This Privacy Policy explains how cita33 collects, uses, stores, and protects the personal data of Members and visitors to the cita33 platform. We take data privacy seriously — this document tells you exactly what we do with your information and why.
Your data. Your rights. By registering a cita33 account or using our platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, you should not use the cita33 platform.
cita33 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at cita33.co. In the course of providing our services to Members and visitors across Malaysia — including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond — we collect and process personal data as described in this Privacy Policy.
cita33 acts as the data controller in respect of all personal data collected via the cita33 platform. We are committed to handling your personal data in a lawful, fair, and transparent manner, in accordance with applicable data protection legislation and the data privacy standards required by our operating licence.
This Privacy Policy covers: what personal data we collect, the purposes for which we use it, with whom we share it, how long we retain it, the security measures we apply, and the rights available to you as a data subject.
cita33 collects personal data across the following categories. We collect only the data that is necessary for the purposes described in this policy.
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Identity & Registration | Account creation, KYC, age verification | 5 years after account closure |
| Financial & Transaction | Payment processing, AML compliance | 7 years (regulatory requirement) |
| Gameplay & Activity | Service delivery, fraud detection, RG monitoring | 5 years after account closure |
| Technical & Device | Security, fraud prevention, analytics | 13 months (rolling) |
| Communications | Support, dispute resolution, compliance | 3 years after resolution |
cita33 uses your personal data for the following purposes:
cita33 processes your personal data on one or more of the following legal bases:
cita33 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:
All third parties with whom cita33 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than the specific service they provide to cita33.
6.1 cita33 uses cookies and similar tracking technologies on the cita33 platform. Cookies are small text files placed on your device that help us recognise you across sessions and improve your experience.
6.2 You can manage cookie preferences via the cookie consent panel that appears on your first visit. Strictly necessary cookies cannot be disabled. You may also control cookies through your browser settings, though disabling certain cookies may affect platform functionality.
Malaysian users accessing cita33 on mobile devices: clearing your browser cache does not delete server-side session data. To fully log out, use the Sign Out function within your cita33 account settings.
cita33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our operating licence. The specific retention periods applicable to each data category are set out in the table in Section 2.
Financial and transaction data is retained for a minimum of seven years following the last transaction, as required by applicable anti-money laundering regulations. This retention obligation applies irrespective of whether a Member's account has been closed.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. cita33 maintains a formal data retention schedule and conducts periodic reviews to ensure compliance.
As a data subject, you have the following rights in relation to the personal data that cita33 holds about you. To exercise any of these rights, contact us via live chat or email as detailed in Section 13.
cita33 will not charge a fee for exercising data subject rights unless a request is manifestly unfounded or excessive. Identity verification may be required before a request is processed to protect against unauthorised access to a Member's personal data.
cita33 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cita33 will notify affected Members without undue delay and will report the breach to the relevant supervisory authority within the timeframe required by applicable law.
The cita33 platform is strictly for individuals aged 21 years and above. cita33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete the data and close the associated account.
If you believe a minor has registered a cita33 account, please contact us immediately at the details in Section 13. cita33 takes underage access violations seriously and cooperates fully with any parental or regulatory enquiry in this regard.
The cita33 platform does not contain links to external third-party websites. This Privacy Policy applies solely to data processed by cita33 within the cita33.co domain and associated services. cita33 is not responsible for the privacy practices of any third-party services that may be accessed independently by Members.
cita33 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Members will be notified of material changes via email to their registered address and/or via an in-platform notification displayed upon next login.
The "Last Updated" date at the top of this policy reflects the most recent revision. We encourage Members to review this policy periodically. Continued use of the cita33 platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms.
For any questions, concerns, or data subject rights requests relating to this Privacy Policy or cita33's handling of your personal data, please contact us through the following channels:
cita33 aims to acknowledge all privacy-related enquiries within two business days and to resolve substantive requests within 30 days. Support is available in English and Bahasa Malaysia.
Six concrete ways cita33 treats your personal data with the respect it deserves.
Every page of the cita33 platform — not just the login page — is served over 256-bit SSL. Your credentials, session data, and financial information are encrypted in transit at all times.
cita33 does not sell, rent, or trade Member personal data to marketing companies, data brokers, or any third party for commercial gain. Your data serves your gaming experience — nothing else.
Access, rectify, delete, or port your data — all through a single live chat request. cita33 responds to verified data rights requests within 30 days with no bureaucratic runaround.
cita33 collects only the personal data that is genuinely necessary to operate the platform and meet regulatory requirements. We do not request data we do not need.
Sensitive data fields — including identity documents and financial details — are encrypted at rest in cita33 databases and stored separately from general account data.
In the unlikely event of a data breach affecting your personal information, cita33 will notify you without undue delay — not weeks later when damage is already done.
Thousands of Malaysian players trust cita33 with their personal data and funds every day. Secure platform, fast MYR payouts, and a privacy policy you can actually read and understand.
🔞 21+ only · MYR accounts · Responsible gaming tools built in