Ciri2 Privacy Policy – Personal Data Protection for Malaysian Users

When you register and use the ciri2 platform, we may collect various types of personal information depending on how you interact with our platform. The information collected includes:

We only collect information that is strictly necessary to operate the ciri2 platform safely and efficiently. We do not collect sensitive personal data unless required for identity verification purposes as mandated under Malaysian law.

Some of this information is provided directly by you during the registration process, while the rest is collected automatically as you use the ciri2 platform.

Ciri2 uses the personal data collected for the following purposes:

• Account Management: To process your registration, verify your identity, and manage your ciri2 account on an ongoing basis.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), and to securely process fund withdrawals to your account.
• Security & Fraud Prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or platform abuse that could harm other members.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical support in Bahasa Malaysia.
• Marketing Communications: To send you information about promotions, the latest bonuses, and exclusive ciri2 offers — only where you have given your consent to receive such communications.
• Platform Improvements: To analyse usage patterns and enhance the gaming experience on the ciri2 platform, including slots, live casino, and Sports Betting such as the Malaysia Super League and EPL.
• Legal Compliance: To comply with any applicable legal requirements, regulations, or directives from the relevant authorities in Malaysia.

Ciri2 will not use your personal data for any purpose beyond what is stated in this Privacy Policy without first obtaining your consent.

Ciri2 takes our responsibility to protect your privacy seriously. We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.

However, in certain situations, ciri2 may need to share your data with the following parties:

• Payment Service Providers: Required financial information will be shared with authorised payment processors to enable secure transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Game Providers: Technical data and certain game records may be shared with third-party game providers that operate slots, live casino, or other games on the ciri2 platform, strictly for technical purposes.
• Legal Authorities: ciri2 will fully comply with any lawful requests from Malaysian authorities, including law enforcement agencies, where required by law.
• Auditors & Professional Advisors: These parties may only access specific data in a strictly professional capacity and are bound by rigorous confidentiality obligations.

All third parties who receive your data from ciri2 are required to process that data in accordance with data protection standards equivalent to or higher than our own.

Ciri2 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, disclosure, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and ciri2's servers is encrypted using 256-bit SSL protocol, the highest industry-standard encryption available.
• Internal Access Controls: Access to members' personal data within the ciri2 organisation is restricted to staff who require it to perform their duties only. All personnel are bound by strict confidentiality agreements.
• Continuous Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
• Two-Factor Authentication: ciri2 offers two-factor authentication (2FA) to add an extra layer of security to your account.
• Secure Data Backup: Your data is securely and regularly backed up to ensure swift data recovery in the event of any technical disruption.

While we make every effort to protect your data, no security system can guarantee absolute 100% protection. We therefore encourage you to take your own precautions as well — including using a strong, unique password and never sharing your login credentials with anyone.

The ciri2 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website. We use several types of cookies:

• Essential Cookies: These cookies are essential for the basic functionality of the ciri2 platform, such as login authentication and session security. Without them, the platform cannot function properly.
• Preference Cookies: These cookies store your settings and preferences — such as your display language and favourite game selections — so you don't have to reconfigure them every time you visit.
• Analytics Cookies: These cookies help us understand how members use the ciri2 platform — which pages are most visited, how long users spend on the platform, and more. This information is used to continuously improve the overall user experience.
• Marketing Cookies: These cookies are used to display more relevant promotions and advertisements to you based on your interests and activity on the ciri2 platform.

You can manage or block cookies through your web browser settings. Please note, however, that blocking certain cookies may affect the functionality of the ciri2 platform and your gaming experience.

As a ciri2 member in Malaysia, you have the following rights with respect to your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any personal information we hold about you is inaccurate or outdated, you have the right to request a correction. You may also update your profile information directly through your ciri2 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems. Such requests are subject to legal record-keeping obligations, which may prevent the immediate removal of certain data.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transfer it to another data controller.

To exercise any of the above rights, please contact the ciri2 support team via email at [email protected]. We will endeavour to process your request within 30 working days.

Ciri2 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian laws and regulations.

Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active on the ciri2 platform, plus any additional period required for legal compliance.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysian tax and financial regulatory requirements.
• Support Communication Logs: Retained for 2 years from the date of your last interaction, for reference and service improvement purposes.
• Marketing Data: Retained until you withdraw your consent or request deletion.

Once the specified retention period has elapsed, your data will be securely deleted or anonymised from our systems in accordance with ciri2's established data deletion procedures.

Ciri2 reserves the right to update or modify this Privacy Policy at any time. Any changes made will be posted on this page with a revised "Last Updated" date for your reference.

If the changes made are material and significant, we will make reasonable efforts to notify you more prominently — via email or an in-platform notification on ciri2. That said, it remains your responsibility to review this Privacy Policy page periodically to stay informed of our latest privacy practices.

Your continued use of the ciri2 platform following the posting of any changes to this Privacy Policy will be considered your acceptance of those changes. If you do not agree with the changes made, you have the right to discontinue use of the platform and close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ciri2 handles your personal data, please do not hesitate to contact us:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the ciri2 platform

The ciri2 data protection team operates 24 hours a day, 7 days a week and are ready to assist you in Bahasa Malaysia. We are committed to responding to all privacy-related enquiries within a reasonable timeframe and ensuring your privacy rights are always respected and fully protected.

Your trust is ciri2's most valuable asset. We are committed to acting with complete integrity and transparency in all matters relating to your personal data as a valued member of the ciri2 platform in Malaysia.