Official Documents

Privacy Policy cilli88 – Malaysia User Data Protection

Cilli88 takes user privacy seriously. This document clearly explains what data we collect, how it is used, who can access it, and what your rights are as a user of our platform.

Updated: 1 January 2026
SSL 256-bit Encryption
Malaysia PDPA Compliance
Our Privacy Commitment
Data is never sold to third parties
End-to-End Encryption
You have the right to delete your data
PDPA 2010 Compliance

Six Pillars cilli88 Privacy

Our privacy policy is built on six core principles that ensure your personal data is handled with full integrity and accountability.

Purpose-Based Collection

Cilli88 only collects data that is strictly necessary to provide its services. No excess data is collected purely for statistical purposes.

Layered Encryption

All data is stored and transmitted with SSL 256-bit encryption. Your password is never stored in plain text — only in a secure hashed format.

Control in Your Hands

You have the right to access, correct, download or request deletion of your personal data at any time via your account settings or by contacting our support team.

No Data Sales

Cilli88 does not sell, rent, or trade users' personal data to any third party for marketing or any other commercial purposes.

Full Transparency

We clearly explain what data is collected and why. No hidden conditions — all data usage is explicitly stated in this policy.

PDPA 2010 Compliance

The cilli88 privacy policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring every aspect of data handling meets local legal requirements.


1 Introduction & Scope of This Policy

Cilli88 ("we", "Platform" or "Company") is committed to protecting the privacy of all users who register and use our services at cilli88.win. This Privacy Policy explains in detail how we collect, use, store, protect and share your personal data.

This policy applies to all registered users, website visitors and any individuals who interact with the cilli88 platform through any channel, including the website, live chat and email communications.

By using the cilli88 platform, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of the platform and contact us to request account closure.

Legal Basis

The cilli88 Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Any processing of personal data is based on your consent, contractual necessity or applicable legal obligations.

2 Personal Data We Collect

Cilli88 collects personal data across several key categories. The table below describes the data types, purpose of collection, and applicable legal basis:

Data Type Example Primary Purpose
Identity Data Full name, ID number, date of birth Identity verification (KYC), fraud prevention
Contact Data Email, phone number Account communications, customer support
Financial Data Bank account number, bank name, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, web browser Security, fraud detection
Usage Data Games played, session duration, betting records Platform improvement, VIP management
Communication Data Live chat transcripts, support emails Complaint resolution, quality control

Data We Do Not Collect

Cilli88 not collect credit or debit card information directly. All payments are processed through registered third-party payment gateways that comply with PCI-DSS security standards.

3 How We Use Your Data

Personal data collected is used solely for the following purposes:

  • Account management: Creating, verifying, and managing your user account
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions
  • Platform security: Detecting and preventing fraud, money laundering, and other illegal activities
  • Customer support: Answering enquiries, resolving complaints, and providing technical assistance
  • VIP Program: Calculating loyalty points, cashback, and managing your VIP tier
  • Platform communications: Sending important account notifications, promotions (if you have opted in), and policy updates
  • Legal compliance: Meeting reporting obligations to the relevant authorities as required by law
Marketing Communications

You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing consent does not affect data processing carried out for essential purposes such as account security.

4 Data Sharing & Disclosure

Cilli88 does not sell users' personal data to any third party. However, data may be shared in the following limited circumstances:

  • Service providers: Payment gateways, cloud computing service providers and KYC service providers contracted to support platform operations — all bound by strict data protection agreements
  • Legal obligations: When required by law, court order or a competent government authority — including AML enforcement units
  • Rights protection: Where necessary to defend legal claims, protect the safety of other users, or prevent fraud
  • Business transfer: In the event of a company merger, acquisition or asset sale — users will be notified in advance

All third-party service providers that receive cilli88 user data are bound by confidentiality agreements and are only permitted to use that data for the specified service purposes.

5 Data Security

Cilli88 takes data security infrastructure seriously. The technical and organisational measures we implement include:

  • Data encryption in transit using TLS 1.3 (SSL 256-bit)
  • Data encryption at rest for all sensitive data
  • Strict role-based access controls — only authorised staff can access user data
  • 24/7 security monitoring system with real-time anomaly detection
  • Regular security audits by independent third parties
  • A clear incident response plan in the event of any data breach
Data Breach Notification

In the event of a data breach affecting your personal information, cilli88 will notify you within 72 hours of the breach being detected, in line with industry best practices.

6 Data Retention Period

Cilli88 retains users' personal data only for as long as necessary for the stated purposes or as required by law:

  • Active account data: Retained for as long as your account is active and for 7 years after account closure (financial record requirements)
  • Transaction records: Retained for 7 years for AML legal compliance and financial reporting
  • Security logs: Retained for 2 years for security investigation purposes
  • Support communication records: Retained for 3 years for reference and quality control
  • Cookie data: Duration varies by cookie type — please refer to Section 8 for more details

After the specified retention period, data will be securely deleted using methods that ensure it cannot be recovered.

7 Your Rights as a User

Under Malaysia's PDPA and the cilli88 privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 14 working days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request a correction. This can be done directly through your account settings or by contacting support.

Right to Erasure

You may request deletion of your personal data. Please note that certain data must be retained for a specified period due to legal obligations, even after a deletion request.

Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict or pause the processing of your data while an investigation or review is ongoing.

Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

How to Exercise Your Rights

To exercise any of the above rights, contact the cilli88 support team via live chat or email at [email protected]. We will verify your identity before processing any request to protect your account security.

8 Cookies & Tracking Technologies

Cilli88 uses cookies and similar technologies to enhance the user experience and analyse platform performance. The cookies we use fall into several categories:

  • Essential cookies: Required for core platform functions such as login authentication and session security — cannot be disabled
  • Performance cookies: Collecting anonymised information on how users interact with the platform to help us improve
  • Functional cookies: Remembering your preferences such as language and display settings
  • Analytics cookies: Helping us understand usage patterns to make better platform improvement decisions

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some platform features.

9 Identity Verification (KYC) & Anti-Money Laundering (AML)

As a responsible financial platform, cilli88 complies with the required KYC and AML standards. This means we are required to:

  • Verifying user identity before the first withdrawal
  • Monitoring transactions to detect suspicious patterns
  • Reporting certain transactions to the relevant authorities as required by law
  • Maintaining complete records of all financial transactions for the required retention period

Documents that may be requested during the KYC process include a valid identity card, a selfie with your identity document, and a recent bank statement for payment method verification. All documents are handled with full encryption and restricted access.

Legal Obligations

Data processing for KYC and AML purposes is based on legal obligations binding on cilli88. This means certain aspects of this data processing cannot be stopped solely at a user's request.

10 Children's Privacy

The cilli88 platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from children.

If we discover that personal data of a minor has been collected without our knowledge, it will be deleted immediately and the account will be closed. Parents or guardians concerned about a minor's use of the platform are encouraged to contact us promptly.

11 Amendments to This Privacy Policy

Cilli88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or new platform features.

When there are material changes, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to registered users via email or in-account notifications
  • In the event of material changes, seek renewed consent from users

The current version of this Privacy Policy is effective from 1 January 2026. Continued use of the platform after any amendments constitutes your acceptance of the updated policy.

12 Contact Us About Privacy

For any inquiries, concerns, or requests regarding your privacy and personal data, please contact the cilli88 team through the following channels:

Live Chat
Instant response · 24/7 · Malay, English, Mandarin
Privacy Email
[email protected] · Response within 3 business days for privacy inquiries
Identity Verification Required

To process requests related to your data rights (access, correction, deletion), we need to verify your identity first to ensure the security and privacy of your account.


Your Privacy Our Top Priority

By understanding the cilli88 privacy policy, you can play with greater confidence. Register today and enjoy a platform that truly respects your data and privacy.

18+ only. Play responsibly. Responsible Gaming

Bahasa Melayu