cyl88 Privacy Policy

cyl88 ("we", "us", "our") is the data controller responsible for the personal data processed in connection with the cyl88 platform and all services available at cyl88.biz. cyl88 operates under international gaming licensing and is committed to handling personal data in a manner consistent with applicable data protection principles.

This Privacy Policy applies to all personal data collected from members who register accounts on cyl88, visitors who browse cyl88.biz without registering, and individuals who contact cyl88 support. By using cyl88 services, you acknowledge that you have read this policy and understand how your data will be used.

cyl88 collects and processes the following categories of personal data in connection with providing its services:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — 21+ requirement);
• Malaysian identification number (MyKad) or passport number;
• Registered mobile phone number;
• Email address (where provided);
• Residential address.

• Bank account details (account holder name, bank name, account number) associated with your registered payment method;
• e-Wallet identifiers (Touch n Go eWallet, Boost, GrabPay) registered to your cyl88 account;
• Deposit and withdrawal transaction history;
• Cryptocurrency wallet addresses where USDT TRC20 transactions are used.

• IP address and approximate geographic location at the time of each login;
• Device type, operating system, and browser information;
• Session logs including login and logout timestamps;
• Game history, wagering records, and betting activity;
• Communication records with cyl88 support (live chat transcripts, support tickets).

• Copies of government-issued photo identification submitted during Know Your Customer (KYC) verification;
• Proof of address documents (utility bills, bank statements);
• Proof of payment method ownership documents where requested.

cyl88 collects personal data through the following means:

• Direct provision — data you submit during account registration, KYC verification, deposit and withdrawal requests, and support interactions;
• Automated collection — technical data collected automatically when you access cyl88.biz, including IP address, device identifiers, and session activity, via server logs and cookies;
• Third-party providers — data received from payment processors (e.g., FPX gateway providers, e-wallet operators) in connection with transaction processing and fraud screening;
• Identity verification services — data returned by third-party KYC and age verification service providers during the account verification process.

cyl88 processes personal data for the following purposes:

• To create and manage your cyl88 member account and verify your identity and age;
• To process deposits and withdrawals and maintain accurate financial records;
• To provide access to cyl88 games, sportsbook, and all platform services;
• To detect and prevent fraud, money laundering, and prohibited account behaviour;
• To comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF), and know-your-customer (KYC) obligations;
• To enforce the cyl88 Terms and Conditions and Responsible Gaming policies, including age verification and self-exclusion management;
• To provide customer support and respond to member enquiries;
• To send account-related notifications (e.g., deposit confirmations, withdrawal status updates, security alerts);
• To improve the cyl88 platform through analysis of aggregated, anonymised usage data;
• To send promotional communications where a member has consented to receive such communications and has not subsequently opted out.

cyl88 processes personal data on the following legal bases:

• Contract performance — processing necessary to provide the services set out in the cyl88 Terms and Conditions, including account management, game access, and payment processing;
• Legal obligation — processing required to comply with AML, CTF, KYC, and other applicable regulatory obligations;
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, and improvement of cyl88 services, where such interests are not overridden by member rights;
• Consent — processing for marketing communications and optional features where a member has provided explicit consent, and which may be withdrawn at any time.

cyl88 does not sell, rent, or trade personal data. cyl88 may share personal data with the following categories of recipients where necessary and proportionate:

• Payment processors and e-wallet operators — to process deposits and withdrawals (e.g., FPX providers, Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank);
• KYC and identity verification service providers — to verify member identity and age at registration and upon request;
• Game content providers — limited technical data (e.g., session tokens) shared with licensed game studios to enable live casino and slot game functionality;
• Fraud prevention and security providers — to detect and prevent fraudulent transactions and account abuse;
• Regulatory and law enforcement authorities — where cyl88 is required by law, court order, or regulatory direction to disclose information, including in connection with AML and CTF reporting obligations;
• Professional advisers — including legal counsel, auditors, and compliance consultants, subject to confidentiality obligations.

All third-party service providers engaged by cyl88 are required to process personal data only on cyl88's instructions and in accordance with applicable data protection standards.

cyl88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means:

• Account data is retained for the duration of an active membership and for a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements;
• Transaction records (deposits, withdrawals, game history) are retained for a minimum of five (5) years from the date of the transaction;
• KYC verification documents are retained in accordance with applicable AML legislation, typically for five (5) years following the end of the business relationship;
• Support communications are retained for a reasonable period sufficient to resolve any ongoing disputes or enquiries;
• Technical log data (IP addresses, session logs) is retained for a period of twelve (12) months unless required to be retained longer in connection with an ongoing investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities.

cyl88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and cyl88 servers;
• Encryption of stored sensitive personal data, including payment method identifiers and KYC documents;
• Access controls restricting internal access to personal data to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of cyl88 platform infrastructure;
• Two-factor authentication options for member accounts to prevent unauthorised access.

Notwithstanding the above, no data transmission over the internet can be guaranteed to be completely secure. Members are responsible for maintaining the security of their own login credentials and should contact cyl88 support immediately if they suspect unauthorised access to their account.

In the event of a data breach that is likely to result in a risk to member rights and freedoms, cyl88 will notify affected members and relevant regulatory authorities in accordance with applicable data breach notification obligations.

cyl88.biz uses cookies and similar tracking technologies to operate the platform and improve user experience. Cookies are small text files stored on your device when you access the cyl88 website.

• Strictly necessary cookies — essential for the platform to function, including session authentication and security cookies. These cannot be disabled without impairing core functionality;
• Functional cookies — remember your preferences such as language settings and game lobby layout;
• Analytics cookies — collect aggregated, anonymised data about how visitors use cyl88.biz to help us improve the platform. No personally identifiable information is transmitted via analytics cookies.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cyl88 platform. Continuing to use cyl88.biz without adjusting your browser cookie settings constitutes consent to cyl88's use of cookies as described in this policy.

Subject to applicable law and the requirements of cyl88's regulatory obligations, members have the following rights in respect of their personal data held by cyl88:

• Right of access — to request a copy of the personal data cyl88 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cyl88's legal retention obligations;
• Right to restriction — to request that cyl88 restrict processing of your personal data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract;
• Right to object — to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent — to withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the cyl88 support team via live chat. cyl88 will respond to verified requests within a reasonable timeframe in accordance with applicable law. Please note that certain rights may be limited where cyl88 is required to retain data to comply with legal obligations, including AML and gaming regulatory requirements.

If cyl88 becomes aware that personal data has been collected from an individual under the age of 21 without verified parental consent, cyl88 will take steps to delete such data and close the associated account. Parents or guardians who believe a minor has registered on cyl88 should contact support immediately.

cyl88 operates with infrastructure and service providers located in various jurisdictions. Personal data collected from Malaysian members may be transferred to and processed in jurisdictions outside Malaysia in connection with payment processing, KYC verification, game content delivery, and platform hosting.

Where personal data is transferred internationally, cyl88 takes steps to ensure that appropriate safeguards are in place, including contractual obligations on third-party recipients requiring them to maintain data protection standards equivalent to those applied by cyl88. By using the cyl88 platform and providing personal data, you consent to such international transfers where necessary for the provision of cyl88 services.

cyl88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered members by posting a notice on the cyl88 platform or by direct communication to registered contact details. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Continued use of the cyl88 platform following notification of changes to this Privacy Policy constitutes acceptance of the updated policy. Members who do not accept the revised policy should cease using the platform and contact support to request account closure and return of any eligible balance.

For any questions, requests, or concerns regarding this Privacy Policy or cyl88's handling of your personal data, please contact the cyl88 Data Protection team via the live chat support function available on the cyl88 platform, available 24 hours a day, seven days a week.

You may also contact cyl88 by email at: [email protected] (plain text — not a clickable link).

cyl88 is committed to resolving data protection enquiries promptly and in good faith. If you are not satisfied with cyl88's response to a data protection concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.