1. Introduction
Cili33 (hereinafter referred to as "we", "Platform", or "cili33") respects the privacy of every user who registers and uses our services at https://cili33.org. This Privacy Policy was crafted to provide clarity on how we handle your personal information — from the moment you first visit our website throughout the duration of your membership.
We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry standards in data management. This means every piece of information you provide is processed lawfully, fairly, and transparently — solely for the stated purposes and nothing more.
This policy applies to all channels of interaction with cili33, including the official website, mobile app, and any written or digital communications between you and our team. If you have any questions about how we handle your data, do not hesitate to contact us through the support channels provided.
2. Information We Collect
We only collect information that is strictly necessary to provide you with a safe, secure, and quality service. The following are the categories of information we may collect:
| Category | Information Type | Purpose of Collection |
|---|---|---|
| Registration Information | Full name, date of birth, email address, phone number, password (encrypted) | Identity verification, account communications |
| KYC Documents | Identity card copy (MyKad), bank statements, proof of address | Age verification, fraud prevention, and anti-money laundering |
| Financial Information | Bank account number, bank name, deposit and withdrawal transaction history | Payment processing, financial auditing |
| Technical Data | IP address, device type, web browser, operating system, session logs | Account security, suspicious activity detection |
| Behavioral Data | Game history, game preferences, betting patterns, active session duration | Personalise experience, responsible gaming |
| Communications | Support chat records, emails, user feedback | Complaint resolution, service improvement |
3. How We Use Your Data
The information we collect is used specifically to improve service quality and ensure the security of every transaction on the platform cili33. We do not use your data for any purpose beyond the scope stated below:
- Account Management — Processes registration, verifies identity, enables secure login, and manages your account eligibility on an ongoing basis.
- Transaction Processing — Securely processes deposits and withdrawals, verifies bank account ownership, and maintains accurate financial records for audit purposes.
- Platform Security — Detects and prevents unauthorised access, identity fraud, money laundering, and any activity that violates the terms of use.
- Customer Support — Handles enquiries, complaints, and technical support requests more effectively based on your interaction history with our team.
- Service Communications — Sends important account-related notifications, policy updates, transaction confirmations, and promotional information (with your consent).
- Responsible Gaming — Monitors gaming patterns to identify signs of problem gambling and provide relevant support to members who need it.
- Legal Compliance — Fulfils applicable legal and regulatory compliance obligations, including reporting to relevant authorities when required by law.
4. Information Sharing with Third Parties
Cili33 does not sell, rent, or disclose your personal information to third parties for their commercial gain. However, in certain circumstances, we may need to share information with trusted third parties for legitimate and limited reasons as follows:
- Licensed payment processors and transaction gateways
- KYC and identity verification service providers
- Secure cloud infrastructure and server providers
- Game software providers bound by confidentiality agreements
- Regulatory authorities when required by law
- Law enforcement agencies via valid court orders
- Financial Intelligence Unit Malaysia (FIED) for AML reporting
- Legally conducted fraud investigations
Every third-party service partner working with cili33 bound by a strict Data Processing Agreement (DPA). They are only permitted to use your data for the specific agreed purposes and must adhere to data security standards equal to or exceeding our own.
5. Data Security
Your data protection is one of our top priorities cili33. We continuously invest in the latest security infrastructure to ensure your information remains safe from any cyber threats, unauthorized access, or data loss.
- 256-bit SSL/TLS encryption for all data in transit
- AES-256 encryption for data stored in the database
- Passwords are stored using bcrypt hashing, which cannot be decrypted
- Financial information is stored in a fully isolated environment
- 24/7 security monitoring by a dedicated technical team
- Two-factor authentication (2FA) available for all accounts
- Intrusion detection system (IDS) active at all times
- Regular security audits by independent third parties
While we take all reasonable steps to protect your data, you also play an important role in keeping your account secure. Make sure your password is strong, enable 2FA, and never share your login credentials with anyone.
6. Cookies & Tracking Technologies
Cili33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:
- Essential Cookies — Required for core website functions such as login sessions, security, and language preferences. These cookies cannot be disabled as they ensure the platform operates correctly.
- Functional Cookies — Saves user preferences such as display settings, favourite games, and language preferences to deliver a more personalised experience on subsequent visits.
- Analytics Cookies — Collects aggregate information on how users interact with our platform, such as the most frequently visited pages and time spent in each section. This data is used solely for platform improvement.
7. Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international standards, you have certain rights regarding the personal information held by cili33. We are committed to respecting and facilitating the exercise of these rights:
You have the right to obtain a copy of all personal information we hold about you at any time.
If your information is inaccurate or outdated, you have the right to request an immediate correction at no charge.
You may request the deletion of your personal data, subject to applicable legal record-keeping obligations.
You have the right to object to the processing of your data for marketing purposes or profiling unrelated to core services.
You may request your data in a machine-readable format for transfer to another service provider.
You may request a temporary restriction on the processing of your data while a dispute or review is in progress.
To exercise any of the above rights, contact the support team cili33 through the provided channels. We will process your request within 30 business days and will not charge any fee for reasonable requests.
8. Data Retention Period
Cili33 retains your personal information only for as long as it is needed for the purposes stated in this policy or as required by applicable law. Below are the general guidelines for our data retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Information | For the duration of the active account | Ongoing service management |
| Financial Transaction Records | Minimum 7 years after the transaction | AML audit and compliance requirements |
| KYC Documents | 5 years after account closure | PDPA and AML compliance requirements |
| Security Logs | 2 years | Security investigation and forensics |
| Customer Support Records | 3 years | Dispute resolution |
| Analytics Cookie Data | 13 months | Platform trend analysis |
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. Our data deletion procedures comply with NIST standards for safe and irrecoverable data disposal.
9. Changes to This Privacy Policy
Cili33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or security enhancements. The latest version of this policy will be published on this page with a clear update date.
If there are significant changes to how we use your personal information, we will endeavor to provide you with reasonable advance notice via email or in-platform notification before those changes take effect. Continued use of the platform cili33 after the effective date of such changes will be considered your acceptance of the latest version of this policy.
We encourage you to revisit this page periodically — at least every six months — so you always stay informed on how we fully protect your personal information.
10. Contact Us Regarding Privacy
If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, our Data Protection Officer (DPO) team is ready to assist you at any time.
Why Trust cili33 with Your Data?
We are more than just a gaming platform — we are a partner that puts your safety and trust above all else.
Every bit of data that flows through the cili33 platform is protected by 256-bit SSL encryption — the same technology used by the world's leading financial institutions.
Cili33 operates in full compliance with Malaysia's Personal Data Protection Act 2010, ensuring your rights as a user are always protected under the law.
We have never and will never sell, rent, or disclose your personal information to third parties for their commercial purposes.
Our identity verification process uses fully encrypted channels. Your KYC documents are stored in an isolated environment with restricted access.
Our security systems are audited by independent third-party auditors annually to ensure our data protection standards remain at the highest level.
From account privacy settings to data deletion requests, you have full control. Our team is ready to process your requests within 30 days.