Privacy Policy CYL88 —
Your Privacy Preferences Us

CYL88 ("we", "the platform") takes our responsibility to protect every member's privacy seriously. This Privacy Policy is designed to ensure you fully understand how your personal information is managed — from the moment you register an account through every interaction you make on the platform.

This policy applies to all services offered by CYL88, including the main website, mobile app, customer support services, and all our official communication channels. By using any CYL88 service, you agree to the data collection and usage practices described in this document.

We only collect data that is strictly necessary to provide a safe, fair, and legally compliant service. Below are the categories of data we collect and the purposes for which they are collected:

We do not collect any data beyond the minimum requirements stated above. Sensitive data such as passwords is always stored in one-way hashed form and cannot be read by anyone, including cyl88 internal staff.

All information you provide to cyl88 is used responsibly and only for legitimate purposes. Below are the primary uses of your data on our platform:

• Account management: To create, verify, and maintain your member account so you can securely access all cyl88 services.
• Financial processing: To process deposits, withdrawals, and any account-related transactions promptly and accurately.
• KYC Verification: To fulfil legal compliance requirements, including identity verification and anti-money laundering (AML) obligations.
• Platform security: To detect and prevent suspicious activity, fraud, and unauthorised access attempts.
• Customer support: To provide effective and personalised assistance when you contact our support team.
• Service communications: To send important notifications regarding your account, promotions you have opted into, and policy updates.
• Continuous improvement: To analyse aggregated and anonymised usage patterns in order to improve the user experience on our platform.

CYL88 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are limited situations where we may need to share certain information with trusted parties:

• Payment providers: Minimal transaction information is shared with payment service providers such as local banks and digital wallet providers to process your financial transactions.
• Technical service providers: Parties that provide server infrastructure, security systems, and other technical services required for platform operations — all bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: CYL88 will disclose information to the relevant authorities when required by Malaysian law or a valid court order.
• Identity verification services: Approved third-party KYC providers for identity document verification purposes, under strict data protection controls.

The security of your data is cyl88's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

• 256-bit SSL Encryption: All data transmitted between your device and cyl88's servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the same level of security used by international banking institutions.
• Secure data storage: Member data is stored in certified data centres equipped with multi-layered physical and digital protection, including biometric access controls and 24/7 monitoring.
• Two-Factor Authentication (2FA): CYL88 supports two-factor authentication to protect your account from unauthorised access even if your password is compromised.
• Real-time threat monitoring: Our automated security system monitors all platform activity around the clock to detect and block suspicious activity instantly.
• Regular security audits: CYL88 conducts regular independent security audits by accredited third-party cybersecurity experts.

CYL88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: To collect non-personally identifiable usage data that helps us understand how users interact with the platform and improve it.
• Preference cookies: To save your preference settings such as language, time zone, and display options so you don't have to reconfigure them each time.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some areas of the cyl88 platform.

As a data subject under Malaysia's PDPA, you have specific rights regarding your personal data held by cyl88. We fully respect and facilitate the exercise of these rights:

CYL88 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Below are our data retention period guidelines:

• Active account data: Retained for the duration your account is active and for any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's financial and taxation laws.
• KYC verification data: Retained for 5 years after account closure to meet AML and regulatory compliance requirements.
• Technical & security logs: Retained for 12 months for security incident investigation and system improvement purposes.
• Marketing data (with consent): Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

CYL88 is an online gambling platform that strictly for individuals aged 18 and above only. We do not knowingly collect, store, or process any personal data from children or individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate action to delete all such data and close the account in question. Parents or guardians who become aware that their child has registered an account at cyl88 without permission are advised to contact us immediately.

CYL88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. Any significant amendments will be communicated to you via in-platform notification or your registered email at least 14 days before taking effect.

The "Last Updated" date shown at the top of this document reflects the current version of the Privacy Policy in effect. We encourage you to review this page periodically to stay informed on how we protect your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the cyl88 compliance team is ready to assist you through the following channels:

• Privacy Compliance Email: [email protected]
• Live Chat 24/7: Directly within the cyl88 platform — average response time under 3 minutes
• Request processing time: 14 working days for official data access requests