Automatically. Technical and behavioural data is collected automatically via cookies, server logs, and analytics tools when you access and interact with the Platform.
4.3 From Third Parties. We may receive data from payment processors (such as Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank) in connection with transaction processing, and from third-party fraud detection and identity verification service providers.
citi88 processes your personal data for the following purposes and on the following legal bases:
6.1 citi88 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes.
6.2 We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
6.3 All third parties with whom citi88 shares personal data are required to process that data only for the specified purpose and in accordance with citi88's instructions and applicable data protection standards.
citi88 will never share your personal data with unsolicited third-party marketers. If you receive marketing communications purportedly from citi88 that you did not opt into, please report them to our support team immediately.
7.1 citi88 may transfer personal data to service providers located outside Malaysia in connection with the operation of the Platform. Where such transfers occur, citi88 ensures that appropriate safeguards are in place to protect your personal data, including contractual data transfer agreements that impose data protection obligations equivalent to those applicable in Malaysia.
7.2 By using the citi88 Platform, you consent to the transfer of your personal data internationally as described in this Policy.
8.1 citi88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable regulatory and legal obligations.
8.2 Account data is retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
8.3 Transaction records are retained for a minimum of five (5) years from the date of the transaction.
8.4 Communication records (support chat and email) are retained for two (2) years from the date of the communication.
8.5 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
9.1 The citi88 Platform uses cookies, web beacons, and similar tracking technologies to:
9.2 Essential cookies are required for the Platform to function and cannot be disabled. Analytical cookies help us understand how the Platform is used. Preference cookies remember your settings.
9.3 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the citi88 Platform, including your ability to remain logged in.
9.4 citi88 does not use third-party advertising cookies or permit third-party advertising networks to track citi88 Platform users for the purpose of serving targeted advertisements on other websites.
10.1 Subject to applicable law, you have the following rights in relation to the personal data citi88 holds about you:
10.2 To exercise any of these rights, please contact citi88 support using the contact details in Section 15. Requests will be actioned within thirty (30) days. Where a request is complex or voluminous, this period may be extended by a further thirty (30) days, and you will be notified accordingly.
11.1 The citi88 Platform is strictly intended for adults aged 21 and above. citi88 does not knowingly collect personal data from persons under the age of 21.
11.2 If citi88 discovers that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed.
11.3 citi88 encourages parents and guardians to use parental control software to prevent minors from accessing online gaming platforms.
12.1 citi88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
12.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, citi88 will notify you without undue delay and in accordance with applicable data breach notification requirements.
13.1 The citi88 Platform does not contain links to third-party websites. This Policy applies exclusively to personal data processed by citi88 in connection with the Platform at citi88.win.
14.1 citi88 reserves the right to update this Policy at any time. The "last updated" date at the top of this page reflects the most recent revision.
14.2 Where changes are material, citi88 will notify registered account holders via the email address or mobile number associated with their account. Continued use of the Platform following notification constitutes acceptance of the updated Policy.
14.3 The current version of this Policy is always accessible at citi88.win/privacy-policy.
15.1 For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by citi88, please contact our support team:
Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the citi88 Platform.
Response Time: citi88 aims to acknowledge all data-related requests within two (2) business days and to resolve them within thirty (30) days.
citi88 will never contact you by email, phone, or live chat to ask for your account password or full payment card details. Any such communication is fraudulent and should be reported to our support team immediately.
256-bit encryption, no data selling, and full transparency. Play with confidence on Malaysia's trusted online casino.
Sign In to citi88