CYL888 Privacy Policy – Malaysia Personal Data Protection

1. Introduction

Cyl888 ("we", "the cyl888 platform") is committed to protecting the privacy of every individual who uses our online betting and casino platform at cyl888.biz. This Privacy Policy explains how we collect, use, store, and protect your personal information ("personal data") when you register, log in, or use any of the services we offer.

This policy is prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and forms part of Terms & Conditions cyl888. By using the cyl888 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform immediately.

2. Personal Data We Collect

Cyl888 only collects the personal data strictly necessary to provide our services safely and efficiently. The data we collect can be grouped into the following categories:

Data Category	Specific Examples	Primary Purpose
Identity Data	Full name, MyKad/Passport number, date of birth, gender	Identity verification (KYC), legal compliance
Contact Data	Malaysian phone number, email address, residential address	Account communications, customer support
Financial Data	Bank account numbers, Touch 'n Go eWallet details, DuitNow, GrabPay, FPX	Processing deposits and withdrawals in MYR
Usage Data	Game history, wagering amounts, login frequency, game preferences	Responsible gaming monitoring, platform improvement
Technical Data	IP address, device type, web browser, operating system, session cookies	Account security, fraud detection
Communication Data	Support chat logs, emails, user feedback	Service improvement, complaint resolution

3. How Data Is Collected

Cyl888 collects your personal data through the following methods:

• Account Registration: When you complete the registration form at cyl888.biz, you voluntarily provide us with your identity and contact information.
• KYC Verification: During the identity verification process, you are required to submit a copy of an identification document such as your MyKad or Malaysian passport.
• Financial Transactions: Payment method information is collected when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX/Maybank2u/CIMB Clicks.
• Platform Usage: Usage data is collected automatically via cookie technology, server logs, and internal analytics tools when you use the cyl888 platform.
• Support Communications: When you contact the cyl888 support team via live chat, email, or WhatsApp, the contents of those communications are stored for reference and service improvement purposes.
• Trusted Third Parties: In certain cases, we may receive data from licensed KYC partners or payment verification providers to verify the information you have submitted.

4. How We Use Your Personal Data

Cyl888 uses your personal data only for the following legitimate and stated purposes. We will not use your data for any other purpose without first obtaining your renewed consent:

• Service Provision: Managing your account, processing deposits and withdrawals in Malaysian Ringgit (RM), and giving you access to all games on the cyl888 platform, including slots, live casino, table games, roulette, lottery, and Sports Betting.
• Identity Verification (KYC): To fulfil legal compliance requirements for member identity verification and anti-money laundering prevention.
• Account Security: Detecting and preventing unauthorised access, fraud, bonus abuse, and suspicious activity that could compromise your account security.
• Service Communications: Sending account-related notifications, transaction confirmations, policy updates, and other important information relevant to your use of the platform.
• Marketing (with Consent): Sending promotional offers, bonus information, and platform updates to members who have consented to receive marketing communications.
• Responsible Gaming: Monitoring usage patterns to identify members who may need support related to gambling habits, in line with cyl888's commitment to responsible gaming.
• Platform Improvement: Analysing usage data in aggregate (without individual identification) to improve user experience, platform speed, and service quality.
• Legal Compliance: To comply with any legal requirements, court orders, or lawful requests from the relevant authorities.

5. Sharing Data with Third Parties

Cyl888 does not sell or rent members' personal data to any party. However, we may share certain data with a limited number of third parties strictly in the following circumstances:

• Payment Providers: Transaction information required for payment processing is shared solely with payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and banks supporting FPX, strictly to facilitate deposit and withdrawal processing.
• KYC Service Provider: Identity data is shared with licensed identity verification partners to meet legal compliance requirements.
• Game Provider: Basic account information may be shared with third-party game providers (e.g. slots providers, live casino providers) whose games are integrated into the cyl888 platform, solely to enable a seamless gaming experience.
• Legal Authorities: Data may be disclosed to the Malaysian police, courts, or relevant government agencies where required by law or a valid court order.
• IT Service Provider: Our hosting providers, cloud infrastructure, and cybersecurity partners may have limited access to data solely for technical operational purposes.

6. Personal Data Security

Cyl888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your browser and the cyl888 platform are encrypted using the latest TLS/SSL protocols.
• Encryption of Data at Rest: Sensitive data stored in cyl888's databases is encrypted using the AES-256 standard.
• Access Controls: Access to members' personal data is restricted to staff with a legitimate business need, and all access is logged.
• Two-Factor Authentication (2FA): cyl888's internal systems require 2FA for all staff access to sensitive data.
• Regular Security Audits: cyl888 conducts regular penetration testing and security audits carried out by independent third parties.
• Incident Response Plan: cyl888 has clear procedures in place to respond to any data breach, including notifying affected members within the timeframe required by the PDPA.

7. Data Retention Period

Cyl888 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: Retained for as long as your account remains active on the cyl888 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in compliance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC Data: Retained for a minimum of 5 years after account closure or the end of the business relationship.
• Communication Logs: Retained for 2 years from the date of communication for the purpose of resolving complaints.
• Upon Account Closure: Data that is no longer required will be securely deleted or anonymised within 90 days of account closure, subject to the statutory retention requirements stated above.

8. Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by cyl888:

To exercise any of the above rights, please contact the cyl888 Privacy team at support@cyl888.biz with the subject line "Data Rights Request — [Your Full Name]". Requests will be processed within 14 working days. We may require identity verification before processing your request to ensure the security of your data.

9. Cookies & Tracking Technologies

Cyl888 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform (e.g. pages visited, time spent) to help us improve performance and user experience. This data is aggregated and anonymised.
• Functional Cookies: Remembering your preferences such as language, display settings, and other choices to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant advertisements and promotions to you. You may opt out of these cookies via the cookie settings on the platform.

You can manage or block cookies through your web browser settings. Please note, however, that blocking essential cookies may affect your ability to use certain features of the cyl888 platform.

10. Protection of Children's Data

The cyl888 platform is exclusively for individuals aged 18 years and above only. We do not intentionally collect, process, or store personal data of individuals under the age of 18. Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered an account on the cyl888 platform, please contact us immediately at support@cyl888.biz so that immediate action can be taken.

11. Amendments to the Privacy Policy

Cyl888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When material changes are made, we will:

• Updating the "Updated" date at the top of this document
• Sending email notifications to all registered members at least 7 days before the amendment takes effect
• Displaying a clear notice on the cyl888 platform homepage throughout the notice period

Your continued use of the cyl888 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please close your account before the effective date.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cyl888 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: support@cyl888.biz (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 on the cyl888.biz platform
• Response Time: Within 3 working days for general enquiries; 14 working days for formal data rights requests

If you feel your complaint has not been resolved to your satisfaction by cyl888, you have the right to escalate it to Department of Personal Data Protection, Ministry of Communications Malaysia through their official channels.