Privacy Policy cili33 — Our Commitment Data Protection You

1. Introduction

Cili33 ("us", "Platform" or "cili33.net") is an online gaming platform operating and serving users in Malaysia. We understand that your trust is the most valuable asset we hold. As such, we take a serious, responsible, and transparent approach to managing every piece of personal information you share with us.

This Privacy Policy is drafted in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international industry best practices. It details how we collect, process, store, and protect your personal data, as well as your rights as the owner of that data.

By registering an account or using any cili33 service, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for further enquiries. We are always ready to address any privacy concerns you may have.

2. Personal Data We Collect

Cili33 only collects data that is strictly necessary to provide you with a safe, efficient, and responsible service. Unnecessary data collection goes against our privacy principles. The categories of data we collect are as follows:

We do not collect data falling under sensitive categories such as health information, biometric data, political views, or religious beliefs unless specifically required by applicable law or a regulatory body.

3. How We Use Your Personal Data

Every piece of data we collect is used for a clear and lawful purpose. cili33 will not use your data for any purpose not stated in this policy without obtaining your consent first. The primary purposes for data use are as follows:

• Account Management: Creating, verifying, and managing your member account, including the KYC process required by law.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently through trusted payment channels.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any suspicious activity on your account.
• Legal Compliance: Meeting compliance obligations under the PDPA 2010, anti-money laundering laws (AML/CFT), and directives from relevant regulatory bodies.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and changes to our terms of service.
• Responsible Gambling: Monitoring usage patterns to identify signs of problem gambling and offering appropriate support to members who need it.
• Product Improvement: Analyzing aggregated and anonymized usage data to improve user experience, platform speed, and various product features.
• Targeted Marketing (with consent): Sending you promotional offers, bonuses, and new product information, only where you have given consent to receive marketing communications.

4. Sharing Data with Third Parties

Cili33 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are certain situations where data sharing is necessary for platform operations, and we ensure every such share is carried out with strict security controls.

• Payment Service Providers: Transaction data is shared with payment processors as required to facilitate deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Usernames and account IDs may be shared with third-party game software providers to enable you to access their games within our platform.
• Regulatory Bodies & Authorities: cili33 is required to disclose data when directed by a court, regulatory body, or law enforcement authority acting under valid legal jurisdiction.
• KYC / Identity Verification Services: Identity verification documents are shared with licensed KYC service providers to verify the authenticity of submitted documents.
• Analytics & Security: Anonymised technical data is shared with analytics and cybersecurity service providers to help us maintain platform security standards.

5. Data Security & Protection

Protecting your data is cili33's number one priority. We continuously invest in the latest security infrastructure to keep your personal and financial information safe from increasingly sophisticated cyber threats. Key security measures we have implemented include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates for all communications between your device and our servers.
• Data encryption at rest — all sensitive data is stored in encrypted format within databases protected by multi-layered firewalls.
• Role-based access control (RBAC) — only qualified staff with a legitimate operational need may access user data.
• Periodic security audits by independent third-party auditors to identify and address system vulnerabilities before they can be exploited.
• 24/7 monitoring by our in-house cybersecurity team to detect any unusual or suspicious activity in real time.
• Two-factor authentication (2FA) is available and strongly encouraged for all accounts to add an extra layer of protection.

6. Cookies & Tracking Technologies

Cili33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use the platform.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, errors encountered — to help us improve performance.
• Functional Cookies: Remembering your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics Cookies: Used to understand aggregate usage patterns. This data is processed anonymously and cannot be linked to any specific individual.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect platform functionality and your overall user experience.

7. Your Rights as a Data Owner

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and the international privacy principles we adhere to, you have the following rights regarding your personal data held by cili33:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 21 business days.
• Right to Rectification: If any data we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: You may request deletion of your personal data, subject to mandatory retention obligations under applicable Malaysian law.
• Right to Object to Processing: You may object to the processing of your data for specific purposes such as direct marketing at any time.
• Right to Withdraw Consent: You may withdraw consent previously given for certain data processing, though this may affect our ability to provide some services.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with the Malaysia Personal Data Protection Department.

To exercise any of the above rights, please contact our privacy team via email at [email protected] along with valid proof of identity. We will respond to your request within the timeframe required by law.

8. Data Retention Period

Cili33 retains your personal data for as long as it is needed to fulfill the purposes stated in this policy or as required by applicable law. Our principle is to never keep data longer than necessary. The following are general data retention period guidelines:

• Active Account Data: Retained for as long as your account is active and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering (AML) legal requirements.
• KYC Documents: Retained for a minimum of 6 years after the account closure date or the date of the last transaction, whichever is later.
• Communication Logs: Retained for 2 years for complaint resolution and internal audit purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data that has been anonymized and cannot be linked to any individual, we may retain it for long-term analytics purposes.

9. Third-Party Links & Services

The cili33 platform may include access to games or content provided by third-party providers. While we select our partners carefully, the cili33 Privacy Policy applies only to services operating directly under the cili33.net domain. Any interaction you have with third-party services is subject to their own privacy policies.

We recommend that you read and understand the privacy policy of each third-party game provider you access through our platform. cili33 is not responsible for the privacy practices of those third parties; however, we ensure that all our partners comply with the minimum security standards set out in our partnership agreements.

10. Child Protection

Cili33 is a gaming platform intended exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

11. Changes to Privacy Policy

Cili33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in law, technology, or how we handle your data. Any significant changes will be communicated to you via an in-platform notification or email at least 14 days before taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Updated" date at the top of this document indicates when the policy was last amended. Your continued use of the cili33 platform after any changes take effect constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by cili33, our privacy team is here to help. Feel free to reach out — your satisfaction and security are our top priority.