Privacy Policy cita66 – Our Commitment to Protecting Your Personal Data

Cita66 collects your personal information in several situations — primarily during account registration, platform usage, and financial transactions. We only collect information that is genuinely necessary to provide the best service and ensure the security of your account.

Below are the main categories of information we collect:

Every piece of information we collect serves a specific purpose. cita66 does not use your data beyond what is necessary to operate the platform safely and efficiently.

• Account management – registers, verifies, and maintains your account to keep it secure and fully functional.
• Financial processing – manages deposits, withdrawals, and other transactions carried out on the platform.
• Security and fraud prevention – detects and prevents unauthorized access, fraudulent activity, and platform abuse.
• Legal compliance – fulfills applicable legal and regulatory requirements, including KYC processes and anti-money laundering compliance.
• Service improvement – analyzes how the platform is used to continuously improve the user experience.
• Marketing communications – sends you relevant promotional information and offers, subject to your consent.

All your personal data is stored on servers protected with advanced encryption. cita66 uses 256-bit SSL encryption for all communications between your device and our platform, ensuring that transmitted information cannot be intercepted by unauthorized parties.

On the physical side, our servers are housed in data centres equipped with strict access controls, 24/7 monitoring, and integrated data backup systems. Access to members' personal data is granted only to staff who require it to carry out their responsibilities.

• Your data is retained for as long as your account remains active or as required for legal purposes.
• Following account closure, certain data is retained for the minimum period required under Malaysian law.
• Our systems undergo regular independent security audits to ensure data protection standards are consistently upheld.
• You will be notified in a timely manner of any data breach incidents involving your information.

Cita66 may share your personal information with certain third parties in limited and controlled circumstances. All such data sharing is done solely to enable us to deliver platform services to you more effectively.

Third parties that may receive your data include:

• Payment processors – to securely manage your deposit and withdrawal transactions.
• KYC service providers – to verify your identity in accordance with legal requirements.
• Cloud service providers – that hosts the technical infrastructure of the cita66 platform.
• Regulatory authorities – when required by applicable law or a valid court order.

All third parties involved are required to sign strict data protection agreements and may only use your information for the specific purposes that have been agreed upon.

Cita66 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small files stored on your device that help the platform recognize you and remember your preferences.

Types of cookies used by cita66:

• Session cookies – required for core platform functions such as login and smooth navigation. These cookies are automatically deleted when you close your browser.
• Functional cookies – saves your preferences such as language and display theme for a consistent experience.
• Analytics cookies – helps us understand how users interact with the platform so we can make meaningful improvements.
• Security cookies – used to detect and prevent unauthorized access and suspicious activity.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and user experience on the cita66 platform.

As a cita66 member, you have certain rights regarding your personal data. We are committed to making it easy and straightforward for you to exercise these rights.

Your rights include:

• Right to access – you may request a copy of the personal data we hold about you.
• Right to rectification – you may request that we correct any information that is inaccurate or incomplete.
• Right to erasure – in certain circumstances, you may request that we delete your personal data, subject to applicable legal obligations.
• Right to restrict processing – you may request that we restrict how we process your data in certain circumstances.
• Right to withdraw consent – you may withdraw your marketing consent at any time without affecting core services.

To exercise any of the above rights, please contact the cita66 support team via live chat on the platform. Your request will be processed within 14 business days.

Cita66 may send you marketing communications from time to time, including information about new promotions, special offers, and platform updates. All marketing communications are sent based on your consent given at registration.

You have full control over the types of communications you wish to receive. You may opt out of any marketing communications at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect essential transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

Cita66 reserves the right to update this privacy policy from time to time to reflect changes in our business practices, legal requirements, or improvements in how we protect your data. Any significant changes will be communicated to members via in-platform notifications or registered email.

We encourage you to review this page periodically. The date of the most recent update is always displayed at the top of this document. Continued use of the cita66 platform following any changes to the privacy policy constitutes your acceptance of those changes.