Privacy Policy cipi88 —
Your Personal Data Protection

Cipi88 collects your personal information in several situations — during account registration, during platform use, and through your interactions with our support team. All data collection is carried out transparently and only for legitimate purposes.

Below are the categories of information we collect and the purposes for which they are collected:

Every piece of information we collect has a clear and specific purpose. cipi88 does not use your data for any purpose unrelated to delivering platform services without obtaining your consent first.

• Verifying your identity and confirming eligibility to use the cipi88 platform
• Processing deposits, withdrawals, and other financial transactions securely and accurately
• Sending important account-related notifications such as transaction confirmations and security alerts
• Detecting and preventing any fraudulent activity, money laundering, or platform abuse
• Complying with legal and regulatory obligations including anti-money laundering (AML) requirements
• Improving the user experience based on usage patterns and member feedback
• Sending promotional information and exclusive offers — only where you have given consent
• Resolving any disputes or complaints submitted by members

Cipi88 does not sell or transfer your personal data to external parties for marketing purposes. However, in the course of operating the platform, there are limited situations where your data may be shared with trusted parties, namely:

• Payment Providers: Banks and e-wallet providers that process your financial transactions, limited to only the information required
• Game Providers: Third-party game software providers that use minimal data to ensure games function correctly
• Authorities: Government agencies or law enforcement bodies when required by applicable law
• Identity Verification Providers: Third-party KYC services that help verify member identity and age
• Professional Advisors: Lawyers, accountants, or auditors in cases requiring professional advice bound by confidentiality obligations

All third parties involved in data sharing are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes. cipi88 monitors each partner's compliance on a regular basis.

Cipi88 continuously invests in the latest security infrastructure to ensure your personal data is always protected. Our approach to data security is multi-layered and comprehensive, covering technical, operational, and physical aspects.

• 256-bit SSL encryption for all data transmitted between your device and cipi88 servers
• Encryption of sensitive data in databases using industry-grade encryption algorithms
• Intrusion detection system (IDS) that monitors network traffic in real time
• Role-based access control (RBAC) ensuring only authorized staff can access specific data
• Regular security audits by independent third parties to identify and address any vulnerabilities
• A tested incident response plan to ensure a swift response in the event of any data breach
• Secure, encrypted data backups to ensure service continuity

Cipi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you, save your preferences, and understand how you use the platform.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled
• Functional Cookies: Saving your preferences such as language, display settings, and browsing history for a smoother experience
• Analytics Cookies: Helping us understand usage patterns to improve the platform — data is collected anonymously and in aggregate
• Security Cookies: Used to detect suspicious activity, unauthorized login attempts, and protect your account

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the full functionality of the cipi88 platform, including the ability to log in to your account.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by cipi88. We respect and facilitate the exercise of each of these rights:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you at any time
• Right to Rectification: You may request correction of any inaccurate or incomplete data
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records
• Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time
• Right to Data Portability: You may request that we provide your data in a machine-readable format for transfer to another platform

To exercise any of the above rights, please contact the cipi88 support team via live chat, available 24/7 on the platform. We will process your request within 30 business days from the date a complete request is received.

Cipi88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. When data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account is active, plus any additional period required by law following account closure
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements
• KYC Documents: Retained for the period stipulated by the relevant authorities following account closure
• Security Logs: Retained for 12 months for fraud detection and security investigation purposes
• Support Communication Data: Retained for 3 years for reference and service improvement

After the specified retention period has lapsed, your data will be permanently deleted from cipi88's systems unless the law requires longer retention or there is an active dispute requiring the data as evidence.

Cipi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The date of the latest update is always shown at the top of this document.

For changes deemed significant, cipi88 will notify you via in-platform notifications or your registered email. By continuing to use the cipi88 platform after any update, you are considered to have read and accepted the revised policy.

If you do not agree with any changes to this privacy policy, you have the right to close your cipi88 account. For further enquiries regarding privacy or this policy, please refer to the FAQ us or contact the cipi88 support team via live chat, available 24/7 on the platform.