Cili888 Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy explains how cili888 — the operator of the cili888.xyz online entertainment platform — collects, uses, stores, protects, and discloses your personal information as a member or visitor of our platform. This document is written in plain language so you genuinely understand what happens to your data, not just vague legal terms.

We understand that trust is the foundation of the relationship between players and a platform. When you register with cili888, making deposits via Touch 'n Go eWallet, DuitNow or FPX, or playing slots or Live Casino, you are entrusting us with sensitive personal information. We take the responsibility of protecting that information very seriously.

This Privacy Policy applies to all users of the cili888.xyz website, including visitors who browse without registering, active registered members, and former members who have closed their accounts. By using the platform cili888 in any capacity, you agree to the practices described in this Privacy Policy.

cili888 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This is Malaysia's primary legislation governing how private organisations collect and use individuals' personal data. Full compliance with the PDPA is both a legal obligation and a reflection of our values as a platform built on player trust.

cili888 collects personal data through several means depending on how you interact with our platform. Below are the categories of data we collect and why they are needed:

When you use the cili888, we also automatically collect data through cookies and similar tracking technologies to enhance the user experience and maintain session security. Further details on cookies are covered in Section 6.

Data submitted through contact forms, live chat, and customer support communications is also retained for record-keeping and service improvement purposes. cili888 does not collect more information than is necessary for each stated purpose.

Every piece of data collected by cili888 has a specific and legitimate purpose. We do not use your data for purposes unrelated to platform operations or that could cause you harm. Below is a full list of how your data is used:

• Account management — creating, maintaining and securing your cili888 account, and processing requests to change your password and profile information.
• Transaction processing — processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as processing withdrawal of winnings to your account.
• Identity verification (KYC) — verifying your identity to prevent fraud, money laundering and to ensure you meet the minimum age requirement of 18 years.
• Platform security — detecting and preventing suspicious activity, unauthorised logins, fraud, and system abuse.
• Customer support — addressing enquiries, resolving issues, and handling complaints submitted to the cili888 support team.
• Service communications — sending important notices regarding your account, changes to terms, security updates, and transaction alerts.
• Platform improvements — analyzing aggregated (non-personal) usage patterns to improve user experience, platform speed, and game selection.
• Responsible gaming program — monitoring gameplay patterns to identify signs of problem gambling and recommending appropriate self-management tools.
• Marketing communications — sending promotional offers, bonuses and new game information — only if you have consented to receive them during registration or subsequently through your communication settings.
• Legal compliance — complying with reporting, audit, and investigation requirements by lawful authorities under applicable Malaysian law.

cili888 does not use your data for any purpose not listed here. If we intend to use your data for a new purpose that differs from the original reason it was collected, we will notify you and seek your consent beforehand.

cili888 does not sell, rent, or trade our members' personal data. However, to operate the platform effectively, we may need to share certain data with selected third parties in specific and limited circumstances:

• Payment processors — transaction data is shared with payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX network to facilitate the processing of deposits and withdrawals. This sharing is limited strictly to information required to complete the transaction.
• Game providers — required account data is shared with third-party game providers (such as Pragmatic Play, Evolution Gaming) to enable access to their games within the cili888 platform. These providers are bound by strict confidentiality agreements.
• IT service providers — hosting, cybersecurity and technical support service providers that help us operate the cili888 platform may have limited access to certain data as part of their services.
• Competent authorities — cili888 will disclose required data to Malaysian authorities or law enforcement bodies when mandated by a court order, warrant, or valid legal requirement. We do not disclose data beyond what is required by such orders or requirements.
• Accounting and legal professionals — auditors, lawyers, and other professional advisors bound by professional confidentiality obligations may have access to certain data in the course of an audit or legal advisory process.

All third parties that receive data from cili888 are required to sign data protection agreements obligating them to safeguard that data to a standard at least equivalent to cili888's own. We do not permit third parties to use our members' data for their own purposes outside the scope of the agreed arrangement.

Protecting your personal data is cili888's highest technical priority cili888. We continually invest in the latest security infrastructure to ensure your data remains protected at all times. Below are the key security measures we have implemented:

• Transit Encryption (TLS/SSL 256-bit) — all data transmitted between your browser and the cili888 is encrypted using the latest TLS protocols. This means no third party can intercept and read your data in transit.
• Storage Encryption — sensitive data stored in our databases is encrypted at the file level using industry-standard encryption algorithms. This includes payment information, identification numbers and passwords (which are stored as unreadable hashes).
• Strict Access Control — access to member data is restricted to personnel cili888 with a legitimate business need only. All access is recorded in an audit log. Staff who change roles or leave the company immediately lose access to all systems.
• 24/7 Security Monitoring — the security team cili888 continuously monitors all system activity using advanced threat detection tools. Any anomalies or suspicious activity are identified and addressed immediately.
• Regular Penetration Testing — cili888 conducts regular security assessments by third-party security experts to identify and address vulnerabilities before they can be exploited.
• Incident Management — in the event of a security breach affecting member data, cili888 has a clear incident response procedure and will notify affected members within a reasonable timeframe in accordance with legal requirements.

While we take all reasonable security measures, no system is 100% immune. As such, cili888 also encourages members to take their own protective measures — such as using strong passwords, not sharing login credentials and reporting any suspicious activity to us promptly.

cili888 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. Cookies are small files stored on your device when you visit a website.

Types of cookies we use:

• Essential Cookies — these cookies are required for core platform functions such as login, session management, and security. Without them, the platform cannot operate properly. These cookies cannot be disabled.
• Performance Cookies — collects information about how visitors use our platform in aggregated form without identifying individuals. This helps us understand which sections receive the most traffic and where players encounter issues.
• Functional Cookies — saving your preferences such as your preferred odds format, interface language and display settings so you do not have to reset them every time you log in.
• Analytics Cookies — cili888 uses internal analytics tools to understand overall platform usage patterns for improvement purposes.

You can manage cookies through your browser settings. However, disabling certain cookies — especially essential cookies — may affect the functionality of the platform cili888 where you may be unable to log in or use certain features properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internal policy cili888, you have the following rights regarding your personal data:

To exercise any of the rights listed above, please contact cili888 by email at support@cili888.xyz with the subject line "Privacy Rights Request" and specify the right you wish to exercise along with the details required for identity verification. cili888 will process your request within 14 business days and inform you of the next steps.

Platform cili888 is intended solely for individuals aged 18 and above. cili888 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

When we discover or become aware that we have inadvertently collected data from a minor, we will take immediate action to:

• Suspending or terminating the relevant account.
• Deleting all related personal data from our systems.
• Refunding any deposits made to the original payment method, subject to the relevant investigation.

Parents or guardians who discover that their minor child has used the platform cili888 are urged to contact us immediately at support@cili888.xyz so that appropriate action can be taken without delay.

In the course of operating the platform cili888, your data may be processed by service providers based outside Malaysia — for example, server hosting providers or international game providers such as Pragmatic Play or Evolution Gaming, headquartered in Europe or other regions.

When data transfers outside Malaysia occur, cili888 ensuring adequate protection by taking the following measures:

• Signing data transfer agreements with recipients that include contractually binding data protection clauses.
• Ensuring transfers only occur to countries or entities that maintain data protection standards equivalent to or stricter than those in Malaysia.
• Minimizing data transferred to only what is strictly necessary for the relevant service purpose.
• Ensuring all transferred data is encrypted in transit using industry-standard security protocols.

Financial data relating to MYR transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX is processed by Malaysian local payment processors subject to Bank Negara Malaysia regulations and applicable local data protection laws.

cili888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we operate. Any material changes to how we handle your personal data will be communicated to you via:

• Clear in-platform notice cili888 when you log in after the amendments take effect.
• Email notification to your registered email address for significant amendments.
• Updated on the "Last Updated" date shown at the top of this page.

We encourage you to review this Privacy Policy page periodically. Your continued use of the cili888 after the updated Privacy Policy is published will be considered acceptance of those changes. If you do not agree with any changes, you have the right to close your account and request deletion of your data before the amendments take effect.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. For any questions about this policy or how cili888 handles your data, please contact us at support@cili888.xyz.

If you have any questions, concerns, or complaints regarding how cili888 handling your personal data, we encourage you to contact us directly. Our team is committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe.

Ways to contact us regarding privacy:

• Email: Send an email to support@cili888.xyz with the subject line "Privacy Enquiry" or "Privacy Rights Request".
• Live Chat: Use the live chat function within the platform cili888 and indicate that your enquiry is privacy-related — our agents will connect you with the appropriate team.
• Telegram: Official Telegram channel cili888 can also be used for general privacy enquiries.

We are committed to responding to all privacy-related enquiries within 3 business days. For requests that require further investigation, such as data access or deletion requests, the full process may take up to 14 business days — we will provide you with progress updates throughout.

If you are not satisfied with the response cili888 regarding your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia in accordance with the procedures set out by that authority.