Privacy Policy —
How cylbet88 Protects Your Data

This Privacy Policy ("Policy") is issued by cylbet88 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access or use the cylbet88 website at https://cylbet88.cam, including all associated gaming, sports betting, and support services.

cylbet88 is committed to processing personal data in a manner that is transparent, lawful, and respectful of the individuals whose data we hold. This Policy has been prepared in accordance with applicable international data protection standards and reflects our operational practices as a platform serving players primarily in Malaysia, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the country.

By creating an account on cylbet88, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should not use the cylbet88 platform. This Policy should be read in conjunction with our Terms & Conditions.

The following terms shall carry the meanings assigned to them throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, including name, email address, date of birth, payment account details, IP address, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" — cylbet88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — A third-party service provider that processes Personal Data on behalf of cylbet88 and under our written instruction.
• "KYC Data" — Identity and verification documents submitted during the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" — Small text files placed on your device by the cylbet88 platform to enable functionality, analytics, and session management.
• "Sensitive Data" — A subset of Personal Data that warrants heightened protection, including financial account details, government identification numbers, and biometric data where collected.

cylbet88 collects personal data across several categories depending on the nature of your interaction with the platform. The following table provides a structured overview of the data categories we process:

We do not knowingly collect full unmasked card numbers, full bank account numbers, or biometric data beyond what is necessary and proportionate for identity verification. Where document images are collected for KYC purposes, access is restricted to our compliance personnel only.

cylbet88 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you voluntarily provide during account registration, KYC document upload, customer support interactions, or promotional opt-ins.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, session timestamps, and clickstream data via server logs and analytics tools.
• Payment Processing Partners: Transaction reference data returned by payment processors when you make deposits or withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, or cryptocurrency wallets.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar tracking mechanisms as described in Section 8 of this Policy.
• Third-Party Identity Verification Services: Where required, data from identity verification platforms used to confirm the authenticity of KYC documents submitted during account opening.

cylbet88 processes your personal data only where a valid lawful basis exists for that processing activity. The lawful bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform the contract between you and cylbet88 — including account management, payment processing, game delivery, and withdrawal execution — is conducted on the basis of contractual necessity. Without this processing, we cannot provide our services.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, age verification (mandatory 21+ threshold), AML transaction monitoring, and retention of financial records — are conducted to comply with legal and regulatory obligations applicable to cylbet88's operations.
• Legitimate Interests: We process certain Technical Data and Gaming Activity Data on the basis of our legitimate interests in platform security, fraud prevention, service improvement, and responsible gambling monitoring — provided that such interests do not override your fundamental privacy rights.
• Consent: Where required by applicable law, we will seek your express consent before processing your data for marketing communications. You may withdraw consent at any time by contacting our support team or updating your communication preferences within your account settings.

cylbet88 uses the personal data we collect exclusively for the following stated purposes. We do not repurpose your data for activities beyond those described below without providing prior notice and, where required, obtaining your consent:

• Account Management: Creating and maintaining your cylbet88 player account, verifying your identity and age (21+), and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals in MYR via your chosen payment method, granting access to casino games and sports betting markets, crediting bonuses and VIP rewards, and delivering customer support in your preferred language.
• Fraud Prevention & Security: Monitoring transaction patterns, login behaviour, and gaming activity to detect and prevent fraud, money laundering, account takeover, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling Monitoring: Analysing gaming activity data to identify patterns consistent with problem gambling and to trigger responsible gambling interventions, deposit limit enforcement, and self-exclusion compliance.
• Regulatory Compliance: Fulfilling AML reporting obligations, responding to lawful requests from competent authorities, maintaining financial records as required by applicable law, and supporting KYC audit trails.
• Platform Improvement: Using aggregated and anonymised usage data to improve platform performance, user experience, game library curation, and mobile responsiveness.
• Marketing Communications: Sending promotional emails, SMS notifications, or in-platform messages about bonuses and new features — but only where you have opted in and have not subsequently withdrawn consent.

cylbet88 does not sell, rent, or share your personal data with third parties for their own marketing purposes under any circumstances. We may share your data with the following categories of recipient only where strictly necessary and subject to appropriate data protection safeguards:

• Payment Service Providers: Payment processors and e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners) receive transactional data necessary to execute your deposit and withdrawal instructions. These providers operate under their own privacy policies and are bound by financial services regulations.
• Identity Verification Partners: Third-party KYC and document verification services that assist in confirming the authenticity of identity documents submitted during account registration. These providers process data under strict contractual obligations and data processing agreements.
• Game Suppliers: Licensed game studio partners may receive a pseudonymous player identifier (not your full name or contact details) for the purpose of game session management, RNG audit trails, and jackpot tracking.
• IT and Security Service Providers: Cloud infrastructure providers, cybersecurity vendors, and platform maintenance partners may process limited technical data in the course of providing services to cylbet88 under binding data processor agreements.
• Legal and Regulatory Authorities: Where required by a court order, regulatory directive, law enforcement request, or other lawful compulsion, cylbet88 will disclose personal data to the relevant competent authority. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations may access limited personal data in the course of providing advisory services to cylbet88.

All third parties with whom cylbet88 shares personal data are required to process that data only for the specified purpose, in accordance with our instructions, and under contractual terms that impose data protection obligations equivalent to those under which we operate.

cylbet88 uses cookies and similar tracking technologies on its platform to enable core functionality, improve user experience, and support security operations. The following categories of cookie are in use:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, anti-CSRF security tokens, and load balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable enhanced personalisation features such as remembering your preferred language (English, Bahasa Melayu, or Chinese), display preferences, and last-visited game categories. These improve your experience without tracking you across third-party websites.
• Analytics Cookies: Used to collect anonymised statistical data about how players interact with the cylbet88 platform — such as which game categories are most visited and where players encounter navigation difficulties. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, identify unusual access patterns, and support our account security monitoring systems.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict certain categories of cookie. Please note that disabling strictly necessary cookies will impair your ability to log in and use the cylbet88 platform. cylbet88 does not use third-party advertising cookies or share cookie data with marketing networks.

cylbet88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account plus a period of five (5) years following account closure, to comply with AML record-keeping requirements and to support any pending dispute resolution.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification process, in compliance with international AML standards applicable to gaming platforms.
• Financial Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations and support audit requirements.
• Customer Support Records: Support communications, including live chat transcripts and email correspondence, are retained for three (3) years to support quality assurance, staff training, and dispute resolution.
• Marketing Consent Records: Records of marketing consent and opt-out preferences are retained for the life of the account and a period of two (2) years following account closure, to demonstrate compliance with consent obligations.
• Technical Logs: Server access logs and security event records are typically retained for twelve (12) months on a rolling basis, unless a specific security investigation requires extended retention.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Data subject to a legal hold or ongoing investigation may be retained beyond standard periods pending resolution of the relevant matter.

cylbet88 implements a comprehensive programme of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All communication between your browser or device and the cylbet88 platform is protected by Transport Layer Security (TLS) with a minimum of 256-bit AES encryption.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest on our server infrastructure using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised cylbet88 personnel on a strict need-to-know basis. Role-based access controls, multi-factor authentication for administrative accounts, and comprehensive audit logging are enforced.
• Network Security: Our platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation services.
• Penetration Testing: cylbet88 commissions regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in the platform and supporting infrastructure.
• Incident Response: cylbet88 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable data protection obligations.

As a player whose personal data is processed by cylbet88, you hold the following rights in respect of your information. To exercise any of these rights, please contact our support team with your request, providing sufficient information to verify your identity:

cylbet88 will respond to all substantiated data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days with prior notification to you. Identity verification will be required before processing any data rights request to protect against unauthorised disclosure.

Please note that certain rights are subject to limitations where compliance with a legal obligation, the performance of a contract, or the detection of fraud requires continued processing. In such cases, we will explain the applicable limitation in our response to your request.

The cylbet88 platform is strictly intended for adults. The minimum age to register and use cylbet88 services is 21 years. We do not knowingly collect, process, or retain personal data from any individual under the age of 21.

Age verification is conducted as part of the mandatory KYC process for all new accounts. Any account subsequently determined to belong to a person under the age of 21 will be immediately suspended, any collected personal data will be securely deleted, and any deposited funds will be returned to the payment method of origin.

If you believe that a minor has created an account on cylbet88 or that personal data of a minor has been submitted to our platform, please contact our support team immediately at [email protected] so that we can take prompt remedial action.

cylbet88's platform infrastructure and certain third-party service providers may be located in jurisdictions outside Malaysia. Where your personal data is transferred to or processed in a country outside your country of residence, cylbet88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers may include:

• Standard contractual clauses or data processing agreements that contractually bind the recipient to equivalent data protection standards
• Transfers to jurisdictions with recognised adequate levels of data protection
• Binding corporate rules where applicable within group company structures

cylbet88 does not transfer personal data to countries that lack adequate data protection frameworks without first implementing supplementary safeguards proportionate to the level of risk posed by the transfer.

cylbet88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. Material changes — those that significantly affect how we collect or use your personal data — will be communicated to registered players via email or an in-platform notification prior to the change taking effect.

Minor amendments, such as clarifications to existing provisions or updates to contact information, will be reflected in a revised version of this Policy published on this page with an updated "Last Updated" date. Your continued use of the cylbet88 platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed of how cylbet88 handles your personal data. The current version is always available at https://cylbet88.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cylbet88, please contact our dedicated Data Protection team through the following channels. All support channels are staffed 24/7 in English, Bahasa Melayu, and Chinese.

When submitting a data rights request or privacy enquiry, please include your registered account username, a brief description of your request or concern, and any relevant reference numbers (such as a transaction ID) to help us respond accurately and efficiently.

We are committed to resolving all privacy-related enquiries promptly and transparently. Standard response times for email queries are within 24 hours on business days. For data rights requests requiring verification and internal review, please allow up to 30 calendar days as described in Section 11.