cilislot Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how cilislot ("we", "us", "our", "cilislot") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "Player", "User") who access and use the cilislot platform, including the website at cilislot.net, the online casino, live dealer tables, sportsbook, and all associated services.

By registering a cilislot account, logging in, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the cilislot platform immediately.

This Policy is supplementary to and should be read alongside the cilislot Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Data Controller

cilislot is the data controller in respect of personal data collected through the cilislot platform. As data controller, cilislot determines the purposes and means by which your personal data is processed. Queries relating to data control responsibilities may be directed to our Data Protection contact at [email protected].

cilislot operates under international online gaming licensing. The registered operational entity responsible for processing your data is identified in cilislot's licensing documentation, copies of which may be requested through our support channels.

3. Personal Data We Collect

cilislot collects personal data across several categories, depending on your interaction with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for 21+ age verification purposes);
• Email address and Malaysian mobile phone number;
• Residential address;
• Copies of identity documents submitted during KYC, including Malaysian National Registration Identity Card (MyKad), passport, or other government-issued identification;
• Selfie or live photograph submitted during biometric KYC verification, where applicable.

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Payment method details (Touch n Go eWallet account reference, Boost eWallet reference, FPX bank account last four digits, card last four digits) — note that full card numbers are never stored by cilislot;
• Bonus and promotional credit history;
• Account balance history and bet settlement records.

3.3 Gameplay & Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session durations;
• Sportsbook bet history, including event selections, stake amounts, and settlement outcomes;
• Responsible gaming tool settings and usage history (deposit limits, cooling-off periods, self-exclusion records).

3.4 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Session tokens and authentication logs;
• Cookie identifiers and analytics data (see Section 9).

3.5 Communications Data

• Content of customer support interactions via live chat or email;
• Survey responses and feedback submitted through the platform;
• Promotional communication preferences and opt-in/opt-out records.

4. How We Use Your Data

cilislot processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your cilislot account, processing logins, and enabling access to platform features;
• Identity and age verification: Conducting KYC to verify that you are aged 21 or above and to confirm your identity in accordance with anti-money laundering obligations;
• Transaction processing: Processing deposits, withdrawals, and bonus credits in MYR via supported payment methods including Touch n Go eWallet, Boost, FPX, and card payments;
• Platform delivery: Enabling access to casino games, live dealer tables, sportsbook markets, jackpot games, and Sic Bo titles;
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeover, money laundering, and other prohibited conduct;
• Regulatory compliance: Meeting obligations under applicable gaming licensing, anti-money laundering regulations, and financial reporting requirements;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and to administer responsible gaming tools including deposit limits and self-exclusion;
• Customer support: Responding to support queries, complaints, and account-related requests;
• Platform improvement: Analysing usage data (in aggregate or pseudonymised form) to improve the cilislot platform's performance, usability, and game selection;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

5. Legal Basis for Processing

cilislot processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract constituted by the cilislot Terms & Conditions — including account management, transaction processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations imposed by gaming licensing requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where these interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where you have expressly opted in. Consent may be withdrawn at any time through your account settings without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

cilislot does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

• Game studios and platform providers: Licensed game developers (such as Pragmatic Play, Evolution Gaming, and Play'n GO) receive session data necessary to deliver and settle games. Game providers operate under their own data protection frameworks and are contractually bound to process data only for the purpose of game delivery;
• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and card payment processors receive transaction data necessary to process deposits and withdrawals. No full card details are transmitted through or stored by cilislot;
• KYC and identity verification providers: Third-party identity verification services may receive copies of your identification documents during the KYC process. These providers are bound by contractual data processing agreements;
• Analytics and fraud detection services: Pseudonymised technical and behavioural data may be shared with analytics or fraud detection partners for platform security purposes;
• Regulatory and law enforcement authorities: cilislot will disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where required by applicable law or regulation;
• Professional advisors: Legal counsel, auditors, and insurers may access personal data under appropriate confidentiality obligations where strictly necessary.

7. International Data Transfers

cilislot operates as an international online gaming platform. Your personal data may be transferred to, stored in, and processed in countries outside Malaysia, including countries where cilislot's operational infrastructure, game providers, or data processors are located. These countries may have data protection laws that differ from those applicable in Malaysia.

Where personal data is transferred internationally, cilislot implements appropriate safeguards to protect the data, including contractual data processing agreements incorporating standard data protection clauses, and assesses that recipient organisations maintain adequate security standards. By using the cilislot platform, you consent to such transfers in accordance with this Policy.

8. Data Retention

cilislot retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in particular:

• Account data: Retained for the duration of your active cilislot account and for a minimum period of five (5) years following account closure, to meet regulatory and legal retention obligations;
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable gaming licence conditions or anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Support communications: Retained for a minimum of two (2) years from the date of the last communication;
• Marketing consent records: Retained for the duration of the marketing relationship and for a period thereafter sufficient to demonstrate consent compliance.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised. Where data is anonymised, it may be retained indefinitely for aggregate analytical purposes without restriction.

9. Cookies & Tracking Technologies

cilislot uses cookies and similar tracking technologies on the cilislot.net website. Cookies are small data files placed on your device by your browser when you visit the platform. cilislot uses the following categories of cookies:

• Strictly necessary cookies: Required for the operation of the cilislot platform, including session authentication, login state maintenance, and security features. These cookies cannot be disabled without impairing platform functionality;
• Performance and analytics cookies: Collect pseudonymised data about how Players interact with the cilislot platform — pages visited, session duration, navigation paths — to enable performance improvements. No personally identifiable information is transmitted to analytics providers;
• Functional cookies: Remember your platform preferences, such as language settings and responsible gaming tool configurations, to improve your experience;
• Marketing cookies: Used only where you have consented, to record your visit and allow cilislot and authorised partners to show relevant promotional content. Marketing cookies may set identifiers that persist across browser sessions.

You may manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies will affect your ability to log in and use the cilislot platform. For browsers commonly used in Malaysia — including Chrome on Android and Safari on iOS — cookie management settings are accessible through Settings → Privacy.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data that cilislot holds about you:

• Right of access: You may request a copy of the personal data cilislot holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Account profile data may also be corrected directly through your cilislot account settings;
• Right to erasure: You may request deletion of your personal data, subject to cilislot's legal obligations to retain certain data categories for regulatory compliance purposes;
• Right to restrict processing: You may request that processing of your personal data be restricted in defined circumstances, such as while a dispute concerning accuracy is pending;
• Right to data portability: Where technically feasible and legally applicable, you may request that personal data be provided to you in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take effect immediately;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] from your registered email address. cilislot will respond within thirty (30) calendar days. Identity verification may be required before processing certain requests.

11. Children's Privacy

The cilislot platform is strictly intended for adults aged 21 and above. cilislot does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the KYC process, and any account found to belong to a minor will be immediately closed with all deposits returned.

If you have reason to believe that a minor has registered a cilislot account or has submitted personal data to cilislot, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

12. Security Measures

cilislot implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the cilislot platform;
• Cryptographic hashing of all account passwords — passwords are never stored in plaintext form and are inaccessible even to cilislot internal staff;
• Two-factor authentication (2FA) availability for all player accounts;
• Real-time monitoring of login events for anomalies including unusual geographic location, new device access, and repeated authentication failures;
• Restricted internal access to personal data on a strict need-to-know basis, with access logging and audit trails;
• Regular security assessments of platform infrastructure and third-party integrations;
• Incident response procedures for data breaches, including notification obligations to affected Players and relevant authorities where required by law.

Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your cilislot account credentials and for notifying cilislot immediately of any suspected unauthorised access.

13. Changes to This Policy

cilislot reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Players via a notice on the cilislot website or by email to your registered address at least fourteen (14) days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how cilislot protects your personal data. Your continued use of the platform following notification of changes constitutes acceptance of the updated Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how cilislot has handled your personal data, please contact us:

• Email: [email protected]
• Subject line: Please include "Privacy" or "Data Request" in your subject line for faster routing
• Response time: cilislot will acknowledge your enquiry within 5 business days and provide a substantive response within 30 calendar days

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian residents may contact the Personal Data Protection Department (PDPD) under the Ministry of Digital for matters falling within the scope of Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy was last reviewed on 12 June 2026.