🔞 For players aged 21 and above only. Cinta88 is committed to protecting your privacy and personal data.

Data Protection & Privacy

Privacy Policy

Cinta88 takes the privacy and security of your personal data seriously. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used, and the rights you hold as a data subject under applicable privacy legislation.

Last Updated: 1 January 2026

Your Data, Our Responsibility

A plain-English overview of the key privacy commitments Cinta88 makes to every registered user before you read the full policy below.

Minimal Data Collection

Cinta88 collects only the personal data that is strictly necessary to operate your account, process transactions in MYR, and comply with our legal obligations. We do not collect data for its own sake.

256-bit SSL Encryption

All data transmitted between your device and our servers is encrypted using 256-bit SSL technology. Your financial details, account credentials, and personal information are protected in transit at all times.

No Third-Party Selling

Cinta88 does not sell, rent, or commercially trade your personal data with third parties. Data is shared only where required by law or with service providers under strict contractual confidentiality obligations.

Your Rights Are Respected

You have the right to access, correct, restrict, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframes required by applicable law.

Transparent Cookie Use

We use cookies to maintain your session, remember your preferences, and analyse aggregate platform usage. You may manage cookie preferences through your browser settings. Essential cookies cannot be disabled without affecting platform functionality.

PDPA-Aligned Practices

Cinta88's data handling practices are designed to align with the principles of Malaysia's Personal Data Protection Act (PDPA) 2010 and applicable international data protection standards governing online platforms.

Section 1

Introduction

This Privacy Policy (hereinafter referred to as "the Policy") is published by Cinta88 (hereinafter referred to as "Cinta88", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data pertaining to all registered users (hereinafter referred to as "you", "your", or "the User") of the Cinta88 online gaming platform accessible at cinta88.cam and any associated mobile-optimised interface (hereinafter collectively referred to as "the Platform").

Cinta88 operates as an English-language online casino and sports betting platform serving Malaysian users and users in other permitted jurisdictions. In the course of providing our services — which include live casino games, video slots, sports betting on markets such as EPL, Liga Super Malaysia, and UFC events, and related payment processing in Malaysian Ringgit (MYR) — it is necessary for us to collect and process certain categories of personal data about you.

This Policy has been drafted with reference to the principles of Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection standards. By registering an account on the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read together with the Cinta88 Terms & Conditions, which govern your overall use of the Platform. Both documents form part of the agreement between you and Cinta88.

Section 2

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

"Personal Data"
Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers such as IP addresses.
"Processing"
Any operation or set of operations performed on personal data, whether by automated or manual means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
"Data Controller"
Cinta88, which determines the purposes and means of processing personal data collected through the Platform.
"Data Processor"
Any third-party service provider that processes personal data on behalf of Cinta88 pursuant to a written data processing agreement.
"Consent"
A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose, as indicated by a clear affirmative action by the data subject.
"KYC"
Know Your Customer — the identity verification process required by Cinta88 under applicable anti-money laundering and responsible gambling obligations, involving the collection and verification of identity and address documentation.
"PDPA"
Malaysia's Personal Data Protection Act 2010, which establishes obligations for the processing of personal data of individuals in the context of commercial transactions.
Section 3

Data We Collect

Cinta88 collects personal data across several categories, each of which serves a specific and documented operational or legal purpose. The categories of personal data we process are as follows:

3.1 Identity & Contact Data

Full legal name, date of birth, nationality, residential address (including city, state, and postcode), email address, and contact telephone number. This data is collected at account registration and updated through KYC verification.

3.2 Identity Verification Documents

Copies of government-issued photo identification (Malaysian MyKad, passport, or equivalent), proof of residential address (utility bills, bank statements), and where applicable, selfie photographs submitted for biometric verification purposes during the KYC process.

3.3 Financial Data

Payment method details including bank account information (for FPX and DuitNow transfers), e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay account references), cryptocurrency wallet addresses, transaction histories, deposit and withdrawal records, and account balance history.

3.4 Gaming & Betting Activity Data

Records of all wagers placed, game sessions accessed, sports betting markets utilised, bonus offers claimed, wagering requirement progress, and any responsible gambling tool settings applied to your account (such as deposit limits and self-exclusion status).

3.5 Technical & Usage Data

IP address, device type and model, operating system version, browser type and version, screen resolution, session duration, pages visited, features accessed, time stamps of all Platform interactions, and error logs generated during your use of the Platform.

3.6 Communications Data

Records of all communications between you and Cinta88, including live chat transcripts, email correspondence, WhatsApp message logs where applicable, support ticket content, and any feedback or survey responses submitted by you.

Special Category Data: Cinta88 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, health data, or biometric data for identification purposes, except where facial verification is specifically required during KYC processes under applicable anti-money laundering obligations.

Section 4

How Data Is Collected

Cinta88 collects personal data through three primary channels:

4.1 Directly from You

The majority of personal data we hold is provided directly by you — at account registration, during the KYC verification process, when making deposits or requesting withdrawals, when contacting customer support, or when opting in to promotional offers. You are not obligated to provide data that we have not specified as mandatory; however, withholding mandatory data fields may prevent account creation or limit your ability to use certain Platform features.

4.2 Automatically through Platform Use

Technical and usage data is collected automatically as you navigate and interact with the Platform, using cookies, server-side session logging, and standard web analytics mechanisms. This data collection is inherent to the operation of any web-based platform and cannot be disabled without materially affecting your access to the service.

4.3 From Third-Party Sources

In certain circumstances, Cinta88 may receive personal data about you from authorised third-party sources, including:

  • Payment processors and financial institutions for transaction verification and fraud prevention purposes;
  • Identity verification service providers engaged for KYC and anti-money laundering compliance;
  • Credit reference and fraud detection agencies for account security assessments;
  • Regulatory bodies or law enforcement agencies where disclosure is mandated by applicable law.
Section 6

How We Use Your Data

Cinta88 uses the personal data we collect for the following documented purposes:

  • Account Administration: Creating, maintaining, and managing your registered account, including processing login sessions, tracking account activity, and enforcing account security measures.
  • Identity Verification (KYC): Verifying your identity and age (21+) in compliance with applicable anti-money laundering legislation and responsible gambling obligations prior to processing withdrawal requests.
  • Payment Processing: Facilitating deposits and withdrawals in MYR via local payment methods including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, and processing transactions accurately and securely.
  • Game Delivery & Sports Betting: Providing access to the full range of Platform services including live casino games, video slots, and sports betting markets covering EPL, Liga Super Malaysia, UFC, and other events.
  • Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
  • Responsible Gambling Compliance: Monitoring account activity to identify potential problem gambling indicators, enforcing self-exclusion and deposit limit settings, and ensuring compliance with the Platform's responsible gambling obligations.
  • Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of communications for quality assurance purposes.
  • Legal & Regulatory Compliance: Fulfilling reporting obligations to relevant financial intelligence units, regulatory bodies, and law enforcement authorities as required by applicable Malaysian and international law.
  • Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit prior consent, and always with an accessible opt-out mechanism.
  • Platform Improvement: Analysing aggregated usage data to improve platform performance, identify technical issues, enhance user experience, and develop new features.
Section 7

Data Sharing & Disclosure

Cinta88 does not sell, rent, or commercially trade your personal data to any third party. Personal data is disclosed only in the following strictly limited circumstances:

7.1 Service Providers

Cinta88 engages carefully selected third-party service providers to support Platform operations, including payment processors (for MYR transaction routing via FPX, DuitNow, and e-wallet channels), identity verification providers (for KYC processing), game studio providers (for the delivery of casino and slots content), IT infrastructure providers (for hosting and security), and customer support platforms. All service providers are bound by written data processing agreements that restrict their use of your data strictly to the services they provide on our behalf.

7.2 Legal & Regulatory Disclosure

Cinta88 may disclose personal data where required or permitted to do so by applicable law, including in response to lawful requests from Malaysian financial intelligence authorities, law enforcement agencies, courts of competent jurisdiction, or regulatory bodies. Such disclosures are made only to the extent required by the applicable legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Cinta88's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations. You will be notified of any such transfer via the email address on your registered account prior to your data being transferred and becoming subject to a different privacy policy.

Our Commitment: Your personal data is never shared with third-party advertisers, data brokers, or commercial marketing networks. We do not monetise your personal data in any form.

Section 8

Data Retention

Cinta88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidance:

Data Category Retention Period Basis
Account registration data Duration of account + 7 years post-closure Legal obligation (AML)
KYC identity documents Duration of account + 7 years post-closure Legal obligation (AML/PDPA)
Financial transaction records 7 years from transaction date Legal obligation (tax/AML)
Gaming & betting activity logs 5 years from activity date Contractual / legal obligation
Customer support communications 3 years from last interaction Legitimate interests
Technical & usage logs 13 months on a rolling basis Legitimate interests
Marketing consent records Until consent withdrawn + 3 years Legal obligation (consent record)

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing systems and scheduled for secure deletion at the earliest practicable opportunity.

Section 9

Data Security

Cinta88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
  • AES-256 encryption for personal data and financial records stored in our database systems;
  • Two-factor authentication (2FA) available on all registered accounts;
  • Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis;
  • Regular penetration testing and security vulnerability assessments conducted by independent third-party specialists;
  • 24/7 automated intrusion detection and anomaly monitoring on all Platform systems;
  • Pseudonymisation and anonymisation applied to data used for analytics and reporting purposes.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials, including your password and any two-factor authentication codes, and for notifying Cinta88 immediately in the event of any suspected unauthorised account access.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Cinta88 will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

Section 10

Cookies & Tracking Technologies

The Cinta88 Platform uses cookies and similar tracking technologies to deliver core functionality, improve your experience, and collect aggregate usage analytics. The following categories of cookies are used:

Cookie Type Purpose Can Be Disabled?
Essential / Strictly Necessary Maintain your login session, authenticate your account, store security tokens, and enable core Platform functionality. No — disabling these cookies will prevent Platform access.
Functional / Preference Remember your language preference, display settings, and personalisation choices between sessions. Yes — via browser settings. Disabling may reduce personalisation.
Analytics / Performance Collect anonymised, aggregated data about how users navigate the Platform to inform performance improvements and identify technical issues. Yes — via browser settings or cookie preference controls.
Security / Fraud Detection Detect and prevent fraudulent sessions, bot activity, multi-accounting, and other security threats to the Platform. No — these cookies are required for account and platform security.

You may manage and delete cookies through your web browser settings. Instructions for cookie management vary by browser and are typically found under Privacy, Security, or Settings menus. Please note that disabling non-essential cookies will not affect the price or availability of Cinta88 services.

Section 11

Your Rights as a Data Subject

Subject to applicable law, you hold the following rights with respect to the personal data that Cinta88 holds about you. Requests to exercise any of these rights may be submitted to our support team and will be processed within the timeframes required by applicable privacy legislation.

Access
Right of Access

You have the right to request confirmation of whether Cinta88 holds personal data about you, and to receive a copy of that data together with information about how it is processed.

Rectification
Right to Rectification

You have the right to request that inaccurate or incomplete personal data held about you be corrected without undue delay. You may update certain account details directly through your account settings panel.

Erasure
Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML retention requirements).

Restriction
Right to Restrict Processing

You have the right to request that Cinta88 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or a legitimate interest objection is being assessed.

Portability
Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.

Objection
Right to Object

You have the right to object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications at any time with immediate effect by contacting our support team or using the opt-out mechanism in any marketing email.

To exercise any of these rights, please contact our support team at [email protected] or via live chat. We will respond within 30 days of receipt of a verified request. We may need to verify your identity before processing your request.

Section 12

Minors & Age Verification

The Cinta88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. Account registration requires confirmation of age eligibility, and the KYC process verifies the age of all users prior to withdrawal processing.

If Cinta88 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data as promptly as technically feasible, and report the matter to relevant authorities where required by applicable child protection legislation.

If you are a parent or guardian and believe that your child has registered an account on the Platform, please contact us immediately at [email protected] and we will take immediate action.

Section 13

International Data Transfers

In the course of providing Platform services, some personal data may be transferred to and processed in jurisdictions outside Malaysia, in particular where third-party service providers (such as cloud hosting providers, game studios, or identity verification providers) operate infrastructure in other countries.

Where such transfers occur, Cinta88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Malaysian law. These safeguards may include standard contractual data protection clauses, transfers to jurisdictions recognised as providing adequate data protection, or other approved transfer mechanisms as applicable.

You may request information about the specific safeguards applicable to international transfers of your personal data by contacting our data protection team at [email protected].

Section 14

Policy Amendments

Cinta88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our data processing practices. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where material changes are made to this Policy — that is, changes that materially affect your rights or the way in which we process your data — Cinta88 will provide advance notice to registered users via the email address on their account and/or by posting a prominent notification on the Platform for a period of not less than fourteen (14) days prior to the changes taking effect.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree to the revised terms, you should cease using the Platform and contact our support team to close your account.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which Cinta88 processes your personal data, please contact our data protection team through any of the following channels. We are committed to responding promptly and addressing your concerns in good faith.

Email — Data & Privacy
[email protected]

Subject line: "Privacy Policy Request"

Live Chat
Available 24 hours, 7 days a week

Average first response under 5 minutes

For data subject access requests, erasure requests, and other formal exercises of your data subject rights, please include your full registered name and account email address in your communication to allow us to verify your identity and locate your records efficiently.

Know Your Rights, Play with Confidence

Understanding how your data is protected is part of playing responsibly. Explore our other policy pages or return to the homepage to get started on the Cinta88 platform.

🔞 21+ only. Gambling can be addictive. Please play responsibly.