Privacy Policy cinta88 – How We Protect Your Personal Data

1 Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by cinta88 ("we", "Platform") and applies to all users who access the website https://cinta88.win, the cinta88 mobile app, and all related services. This Policy describes our privacy practices in a comprehensive and transparent manner.

We understand that your personal information is highly valuable. In this digital age, many users are concerned about how companies handle their data — and that is why we take a different approach. At cinta88, we are committed to collecting only what is truly necessary, storing it securely, and never betraying the trust you place in us.

This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international standards. In the event of any conflict between the Bahasa Malaysia version and any other translation, the Bahasa Malaysia version shall take precedence.

2 Types of Personal Data We Collect

Cinta88 collects various categories of information to ensure the platform operates smoothly and meets regulatory requirements. Below is a detailed breakdown of the data we collect:

A. Data You Provide Directly

• Identity information: Full name, date of birth, IC or passport number, gender and nationality.
• Contact information: Email address, phone number and residential address.
• Financial information: Bank account details, e-wallet account numbers (such as Touch 'n Go, GrabPay) registered for transactions.
• Verification documents: Copies of your identity card, passport, utility bill, or other KYC documents requested for identity verification.

B. Automatically Collected Data

• Technical data: IP address, browser type and version, operating system, screen resolution and language settings.
• Usage data: Pages visited, session duration, buttons clicked and navigation paths on the platform.
• Device data: Unique device identifier, device model and network information.
• Cookie data : Website preferences, login status and session data stored via cookies and local storage.

C. Data from Third Parties

In certain situations, we may receive information from trusted third-party sources, including identity verification providers for KYC processes, payment service providers to confirm transaction status, and fraud prevention agencies to assess security risks to your account.

3 Data Collection and Usage Purpose

Every piece of data we collect has a clear and legitimate purpose. We do not collect data for its own sake. Below is a summary of how your data is used:

We will not use your data for any purposes beyond those stated above without first obtaining your fresh consent. If you do not wish to receive marketing communications, you may withdraw your consent at any time through your account settings.

4 Data Sharing and Disclosure to Third Parties

Cinta88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is our absolute policy and will not change.

However, there are certain situations where we need to share your data with specific parties to keep the platform operational and comply with legal requirements:

• Payment service providers: To securely process deposits and withdrawals. They only receive the data necessary to complete the transaction.
• Identity verification providers: To carry out KYC checks as required by regulatory authorities.
• Technical infrastructure providers: Cloud servers, email services and security systems that support our platform's operations.
• Authorities and law enforcement: When required by a court order or directive from a legitimate regulatory authority.
• Fraud prevention agencies: To protect the platform and other users from fraudulent activity and money laundering.

5 Data Security and Protection Measures

We continuously invest in security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your device and cinta88's servers.
• Static Data Encryption for all sensitive information stored in our databases.
• Multi-layered access control ensuring that only authorised personnel can access user data, and only to the extent required for their duties.
• 24/7 security monitoring using an automated threat detection system capable of identifying and responding to suspicious activity in real time.
• Regular security audits conducted by independent third parties to assess and verify the effectiveness of our protection systems.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• Regular data backups across multiple locations to ensure data recovery is possible in the event of a technical disruption.

While we take all reasonable steps to protect your data, it is important to understand that no digital security system can be guaranteed one hundred percent. We encourage you to also play your part by using a strong password and never sharing your login credentials with anyone.

6 Cookies, Analytics and Tracking Technologies

The cinta88 website uses cookies and similar technologies to enhance the user experience and understand how the platform is used. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how visitors use the website to help us improve our services.
• Functional Cookies: Saving your preferences such as language, region and display settings to provide a more personalised experience.
• Analytics Cookies: Allows us to understand aggregate usage patterns to help improve the platform.

You can manage or disable non-essential cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of our platform.

7 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data held by cinta88. We fully respect and uphold these rights:

To exercise any of the above rights, please contact our Data Protection team via live chat or support email. We will process your request within 30 business days.

8 Data Retention Period

Cinta88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. The following are our data retention guidelines:

• Active account data: Retained for as long as your account is active and for a period of 5 years after account closure, to meet financial audit and regulatory requirements.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's financial legislation.
• KYC documents: Retained for 5 years after account closure, or longer if required by the relevant authorities.
• Customer support communication logs: Retained for 2 years for reference and service quality purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered or accessed again.

9 Changes to This Privacy Policy

Cinta88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this policy.
• Sending email notifications to all registered members.
• Displaying a clear notice on the platform's home page for a minimum of 14 days.

Your continued use of the cinta88 platform after any policy changes take effect will be deemed as your acceptance of the updated policy version. We encourage you to review this page periodically to stay informed about how we protect your privacy.

10 Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our team is always ready to help.

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Response time: We are committed to responding to all privacy enquiries within 5 business days.