cinta88 Privacy Policy

cinta88 (referred to in this Policy as "cinta88", "we", "us", or "our") is the operator of the online gaming and sports betting platform accessible at cinta88.club. cinta88 operates under international licensing and serves players primarily in Malaysia and the broader Southeast Asian region.

For the purposes of applicable data protection law, cinta88 is the data controller in respect of personal data collected through the Platform. This means cinta88 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions about how cinta88 handles your personal data, please contact our Data Protection team at the email address set out in Section 13 of this Policy.

cinta88 collects the following categories of personal data from players and Platform visitors:

Identity and Contact Data

• Full legal name as appearing on a valid government-issued identity document;
• Date of birth;
• Malaysian National Identity Card (MyKad) number or passport number;
• Residential address;
• Email address;
• Mobile telephone number.

Financial Data

• Bank account details associated with deposits and withdrawals (account name and account number only — cinta88 does not store full card numbers);
• E-wallet identifiers (Touch n Go, Boost, GrabPay) where used as a deposit or withdrawal method;
• Transaction history including deposit amounts, withdrawal requests, and MYR balances;
• Cryptocurrency wallet addresses where USDT TRC20 is used.

Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Login timestamps and session duration data;
• Pages viewed, games accessed, and betting activity on the Platform;
• Referral source and traffic channel data.

Verification and KYC Data

• Copies of identity documents submitted for Know Your Customer (KYC) verification;
• Proof of address documents;
• Selfie or facial verification images where required as part of the verification process.

Communications Data

• Records of communications between you and the cinta88 support team via live chat, email, or other channels;
• Responses to surveys, feedback forms, or promotional participation where you voluntarily provide information.

cinta88 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in a promotion;
• Automatically — through cookies, web beacons, log files, and similar tracking technologies when you access or interact with the cinta88 Platform;
• From third-party service providers — including payment processors, fraud detection providers, identity verification services, and game providers who share data with cinta88 in connection with Platform services;
• From publicly available sources — where permitted under applicable law, for the purposes of fraud prevention, AML compliance, or verification of information you have provided.

cinta88 uses the personal data it collects for the following purposes:

• Account management: to create, maintain, and administer your cinta88 Account;
• Identity verification and KYC compliance: to verify your identity, age, and eligibility to use the Platform in accordance with our regulatory obligations;
• Payment processing: to process deposits, withdrawals, and refunds in MYR and supported cryptocurrencies;
• Anti-Money Laundering (AML) and fraud prevention: to monitor transactions for suspicious activity, fulfil regulatory reporting obligations, and investigate potential fraud;
• Responsible gaming: to identify at-risk gaming behaviour, enforce deposit limits, and apply self-exclusion or account restrictions where requested or required;
• Customer support: to respond to your enquiries, resolve disputes, and manage complaints;
• Platform improvement and analytics: to understand how players use the Platform and to improve game offerings, performance, and user experience;
• Marketing communications: to send you promotional offers, bonus notifications, and relevant updates — where you have provided consent or where we have a legitimate interest and you have not opted out;
• Legal compliance: to comply with applicable laws, regulations, court orders, and requests from competent authorities.

cinta88 does not use your personal data for automated individual decision-making that produces significant legal or similarly significant effects without human oversight, except where required by law or where you have provided explicit consent.

cinta88 processes your personal data on the following legal bases:

• Performance of a contract — processing necessary to provide the cinta88 Platform services to you, including account management and payment processing;
• Legal obligation — processing required to comply with applicable AML regulations, KYC requirements, and applicable licensing conditions;
• Legitimate interests — processing for fraud prevention, platform security, analytics, and service improvement, where our interests are not overridden by your data protection rights;
• Consent — where we rely on your consent for marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cinta88 may share your personal data with the following categories of recipients where necessary:

• Payment service providers — including FPX operators, Touch n Go, Boost, GrabPay, card acquirers, and cryptocurrency payment processors — solely for the purpose of processing your transactions;
• Identity and KYC verification providers — third-party services that assist cinta88 in verifying player identity and age;
• Game content providers — including Evolution Gaming, SA Gaming, PG Soft, Pragmatic Play, and similar partners — who receive session data necessary to deliver and settle game outcomes;
• Fraud detection and AML compliance providers — who assist cinta88 in monitoring for suspicious activity;
• IT infrastructure and cloud service providers — who host or process data on cinta88's behalf under contractual obligations that include data protection requirements;
• Regulatory and law enforcement authorities — where cinta88 is legally required to disclose information in response to a lawful request, court order, or regulatory investigation.

Where cinta88 shares data with third-party processors, we require them to process the data solely in accordance with cinta88's instructions and to implement appropriate technical and organisational security measures.

cinta88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that allow the Platform to recognise your browser and remember certain information across sessions.

We use the following categories of cookies:

• Strictly necessary cookies: essential for the operation of the Platform — including session management, login persistence, and security functions. These cannot be disabled;
• Performance and analytics cookies: used to understand how players interact with the Platform, identify popular sections, and diagnose technical issues;
• Functionality cookies: used to remember your preferences such as language settings and display options;
• Marketing cookies: used to deliver relevant promotional content. These are only set where you have provided consent.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cinta88 Platform.

cinta88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.

As a general guide:

• Account data and KYC documents are retained for a minimum of five (5) years from the date of account closure, in compliance with applicable AML regulations;
• Transaction records are retained for a minimum of seven (7) years;
• Support communications are retained for three (3) years from the date of the last interaction;
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter.

After the applicable retention period, cinta88 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by cinta88:

• Right of access: to request a copy of the personal data cinta88 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cinta88's legal retention obligations;
• Right to restriction: to request that cinta88 restrict processing of your data in certain circumstances;
• Right to data portability: to receive a copy of data you have provided to cinta88 in a structured, machine-readable format, where technically feasible;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact cinta88 at the address set out in Section 13. cinta88 will respond to all valid requests within 30 days. We may need to verify your identity before processing your request.

Please note that certain rights may be limited where cinta88 is required to retain data for legal or regulatory compliance purposes, particularly in connection with AML obligations.

cinta88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cinta88 Platform;
• Encrypted storage of sensitive data including passwords, KYC documents, and financial identifiers;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for the detection, reporting, and management of personal data breaches.

While cinta88 takes data security seriously and invests in appropriate protections, no system is entirely immune to security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cinta88 will notify affected players and relevant authorities as required by applicable law.

Parents or guardians who believe that a minor has registered an Account or provided personal data to cinta88 should contact us immediately at the address in Section 13 so that the account can be reviewed and closed.

cinta88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or Platform features. The date of the most recent update is displayed at the top of this document.

Where changes are material, cinta88 will notify registered players by email or by a prominent notice on the Platform prior to the changes taking effect. Your continued use of the cinta88 Platform following any update constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how cinta88 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or cinta88's handling of your personal data, please contact the cinta88 Data Protection team: