Privacy Policy — ci888

ci888 ("we", "us", "our", or "the Platform") operates the online betting and gaming website accessible at https://ci888.cam. This Privacy Policy explains how ci888 collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "your", or "the Player") who access or use the Platform.

This policy applies to all personal data processed in connection with your use of the ci888 Platform, regardless of the device or network from which you access it. It covers data collected directly from you (e.g., during registration or when contacting support), data collected automatically through your use of the Platform, and data received from third parties such as payment processors and identity verification providers.

ci888 serves players primarily from Indonesia — including major cities such as Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Semarang, Makassar, Palembang, and Bali — on an offshore international basis. Indonesian players are encouraged to review applicable local data protection guidelines. ci888 processes personal data in accordance with internationally recognised data protection principles consistent with its international licensing framework.

This Privacy Policy should be read alongside the ci888 Terms & Conditions, which govern the overall contractual relationship between you and ci888. Where the Terms & Conditions reference privacy and data handling, those provisions are supplemented by and subject to this Privacy Policy.

• "Personal Data" means any information that relates to an identified or identifiable natural person — including name, email address, phone number, financial account details, device identifiers, and location data.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means ci888, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of ci888 under a contractual data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a stated purpose.
• "KYC" (Know Your Customer) means the identity verification process through which ci888 confirms a Player's identity, age, and payment ownership.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and to collect usage data.
• "Special Category Data" means personal data that is particularly sensitive — such as data revealing health information, biometric data, or criminal record data — and which is subject to heightened protection under this policy.

ci888 collects the following categories of personal data in connection with your use of the Platform:

ci888 collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, completing the KYC process, submitting a deposit or withdrawal request, contacting customer support via live chat or email, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access or interact with the Platform. This includes your IP address, device identifiers, browser characteristics, and session activity.
• Third-party sources: Identity verification data received from KYC service providers; fraud-screening signals from payment processors; geolocation data derived from your IP address by security infrastructure providers; and publicly available information where relevant to AML compliance checks.
• Payment processors: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider may share transaction confirmation data and account holder name details with ci888 for reconciliation and fraud prevention purposes.

ci888 processes your personal data only where a valid legal basis exists. The table below sets out each processing purpose, the categories of data involved, and the legal basis on which ci888 relies:

ci888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to satisfy applicable legal, regulatory, and licensing requirements. The following retention periods apply as a general guide:

• Account data (identity, contact, financial): Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, in line with standard AML record-keeping obligations under international gaming licensing frameworks.
• KYC and identity document data: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, to comply with regulatory record-keeping requirements.
• Transaction and betting history: Retained for a minimum of 5 years following each transaction, for financial audit and regulatory compliance purposes.
• Customer support communications: Retained for 3 years following the closure of the relevant support case, unless the communication is relevant to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Technical and usage logs: Typically retained for 12 months on a rolling basis, unless specific log entries are flagged for retention in connection with a security incident, fraud investigation, or regulatory inquiry.
• Marketing preference data: Retained for as long as you hold an active account, or until you withdraw consent, whichever occurs first. A record of consent withdrawal is retained indefinitely to demonstrate compliance.

When personal data is no longer required under the applicable retention period, ci888 will securely delete or anonymise it in a manner that ensures it cannot be reconstructed or linked back to you.

ci888 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where strictly necessary and for the purposes described in this policy:

• Payment service providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OCBC NISP, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Specialist third-party providers who assist ci888 in verifying the identity and age of Players receive the identity data and document images necessary to complete verification.
• Fraud prevention and AML screening services: ci888 uses third-party risk-screening tools that process limited personal data (such as name, IP address, and transaction patterns) to detect and prevent fraud and money laundering.
• IT infrastructure and cloud service providers: ci888 uses reputable cloud hosting and infrastructure providers to operate the Platform. These providers process data on ci888's behalf under strict data processing agreements.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited session and game-play data necessary to deliver their games on the Platform.
• Legal and regulatory authorities: ci888 will disclose personal data to government bodies, regulators, law enforcement agencies, or courts where required to do so by law, court order, or its international licensing obligations — including mandatory AML reporting obligations.
• Professional advisers: Lawyers, auditors, and accountants who provide professional services to ci888 may access personal data on a confidential, need-to-know basis where relevant to their engagement.

ci888 operates as an international platform, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia. These countries may have data protection laws that differ from those applicable in your home jurisdiction.

Where personal data is transferred internationally, ci888 implements appropriate safeguards to ensure that your data continues to receive an adequate level of protection. These safeguards include standard contractual clauses approved under internationally recognised data protection frameworks, binding corporate rules where applicable, and reliance on adequacy decisions where the receiving country has been assessed as providing an equivalent level of data protection.

By using the ci888 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia, including the jurisdiction in which ci888 holds its international gaming license. If you have questions about specific international transfer arrangements, please contact our support team using the details in Section 15.

ci888 uses cookies and similar tracking technologies to operate core Platform functionality, maintain session state, prevent fraud, and — where you have consented — to deliver personalised content and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in during a session and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Enable enhanced features such as remembering your language preference, display settings, and betting interface layout. Disabling these cookies may reduce your experience quality but will not prevent basic Platform use.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players navigate the Platform — including which pages are most visited and where users encounter errors. This data is used to improve Platform performance and user experience. Analytics cookies are only activated where you have consented.
• Marketing and re-targeting cookies: Used — only where you have explicitly consented — to deliver relevant promotional content about ci888 offers when you visit partner websites or platforms. ci888 does not use third-party advertising networks that share data with unrelated advertisers.

You may manage your cookie preferences at any time through your browser settings. Note that disabling all cookies may prevent certain features of the Platform from operating correctly. Clearing cookies will log you out of any active session.

As a user of the ci888 Platform, you hold the following rights with respect to the personal data we process about you. These rights may be subject to limitations or conditions under applicable law, and ci888 will respond to all valid requests within 30 days of receipt:

• Right of Access: You may request a copy of the personal data ci888 holds about you, along with information about how it is processed. This is sometimes called a "Subject Access Request" (SAR).
• Right to Rectification: If any personal data ci888 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain information directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that ci888 delete your personal data. This right does not apply where ci888 is required to retain data to comply with a legal obligation — for example, AML and KYC record-keeping requirements — or where data is necessary to establish, exercise, or defend legal claims.
• Right to Restriction of Processing: You may request that ci888 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or on contract performance, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object at any time to processing of your personal data carried out on the basis of legitimate interest. ci888 will cease such processing unless compelling legitimate grounds exist that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by updating your Account notification preferences or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact ci888 support as described in Section 15. ci888 may require you to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised parties.

The ci888 Platform is strictly intended for adults aged 21 and over. ci888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If ci888 becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under the minimum age, we will immediately suspend the associated account, void any balance, and securely delete the personal data in question.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to ci888, please contact our support team immediately via the contact details in Section 15. We will investigate and take appropriate action as a matter of priority.

ci888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and ci888's servers.
• Encryption at rest for sensitive stored data including financial account details and identity document files.
• Access controls — internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff who handle personal data are subject to confidentiality obligations and undergo data protection training.
• Two-factor authentication (2FA) available to Players for Account login, and enforced for all ci888 administrative access.
• Regular penetration testing and third-party security audits conducted on Platform infrastructure.
• Intrusion detection systems (IDS) that monitor Platform traffic in real time for anomalous activity.
• Incident response procedures — in the event of a confirmed personal data breach that is likely to result in risk to affected individuals, ci888 will notify relevant supervisory authorities within the timeframe required by applicable law and will communicate with affected Players without undue delay.

While ci888 takes reasonable and industry-standard precautions, no data transmission over the internet or electronic storage system is entirely immune to risk. Players are encouraged to use strong, unique passwords for their ci888 Account and to enable 2FA where available.

The ci888 Platform may contain references to or integrations with third-party services — such as game studios, payment processors, or sports data providers — whose own websites or interfaces operate under separate privacy policies. ci888 is not responsible for the privacy practices of any third-party service and encourages you to review the privacy policies of any external service you access in connection with your Platform use.

ci888 does not control, and is not responsible for, the content, security, or privacy practices of third-party websites that may be linked from or to the Platform. The presence of any reference to a third-party service does not constitute an endorsement by ci888 of that service's privacy or security standards.

ci888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our data processing practices. The "Last Updated" date at the top of this document reflects the date on which the most recent revision took effect.

Where an amendment materially affects your rights or the way in which ci888 processes your personal data, we will provide advance notice via email to your registered address and/or via a prominent notice on the Platform, with at least 14 days' notice before the change takes effect. Your continued use of the Platform after that date constitutes your acceptance of the revised policy. If you do not accept the changes, you must cease using the Platform and may request account closure by contacting support.

We encourage you to review this Privacy Policy periodically to remain informed about how ci888 manages your personal data. Archived versions of previous policy editions are available on request from the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ci888's handling of your personal data, please contact our dedicated Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed directly to the data protection team.
• Live Chat: Available 24/7 via the Platform homepage. For privacy-related enquiries, please state "Data Privacy" at the start of your chat session.
• Response Time: ci888 targets acknowledgement of all privacy-related enquiries within 2 business days and a substantive response within 30 days of receiving complete information.
• Support Hours: Available around the clock across WIB (Western Indonesia Time, UTC+7), WITA (Central Indonesia Time, UTC+8), and WIT (Eastern Indonesia Time, UTC+9).

Complaints: If you are not satisfied with ci888's response to a privacy concern, you have the right to escalate your complaint to the relevant supervisory or data protection authority under ci888's international licensing jurisdiction. ci888 will provide details of the appropriate authority upon request.