CitraBet77 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by CitraBet77 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("Players", "Users", "you") who access or register on the CitraBet77 platform at citrabet77.cam.

CitraBet77 operates as an English-language online casino and sports betting platform principally serving players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities and states throughout the country. We take the protection of your personal data seriously and are committed to handling it responsibly, transparently, and in accordance with applicable data protection principles.

By accessing CitraBet77, registering an account, or providing personal information to us in any form, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not access or use the CitraBet77 platform.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including names, identification numbers, location data, online identifiers, and factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, deletion, or destruction — whether by automated or manual means.
• "Data Controller" means the entity that determines the purposes and means by which personal data is processed. For players of CitraBet77, the Data Controller is CitraBet77.
• "Data Processor" means any third party that processes personal data on behalf of CitraBet77 under a data processing agreement, including payment processors, KYC verification providers, and IT infrastructure providers.
• "KYC" means Know Your Customer identity verification procedures, including document-based identity checks and proof of address verification.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specific purposes.
• "Cookies" means small text files placed on a user's device by a website for the purposes of session management, analytics, or functionality.

03 Personal Data We Collect

CitraBet77 collects the following categories of personal data from Players:

CitraBet77 does not intentionally collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) beyond what is strictly necessary for age and identity verification under KYC obligations.

04 How We Collect Your Data

CitraBet77 collects personal data through the following channels:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion, you provide us with personal data directly.
• Automated collection: When you visit or interact with CitraBet77, we automatically collect technical data through cookies, server logs, and similar technologies — including IP address, device identifiers, and browsing behaviour on the platform.
• Third-party payment providers: When you make a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or other supported payment methods, transaction confirmation data is received from those providers.
• KYC and identity verification providers: CitraBet77 may use regulated third-party identity verification services to assist with document authentication and age verification processes.
• Fraud and risk detection services: Technical and behavioural data may be processed by third-party fraud prevention tools operating on our behalf as Data Processors.

05 Data Processing & Use

CitraBet77 uses your personal data for the following purposes, each of which is supported by a lawful legal basis as described in Section 6:

• Account creation and management: To register your account, maintain your player profile, and administer your use of the CitraBet77 platform.
• Identity verification and KYC: To verify your identity, confirm your age (minimum 21 years), and fulfil our obligations under applicable anti-money laundering and counter-terrorist financing requirements.
• Payment processing: To process deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR) via your selected payment method.
• Customer support: To respond to your queries, resolve disputes, and manage complaints submitted via live chat or email.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities outlined in our Terms and Conditions.
• Responsible gambling: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-exclusion arrangements, and to administer deposit limits and cooling-off periods you have requested.
• VIP programme and personalisation: To track your VIP tier status, calculate cashback and loyalty rewards, and personalise your platform experience where you have given consent.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain required records.
• Marketing communications (consent-based only): To send promotional emails, SMS notifications, or platform alerts about bonuses and offers — but only where you have explicitly opted in to receive such communications.

06 Legal Basis for Processing

CitraBet77 processes your personal data on the following legal bases, depending on the nature and purpose of the processing:

• Contractual necessity: Processing is necessary to perform the contract between CitraBet77 and you — including account registration, transaction processing, customer support, and delivering the gaming services you have subscribed to.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including KYC identity verification, anti-money laundering obligations, age restriction enforcement, and record-keeping mandates.
• Legitimate interests: Processing is necessary for CitraBet77's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and certain non-essential data processing activities, we rely on your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

07 Data Sharing & Disclosure

CitraBet77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only where strictly necessary, and only with the following categories of recipients:

• Payment service providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, FPX network participants, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services — solely for the purpose of processing your financial transactions.
• KYC and identity verification providers: Regulated third-party services that assist CitraBet77 in verifying the identity and age of Players as required under applicable law.
• Fraud prevention and security services: Third-party providers operating as Data Processors under a binding data processing agreement, who analyse technical and behavioural data to detect and prevent fraud.
• IT infrastructure and cloud service providers: Service providers who supply the underlying technical infrastructure (hosting, data storage, email delivery) necessary to operate the CitraBet77 platform.
• Legal and regulatory authorities: Applicable regulatory bodies, law enforcement agencies, courts, or government authorities where CitraBet77 is legally required to disclose information.
• Professional advisers: Including legal counsel, auditors, and financial advisers where necessary for compliance, litigation, or corporate governance purposes — subject to professional confidentiality obligations.

08 International Data Transfers

CitraBet77 is a platform serving Malaysian users. To deliver our services, certain personal data may be transferred to, stored, or processed in jurisdictions outside Malaysia by our technical infrastructure providers or KYC service partners.

Where personal data is transferred internationally, CitraBet77 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applicable within Malaysia. These safeguards may include contractual data protection clauses, adequacy assessments of the recipient jurisdiction, or other legally recognised transfer mechanisms.

By registering and using CitraBet77, you acknowledge and consent to the transfer of your personal data to our trusted service partners in other jurisdictions where necessary for service delivery, subject to the protections described in this section.

09 Data Retention

CitraBet77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with our legal, regulatory, and contractual obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active player account is retained for the duration of the account's active status, plus a reasonable period following account closure to allow for dispute resolution.
• KYC and identity documents: Retained for the period required under applicable anti-money laundering regulations — typically a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years to comply with financial regulatory requirements.
• Customer support records: Live chat transcripts and support correspondence are retained for a period sufficient to resolve any pending disputes and meet legal record-keeping requirements.
• Marketing preferences: Records of consent and opt-out preferences are retained for as long as necessary to demonstrate compliance with applicable marketing communication regulations.

When personal data is no longer required to be retained, CitraBet77 will securely delete, destroy, or anonymise it in a manner appropriate to the sensitivity of the data and the medium on which it is stored.

10 Cookies & Tracking Technologies

CitraBet77 uses cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device that help us deliver a functional and secure platform experience. We use the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the platform, including session authentication, security token management, and load balancing. These cookies cannot be disabled without materially impairing your ability to use CitraBet77.
• Performance and analytics cookies: Used to measure how players interact with the platform — including page visit frequency, navigation paths, and error reporting — so that we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Functional cookies: Used to remember your preferences (such as language settings and preferred payment method display) to provide a more personalised experience across sessions.
• Fraud detection cookies: Technical identifiers used to detect suspicious login behaviour, multi-accounting attempts, and bot activity that may indicate fraudulent use of the platform.

CitraBet77 does not deploy third-party advertising or retargeting cookies on its platform. You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect the functionality of the CitraBet77 platform.

11 Your Data Rights

As a CitraBet77 Player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact CitraBet77 through the channels listed in Section 16:

• Right of Access: You have the right to request a copy of the personal data that CitraBet77 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request the deletion of your personal data — for example, where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. This right is subject to our legal retention obligations and may not apply where continued retention is required by law.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that CitraBet77 restrict the processing of your personal data — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where CitraBet77 is relying on legitimate interests as the legal basis — particularly in relation to direct marketing. Where you object to direct marketing, we will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

CitraBet77 will respond to verifiable data rights requests within a reasonable period and at no charge to the requesting Player. We may need to verify your identity before actioning a data rights request to ensure we do not disclose or delete data belonging to another individual.

12 Children & Minors

CitraBet77 is strictly an adults-only platform. Our services are not directed at, marketed to, or intended for use by individuals under the age of 21 years. We do not knowingly collect personal data from individuals under 21.

CitraBet77 enforces mandatory age verification through KYC procedures before permitting any real-money gaming activity. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has accessed CitraBet77 or provided personal data to us, please contact our support team immediately so that we can investigate and take appropriate action.

13 Security Measures

CitraBet77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction:

• 256-bit SSL/TLS encryption: All data transmitted between your device and CitraBet77's servers is encrypted using industry-standard SSL/TLS protocols.
• Access controls: Personal data is accessible only to authorised CitraBet77 personnel and Data Processors who require it to perform their designated functions. Access is governed by role-based permissions and is logged for audit purposes.
• Two-factor authentication (2FA): CitraBet77 supports two-factor authentication for player accounts to provide an additional layer of login security.
• Secure data storage: KYC documents and sensitive personal data are stored in encrypted form using secure storage systems with restricted access.
• Fraud monitoring: Automated fraud detection systems continuously analyse account activity and transaction patterns to identify and flag suspicious behaviour.
• Security incident response: CitraBet77 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected Players and take remediation steps as promptly as practicable.

14 Third-Party Links & Services

The CitraBet77 platform may contain references or connections to third-party services — including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and the DuitNow network — whose privacy practices are governed by their own privacy policies, which are separate from and independent of this Policy.

CitraBet77 is not responsible for the privacy practices or content of third-party services. When you use a third-party payment service to transact with CitraBet77, your interaction with that provider is subject to the provider's own terms and privacy policy. We encourage you to review those policies before providing personal data to any third-party service.

15 Amendments to This Policy

CitraBet77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date displayed at the top of this document will reflect the most recent revision.

Where amendments are material — meaning they significantly change how we collect, use, or protect your personal data — CitraBet77 will notify registered Players by displaying a prominent notice on the platform and, where appropriate, by sending a notification to your registered email address.

Your continued use of CitraBet77 following the effective date of any amended Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with an amended Policy, you should cease using the platform and contact support to request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or CitraBet77's handling of your personal data — including requests to exercise any of your data rights described in Section 11 — please contact us through the following channels:

• 24/7 Live Chat: Available directly on the CitraBet77 platform. This is the fastest channel for immediate data-related concerns, including urgent requests such as account suspension or self-exclusion activation.
• Email (plain text — not a link): [email protected] — targeted response time within 1 hour during Malaysia peak hours (8am–midnight MYT). For formal data rights requests, please use this channel and include your registered account details and a description of your request.

CitraBet77 is committed to resolving privacy-related queries promptly and transparently. We will acknowledge receipt of formal data rights requests within a reasonable period and aim to action them within the timeframe required by applicable law.