Privacy Policy citrabet77 –
Malaysian Player Data Protection

Citrabet77 — accessible via our official website at citrabet77.best — is an online sports betting and casino platform operating for players in Malaysia. We understand that privacy matters deeply to our players, and we take this responsibility very seriously.

This Privacy Policy is published to comply with applicable data protection legal requirements and to provide citrabet77 players with full transparency on how we handle their personal information. We believe you deserve to know exactly what happens to your data — not just in difficult legal language, but in plain, straightforward terms.

By using the citrabet77 platform in any capacity — whether registering a new account, making a deposit in Ringgit Malaysia (RM) via Touch 'n Go eWallet or DuitNow, playing at a live baccarat table, or placing bets on Malaysia Super League football matches — you agree that we may collect and use your information in accordance with this Privacy Policy.

Citrabet77 collects your personal data through several means — directly from you during registration and platform use, automatically via tracking technologies, and occasionally from legitimate third-party sources. Below are full details of the data categories we collect:

We only collect data that is genuinely necessary to provide citrabet77's services safely and effectively. We do not collect sensitive information that is irrelevant to the operation of our platform.

Citrabet77 uses the personal data it collects for specific, legitimate purposes. Below is a full list of how we use your information:

• Account management: To create and manage your citrabet77 account, process registrations, carry out identity verification (KYC), and maintain account security at all times.
• Financial transaction processing: Processing Ringgit Malaysia (RM) deposits via Touch 'n Go eWallet, DuitNow, FPX Maybank2u, CIMB Clicks, GrabPay, Boost, or ShopeePay, as well as processing your winnings withdrawals securely and promptly.
• Provision of gaming services: Gives you access to every section of the citrabet77 platform — from EPL and Malaysia Super League football betting, BWF badminton, Live Casino with real dealers, slots, baccarat, and more.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and any unauthorised attempts to access your citrabet77 account or those of other players.
• Responsible gambling: Monitoring gameplay patterns to identify early signs of problem gambling and reaching out to players who may need assistance or information about the responsible gaming tools available at citrabet77.
• Customer support: Enables our Bahasa Malaysia-speaking citrabet77 support team to help you resolve any account, transaction, or game-related issues efficiently and accurately.
• Platform improvements: Analysing usage patterns on an aggregate (not individual) basis to understand how players use citrabet77 and to improve the user experience over time.
• Service communications: Sending you important notifications about your account, changes to our terms, promotions you are eligible for, and relevant security information.
• Legal compliance: To fulfil legal obligations, regulatory requirements, and lawful directives from authorised bodies in Malaysia.

Every instance of personal data processing carried out by citrabet77 is grounded in one or more valid legal bases. We process your data on the following grounds:

• Contract performance: Processing necessary to deliver the citrabet77 services you have requested — such as managing your account, processing MYR deposits and withdrawals — is required to fulfil the agreement between you and citrabet77.
• Consent: For marketing communications and certain cookie use, we will ask for your explicit consent. You may withdraw this consent at any time from your account settings.
• Legitimate interest: For purposes such as fraud detection, platform security, and service improvement, citrabet77 has a legitimate interest that does not override your fundamental privacy rights.
• Legal obligation: Certain data processing is necessary to fulfil citrabet77's legal obligations, such as anti-money laundering (AML) requirements and financial reporting duties prescribed under Malaysian law.

Citrabet77 does not sell players' personal data. However, in the course of operating the platform, we may share data with certain categories of third parties under limited and controlled circumstances:

• Payment service providers: To process your MYR deposit and withdrawal transactions via Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, and ShopeePay, citrabet77 is required to share the necessary transaction information with these providers. They are bound by strict data confidentiality agreements with citrabet77.
• Game software providers: The citrabet77 casino and Sports Betting platform uses software from accredited providers such as Evolution Gaming, Pragmatic Play, and SA Gaming. These providers may receive the session data required to deliver their services, but do not receive personally identifiable information that could directly identify you.
• Identity verification services: For KYC verification and fraud prevention purposes, citrabet77 may engage accredited third-party services to verify player identities. This is a legal requirement that cannot be circumvented.
• Legal authority: citrabet77 will disclose player data to Malaysian government authorities or legitimate regulatory bodies when required by law, court order, or valid official directive. We do not disclose data beyond what is required by such directives.
• Business transfers: In the event of a merger, acquisition, or transfer of citrabet77's assets, player data may be transferred as part of the business assets. Players will be notified in advance should this occur.

All third parties that receive data from citrabet77 are bound by data protection obligations that are equivalent to or higher than the standards we apply ourselves. citrabet77 remains accountable for the protection of your data even when it is processed by third parties on our behalf.

Citrabet77 uses cookies and similar tracking technologies to enhance the user experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies (required): These cookies are essential for the citrabet77 platform to function properly. They manage your login session, remember your language preference, and ensure security features work as intended. Without them, you will not be able to use the platform fully. These cookies cannot be disabled.
• Performance & analytics cookies: citrabet77 uses data collected through these cookies to understand how players interact with our platform — which pages are visited most frequently, where players encounter difficulties, and how long the average session lasts. This helps us continually improve citrabet77 over time.
• Functional cookies: These cookies help citrabet77 remember your preferences and settings — such as your preferred chip size at the baccarat table, your usual betting limits, and your interface display preferences. This makes your playing experience more comfortable and personalised.
• Marketing cookies (optional): With your consent, citrabet77 may use these cookies to display promotions and offers relevant to your gaming interests. You can opt out of marketing cookies at any time through your browser settings or our cookie preference management page.

You can manage and delete cookies at any time through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the citrabet77 platform for you.

The security of citrabet77 players' data is our absolute priority. We implement multiple layers of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit: All communication between your browser or app and citrabet77's servers is protected by TLS (Transport Layer Security) with a 256-bit SSL certificate. This ensures that data in transit — including your login details and MYR transaction information — cannot be intercepted by unauthorised parties.
• Data encryption at rest: Sensitive data such as passwords (stored in irreversible bcrypt hash format), financial information, and identity verification documents are stored in encrypted format within the citrabet77 database.
• Multi-layered access controls: Access to citrabet77's internal systems is protected by multi-factor authentication (MFA), role-based access controls, and comprehensive audit logs that record every instance of access to sensitive data.
• Continuous security monitoring: citrabet77's systems are monitored around the clock to detect anomalies, intrusion attempts, or suspicious activity. Our cybersecurity team responds immediately to any threats identified.
• Regular security testing: citrabet77 conducts regular security audits and penetration testing carried out by independent security experts to identify and address any vulnerabilities before they can be exploited.
• Incident response plan: citrabet77 has a clear incident response procedure in the event of a data breach. Should an incident occur that affects players' data, we will notify affected players within the timeframe required by applicable law.

While we take every reasonable measure to protect your data, no security system is entirely impenetrable. You also play an important role in keeping your citrabet77 account secure — keep your password confidential, use a strong password, and contact us immediately if you suspect any suspicious activity.

Citrabet77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations:

• Active account data: Profile data, login information, and account preferences are retained for as long as your citrabet77 account remains active, and for a reasonable period after the account is closed.
• Financial transaction records: All deposit, withdrawal, and MYR transaction history records at citrabet77 are retained for the minimum period prescribed by Malaysia's financial laws and anti-money laundering (AML) compliance requirements — typically seven years from the date of the transaction.
• Game data: Betting history and gaming activity are retained for dispute resolution, responsible gaming verification, and regulatory compliance purposes for as long as required.
• Support communication records: Interaction records with the citrabet77 support team are retained for two years for quality control purposes and to assist in resolving any future disputes.
• Identity verification (KYC) data: Documents and information collected during the identity verification process are retained for the period required by applicable AML and KYC legal requirements.

When data is no longer required for any legitimate purpose, citrabet77 will securely delete or destroy it in accordance with established procedures. Deleted data cannot be recovered.

As a citrabet77 player in Malaysia, you have specific rights regarding your personal data, all of which we fully respect. Below are those rights and how to exercise them:

In the course of operating the citrabet77 platform, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily when we use services from internationally accredited gaming software providers or cloud infrastructure services with data centres in various locations.

Citrabet77 ensures that all cross-border data transfers are protected by adequate safeguards, including data processing agreements that require recipients to uphold data protection standards equivalent to those we apply in Malaysia. We do not transfer data to countries with insufficient data protection frameworks without first putting in place appropriate contractual or technical safeguards.

If you would like to know more about the safeguards used for cross-border data transfers, please contact the citrabet77 support team by email at support@citrabet77.best.

The citrabet77 platform is an adult service available only to individuals aged 18 and above. citrabet77 strictly does not knowingly collect, process, or store the personal data of anyone under the age of 18.

All citrabet77 account applicants must confirm they are 18 years of age or older at the time of registration. The identity verification (KYC) process we conduct is one of the measures we use to ensure only adults can access our platform.

If you believe a minor has registered a citrabet77 account or provided us with their personal data, please contact us immediately at support@citrabet77.best. We will take prompt action to close the account, delete all associated data, and block further access to the platform by that individual.

Citrabet77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legislative developments, new technologies we adopt, or changes to the services we offer. The date of the most recent update will always be displayed at the top of this page.

When we make significant changes to this Privacy Policy — particularly changes that affect how we use your data or your rights — citrabet77 will make reasonable efforts to notify you via a prominent notice on the platform or by email to your registered address. For minor updates or clarifications, we may update this page without a separate notification.

It is your responsibility to review this Privacy Policy page periodically. Your continued use of the citrabet77 platform after any amendments are published constitutes your implied acceptance of the updated policy.

If you have any questions, concerns, or requests regarding citrabet77's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@citrabet77.best — Mark your email subject as "Privacy Enquiry" to ensure it is routed to the right team. We will respond within 72 hours.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the citrabet77 platform. For straightforward privacy-related requests, this is the fastest way to get immediate assistance.
• Written request: For requests involving data protection rights such as access, correction, or deletion of data, submit a written request by email including your citrabet77 account number and a clear description of your request.

Citrabet77's Malay-speaking support team is ready to help you fully understand and exercise your privacy rights. We take every privacy-related enquiry seriously and will strive to provide thorough and satisfactory responses.