citawinPrivacy Policy

This page describes what we collect when you use citawin and how we keep that data protected. We take your privacy seriously because account security underpins everything we offer—from sports markets and live casino tables to esports tracking and slot games. When you register, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or engage with our platform on mobile, we collect specific information for account verification, payment processing, and regulatory compliance.

We do not sell your data to advertisers or marketing firms. We do not share your personal information beyond what is necessary for payment settlement, anti-fraud checks, and legal compliance. We encrypt all communications and store sensitive data on secure servers. If you have questions about how we handle your information—especially regarding account closure, data deletion, or payment history—our support team can clarify our specific practices.

The following sections explain what we collect, how we use it, who may access it, your rights, and how to contact us with privacy concerns.

What We Collect

When you create a citawin account, we collect your email address, chosen username, and a password you set. During identity verification (required before deposit), we request your legal name, national ID number, and date of birth. We do not ask for your ID document image at registration; verification happens via a form you complete in your account settings.

When you deposit, we record the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer details) and the amount. We do not store your banking credentials—your bank or e-wallet provider handles authentication. We log all bets, results, and balance changes so you can review your history anytime. We also record your login times, device type (Android or iOS), IP address, and any customer support messages you send us.

Account data

Email, username, password hash, legal name, ID number, date of birth, phone number (if provided).

Payment data

Payment method type, transaction amounts, settlement status, linked account identifiers (e-wallet or bank reference, never full account numbers).

Activity data

Bets placed, game results, balance history, login records, IP address, device identifiers, support messages.

Communication data

Messages you send via Help or Support, push notification preferences, email opt-ins.

How We Use Your Data

We use your data to operate citawin: creating your account, processing deposits and withdrawals, settling bets based on official results, and providing customer support. We use your ID number and name to verify your identity once before your first deposit, satisfying anti-money-laundering regulations. We analyze payment and betting patterns to detect fraud—if we notice unusual activity, we may temporarily lock your account for security, then contact you via your registered email.

We also use your data to send account notifications (login alerts, withdrawal confirmations, match results) and optional promotional messages if you consent. You can disable promotional notifications anytime in your account settings. We never use your data to profile you for targeted advertising outside citawin. We do not sell, rent, or share your personal information with third parties except where required by law or for payment processing.

Third-Party Processors and Data Location

We work with payment processors to handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment transfers. These providers see transaction data (amount, timestamp, reference) but not your full ID or password. We also use anti-fraud services that analyze payment patterns to block suspicious activity. Our servers may sit outside your jurisdiction—typically in Southeast Asia or internationally—so your data may be stored and processed outside Indonesia. By using citawin, you consent to this international data transfer.

We may be required by law to disclose your data to regulators, law enforcement, or tax authorities. We will never volunteer such disclosure and will only comply with valid legal orders. We retain your account data for at least seven years to satisfy regulatory requirements, even after you close your account, unless you request deletion within applicable legal timeframes.

Your Rights and Account Control

You have the right to access, correct, or request deletion of your personal data. Log into your citawin account to update your email or phone number anytime. To request a data export or deletion, contact our support team via the Help menu in your account. We will respond within fourteen days. Deletion of your account data may prevent you from recovering old transaction history, so we recommend exporting your data before requesting deletion.

You can also disable push notifications, unsubscribe from promotional emails, and close your account entirely. Account closure is permanent—your balance is forfeited, and you cannot recover it. If your account has an outstanding withdrawal request or disputed transaction, we may retain minimal data until the matter is resolved. We do not use your data for automated decision-making (such as automatically declining bets or blocking your account based solely on an algorithm) without human review.

Cookies and Tracking

Our website and mobile app use cookies—small files stored on your device—to remember your login session and preferences. Session cookies expire when you close your browser. Persistent cookies may remain for months to improve your experience. You can disable cookies in your browser settings, but doing so may limit citawin functionality (you may need to log in more frequently).

We do not use cookies for advertising or tracking you outside citawin. Analytics cookies help us understand which game sections are popular and where users encounter problems—we use this feedback to improve the platform. You can opt out of analytics by requesting it in your account settings, though core functionality cookies cannot be disabled without breaking login and payment flows.

Data Security and Encryption

We encrypt all data in transit using TLS (HTTPS) and at rest using AES-256. Your password is hashed with a strong salt, so even our staff cannot read it. Two-factor authentication adds an extra layer: each login request requires a code sent to your email or phone, preventing unauthorized access even if someone obtains your password. We conduct regular security audits and penetration testing to identify vulnerabilities.

If a data breach occurs despite our precautions, we will notify you within seventy-two hours and inform regulators as required by law. We maintain cyber insurance to cover potential damages. However, no system is perfectly secure—use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone claiming to represent citawin.

Contact and Policy Changes

For privacy questions or to request data access, deletion, or correction, contact us via the Help menu in your citawin account. We respond to data requests within fourteen days. You can also reach out with concerns about how we handle information collected during deposits via DANA, e-wallet, mobile banking, or local payment, or about Liga 1, Piala AFF tournament data if you've engaged with our sports markets.

We may update this policy to reflect new regulations, platform changes, or improved practices. We will notify you of material changes via email and in-app notification. Your continued use of citawin after a policy update means you accept the new terms. If you disagree with changes, you may request account closure and data deletion. This policy was last updated on the date shown at the bottom of this page—check periodically for revisions.

Related guides

Summary

We at citawin collect only what is necessary to operate your account, process payments, verify identity, and comply with law. We protect your data with encryption, secure servers, and careful access controls. We do not sell your information or use it for profiling outside citawin. You have rights to access, correct, and delete your data—exercise these anytime via our support team.

If you have privacy concerns specific to your account—such as how your Liga 1 betting history is stored, whether your online payment deposit records are encrypted, or how long we retain data from withdrawn accounts—our Help menu is available to answer those questions in detail. We are committed to transparency and respect for your privacy as a core principle of citawin.