cita66 is committed to protecting the privacy of our players. This Policy explains what data we collect, why we collect it, how it is used, and what rights you have over your information.
Six principles that govern how cita66 treats your personal information.
Your personal data is protected using SSL/TLS encryption in transit and secure encrypted storage at rest. Access to personal data is restricted to authorised cita66 personnel only.
cita66 collects only the data necessary for the purposes described in this Policy. We do not collect personal information speculatively or sell your data to third-party advertisers.
You have the right to access, correct, and request deletion of your personal data held by cita66, subject to our legal obligations including anti-money laundering record-keeping requirements.
cita66 does not share your personal data with third parties except where required to operate the Platform (payment processors, game providers), comply with legal obligations, or with your explicit consent.
Personal data is retained only as long as necessary for the purposes it was collected, plus any additional period required by law or regulation (e.g., AML record-keeping obligations).
We will notify you of material changes to this Privacy Policy via the Platform and your registered email. You will always know what data we hold and why.
1.1 This Privacy Policy is issued by the operating entity behind the cita66 brand and the cita66.asia website (collectively referred to as "cita66," "we," "us," "our"). cita66 is the data controller in respect of personal data collected through its Platform.
1.2 cita66 operates as an online casino and sports betting platform targeting Malaysian players and holds international gaming authorisation. Our registered operations are conducted in accordance with applicable data protection standards under the jurisdiction of our authorising regulatory body.
1.3 References to "you," "your," "Player" in this Policy refer to any individual who accesses, browses, registers on, or uses the cita66 Platform in any capacity.
2.1 cita66 collects personal data that is necessary to provide the Platform services, comply with legal obligations, and maintain account security. The categories of personal data we may collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID | Account registration, KYC, age verification |
| Contact Data | Email address, Malaysian mobile number, residential address | Account management, support, notifications |
| Financial Data | e-Wallet identifiers (Touch n Go, Boost), bank account details (Maybank, CIMB), transaction history | Deposits, withdrawals, fraud prevention, AML |
| Gaming Data | Game session logs, bet amounts, win/loss records, bonus usage | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security, fraud detection, Platform optimisation |
| Behavioural Data | Navigation patterns, pages visited, feature usage frequency | Platform improvement, personalisation |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support, dispute resolution, quality assurance |
2.2 cita66 does not collect sensitive personal data categories (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for regulatory compliance in limited circumstances.
3.1 cita66 collects personal data through the following means:
4.1 cita66 processes personal data for the following purposes and on the following legal bases:
4.2 cita66 does not use automated decision-making in a way that produces legally significant or similarly significant effects on Players without human review where such decisions are challenged.
5.1 The cita66 Platform uses cookies and similar technologies to enable core functionality, improve the user experience, and collect analytics data. The types of cookies used include:
5.2 cita66 does not use third-party advertising tracking cookies or share cookie data with advertising networks. Non-essential cookies may be declined via your browser settings, though this may affect Platform functionality.
5.3 Session cookies are deleted when you close your browser. Persistent cookies expire after a defined period or may be cleared through your browser settings.
6.1 cita66 does not sell personal data to third parties. We share personal data only in the following circumstances:
6.2 When cita66 shares data with third parties, we take reasonable steps to ensure those parties maintain appropriate data protection standards consistent with this Policy.
7.1 As cita66 operates under international gaming authorisation and uses global service providers, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers are conducted using appropriate safeguards including contractual data protection terms with recipient parties.
7.2 By using the cita66 Platform, you acknowledge and consent to such international transfers in connection with the provision of Platform services to you.
8.1 cita66 retains personal data for as long as your Account is active and for such additional period as may be required or permitted by law. Specific retention periods include:
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
9.1 Subject to applicable law and cita66's legitimate interests and legal obligations, you have the following rights in respect of your personal data:
9.2 To exercise any of these rights, contact cita66 Support via live chat or email at the address provided in Section 14. cita66 will respond to valid requests within a reasonable timeframe. Verification of identity will be required before any data is disclosed or modified.
10.1 cita66 may send promotional communications about offers, bonuses, new games, and Platform updates to Players who have opted in to receive such communications.
10.2 You may opt out of marketing communications at any time by updating your notification preferences in Account Settings or by contacting cita66 Support. Opting out of marketing communications does not affect the receipt of transactional communications (e.g., deposit confirmations, withdrawal notifications, Account security alerts).
10.3 cita66 will not send marketing communications to any Player who is subject to an active self-exclusion or cooling-off period under our Responsible Gaming Policy.
11.1 The cita66 Platform is strictly for persons aged 21 years and above. cita66 does not knowingly collect personal data from individuals under the age of 21. Any Account found to belong to a person under 21 will be closed immediately and personal data will be deleted subject to any legal retention requirements.
11.2 If you believe a minor has accessed or registered on the cita66 Platform, please contact cita66 Support immediately so that we can take appropriate action.
12.1 cita66 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
12.2 While cita66 takes all reasonable steps to protect your data, no system is entirely immune to security incidents. In the event of a breach affecting your personal data, cita66 will notify you and relevant authorities as required by applicable law.
13.1 cita66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice on the Platform and/or to your registered email address, with reasonable advance notice where practicable.
13.2 Continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised.
13.3 We encourage you to review this Policy periodically to stay informed about how cita66 handles your personal data.
14.1 For questions, concerns, or to exercise your data rights, please contact cita66 through the following channels:
14.2 cita66 aims to respond to all privacy-related enquiries and data rights requests within ten (10) business days. Complex requests requiring additional verification or third-party coordination may take longer, and you will be informed of the expected timeline.
14.3 If you are not satisfied with cita66's response to a privacy complaint, you may be entitled to escalate your complaint to the relevant data protection authority or the dispute resolution mechanism provided by cita66's international gaming regulator. Details of applicable mechanisms are available upon request from cita66 Support.
This Privacy Policy was last reviewed and updated in June 2026. cita66 reserves the right to update this document at any time in accordance with Section 13 above.
Now that you know how cita66 handles your data, enjoy the full platform — live casino, slots, and sportsbook in MYR. 21+ only.
Enter cita66 Casino🔞 21+ Only | Gamble Responsibly | T&Cs Apply