Privacy Policy Cilli88 – Personal Data Protection for Malaysia Members

Cilli88 ("we", "Platform", "Company") values the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, disclose, and protect your personal information when you register as a member or use any service on the Cilli88 platform.

This document was drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We believe you have the right to know exactly what happens with your data — not through vague general terms, but through clear and straightforward explanations.

This Privacy Policy applies to all registered Cilli88 members, website visitors, mobile app users, and anyone who interacts with our platform in any capacity.

Cilli88 only collects data that is genuinely necessary to provide, maintain, and improve our services. Below are the categories of data we collect and their purposes:

We do not collect any sensitive data such as health information, religious beliefs, or political views unless required by law.

Every piece of data we collect is used for a specific and legitimate purpose. cilli88 uses members' personal data for the following purposes:

• Account Management: Creating and maintaining your member account, including the login process and identity verification.
• Transaction Processing: Processing deposits, withdrawing winnings, and handling all financial transactions securely and accurately.
• KYC and AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraudulent activity, hacking attempts, and platform abuse.
• Service Communications: Sending important notifications about your account, transactions, and policy changes.
• Customer Support: Processing and responding to member inquiries and complaints effectively.
• Service Improvement: Analyzing usage patterns to enhance the user experience and develop new features.
• Marketing (with consent): Sending information about promotions and exclusive offers – only if you have given consent to receive marketing communications.

Cilli88 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are limited situations where we may need to share your information:

• Third-Party Service Providers: Providers such as payment processors, identity verification companies, and cloud service providers that help us operate the platform. All of them are bound by strict confidentiality agreements.
• Legal Requirement: When required by a court, regulatory authority, or legitimate law enforcement agency, Cilli88 will comply with such orders.
• Fraud Prevention: Limited information sharing with industry fraud prevention networks to protect all members from illegal activities.
• Business Transfer: In the event of a merger, acquisition, or sale of Company assets, data may be transferred to the new entity. Members will be notified in advance should this occur.

In all data sharing cases, Cilli88 ensures that recipient parties have data protection measures equal to or exceeding our own standards.

Protecting members' personal data is one of cilli88's top priorities. We continuously invest in the latest security infrastructure to keep your data safe at all times. The security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your device and cilli88 servers is fully encrypted, making it unreadable to any unauthorised party.
• Two-Factor Authentication (2FA): An additional security layer that ensures only you can access your account, even if your password becomes known to others.
• 24/7 Real-Time Monitoring: Automated monitoring systems detect any unusual activity and respond immediately to security threats.
• Segregated Data Storage: Financial data, identity data, and usage data are stored separately with distinct access controls.
• Regular Security Audits: Cilli88 conducts regular penetration testing and security audits by independent security firms.

Cilli88 uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. Below are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session management and security. They cannot be disabled.
• User Preference Cookies: Saving your preferences such as language, currency, and display options to deliver a more personalized experience.
• Analytics Cookies: Helping us understand how members interact with the platform so we can continuously improve the user experience.
• Performance Cookies: Enabling us to evaluate platform speed and performance to ensure smooth gameplay.

You can manage or disable non-essential cookies through your browser settings at any time. However, disabling certain cookies may affect specific functions on the Cilli88 platform.

Cilli88 does not retain members' personal data longer than necessary. Below are the data retention guidelines we follow:

• Active Account Data: Retained for as long as your account remains active.
• KYC Data: Retained for a minimum of 5 years after account closure in accordance with AML legal requirements.
• Transaction Records: Retained for 7 years for audit and tax compliance purposes.
• System Log Data: Retained for 90 days for security and technical troubleshooting purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the relevant retention period has expired, data will be permanently deleted or anonymised so it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding your personal data:

Cilli88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, industry practices, or our platform's operations.

When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a notice on the platform's home page for a period of at least 14 days.
• Sending email notifications to all registered members if the changes affect their fundamental rights.

Continued use of the cilli88 platform after changes are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to submit a request regarding your personal data, the cilli88 data protection team is here to help.

You can reach us via:

• Live Chat: Available 24/7 directly on the cilli88 platform for immediate assistance.
• Email: [email protected] – for more detailed privacy inquiries that require written documentation.

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex requests such as full data deletion, the processing period is within 30 business days.