This Privacy Policy explains how cita66 collects, uses, stores, and protects your personal data when you access or use the cita66 Platform. Please read it carefully before registering an account.
Last Updated: June 2026cita66 ("we", "us", "our") operates the online gaming platform accessible at cita66.win (the "Platform"). We are committed to protecting the personal data of all individuals who use the Platform ("Players", "you"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by cita66.
By registering an account with cita66 or continuing to use the Platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the cita66 Platform.
This policy applies to all personal data processed in connection with your use of the cita66 Platform, including data collected when you register an account, make a deposit or withdrawal, participate in games, contact our support team, or otherwise interact with our services.
For the purposes of applicable data protection legislation, cita66 is the data controller in respect of the personal data it collects and processes in connection with the Platform. Our designated point of contact for privacy-related matters can be reached via the support contact details set out at Section 14 of this Policy.
cita66 operates in compliance with the data protection obligations applicable to online gaming operators under the international gaming authority framework under which the Platform is licensed. We take our obligations as a data controller seriously and have implemented organisational and technical measures designed to give effect to the principles described in this Privacy Policy.
cita66 collects personal data from you in the following categories:
3.1 Registration Data: When you create an account, we collect your full name, date of birth, email address, residential address, phone number, and chosen username and password. This information is required to open and maintain your cita66 account.
3.2 Identity Verification Data: For Know Your Customer (KYC) and anti-money laundering (AML) compliance, we may collect copies of government-issued identity documents (such as your MyKad or passport), proof of address documents, and — where required — proof of source of funds. Failure to provide this information may result in restriction of your account.
3.3 Financial Data: We collect information relating to your payment methods, including deposit and withdrawal transaction records. We do not store full bank card numbers. Where eWallets such as Touch 'n Go eWallet or Boost are used, we record the associated account reference but not your full wallet credentials.
3.4 Gaming Activity Data: We maintain records of all Wagers placed, games played, game results, session durations, and bonus usage. This data is required for game integrity, dispute resolution, and responsible gaming monitoring purposes.
3.5 Technical Data: We automatically collect IP address, browser type and version, device type and operating system, referring URLs, pages visited, and timestamps of Platform access. This data is collected via server logs and, where applicable, cookies.
3.6 Communications Data: We retain records of your communications with the cita66 support team, including live chat transcripts, emails, and any documentation submitted in support of a query or complaint.
cita66 uses the personal data it collects for the following purposes:
cita66 processes your personal data on the following legal bases:
6.1 cita66 does not sell your personal data to third parties. We may share your data with carefully selected third parties only to the extent necessary to operate the Platform and comply with our legal obligations.
6.2 Categories of third parties with whom we may share your data include:
6.3 Where we engage third-party service providers to process personal data on our behalf, we require them to process such data only on our documented instructions and to implement appropriate technical and organisational security measures.
7.1 cita66 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. Cookies are small text files placed on your device by your web browser when you access the Platform.
7.2 We use the following categories of cookies:
7.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
8.1 cita66 retains your personal data for as long as your account remains active and for such additional period as is required to comply with our legal and regulatory obligations. In most cases, gaming authority regulations require us to retain player account records — including identity verification documents, transaction records, and gaming activity logs — for a minimum of five years following account closure.
8.2 Where data is no longer required for any lawful purpose, cita66 will securely delete or anonymise it in accordance with our data retention schedule.
Subject to applicable law and regulatory obligations, you have the following rights in relation to your personal data held by cita66:
To exercise any of these rights, please contact cita66 support as described in Section 14. We will respond to all verifiable data rights requests within 30 days.
10.1 cita66 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your browser and the cita66 Platform, access controls limiting staff access to personal data to those with a need to know, and regular security assessments.
10.2 Despite these measures, no data transmission over the internet is entirely secure. cita66 cannot guarantee the absolute security of data transmitted to the Platform, and you transmit personal data at your own risk. Once we receive your personal data, we use strict procedures and security features to prevent unauthorised access.
10.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cita66 will notify affected Players and the relevant supervisory authority as required by applicable law.
The cita66 Platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a person under 21 has provided us with personal data, we will take immediate steps to delete that data and close any associated account. If you believe a minor has registered an account on cita66, please contact our support team immediately.
The cita66 Platform may contain links to third-party websites or services. cita66 is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of any link does not imply endorsement by cita66 of the linked site or service.
13.1 cita66 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the Platform or by email to the address registered on their account prior to the change taking effect.
13.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the cita66 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cita66, please contact our Data Protection team through the live chat support feature available on the Platform, or by writing to us at [email protected] (plain text — not a clickable link). We aim to respond to all privacy enquiries within 5 business days and will in any event respond to verifiable data rights requests within 30 calendar days.
All data transmitted between your device and the cita66 Platform is protected by SSL/TLS encryption. Your login credentials, financial details, and personal information are never sent in plain text.
cita66 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used only to operate your account and meet our regulatory obligations.
You have the right to access, correct, or request deletion of your personal data at any time. cita66 will respond to all verifiable data rights requests promptly and in full.
cita66 processes personal data in compliance with the data protection requirements applicable under our international gaming authority licensing framework, including KYC and AML obligations.
Player data is stored on secured servers with restricted access controls. Only authorised cita66 personnel with a legitimate operational need can access your personal account information.
Promotional communications from cita66 are sent only with your consent. You can withdraw that consent at any time through your account notification settings or by contacting our support team.
Log in to your cita66 account to review your data preferences, manage marketing consent, or access your personal data request options — all available directly within your account settings.