cinta88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by cinta88 ("cinta88", "we", "us", "our") and describes how we collect, use, store, share, and protect personal data relating to users ("Player", "you", "your") of the cinta88 website at cinta88.co and all associated services (collectively, the "Platform").

cinta88 is committed to protecting the privacy of all users of the Platform, including Malaysian players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and across the country. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

2. Data Controller

cinta88 acts as the data controller in respect of personal data collected through the Platform. As data controller, cinta88 is responsible for determining the purposes and means of processing your personal data. Any queries regarding data controllership or this Policy should be directed to [email protected].

3. Personal Data We Collect

cinta88 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

Category	Examples	Mandatory?
Identity Data	Full legal name, date of birth, nationality, MyKad or passport number	Yes (KYC)
Contact Data	Email address, phone number, residential address	Yes
Financial Data	Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), transaction history, deposit/withdrawal records	Yes
Account Data	Username, encrypted password, account preferences, bonus history, gaming activity, bet history	Yes
Technical Data	IP address, browser type and version, device identifiers, operating system, time zone, session logs	Automatic
Communications Data	Support chat transcripts, email correspondence, complaint records	As applicable
Responsible Gaming Data	Self-exclusion elections, deposit limit settings, problem gambling self-assessments	As applicable

cinta88 does not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) except where expressly required for regulatory compliance purposes, such as processing a self-exclusion request that references a medical condition.

4. How We Collect Personal Data

cinta88 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or responding to promotions.
• Automated technologies: Technical data collected automatically as you navigate the Platform, including cookies, web beacons, and server logs. Please see Section 8 (Cookies) for full details.
• Third parties: Identity verification data from KYC/AML service providers; fraud and risk screening data from security partners; payment confirmation data from payment processors including FPX, Maybank, CIMB, Public Bank, and e-wallet operators.

5. Legal Basis for Processing

cinta88 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide you with the Platform services, manage your account, process transactions, and honour bonus commitments.
• Legal obligation: Processing required to comply with anti-money laundering (AML) laws, Know Your Customer (KYC) regulations, tax reporting obligations, and conditions of our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, IT infrastructure, internal analytics, and improving the Platform, where our interests are not overridden by your rights.
• Consent: Processing for marketing communications, where we will seek your explicit opt-in consent separately and you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

cinta88 uses your personal data for the following purposes:

• Creating, managing, and verifying your cinta88 account
• Processing deposits, withdrawals, and in-game transactions in MYR
• Verifying your identity and age (21+) in accordance with KYC requirements
• Detecting and preventing fraud, money laundering, and prohibited conduct
• Providing customer support and resolving disputes
• Administering bonuses and promotions
• Complying with regulatory reporting obligations under our international gaming licence
• Implementing and managing responsible gaming tools including self-exclusion and deposit limits
• Analysing Platform usage to improve game offerings, user experience, and site performance
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts)
• Sending promotional communications, subject to your prior consent and opt-in

7. Data Sharing and Disclosure

cinta88 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Service providers and processors: KYC/AML verification providers, payment processors (including FPX gateway operators, Maybank, CIMB, Touch n Go eWallet), cloud hosting providers, customer support software vendors, and analytics providers — all bound by data processing agreements requiring equivalent data protection standards.
• Game content providers: Where necessary to resolve game-specific disputes, game provider audit logs may reference anonymised session data. Providers do not receive personally identifiable information.
• Regulatory and law enforcement authorities: cinta88 will disclose personal data where required to do so by applicable law, court order, or the legitimate request of a competent authority, including regulators overseeing our gaming licence.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of cinta88, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected Players will be notified in advance where legally permissible.

8. Cookies and Tracking Technologies

cinta88 uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Essential for session management, security token validation, and login state. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to measure how Players interact with the Platform so we can identify and fix issues. Data is aggregated and not used to identify individual users.
• Functional cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations.

cinta88 does not use third-party advertising or retargeting cookies. You may control or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

9. Data Retention

cinta88 retains personal data for the following periods, or such longer period as required by applicable law or regulatory obligation:

• Active account data: Retained for the duration of your account relationship with cinta88, plus 7 years following account closure, in compliance with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication in the relevant ticket or thread.
• Technical and session logs: Retained for 12 months for security and fraud investigation purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10. International Data Transfers

cinta88 may transfer your personal data to servers and processors located outside Malaysia in connection with our cloud infrastructure and third-party service providers. Where such transfers occur, cinta88 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to provide a level of protection equivalent to that applicable in Malaysia. By using the Platform, you acknowledge and consent to such transfers.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by cinta88:

• Right of access: You may request a copy of the personal data cinta88 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where retention is no longer necessary, subject to our legal obligations to retain certain data (e.g., AML records).
• Right to restrict processing: You may request that we pause processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a structured, commonly used, machine-readable copy of your personal data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on our legitimate interests, including direct marketing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". cinta88 will respond within 30 days. Identity verification will be required before any data is disclosed or deleted.

12. Security Measures

cinta88 implements and maintains appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to: 256-bit SSL/TLS encryption of data in transit; AES-256 encryption of sensitive data at rest; role-based access controls limiting internal data access to authorised personnel only; regular security audits and penetration testing; and multi-factor authentication for internal administrative systems.

In the event of a personal data breach that poses a risk to your rights and freedoms, cinta88 will notify affected Players and relevant authorities in accordance with applicable legal requirements and without undue delay.

13. Children and Minors

The cinta88 Platform is strictly intended for adults aged 21 years and above. cinta88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, that account will be closed immediately and all personal data securely deleted, subject to any AML retention requirements. If you believe a minor has created an account on the cinta88 Platform, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

cinta88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or Platform practices. Material changes will be communicated to registered Players via the email address on file at least 14 days before the revised Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

15. Contact and Complaints

For all privacy-related queries, data access requests, or complaints, please contact the cinta88 Data Protection team:

📧 Email: [email protected]

Please include "Privacy" or "Data Rights" in the subject line. We aim to acknowledge all privacy queries within 5 business days and to resolve them fully within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.