cyl888 Privacy Policy

cyl888 ("we", "us", "our", "the Company") operates the online gaming platform accessible at cyl888.co and all associated sub-domains and mobile interfaces (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who register with or interact with the cyl888 Platform.

This Privacy Policy describes what personal data cyl888 collects from Members and Platform visitors, the purposes for which that data is used, with whom it may be shared, how long it is retained, the security measures in place to protect it, and the rights available to individuals in respect of their personal data.

By registering an Account with cyl888 or by continuing to use the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. This Policy forms part of the cyl888 Terms and Conditions. If you do not agree with any aspect of this Policy, you should not use the cyl888 Platform.

This Policy should be read together with the cyl888 Terms & Conditions, which set out the contractual basis on which cyl888 provides services to Members, including provisions relating to account eligibility, responsible gaming, and the 21+ age restriction applicable to all cyl888 account holders.

cyl888 collects the following categories of personal data in connection with the operation of its Platform and the provision of gaming services to Members:

cyl888 does not collect sensitive personal data (including racial or ethnic origin, religious beliefs, or health data) unless specifically required for responsible gaming obligations or where mandated by applicable law.

cyl888 collects personal data through the following channels:

• Direct provision by you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated collection — through cookies, session trackers, and server logs as you interact with the cyl888 Platform. This includes IP address, device identifiers, and clickstream data.
• Third-party sources — from identity verification providers, payment processors (such as Touch n Go eWallet, Boost, FPX participating banks, and DuitNow operators), fraud detection services, and our licensed game providers, where such data sharing is necessary to operate the Platform or comply with legal obligations.

cyl888 processes personal data on one or more of the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between cyl888 and the Member, including operating the Account, processing payments, and settling Wagers.
• Legal obligation — processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and record-keeping mandates imposed by cyl888's licensing authority.
• Legitimate interests — processing is necessary for the legitimate interests of cyl888, including fraud detection, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by the rights of the individual.
• Consent — where cyl888 relies on your consent for optional data processing activities (such as marketing communications), you retain the right to withdraw that consent at any time by contacting us at [email protected].

cyl888 uses the personal data it collects for the following purposes:

• To create, manage, and administer your cyl888 Account, including processing deposits and withdrawals in MYR.
• To verify your identity and age in compliance with KYC obligations and the 21+ eligibility requirement applicable to all cyl888 Members.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, and other prohibited activities on the Platform.
• To operate responsible gaming controls, including monitoring gaming patterns for indicators of problem gambling and facilitating the application of Member-requested deposit limits, time limits, and self-exclusion measures.
• To provide customer support and respond to account-related enquiries, complaints, and disputes.
• To settle Wagers, calculate bonus eligibility, and administer promotional offers in accordance with applicable terms.
• To comply with applicable legal and regulatory obligations, including the retention of records as required by cyl888's licensing authority.
• To send transactional communications relating to your Account, including payment confirmations, security alerts, and policy update notifications.
• To analyse aggregate, anonymised usage data for the purposes of improving Platform performance and user experience — this analysis does not involve individual-level profiling for commercial purposes.

cyl888 does not sell, rent, or trade personal data to third parties. cyl888 may share personal data with the following categories of recipients, strictly as necessary to operate the Platform and comply with legal obligations:

• Payment processors and eWallet providers — including Touch n Go, Boost, FPX member banks, and DuitNow operators — to process deposits and withdrawals.
• KYC and identity verification providers — to verify the identity and age of new Members in compliance with our licensing obligations.
• Game technology providers — including licensed live dealer studios and RNG slot providers — to deliver gaming services on the Platform. These providers receive only the minimum data necessary to operate their games.
• Fraud prevention and cybersecurity services — to detect and mitigate fraudulent, abusive, or unauthorised activity on the Platform.
• Regulatory and law enforcement authorities — where disclosure is required by law, court order, or the directives of cyl888's licensing authority. In such cases, cyl888 will disclose only the minimum information required by the applicable legal obligation.

All third parties with whom cyl888 shares personal data are contractually obligated to process that data only for the specific purposes disclosed, to implement appropriate security measures, and to comply with applicable data protection laws.

cyl888 uses cookies and similar web tracking technologies to operate and improve the Platform. The following cookie categories are used:

• Strictly necessary cookies — required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences, language settings, and the last game or lobby section you visited within the cyl888 Platform.
• Analytics cookies — used to collect aggregated, anonymised data about how visitors interact with the Platform. This data is used to identify usability improvements and does not identify individual Members.

cyl888 does not deploy third-party advertising or behavioural targeting cookies. You may configure your browser to refuse cookies; however, doing so may impact the functionality of certain cyl888 Platform features, including login persistence and game session continuity.

cyl888 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including the maintenance of an active Account, the resolution of disputes, and compliance with legal and regulatory retention requirements.

Upon Account closure, cyl888 retains transaction records, KYC documentation, and gaming activity data for a minimum period as required by applicable anti-money laundering regulations and the directives of our licensing authority. Following the expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our data destruction procedures.

Communications data — including customer support transcripts — is retained for a period sufficient to allow resolution of any pending disputes or regulatory enquiries, and is deleted thereafter.

Subject to applicable law, cyl888 Members and Platform visitors have the following rights in respect of their personal data:

• Right of access — the right to request a copy of the personal data cyl888 holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — the right to request deletion of personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to cyl888's overriding legal retention obligations.
• Right to restriction — the right to request that cyl888 restrict the processing of your personal data in certain circumstances.
• Right to data portability — the right to receive a copy of your personal data in a structured, machine-readable format, where technically feasible.
• Right to object — the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, subject to cyl888's overriding legitimate grounds.
• Right to withdraw consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to cyl888 at [email protected]. cyl888 will respond to all data rights requests within thirty (30) days of receipt, or within any shorter period required by applicable law. cyl888 may request additional identity verification before processing a data rights request.

cyl888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Member devices and cyl888's servers.
• Encrypted storage of personal and financial data at rest, with access restricted to authorised personnel on a need-to-know basis.
• Segregated storage of Member funds in accounts separate from cyl888 operating capital.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication controls for internal administrative access to personal data systems.
• Incident response procedures enabling prompt detection of, and response to, any personal data breach.

Notwithstanding these measures, no online platform can guarantee absolute security. cyl888 encourages Members to use strong, unique passwords for their cyl888 Account, to enable two-factor authentication, and to report any suspected unauthorised access to [email protected] immediately.

The cyl888 Platform is strictly restricted to individuals aged 21 years and above. cyl888 does not knowingly collect personal data from individuals under the age of 21. If cyl888 becomes aware that personal data has been collected from a person under the minimum age, that Account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned via the original payment method.

If you are a parent or guardian and believe that your child has registered a cyl888 Account or provided personal data to cyl888, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

cyl888 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or data processing practices. Material changes will be communicated to registered Members via the email address on file with their Account, with a minimum of 14 days' notice before the updated Policy takes effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the cyl888 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should close your Account before the effective date.

For all privacy-related enquiries, data rights requests, or concerns regarding the handling of your personal data by cyl888, please contact us through the following channels:

• Email: [email protected] — mark the subject line "Privacy Enquiry" for prioritised handling
• Live Chat: Available 24/7 directly within the cyl888 Platform dashboard

cyl888 aims to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within thirty (30) days. For complex requests, we will notify you if additional time is required.