Privacy Policy

1. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is cili77, the operator of the online gaming platform available at cili77.co (referred to throughout this Privacy Policy as "cili77", "we", "us", or "our"). cili77 operates under an international gaming authority licence and is subject to the data protection requirements established by that regulatory framework.

If you have any questions about how cili77 handles your personal data, or wish to exercise any of your data subject rights described in this Privacy Policy, please contact the cili77 Data Protection point of contact via the support team at [email protected] or through the 24/7 live chat function available on the platform.

2. Personal Data We Collect

2.1 Registration Data

When you create a cili77 account, we collect the personal information you provide during the registration process, which includes: full legal name, date of birth, email address, Malaysian mobile telephone number, and, where required for KYC verification, residential address and government-issued identification documents.

2.2 Financial Data

To process deposits and withdrawals, cili77 collects payment method information, including e-wallet account references (Touch 'n Go eWallet, Boost), bank account details for FPX transactions (Maybank, CIMB, Public Bank), card details (Visa, Mastercard), and cryptocurrency wallet addresses for USDT and Bitcoin transactions. cili77 does not store full card numbers — payment card data is handled by our PCI-DSS compliant payment processing partners.

2.3 KYC & Verification Data

In accordance with our international gaming authority licence obligations and anti-money laundering requirements, cili77 may request copies of identity documents, proof of address, and proof of payment method ownership. This documentation is stored securely and used exclusively for account verification and compliance purposes.

2.4 Transactional Data

cili77 maintains records of all financial transactions on the platform, including deposits, withdrawals, bet placements, game results, bonus activity, and account balance movements. This data is retained for regulatory compliance and dispute resolution purposes.

2.5 Technical & Usage Data

When you access the cili77 platform, we automatically collect certain technical information, including: IP address, device type and operating system, browser type and version, session duration, pages visited, game sessions initiated, and click and interaction data. This information is used to operate and improve the platform, detect fraud, and ensure technical security.

2.6 Communications Data

When you contact cili77 support — whether via live chat, email, or any other channel — we retain records of those communications, including your messages and any information you provide, for quality assurance, training, and complaint resolution purposes.

3. How We Collect Your Data

cili77 collects personal data through the following means:

• Direct collection — data you provide when registering, verifying your account, making a deposit or withdrawal, contacting support, or updating your account settings;
• Automated collection — technical and usage data collected automatically when you access or use the platform, via cookies, session tracking, and server logs;
• Third-party sources — identity and address verification data may be supplemented by data from licensed identity verification service providers and fraud prevention databases, as permitted by our regulatory obligations.

4. How We Use Your Personal Data

cili77 uses the personal data it collects for the following purposes:

1. To create, manage, and maintain your cili77 account and provide access to all platform features;
2. To process deposits and withdrawals using your chosen payment methods;
3. To verify your identity and age in accordance with our gaming authority licence obligations and applicable anti-money laundering regulations;
4. To detect, prevent, and investigate fraudulent activity, money laundering, and other prohibited conduct;
5. To administer bonuses, promotions, and reward programmes in accordance with their applicable terms;
6. To provide 24/7 player support and to resolve complaints and disputes;
7. To send you transactional communications, including account confirmations, deposit and withdrawal notifications, and security alerts;
8. To send you promotional communications about cili77 offers and new features, where you have consented to receive such communications or where we have a legitimate interest in doing so;
9. To analyse platform usage and player behaviour for the purpose of improving the cili77 product and user experience;
10. To comply with legal obligations, regulatory requirements, and court orders;
11. To enforce our Terms & Conditions and protect cili77's legal rights and interests.

5. Legal Basis for Processing

cili77 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the cili77 platform and services you have registered to use, including account management, payment processing, and customer support;
• Legal obligation — processing required to comply with anti-money laundering laws, gaming authority licence requirements, age verification obligations, and any applicable regulatory directions;
• Legitimate interests — processing necessary for cili77's legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your privacy rights;
• Consent — processing for marketing communications, where you have provided specific, informed consent. You may withdraw your consent to marketing communications at any time by contacting cili77 support.

6. Data Sharing & Disclosure

cili77 does not sell, rent, or trade your personal data to third parties for commercial gain. We share personal data only in the following circumstances:

6.1 Service Providers

cili77 shares personal data with trusted third-party service providers who assist in operating the platform, including payment processors, identity verification providers, fraud detection services, game providers, and IT infrastructure providers. All such providers operate under data processing agreements that restrict their use of your data to the specific services they provide to cili77 and require them to maintain equivalent data protection standards.

6.2 Regulatory & Legal Disclosure

cili77 may disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units, or other government bodies where required by law, by court order, or by our regulatory obligations. Such disclosures are made only to the extent necessary to comply with the applicable legal or regulatory requirement.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cili77's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the email address associated with your account, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7. International Data Transfers

cili77 may transfer personal data to countries outside of Malaysia in connection with the operation of the platform — for example, where our licensing authority, payment processors, or technology infrastructure providers are located in other jurisdictions. Where such transfers occur, cili77 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses and data processing agreements that require recipients to apply equivalent data protection standards. cili77 will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing appropriate protective measures.

8. Data Retention

cili77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account registration data is retained for the duration of your active cili77 account, and for a minimum of 5 years following account closure, in accordance with our gaming authority licence requirements and applicable anti-money laundering regulations;
• Financial transaction records are retained for a minimum of 5 years from the date of the transaction;
• KYC and identity verification documents are retained for a minimum of 5 years from account closure or the date of verification, whichever is later;
• Communications records are retained for a minimum of 2 years from the date of the communication;
• Technical and usage data is retained for a maximum of 13 months from collection, unless required for longer by applicable law.

Once the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with cili77's data lifecycle management procedures.

9. Cookies & Tracking Technologies

9.1 What We Use

cili77 uses cookies, local storage, and similar technologies to operate the platform. These technologies are used for the following purposes:

• Essential cookies — required for the platform to function, including maintaining your login session, remembering your currency preference, and enabling core security features such as CSRF protection;
• Analytical cookies — used by cili77 to understand how players use the platform, which features are most used, and where technical issues occur. This data is used exclusively for internal platform improvement;
• Fraud prevention — device fingerprinting and session tokens used to detect and prevent fraudulent account access and payment fraud.

9.2 What We Do Not Use

cili77 does not use third-party advertising or retargeting cookies. We do not share browsing behaviour data with advertising networks or social media platforms.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may affect your ability to access or use some features of the cili77 platform. For details on how to manage cookies in your specific browser, consult your browser's help documentation.

10. Your Data Rights

Subject to applicable data protection law and the limitations imposed by our regulatory obligations, cili77 Players have the following rights in relation to their personal data:

• Right of access — to request a copy of the personal data cili77 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restriction — to request that processing of your personal data be restricted in certain circumstances;
• Right to data portability — to receive a copy of personal data you have provided to us in a structured, machine-readable format;
• Right to object — to object to processing of your personal data based on legitimate interests, including marketing;
• Right to withdraw consent — to withdraw consent to any processing activity for which consent was the legal basis, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact cili77 support via live chat or by emailing [email protected]. We will respond to all valid data subject requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

11. Security Measures

cili77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cili77 platform;
• Encryption at rest for all stored personal and financial data;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal systems handling player data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated fraud and intrusion detection systems monitoring platform activity in real time;
• PCI-DSS compliant payment processing for all card transactions.

In the event of a personal data breach that poses a risk to your rights and freedoms, cili77 will notify the relevant regulatory authority within the timeframe required by our licence conditions, and will notify affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

12. Children's Privacy

The cili77 platform is strictly intended for adults aged 21 years and above. cili77 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is conducted at the time of registration as part of our compliance with gaming authority licence requirements. If cili77 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account closed in accordance with our responsible gaming obligations. If you have reason to believe that a minor has registered with cili77, please contact our support team immediately.

13. Changes to This Privacy Policy

cili77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where material changes are made to this Privacy Policy, cili77 will notify registered Players by email and by displaying a prominent notice on the platform upon login. The date of the most recent revision is displayed at the top of this page. Your continued use of the cili77 platform following notification of any material change constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how cili77 protects your personal information.

14. Contact & Complaints

If you have any questions, concerns, or complaints about how cili77 handles your personal data, please contact our support team in the first instance:

• Live chat: available 24/7 on the cili77 platform
• Email: [email protected] (plain text — not a clickable link)

cili77 will acknowledge all privacy complaints within 48 hours and aim to provide a substantive response within 14 business days. If you are not satisfied with cili77's handling of your complaint, you have the right to escalate the matter to the data protection supervisory authority in your jurisdiction or, where applicable, to the dispute resolution body designated by our international gaming authority licensing regulator.