Official CYL88 Documents

Privacy Policy CYL88 – Personal Data Protection for Malaysian Members

CYL88 takes your privacy seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data when you use the CYL88 platform. Please read it carefully before registering.

Effective Date: This Privacy Policy takes effect on 1 January 2026. Any material changes will be communicated to members via their registered email address at least 7 days before the changes come into effect.

Our Privacy Commitment
  • 256-bit SSL encryption for all data
  • Data is never sold to third parties
  • Right to access, rectification & erasure of data
  • Compliance with the Personal Data Protection Act 2010
  • Data breach notification within 72 hours
  • Privacy controls in your account settings
CYL88's Six Data Protection Principles

This is central to how CYL88 handles the personal data of every one of our Malaysian members.

Data Minimisation

CYL88 only collects personal data that is strictly necessary for platform operations — account registration, payment processing, customer support, and legal compliance. We do not collect irrelevant or excessive data.

Bank-Grade Security

All data in transit between your device and CYL88's servers is protected by 256-bit SSL encryption — the same technology used by Malaysia's major financial institutions. Data is stored on servers secured behind multi-layered firewalls.

Purpose-Based Data Use

Your data is used only for the purposes stated in this Privacy Policy. CYL88 does not use your data for any other purpose without first obtaining your renewed consent.

Full Control Over Your Data

You have the right to view, amend, download, and request the deletion of your personal data held by CYL88. Requests will be processed within 30 calendar days of receipt.

No Data Sales

CYL88 never sells, rents, or transfers members' personal data to third parties for marketing purposes. Data is only shared with select operational partners bound by strict confidentiality agreements.

Transparency & Notification

In the event of any data breach affecting your information, CYL88 is committed to notifying you within 72 hours of the breach being identified, in line with industry best practices.

1

Introduction

This Privacy Policy ("Policy") describes how CYL88 ("we", "the platform", or "CYL88") collects, uses, stores, discloses, and protects your personal information when you use the website cyl88.me and all related services.

CYL88 is committed to protecting the privacy of every member in Malaysia. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in personal data handling. By registering a CYL88 account or using our platform, you consent to CYL88 collecting and using your personal data as described in this Policy.

Note: This Privacy Policy is part of CYL88 Terms & Conditions and should be read alongside that document. In the event of any conflict between the two documents, the Privacy Policy shall prevail on matters relating to personal data.

If you have any questions about how CYL88 handles your personal data, please contact us at support@cyl88.me before using our platform.

2

Types of Personal Data Collected

CYL88 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad/passport number, date of birth, gender Account registration, KYC verification, legal compliance
Contact Data Phone number, email address, state / region of residence in Malaysia Account communications, notifications, customer support
Account Data Username, password (encrypted), login history, account settings Identity verification, account security
Financial Data E-wallet account numbers (TNG, GrabPay, etc.), bank account holder name, deposit & withdrawal history Transaction processing, financial KYC verification
Gaming Data Betting history, games played, wins & losses, gaming sessions Platform operations, responsible gaming, customer support
Technical Data IP address, device type, operating system, web browser, cookie data Platform security, fraud detection, technical analytics
Communication Data Live chat records, support emails, and feedback you have submitted Customer support, service improvement

Sensitive Data: CYL88 does not collect sensitive personal data such as health information, religious beliefs, or political affiliations unless required by law or with your explicit consent.

3

How Data Is Collected

CYL88 collects your personal data through the following means:

  • Directly from You: When you register a CYL88 account, fill in forms on the platform, make a deposit or withdrawal, contact customer support, or update your profile information.
  • Automatically: When you use the CYL88 platform, our systems automatically collect certain technical data such as your IP address, device type, operating system, and gaming activity data. This is done using technologies such as cookies, web pixels, and server logs.
  • From Selected Third Parties: In certain cases, CYL88 may receive data from our payment service providers (such as Touch 'n Go eWallet, GrabPay, or local Malaysian banks via FPX) to verify your financial transactions.
  • From Public Sources: In very limited cases and for the purposes of KYC verification or fraud detection, CYL88 may refer to legitimate publicly available information sources.

CYL88 does not purchase personal data lists from data brokers or other third parties for marketing purposes. All data we hold has been voluntarily provided by you or lawfully collected through your use of our platform.

4

How CYL88 Uses Your Data

CYL88 uses your personal data for the following purposes, all of which are based on lawful legal grounds:

  • Service Provision: To enable you to register and manage your CYL88 account, process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other local payment methods, and to give you access to all games and betting options on the platform.
  • Security & Fraud Prevention: To detect and prevent fraud, money laundering, duplicate accounts, bot usage, and other unlawful activities that could compromise the security of the platform or other members.
  • Legal Compliance: To fulfil our legal obligations under Malaysia's Personal Data Protection Act 2010 and other applicable laws, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
  • Customer Support: To process enquiries, complaints, and assistance requests you submit to the CYL88 support team via live chat or email.
  • Responsible Gaming: To monitor gaming patterns and identify members who may need support related to their gaming habits, as well as to enforce the self-exclusion limits you have set for yourself.
  • Platform Communications: To send important notifications regarding your account, transactions, changes to terms and conditions, and information about relevant CYL88 offers and promotions (you may unsubscribe from promotional emails at any time).
  • Platform Improvement: To analyze usage patterns in aggregate (without identifying individuals) for the purpose of improving user experience, interface design, and the technical performance of the CYL88 platform.

Automated Processing: Certain decisions relating to your CYL88 account (such as the detection of suspicious activity) may be made automatically by our systems. If you believe an automated decision has been made unfairly against your account, you have the right to request a review by a human staff member by contacting support@cyl88.me.

5

Data Sharing & Disclosure

CYL88 does not sell, rent, or transfer member personal data to third parties for marketing purposes. Your data is only shared in the following limited circumstances:

  • Payment Service Providers: Required transaction information is shared with Malaysia's local payment service providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX) solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
  • Technology Providers: CYL88 works with selected cloud service and technology providers to host the platform and process data. All such providers are required to sign data processing agreements obligating them to protect your data.
  • Game Providers: Minimal technical data may be shared with game providers such as Pragmatic Play, PG Soft, and others to ensure games function correctly. This does not include your personal financial information.
  • Legal Requirements: CYL88 may disclose your personal data to Malaysian authorities if required by a valid court order, police investigation, or other legal obligation. In such circumstances, CYL88 will notify you in advance where permitted by law to do so.
  • Security Protection: CYL88 may share necessary data with industry fraud prevention bodies to protect the platform and its members from unlawful activity.

International Data Transfers: Some of our service providers may operate outside Malaysia. When this occurs, CYL88 ensures that adequate data protection is in place through appropriate contractual agreements, in line with Malaysia's PDPA requirements.

6

Data Security

CYL88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or deletion:

256-bit SSL Encryption

All communications between your browser and CYL88's servers are encrypted using 256-bit SSL/TLS — the same security standard used by Malaysia's leading banking institutions such as Maybank and CIMB.

Multi-Layered Secure Servers

CYL88 data is stored in data centres protected by multi-layered firewalls, intrusion detection systems, and strict physical access controls. Administrative access to user data is restricted and fully logged.

Real-Time Threat Monitoring

CYL88's systems are monitored around the clock to detect suspicious activity, intrusion attempts, and security anomalies. Any threats identified are addressed immediately by our security team.

Encrypted Passwords (Hashing)

Your CYL88 account password is never stored in plain text. We use a robust password hashing algorithm, meaning even CYL88 staff cannot view your actual password.

Two-Factor Authentication (2FA)

CYL88 offers two-factor authentication to enhance your account security. We encourage all members to enable 2FA via their account security settings.

While CYL88 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, do not share your login credentials, and contact CYL88 immediately if you suspect your account has been compromised.

7

Data Retention Period

CYL88 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by law:

Data Type Retention Period Reason
Active Account Data For the duration of the active account Platform operational requirements
Data After Account Closure Minimum 7 years Malaysia AML/KYC legal requirements
Financial Transaction Records 7 years Malaysia tax & financial law compliance
Security & Technical Logs 12 months Fraud detection, incident investigation
Customer Support Records 3 years Service quality, case history reference
Gaming Data 3 years Responsible gaming, dispute resolution
Marketing Data (with consent) Until you withdraw your consent Relevant promotional communications

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you. CYL88 conducts periodic data retention reviews to ensure that data no longer required is promptly removed.

8

Your Rights Regarding Personal Data

As a CYL88 member, you have the following rights regarding your personal data, as provided under Malaysia's Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of the personal data we hold about you. CYL88 will process your request within 30 days.

Right to Amendment

You may request correction of any inaccurate or incomplete personal data through your profile settings or via CYL88 customer support.

Right to Erasure

You may request deletion of your data, subject to the minimum retention periods required by Malaysian law that oblige us to retain certain data.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, free of charge and without penalty.

Right to Data Portability

You may request your data in a machine-readable format for easy transfer to another service if needed.

Right to Restrict Processing

In certain circumstances, you may request that CYL88 restrict the processing of your data while a dispute is being resolved.

To exercise any of the rights above, please submit your request to support@cyl88.me with the email subject "Data Privacy Rights Request", along with your CYL88 account number and a clear description of your request. CYL88 will verify your identity before processing the request to ensure security.

Response Time: CYL88 will acknowledge your privacy rights request within 3 business days and resolve it within 30 calendar days. In complex cases, this period may be extended to up to 60 days, with notice provided to you.

9

Cookies & Tracking Technologies

The CYL88 platform uses cookies and similar tracking technologies to enhance the user experience and platform functionality. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the CYL88 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

10

Protection of Children's Data

CYL88 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your child under the age of 18 has registered a CYL88 account or that their data has been inadvertently collected by our platform, please contact us immediately at support@cyl88.me. CYL88 will take immediate action to verify, suspend the account in question, and delete all associated data.

Age Verification: CYL88 carries out an age verification process during registration and reserves the right to request identity verification documents such as a MyKad at any time. Accounts found to belong to underage individuals will be terminated immediately and all balances will be forfeited in accordance with CYL88's Terms & Conditions.

11

Privacy Policy Amendments

CYL88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, relevant legal requirements, or evolving industry best practices.

When material changes are made to this Policy, CYL88 will:

  • Updating the "Effective Date" at the top of this page
  • Sending email notifications to all active members at least 7 days before the changes take effect
  • Displaying clear notices on the CYL88 platform throughout the notice period
  • For particularly significant changes, CYL88 may seek your renewed consent

Your continued use of the CYL88 platform after any Privacy Policy update takes effect will be considered acceptance of the revised Policy. If you do not agree with any changes, you have the right to close your CYL88 account before the changes take effect by contacting our support team.

12

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how CYL88 handles your personal data, please contact us:

  • Privacy Email: support@cyl88.me — use the subject line "Data Privacy Inquiry" to ensure it is routed to the right team
  • Live Chat: Available 24 hours a day, 7 days a week via the CYL88 platform

For formal privacy complaints, send an email with the subject "Formal Privacy Complaint" including full details of the complaint and supporting evidence. CYL88 will acknowledge the complaint within 3 business days and resolve it within 30 days.

If you believe your complaint has not been satisfactorily resolved by CYL88, you have the right to escalate it to the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body.

Your Data Is Safe with CYL88

Register your CYL88 account with confidence — your privacy and data security are our priority. Claim a welcome bonus of up to RM888 on your first deposit.

CYL88's Data Protection Commitment

CYL88 protects all your personal and transaction information using 256-bit SSL encryption and complies with Malaysia's Personal Data Protection Act 2010. Your data is not shared with any third party without your consent. For privacy enquiries, contact support@cyl88.me. For more information on the terms of use, please read CYL88 Terms & Conditions.

FAQ – CYL88 Privacy Policy

The most frequently asked questions from members about privacy and data protection at CYL88.

No. CYL88 never sells, rents, or transfers member personal data to third parties for marketing or any other commercial purpose. Your data is only shared with selected Malaysian local payment service providers (such as Touch 'n Go, GrabPay, and banks via FPX) solely for the purpose of processing your transactions, and only the minimum necessary data is shared. All such providers are bound by strict confidentiality agreements with CYL88.

You may request deletion of your personal data by emailing support@cyl88.me with the subject "Data Deletion Request". Include your CYL88 account number and the required identity verification. CYL88 will process the request within 30 days. Please note that certain data may be required to be retained for minimum periods prescribed by Malaysian law (for example, financial transaction records for 7 years) and cannot be deleted earlier even upon request.

When you close your CYL88 account, your access to the platform will be terminated. However, certain data must be retained for the minimum periods prescribed by Malaysian law — particularly financial records, which must be kept for 7 years in accordance with AML (Anti-Money Laundering) and tax legal requirements. Other data not subject to mandatory minimum retention periods will be deleted or anonymized within 90 days of account closure. You may request full details of any data still being retained by contacting support@cyl88.me.

Yes. You may unsubscribe from CYL88 promotional emails at any time in two ways: (1) Click the "Unsubscribe" link found at the bottom of any promotional email you receive from CYL88. (2) Log in to your CYL88 account, go to Profile Settings, and disable the "Receive Promotional Emails" option. Please note that unsubscribing from promotional emails does not affect transactional emails related to your account (such as deposit, withdrawal, and account security notifications) — these are required for the safe operation of your account.

In the event of a data breach that may affect your personal information, CYL88 is committed to notifying you within 72 hours of the breach being identified. Notification will be sent to your registered email address and will include: the type of data potentially affected, the steps CYL88 has taken to contain the situation, actions you should take to protect your account, and contact information for further enquiries. CYL88 will also report the breach to the relevant authorities where required under Malaysian law. The security of member data is CYL88's top priority.
Bahasa Melayu