cilli88 Privacy Policy

1. Introduction

This Privacy Policy describes how cilli88 ("we", "us", "the Company") collects, uses, stores, and shares personal data in connection with your use of the cilli88 platform accessible at cilli88.net (the "Platform"). It applies to all registered members, visitors, and any other individual whose personal data is processed by cilli88 in the course of operating the Platform.

By registering a cilli88 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact cilli88 support to close your account.

This Privacy Policy should be read together with the cilli88 Terms & Conditions, which govern your general use of the Platform.

2. Data Controller

cilli88 is the data controller responsible for personal data collected through the Platform. For all privacy-related enquiries, data access requests, and complaints, you may contact the cilli88 Data Protection team via the support channel available within your account. We will acknowledge all data-related requests within five (5) business days and aim to resolve them within thirty (30) days.

3. Data We Collect

cilli88 collects personal data through a number of channels. The categories of data we collect include, but are not limited to:

• Registration Data: Full name, date of birth, nationality, email address, residential address, and phone number provided when you create a cilli88 account.
• Identity Verification (KYC) Data: Copies of government-issued identification (such as MyKad or passport), proof of address documents, and any additional documentation required to verify your identity in compliance with applicable regulatory requirements.
• Financial Data: Payment method details (such as bank account numbers or e-wallet identifiers), deposit and withdrawal history, and transaction records. cilli88 does not store full card numbers or CVV codes — payment card processing is handled by certified third-party payment processors.
• Account Activity Data: Login timestamps, betting history, game session logs, bonus redemption records, and support interaction records.
• Device and Technical Data: IP address, browser type and version, device type, operating system, and referring URL, collected automatically when you access the Platform.
• Communications Data: Records of any communications you initiate with cilli88 via live chat, email, or any other support channel.

4. How We Use Your Data

cilli88 uses the personal data it collects for the following purposes:

• To create and administer your cilli88 account and verify your identity in accordance with our KYC obligations.
• To process deposits, withdrawals, and other financial transactions in MYR through supported payment channels including Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, and bank transfer.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities in accordance with applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations.
• To enforce the cilli88 Terms & Conditions and Responsible Gaming policies, including administering self-exclusion requests and deposit limit settings.
• To provide customer support, respond to enquiries, and resolve disputes.
• To personalise your Platform experience, including displaying relevant game recommendations and promotional offers where you have consented to marketing communications.
• To perform Platform analytics, improve system performance, and develop new features that better serve the Malaysian gaming community.
• To comply with legal obligations, respond to regulatory enquiries, and cooperate with lawful requests from competent authorities.

5. Legal Basis for Processing

cilli88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and cilli88 — specifically, to operate your account, accept wagers, and process financial transactions.
• Legal obligation: Processing required for compliance with applicable laws, including KYC, AML, and CFT regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the quality of the cilli88 service, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications or non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Disclosure to Third Parties

cilli88 does not sell, rent, or trade your personal data to third-party marketers. We may share your data with the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• Payment processors: To facilitate deposit and withdrawal transactions in MYR through your chosen payment method.
• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements before activating full account features.
• Technology and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on behalf of cilli88 under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or lawful regulatory direction.
• Fraud prevention and AML monitoring services: To screen transactions and account activity against known fraud indicators and sanctions lists.

All third parties who process personal data on behalf of cilli88 are required to maintain adequate data security standards and to use the data solely for the specified purpose.

7. International Data Transfers

In the course of operating the cilli88 platform, personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, cilli88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law, including through the use of contractual data processing clauses with overseas service providers.

8. Data Retention

cilli88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years from the date of the last transaction or account activity, in compliance with AML regulatory requirements.
• KYC documentation is retained for a minimum of five (5) years from the date of account closure.
• Support interaction records are retained for two (2) years from the date of the last interaction.
• After the applicable retention period has elapsed, personal data is securely deleted or anonymised in accordance with cilli88's data disposal procedures.

9. Cookies & Tracking Technologies

The cilli88 platform uses cookies and similar tracking technologies to maintain session integrity, remember your preferences, and gather aggregate analytics data. The categories of cookies used include:

• Essential cookies: Required for the Platform to function correctly, including maintaining your logged-in session and security tokens. These cannot be disabled without affecting core Platform functionality.
• Analytics cookies: Used to understand how members navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is aggregated and does not identify you personally.
• Preference cookies: Store your language and display preferences so that you do not need to re-configure them on every visit.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the cilli88 platform but may affect some personalisation features.

10. Your Rights

As a data subject, you have the following rights with respect to your personal data held by cilli88:

• Right of access: You may request a copy of the personal data cilli88 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to cilli88's legal retention obligations. Note that data required for AML and regulatory compliance cannot be deleted during the applicable retention period.
• Right to restrict processing: You may request that cilli88 restrict processing of your data in certain circumstances, for example while the accuracy of the data is under dispute.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests or consent at any time.

To exercise any of these rights, contact cilli88 support through your account. We will respond within thirty (30) days and will not charge a fee for reasonable requests.

11. Security Measures

cilli88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption on all data transmissions, role-based access controls limiting data access to authorised personnel, regular penetration testing and vulnerability assessments, and encrypted storage of sensitive account data.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your cilli88 login credentials and for notifying cilli88 support promptly in the event of any suspected unauthorised access to your account.

12. Children's Privacy

The cilli88 platform is strictly for individuals aged 21 years and above. cilli88 does not knowingly collect personal data from persons under the age of 21. If cilli88 becomes aware that an account has been registered by a person under 21, that account will be immediately suspended, all balances will be returned net of any applicable bonus forfeitures, and all associated personal data will be securely deleted following the completion of any legally mandated reporting obligations.

If you believe that a minor may have accessed the cilli88 platform using your account, please contact cilli88 support immediately.

13. Changes to This Privacy Policy

cilli88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered members via the email address on file or through an on-Platform notification at least seven (7) days before the revised Policy takes effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

The current version of this Privacy Policy is always accessible via the footer link on all pages of the cilli88 platform.

14. Contact Us

For any privacy-related queries, data subject rights requests, or complaints, please contact the cilli88 Data Protection team through the live chat or support ticket system available within your account. Correspondence should be clearly marked "Privacy Enquiry" to ensure it is directed to the appropriate team.

We are committed to addressing all privacy concerns promptly and transparently. If you are not satisfied with our response to a complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.