Secure by Design
cipit88 applies access controls, encrypted connections, monitoring, and internal procedures to reduce unauthorised access to player data.
This Privacy Policy explains how cipit88 collects, uses, stores, protects, and discloses personal data when Malaysian players visit our website, register an account, make MYR transactions, or contact customer support.
These practical commitments guide how cipit88 handles player information throughout the account lifecycle.
cipit88 applies access controls, encrypted connections, monitoring, and internal procedures to reduce unauthorised access to player data.
Personal information is used for clear operational purposes such as account management, KYC, payments, security, and player support.
Eligible cipit88 users may request access, correction, restriction, or deletion of personal data, subject to legal retention duties.
Only authorised personnel and necessary service providers may access cipit88 data for approved business or compliance functions.
This Privacy Policy applies to the cipit88 website, account services, casino and sports betting features, MYR payment functions, responsible gambling tools, and customer support channels. It applies when you browse cipit88, create an account, verify your identity, deposit or withdraw funds, place a wager, request assistance, or otherwise communicate with us.
For Malaysian users, cipit88 handles personal data with regard to recognised data protection principles, including transparency, data minimisation, security, accuracy, purpose limitation, and responsible retention. Where the Malaysian Personal Data Protection Act 2010 or another applicable privacy law applies, cipit88 will process information in accordance with the relevant obligations.
In this Privacy Policy, “personal data” means information that identifies, relates to, or can reasonably be linked with an individual. “Processing” includes collecting, recording, storing, consulting, using, transmitting, correcting, restricting, or deleting personal data.
“Account data” means information associated with a registered cipit88 account. “Transaction data” means records connected with deposits, withdrawals, bonuses, bets, wins, losses, payment references, and MYR account balances. “Service provider” means an organisation that processes information to help cipit88 provide legitimate platform functions.
cipit88 may collect information necessary to establish and protect your account, deliver requested services, comply with applicable requirements, and operate a secure gaming environment.
| Data category | Examples | Primary purpose |
|---|---|---|
| Identity data | Full name, date of birth, nationality, identification details, and verification images. | Age checks, KYC, account security, and fraud prevention. |
| Contact data | Email address, mobile number, residential address, and preferred support language. | Account notices, verification, customer support, and security alerts. |
| Financial data | Payment method, masked account details, transaction references, and withdrawal destination. | Processing MYR deposits and withdrawals and resolving payment queries. |
| Gaming data | Game history, sports bets, bonus use, wagering activity, wins, losses, and account limits. | Providing services, maintaining records, and supporting responsible gambling tools. |
| Technical data | IP address, browser type, device identifiers, operating system, access time, and security logs. | Platform operation, troubleshooting, analytics, and cyber-security. |
Customer support records may include chat transcripts, complaint details, uploaded evidence, and notes required to resolve a request. cipit88 asks players not to send unnecessary sensitive information through support communications.
Information may be provided directly when you register, complete KYC, update your cipit88 profile, set a deposit limit, request self-exclusion, contact support, or initiate a payment. Data is also generated automatically when you use games, follow EPL or Liga Super Malaysia betting markets, or interact with account security functions.
Technical information may be collected through essential cookies, server logs, and similar technologies. Payment and verification partners may provide confirmation data, risk indicators, or transaction status information where necessary for cipit88 to complete a requested service or investigate suspected misuse.
Depending on the context and applicable law, cipit88 processes personal data to perform an agreement with you, comply with a legal or regulatory obligation, pursue a legitimate operational interest, protect vital interests, or act with your consent.
Where cipit88 relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before the request or information that must be retained for another valid reason.
To process transactions, cipit88 may handle records associated with Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. These public payment method names describe channels that Malaysian users may recognise; they do not imply ownership, endorsement, or government regulation of cipit88.
Payment information is used to confirm account ownership, reconcile RM transactions, process withdrawals, prevent chargeback abuse, and investigate unusual activity. cipit88 generally seeks to retain only the payment details needed for these purposes and may display account numbers in masked form.
KYC documentation may be checked manually or through specialist verification systems. cipit88 may compare identity information with account, device, and transaction records to protect players and prevent duplicate or fraudulent registrations.
Cookies are small data files stored by a browser. cipit88 may use essential cookies to maintain sessions, remember security settings, support account authentication, and keep the website functioning correctly. Performance data may help cipit88 identify slow pages, failed payment steps, or device compatibility issues.
You may control non-essential cookies through available browser settings. Blocking essential cookies can affect sign-in, security, or account functionality. cipit88 does not use cookies to obtain information stored elsewhere on your device without permission.
cipit88 does not sell player personal data. Information may be disclosed only where reasonably necessary to trusted service providers supporting payment processing, identity verification, hosting, cyber-security, customer service, analytics, game delivery, fraud prevention, or professional advice.
Recipients are expected to process information for authorised purposes and apply suitable confidentiality and security controls. cipit88 may also disclose information where required by applicable law, a valid legal process, a competent authority, or a good-faith need to protect players, the public, or the integrity of the platform.
If ownership or control of the cipit88 business changes, relevant data may be transferred as part of a legitimate corporate transaction, subject to appropriate confidentiality arrangements and applicable privacy requirements.
Some cipit88 infrastructure or service providers may operate outside Malaysia. As a result, personal data may be processed in a country with privacy laws that differ from Malaysian law. Where required, cipit88 uses appropriate contractual, organisational, or technical safeguards for such transfers.
International transfer arrangements are reviewed according to the nature of the data, the recipient, the purpose of processing, and the protections available. Access remains limited to what is necessary for the relevant service.
cipit88 uses layered administrative, technical, and physical safeguards designed to protect personal data. Measures may include encrypted connections, access controls, credential protection, security logging, vulnerability management, staff confidentiality duties, and incident response procedures.
No internet service can promise absolute security. Players also have an important role: use a strong and unique password, keep login details private, avoid shared devices where possible, and notify cipit88 promptly if account activity appears suspicious.
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including account administration, transaction reconciliation, dispute resolution, fraud prevention, security, responsible gambling, and applicable legal obligations.
Retention periods may differ by data category. For example, transaction and KYC records may need to be retained longer than routine technical logs. A self-exclusion record may also be retained to ensure that cipit88 can continue honouring a player's exclusion request and prevent inappropriate re-registration.
When information is no longer required, cipit88 will delete, anonymise, or securely isolate it in accordance with applicable procedures, unless continued retention is required or permitted by law.
Subject to applicable law and verification of your identity, you may have the right to request access to personal data held by cipit88, ask for inaccurate information to be corrected, object to or restrict certain processing, withdraw consent, or request deletion where no lawful retention reason remains.
You may also ask for an explanation of relevant processing or raise a complaint about how cipit88 handles your information. Some requests may be limited where disclosure would affect another person's rights, undermine security or fraud controls, reveal confidential information, or conflict with a legal retention duty.
To protect account data, cipit88 may request reasonable identity verification before completing a privacy request. We aim to respond within a reasonable period and will explain if additional time or information is required.
cipit88 is intended only for players aged 21 and above. We do not knowingly permit persons under 21 to register or use casino-style gambling services. Age verification information may be collected to enforce this restriction and protect younger persons.
If cipit88 becomes aware that an underage person has supplied personal data or opened an account, access will be restricted and the matter will be reviewed. Relevant records may be retained where necessary to prevent repeated registration, investigate activity, return legitimate funds, or comply with applicable obligations.
cipit88 may update this Privacy Policy to reflect changes in technology, platform services, legal requirements, payment processes, or data protection practices. The effective date at the top of this page will be revised when an update is published.
Where a change materially affects how personal data is processed, cipit88 may provide an additional notice through the website or an appropriate account communication. Continued use of cipit88 after an update remains subject to the revised policy and any consent requirements imposed by law.
For questions about this Privacy Policy, a personal data request, or a concern about cipit88 privacy practices, contact our customer support team. Please provide enough information to identify the relevant account and explain your request, but do not send passwords or unnecessary financial details.
Privacy contact:
Support hours: 24 hours a day, 7 days a week (MYT +8:00)
Support language: English
Additional information about account rules is available in our Terms & Conditions. Information about deposit limits, cooling-off periods, and self-exclusion is available on the Responsible Gambling page.
Return to the homepage to explore the cipit88 experience, or read our FAQ for clear information about accounts, MYR payments, verification, and responsible play. For players aged 21 and above only.