Reference

What cili888 Does With Your Personal Information

This page tells you exactly what personal data we collect when you open an account, make a deposit via Touch 'n Go eWallet, Boost, or GrabPay, and use our services — and how we keep that data safe.

Account data collected at sign-upPayment data via Touch 'n Go eWallet, Boost, GrabPayCookie and device activityYour right to access or delete dataHow to contact us about privacy
cili888 What cili888 Does With Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to request a copy of your data, ask us to correct something, or have your account information removed, you can reach our support team through any of the channels below. We aim to acknowledge your request within one business day and provide a full response in line with the process described in this policy.

Live Chat Start a live chat session from any page on the site. Our support team can handle data access and correction requests directly through chat, with a written record sent to your registered email.
Email Support Send your privacy request to our support email address shown in your account dashboard. Include your registered name and the nature of your request so we can verify your identity before processing.
Account Settings Some data updates — like changing your contact number or linked e-wallet — can be handled directly inside your account settings without contacting support. Log in, go to Profile, and follow the verification steps.
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We apply a layered approach to keeping your account data secure — from how it is stored to how long we hold it. Below are the four areas that matter most to you as an account holder.

Account Security

Login sessions use OTP verification sent to your registered mobile number. Repeated failed attempts trigger a temporary lock. We do not store your full payment credentials from Touch 'n Go eWallet, Boost, or GrabPay.

Cookies and Device Data

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used on mobile. You can manage non-essential cookies through your browser settings at any time.

Data Retention

Account data is kept for as long as your account remains active or as required by applicable law. When you request account closure, we begin a deletion process within the period specified in our response to your request.

Third-Party Sharing

We share only the minimum data needed with payment processors handling DuitNow, FPX, and e-wallet transactions. We do not sell, rent or exchange your personal information with marketing platforms.

Common Questions About Your Privacy on cili888

These are the questions we hear most often about how we handle personal data, who can access it, and what you can do if something needs to change.

We collect your name, email, contact number, and the credentials you create. During deposits via Touch 'n Go eWallet or GrabPay, we also log transaction references and RM amounts to maintain an accurate account record.

Yes. You can submit a deletion request through live chat or the support email in your account dashboard. We will verify your identity first, then process the request and confirm once it is complete.

We do not sell or share your data with advertisers. Payment processors — those handling Boost, DuitNow and FPX transfers — receive only the transaction data needed to complete your request.

Each login session requires OTP verification to your registered number. Consecutive failed login attempts trigger a temporary account lock. We never store your full e-wallet PIN or password on our servers.

We retain account data for the period required by applicable law after closure. When your request is processed, we confirm the deletion timeline in writing to your registered email address.

Some changes — like your contact number or linked e-wallet — are handled inside account settings. Log in, open Profile, and follow the on-screen verification steps to update the relevant field.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.