This Privacy Policy explains how Cita33 collects, uses, stores, and protects your personal information when you access or use the platform at cita33.cam. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.
Cita33 ("we", "us", "our") operates the online casino and sports betting platform accessible at cita33.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered Members and visitors who access the website without registering.
This Privacy Policy ("Policy") describes in detail what personal data Cita33 collects, the lawful basis on which that data is processed, how it is used, with whom it may be shared, how long it is retained, and what rights you have in relation to your data. This Policy applies to all personal data collected through the Cita33 platform, including data collected via our website, account registration forms, deposit and withdrawal transactions, customer support interactions, and any promotional campaigns.
Cita33 primarily serves players located in Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere throughout the country. Our data handling practices reflect an understanding of the Malaysian context and applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By accessing or using the Cita33 platform, registering an account, making a deposit, or communicating with our support team, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
For the purposes of this Policy, the following terms carry the meanings set out below:
Cita33 collects Personal Data in the following categories:
3.1 Identity & Contact Data
Full legal name, date of birth, nationality, gender, national identification number (MyKad or passport number), email address, mobile phone number, and residential address.
3.2 Account Data
Username, encrypted password, account creation date, account preferences, security question responses, and two-factor authentication settings.
3.3 Financial & Transaction Data
Bank account details (for payment purposes only), e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), transaction history including deposit amounts, withdrawal amounts, dates, and payment methods used (Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Visa, Mastercard, cryptocurrency wallet addresses). We do not store full card numbers — payment card data is handled by PCI-DSS compliant third-party processors.
3.4 Gaming & Betting Activity Data
Bet history, game session logs, wagering amounts, win/loss records, bonus redemption history, and responsible gambling tool usage (deposit limits set, self-exclusion periods, session reminder activations).
3.5 Technical & Device Data
IP address, browser type and version, operating system, device type, screen resolution, time zone, session duration, pages visited, and referring URL.
3.6 Communication Data
Records of all communications between you and Cita33, including live chat transcripts, email correspondence, and support ticket content.
3.7 Verification Documents
Copies of government-issued identification (MyKad, passport), proof of address documents, and any other documents submitted to fulfil KYC requirements.
| Category | Examples | Required? |
|---|---|---|
| Identity & Contact | Name, DOB, email, phone, address | Mandatory (registration) |
| Financial Data | Bank details, e-wallet IDs, transaction history | Mandatory (transactions) |
| Gaming Activity | Bet history, win/loss, bonus usage | Automatic (platform use) |
| Technical Data | IP address, browser, device type | Automatic (site access) |
| KYC Documents | MyKad copy, proof of address | Mandatory (withdrawals) |
Cita33 collects Personal Data through the following means:
Cita33 processes your Personal Data for the following purposes and on the following legal bases:
All Personal Data collected by Cita33 is processed in a manner consistent with the principles of the Personal Data Protection Act 2010 (PDPA) of Malaysia. Specifically, Cita33 adheres to the following processing principles:
Cita33 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We may, however, share your data with the following categories of recipients where necessary and lawful:
Any third-party Data Processor engaged by Cita33 is required to enter into a written data processing agreement confirming that they will handle Personal Data only in accordance with Cita33's instructions and applicable data protection laws.
Cita33 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us operate and improve the platform experience.
Types of Cookies We Use:
You may control cookie settings through your browser preferences. Please note that disabling certain categories of cookies may impair your ability to use some features of the Cita33 platform. For marketing cookies specifically, you may withdraw consent at any time by adjusting your Account preferences or contacting our support team.
Cita33 retains Personal Data only for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 7 years post-closure | Legal obligation / AML compliance |
| Financial transaction records | 7 years from transaction date | Financial regulatory requirements |
| KYC verification documents | 7 years post-account closure | PDPA and AML obligations |
| Gaming activity logs | 5 years from activity date | Legitimate interest / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing preferences | Until consent withdrawn | Consent |
| Technical / device logs | 12 months | Security and fraud prevention |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.
Cita33 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
In the event of a data security incident that poses a material risk to the rights and freedoms of affected individuals, Cita33 will notify affected Members and, where required, relevant regulatory authorities within the timeframes specified by applicable law.
Subject to applicable law, you have the following rights in relation to the Personal Data that Cita33 holds about you:
To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Subject Request — [Your Username]". We will acknowledge all requests within five (5) business days and provide a substantive response within thirty (30) days. Some requests may be subject to identity verification before processing.
The Cita33 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21.
If we become aware that we have collected Personal Data from an individual below the minimum age threshold, we will immediately suspend the relevant account, delete the associated data, and, where applicable, refund any deposits to the original payment source. Any winnings accrued on accounts subsequently found to be underage will be voided.
Parents, guardians, or any concerned party who believes that a minor may have registered with or used the Cita33 platform are encouraged to contact us immediately at [email protected].
The Cita33 platform may contain integrations with third-party payment systems (such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, and Maybank internet banking) for transaction processing purposes. When you are redirected to a third-party payment interface, you are subject to that provider's own privacy policy and terms.
Cita33 is not responsible for the privacy practices of third-party service providers, and this Policy does not apply to any Personal Data collected directly by third parties. We recommend reviewing the relevant third-party privacy policies before submitting any Personal Data through those interfaces.
Cita33 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. The most current version of this Policy will always be accessible at cita33.cam/privacy-policy. The effective date at the top of this document indicates when the current version came into force.
Where amendments are material, Cita33 will notify registered Members via email or a prominent notice on the Platform in advance of the changes taking effect. Your continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests relating to this Privacy Policy or Cita33's handling of your Personal Data, please contact us through the following channels:
If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Malaysia, the relevant authority is the Department of Personal Data Protection (JPDP), which operates under the Ministry of Communications and Digital.
Our Privacy Policy is built on a foundation of transparency and genuine respect for your personal information. Here is what that looks like in practice.
All data transmitted between your device and our servers is protected by bank-grade 256-bit SSL/TLS encryption. Your financial details and account credentials are never exposed in transit.
Cita33 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. Data sharing is limited strictly to what is necessary for platform operations and legal compliance.
You have the right to access, correct, restrict, port, or request deletion of your Personal Data. Submit a request at any time via email and we will respond within 30 days.
All card payment data — including Visa and Mastercard transactions — is handled by PCI-DSS compliant third-party processors. We do not store full card numbers on our systems at any time.
Marketing and promotional communications are sent only where you have consented. You can withdraw consent at any time through your Account Settings or by contacting our support team.
Cita33's data handling practices are designed to align with the Personal Data Protection Act 2010 (PDPA) of Malaysia — the primary data protection legislation applicable to our operations.
As a Cita33 Member, you hold meaningful rights over your Personal Data. These are not passive entitlements — they are commitments we actively honour.
Request a copy of all Personal Data we hold about you and learn exactly how it is being used.
Request correction of inaccurate or outdated Personal Data held in your account.
Request deletion of Personal Data that is no longer needed, subject to legal retention requirements.
Object to processing carried out on legitimate interest grounds where your rights are impacted.
Request a copy of your data in a structured, machine-readable format where technically feasible.
Request limitations on how your data is processed, for example while a correction request is pending.
To exercise any right, email [email protected] with subject line "Data Subject Request — [Your Username]". We respond within 30 days.
Our support team is available 24/7 to answer questions about your privacy, data rights, or account security. You can also visit our FAQ for quick answers to the most common questions from Malaysian players.
View our Terms & Conditions or our Responsible Gambling policy. Cita33 is for players aged 21 and above only.