Official Documents
Last Updated: 1 January 2026

Cili77 Privacy Policy – Data Protection for Malaysian Players

At cili77, your privacy is more than a legal obligation – it is a responsibility we take seriously. This Privacy Policy clearly explains what data we collect, how it is used, who it may be shared with, and your rights as the owner of that data.

256 SSL Encryption Bits
ISO 27001 Certified
0 Third-Party Data Sales
2026 Latest Version

Cili77's Privacy Commitment to Malaysian Players

Six core pillars that define cili77's approach to protecting the data and privacy of every member.

256-bit SSL Encryption at All Times

All information transmitted between your device and cili77's servers is protected by 256-bit SSL encryption – the same security standard used by major Malaysian banks such as Maybank and CIMB. This covers your login credentials, personal data, and financial transactions.

No Sale of Data to Third Parties

Cili77 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we only use it for the purposes stated in this policy.

Full Control Given to Members

Every cili77 member has the right to access, correct, delete, and restrict the processing of their data. You may submit a data request at any time through cili77's official support channels.

Secure & Limited Data Storage

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once the retention period expires, data is securely deleted or anonymised using approved procedures.

Data Protection Law Compliance

Cili77 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection requirements. We conduct regular compliance assessments and update our practices in line with the latest requirements.

Immediate Data Breach Notification

In the event of any security incident involving member data, cili77 is committed to notifying affected members in a timely manner, in accordance with legal requirements and our incident response procedures.

Have Questions About Your Personal Data at cili77?

Our support team is available via 24/7 live chat or email for any enquiries related to your privacy and data protection.

Contact Us
Important Note: By registering for or continuing to use the cili77 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to delete your account.
1

Introduction & Scope of Privacy Policy

Cili77 (accessible at cili77.click) is an online casino and Sports Betting platform serving players in Malaysia. This Privacy Policy explains how we collect, use, store, protect, and in certain circumstances disclose personal information provided to us by members and visitors of the platform.

This policy applies to all individuals who interact with cili77, including registered members, prospective members visiting our website, and anyone who contacts our support team. It covers all channels of interaction with cili77 — website, mobile interface, email, and live chat.

Cili77 acts as the data controller for personal information collected from Malaysian members. This means we are responsible for determining the purpose and manner in which your personal data is processed. Any third-party services we use to support platform operations act as data processors and are bound by strict data protection agreements.

2

Types of Personal Data Collected

Cili77 collects various types of personal information as you interact with our platform. Below is a summary of the data collected, organised by category:

Data Category Sample Information How It Is Collected
Identity Data Full name, MyKad / passport number, date of birth, facial photograph Registration & KYC
Contact Data Malaysian phone number, email address, mailing address Account registration
Financial Data Bank account number, account holder name, DuitNow transaction records, FPX, e-wallet Deposits & Withdrawals
Game Activity Data Betting records, games played, wins & losses, session duration Platform usage
Technical Data IP address, device type, operating system, web browser, cookie data Automatic upon access
Communications Data Live chat conversation records, support emails, complaint feedback Support interactions

Sensitive data such as identity card details and financial information is only collected when required for identity verification (KYC) and payment processing purposes. cili77 does not store full credit card information in our systems — payment processing is handled through PCI-DSS certified payment gateways.

Voluntary Collection Notice:

Some information you provide is voluntary, such as language preferences and additional profile details. Choosing not to provide this information will not affect your access to the core features of the cili77 platform.

3

Purpose of Data Collection & Processing

Cili77 uses members' personal data solely for the following legitimate and necessary purposes:

  • Account Management: Creating and maintaining your cili77 account, processing registrations, and verifying identity for KYC purposes.
  • Transaction Processing: Processing deposits via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawal of winnings to registered payment methods.
  • Service Delivery: Enabling you to access and play all games on the cili77 platform, including slots, Live Casino, roulette, and Sports Betting on badminton and football.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, money laundering, and any other unlawful activities.
  • Legal Compliance: To fulfil legal obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and other applicable regulations.
  • Service Communications: Sends account-related notifications, transaction confirmations, security updates, and alerts regarding changes to our terms.
  • Marketing (with consent): Sending promotional information, bonus offers, and cili77 campaigns to members who have consented to receive marketing communications.
  • Platform Improvement: Analysing aggregated usage patterns (without identifying individuals) to improve the user experience and develop new features.

Cili77 does not use members' personal data for any purpose beyond those stated above. Should we wish to use your data for a new purpose not covered by this policy, we will seek your consent beforehand.

4

Legal Basis for Data Processing

Cili77 processes members' personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles. These bases include:

  • Contractual Performance: Processing necessary to fulfil the agreement between you and cili77 — such as processing deposits and withdrawals, enabling access to games, and managing your account.
  • Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements, financial reporting, and AML compliance.
  • Legitimate Interest: Processing for fraud prevention, platform security, and service improvement purposes that do not unreasonably affect members' fundamental rights.
  • Consent: For optional marketing communications, cili77 only sends promotional materials to members who have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting support.
5

Data Sharing with Third Parties

Cili77 does not sell members' personal data to any third party. However, under certain limited circumstances, cili77 may share personal data with the following parties:

  • Payment Providers: Payment gateways that process DuitNow, FPX, e-wallet, and other Malaysian payment method transactions receive the transaction data necessary to handle deposits and withdrawals. All such providers are required to meet PCI-DSS security standards.
  • Game Providers: Game software providers such as Evolution Gaming, Pragmatic Play, and other slots providers may process minimal game session data required for game delivery. This data does not include full financial information.
  • Identity Verification Services: Third-party KYC service providers that assist in verifying members' identity documents for compliance purposes.
  • Legal Authorities: cili77 is required by Malaysian law to disclose data to competent authorities such as the police, courts, or regulatory bodies when directed by a valid court order or legal notice.
  • Cloud Services & Infrastructure: Technology service providers that host and maintain cili77's platform infrastructure, subject to strict data processing agreements.

All third parties granted access to cili77 member data are bound by confidentiality and data protection agreements that restrict use of that data strictly to agreed purposes. cili77 regularly audits the security practices of third-party vendors to ensure consistent standards are maintained.

cili77 Guarantee: Your personal data will not be shared with advertising companies, data brokers, or any party that would use it for marketing purposes without your explicit consent.
6

Cili77 Data Security Measures

Cili77 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, alteration, or unintended disclosure:

  • Encryption of Data in Transit: All data transmitted between your device and cili77's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures no third party can intercept or read your data in transit.
  • Encryption of Stored Data: Sensitive data stored in the cili77 database is encrypted using AES-256 encryption. Member passwords are never stored in plain text — they are processed through an irreversible hashing algorithm.
  • Internal Access Controls: Only cili77 employees who require access to specific data to carry out their duties are authorised to do so, based on the principle of least privilege access control. All internal access is logged and monitored.
  • 24/7 Security Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) continuously monitor cili77's platform traffic to detect any anomalies or suspicious activity.
  • Regular Security Audits: cili77 undergoes regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
  • Disaster Recovery Plan: Geographically distributed backup systems ensure member data is never lost, even in the event of hardware failure or a disaster.

While we take all reasonable precautions, no digital security system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and notify us immediately if you suspect any suspicious activity on your cili77 account.

7

Data Retention Period

Cili77 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

  • Active Account Data: Retained for as long as your cili77 account remains active and for 7 years following account closure, in compliance with Malaysian financial legal requirements.
  • Financial Transaction Records: Retained for 7 years following the transaction date, in accordance with Malaysia's financial reporting and AML compliance requirements.
  • Support Communication Records: Retained for 3 years from the date of last interaction for dispute resolution and service improvement purposes.
  • Technical Data (Logs): Server logs and technical data are retained for 12 months for security and technical troubleshooting purposes.
  • Marketing Data: Data used for marketing communications is retained until you withdraw consent or request deletion.

Once the retention period has lapsed and there is no legal requirement to continue storing the data, it will be securely deleted or fully anonymised using methods that ensure it can no longer be linked back to any specific individual.

8

Your Rights as a Data Subject

As a cili77 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. cili77 will provide this information within 30 days of receiving your request.

Right to Rectification

If any data we hold about you is inaccurate or out of date, you have the right to request prompt correction. Basic information can be updated directly in your account settings.

Right to Erasure

You may request the deletion of your personal data under certain circumstances — such as when the data is no longer needed or you withdraw your consent. This is subject to any legal record-keeping obligations.

Right to Restrict Processing

You may request that we restrict how we process your data under certain circumstances, such as when there is a dispute about the accuracy of that data.

Data Portability

You have the right to receive the personal data you provided to us in a machine-readable format and to transfer it to another data controller where applicable.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.

To submit a request relating to any of the above rights, please contact the cili77 support team via live chat or email at support@cili77.click, providing a detailed description of your request. cili77 will respond within 30 days and may require identity verification before processing certain requests for your security.

9

Cookies & Tracking Technologies

The cili77 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Types of cookies used:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions, processing transactions, and ensuring security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how visitors use the cili77 platform — pages visited, links clicked, and so on. This data is used in aggregated form to improve the platform.
  • Functional Cookies: Storing user preferences such as language settings, display preferences, and saved login information for your convenience.
  • Analytics Cookies: cili77 uses web analytics tools to understand overall platform usage patterns. This data is anonymised and is not used to identify individuals.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the cili77 platform, including the ability to log in and complete transactions. First-time visitors to the cili77 platform will be shown a cookie notice and given the option to accept or decline non-essential cookie categories.

10

Child Data Protection

The cili77 platform is strictly for individuals aged 18 and above. cili77 does not knowingly collect or process personal data from individuals under the age of 18.

Cili77 implements age verification measures during the registration process, including date of birth collection and identity verification, to prevent registration by underage individuals. Should cili77 discover that personal data of a minor has been inadvertently collected, that data will be deleted immediately and the associated account will be closed.

Parents & Guardians:

If you have reason to believe your underage child has registered a cili77 account, please contact us immediately at support@cili77.click. We will take prompt action to investigate and close the account, and delete all associated data.

11

Amendments to the Privacy Policy

Cili77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or technological developments. Any amendments will be published on this page with a new "Last Updated" date.

For material amendments — that is, changes that significantly affect how we use your personal data — cili77 will notify members via their registered email address or an in-platform notification no less than 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make an informed decision.

Continued use of the cili77 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account and request deletion of your data before the amendment takes effect.

Current Version: This Privacy Policy (Version 3.1) is effective from 1 January 2026 and supersedes all previous versions. Any enquiries regarding amendments may be directed to the cili77 support team.
12

Contact the cili77 Data Protection Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cili77, please reach us through the following channels:

  • Privacy Email: support@cili77.click (please include "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24 hours a day, 7 days a week on the cili77 platform
  • Response Time: We are committed to responding to privacy-related requests within 10 business days

If you are not satisfied with how cili77 has handled your personal data after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPD Commissioner) in accordance with the procedures set out by the Department of Personal Data Protection Malaysia.

Why the cili77 Privacy Policy Matters to Malaysian Players

Most people who sign up to online platforms never read the privacy policy in full – and that is understandable. These documents tend to be lengthy, written in dense legal language, and feel like just another page to click past before you can start playing. But there is a solid practical reason to understand at least the basics of how cili77 handles your data, especially when we are talking about a platform that involves real financial transactions with your own MYR.

In Malaysia, the Personal Data Protection Act 2010 (PDPA) gives users the right to know what data is collected, how it is used, and who it may be shared with. Unfortunately, not all digital platforms comply with this transparently. cili77 takes a different approach – we want every Malaysian member to have a clear understanding of their rights and how we fulfil that responsibility.

Financial Protection Starts with Data Protection

When you make a deposit via DuitNow or Touch 'n Go eWallet into your cili77 account, your transaction information is processed through multiple layers of security. cili77 does not store full bank account numbers or credit card details in our systems — payment processing is handled by a PCI-DSS certified payment gateway, the same standard used by Malaysia's major financial institutions. This means that even in the unlikely event of an unexpected security incident on cili77's systems, your sensitive financial information remains protected by the additional security layers at the payment gateway level.

The same applies to your identity documents. MyKad images or passports submitted during the KYC process are stored in isolated systems with encryption separate from your day-to-day game data. Only employees performing identity verification duties have access to these documents, and every access is logged for audit purposes.

Cili77 and Its Commitment to Malaysian Players

One point we want to make absolutely clear: cili77 does not sell members' personal data to any party for external advertising or marketing purposes. This sets us apart from many free digital platforms whose business models depend on using or selling user data. As a paid platform where members make deposits to play, cili77's business model does not rely on selling data – it relies on the long-term trust of our members.

Trust is only possible when you know your data is safe with us. That is why cili77 invests in ISO 27001 security certification, undergoes independent security audits, and ensures all third-party data handlers working with us uphold the same standards. For any privacy-related enquiries or concerns, the cili77 support team is available via 24-hour live chat. For information on how to play safely and responsibly, please visit the Responsible Gambling us. For a more detailed understanding of your rights as a member, please also refer to Terms & Conditions cili77.

FAQ – cili77 Privacy Policy

The most frequently asked questions about privacy and data protection on the cili77 platform.

Yes, your financial information is strictly protected at cili77. When you make a deposit via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, payment processing is handled by PCI-DSS certified payment gateways. cili77 does not store your full bank account information or credit/debit card details in our systems. All connections between the cili77 platform and payment gateways are encrypted using 256-bit SSL. This means your sensitive financial information is never held within cili77's systems in an unencrypted form.

Yes, you have the right to request deletion of your personal data from cili77's systems. However, this request is subject to certain conditions. Under Malaysian law, cili77 is required to retain financial and transaction records for 7 years for legal compliance purposes. This means deposit and withdrawal transaction records cannot be deleted within that period, even if you request account closure. Once the legally mandated retention period expires, all your data will be permanently deleted or fully anonymised. To submit a data deletion request, contact support@cili77.click with the subject line "Data Deletion Request".

No. cili77 does not sell, rent, or share your personal data with external advertisers or data brokers for third-party marketing purposes. Any marketing communications you receive from cili77 relate solely to promotions, bonuses, and offers from the cili77 platform itself — and these are only sent to members who have consented to receive them. You may unsubscribe from cili77 marketing communications at any time via the unsubscribe link in any email or through the notification settings in your account.

cili77 has a comprehensive incident response plan to address any security incidents. In the event of a data breach involving members' personal data, cili77 will: first, immediately limit the impact of the incident through technical containment measures; second, assess the scope and nature of the data potentially affected; third, notify affected members within the timeframe required under Malaysia's PDPA; fourth, report the incident to the relevant authorities where required by law; and fifth, implement remediation and preventive measures to ensure a similar incident does not recur. You will be provided with guidance on steps to take to protect yourself should your data be affected.

There are several easy ways to stop receiving marketing communications from cili77. The quickest is to click the "Unsubscribe" link found at the bottom of any promotional email you receive from cili77 – the change takes effect within 48 hours. You can also log in to your cili77 account, go to Account Settings, and turn off the "Receive Marketing Communications" option. A third option is to contact cili77 support via live chat or email at support@cili77.click and request to be unsubscribed from all marketing communications. Please note that unsubscribing from marketing emails will not stop you from receiving important transactional account emails such as deposit confirmations, withdrawal notifications, and security alerts.
256-bit SSL
ISO 27001
No Data Sales
PDPA Compliance
24×7 Support
Ready to Play Responsibly?

Register with cili77 – Your Data is Safe, Your Winnings are Secure

Over 320,000 Malaysian players trust cili77 — not just for the thrill of the games, but because their data is protected to the highest security standards. Register for free today and enjoy a welcome bonus of up to RM 1,888.

SSL
256-Bit Encryption
RM 10
Minimum Deposit
24/7
Support Always Available
0
Data Sales
Bahasa Melayu