CYL888 Privacy Policy

This Privacy Policy applies to personal data processed by CYL888 through cyl888.cam, its mobile web experience, player accounts, customer support channels, promotions, payment functions, and related online casino or sports betting services. It applies whether a user visits the website without registering or becomes a verified CYL888 player.

CYL888 recognises that privacy is especially important where identity documents, financial activity, gaming records, and responsible gambling information are involved. We therefore seek to process personal data fairly, for identified purposes, and with safeguards appropriate to the nature of the information. Our practices are designed with reference to applicable privacy requirements and the data protection principles reflected in Malaysia's Personal Data Protection Act 2010, where relevant.

By using CYL888, you acknowledge that you have read this policy. Where consent is required for a specific activity, CYL888 will seek that consent separately. This policy does not replace any consent notice, promotional rule, or contractual provision that applies to a particular service.

CYL888 may collect information directly from players, automatically from devices, and from service providers involved in payments, security, identity checks, or platform delivery. The information collected depends on how a person interacts with CYL888.

Account and Identity Information

• Full name, date of birth, residential address, nationality, email address, and Malaysian phone number.
• Username, encrypted password records, account preferences, security questions, and authentication information.
• MyKad, passport, driving licence, proof of address, selfie verification, and other documents reasonably required for Know Your Customer checks.

Financial and Gaming Information

• Deposit and withdrawal records, transaction references, MYR balances, bonus activity, wagering history, wins, losses, and account adjustments.
• Limited payment details connected with GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or another supported method.
• Sports betting selections involving events such as the EPL, Liga Super Malaysia, UFC, and other markets offered on the platform.

Technical and Communication Information

• Internet Protocol address, device type, browser, operating system, language, time zone, referral information, session activity, and security logs.
• Live chat transcripts, support correspondence, complaint records, survey responses, and responsible gambling communications.

CYL888 asks players to provide information that is accurate and current. False or outdated information may delay verification, deposits, withdrawals, or the investigation of an account security concern.

CYL888 processes personal information only where there is an appropriate operational, contractual, legal, security, or consent-based reason. Depending on the circumstances, data may be used to:

• Create, administer, authenticate, and secure a CYL888 account.
• Confirm that a player is aged 21 or above and verify identity, address, and payment ownership.
• Process deposits and withdrawals in MYR through selected Malaysian banks and e-wallet providers.
• Record bets, settle game outcomes, apply bonus rules, calculate loyalty benefits, and maintain accurate transaction histories.
• Detect duplicate accounts, bonus abuse, fraud, account takeover, collusion, money laundering, and other prohibited conduct.
• Respond to questions, investigate complaints, restore account access, and provide technical support.
• Apply deposit limits, cool-off periods, self-exclusion requests, and other responsible gambling controls.
• Improve website stability, navigation, mobile performance, game discovery, and service reliability for players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.
• Send service messages, policy notices, security alerts, and promotional communications where permitted.

CYL888 may use aggregated or de-identified information for analytics, service planning, risk analysis, and business reporting. Where information has been effectively anonymised so that an individual cannot reasonably be identified, it is no longer treated as personal data under this policy.

The legal basis for processing depends on the activity. CYL888 may process personal information because it is necessary to provide requested services and perform the player agreement, because a legal or regulatory obligation applies, because CYL888 has a legitimate interest that is not overridden by the player's rights, or because the player has provided valid consent.

Legitimate interests may include maintaining platform security, preventing fraudulent payments, understanding service performance, enforcing the Terms and Conditions, protecting players, and resolving disputes. When CYL888 relies on consent, the consent may be withdrawn for future processing, subject to any information that must still be retained or processed for another lawful reason.

Refusing to provide required identity, payment, or verification information may prevent CYL888 from opening an account, completing KYC checks, accepting a transaction, or processing a withdrawal. Optional marketing consent is not a condition of maintaining an account.

CYL888 uses payment and identity information to confirm ownership, reduce fraud, meet compliance requirements, and complete requested transactions. A payment provider such as GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank may process information under its own privacy practices.

CYL888 does not require players to disclose a complete payment password, e-wallet PIN, online banking password, or one-time password to customer support. Players should never share those credentials. Support may request a transaction reference, redacted statement, or proof that a payment account belongs to the registered player.

Identity checks may involve comparing submitted details with documents, checking for duplicate registrations, reviewing the source of funds where appropriate, or asking for an updated document. Enhanced checks may be required for unusual activity, a large MYR withdrawal, inconsistent information, or suspected misuse.

CYL888 may use cookies, local storage, session identifiers, and similar technologies to keep players signed in, remember preferences, maintain security, measure performance, and understand how pages are used. Essential technologies support functions such as account authentication, deposit flows, game sessions, and fraud detection.

Analytics information may show which pages are viewed, how long a session lasts, whether an error occurs, and which device or browser is used. CYL888 uses this information to identify technical issues and improve the mobile experience. Advertising or preference cookies, where used, are managed in accordance with applicable consent requirements.

Browser controls may allow a user to block or delete cookies. Disabling essential cookies can prevent sign-in, interrupt game sessions, or stop certain CYL888 security and payment features from working correctly.

CYL888 does not sell personal data. Information may be disclosed only where reasonably necessary for service delivery, security, legal compliance, or the protection of players and the platform. Recipients may include:

• Payment processors, banks, e-wallet providers, and transaction monitoring services.
• Identity verification, fraud prevention, cybersecurity, hosting, analytics, and customer support providers.
• Game and sportsbook suppliers where limited information is required to operate, settle, or investigate a session.
• Professional advisers, auditors, insurers, or corporate transaction participants subject to confidentiality obligations.
• Courts, regulators, law enforcement agencies, or other competent authorities where disclosure is required or lawfully requested.

Service providers are expected to process information only for authorised purposes and to apply appropriate security. CYL888 seeks to limit disclosures to the data reasonably required for the relevant task.

Some CYL888 technology, game, payment, security, or support providers may operate outside Malaysia. As a result, personal information may be processed in another jurisdiction whose privacy laws differ from Malaysian requirements.

Where an international transfer occurs, CYL888 takes reasonable steps to use suitable contractual, organisational, and technical protections. These may include data-processing agreements, access restrictions, encryption, confidentiality obligations, and vendor security assessments.

A transfer does not alter the purposes described in this Privacy Policy. CYL888 remains committed to limiting access and ensuring that service providers use information only for the functions they have been engaged to perform.

CYL888 applies layered safeguards intended to protect personal information from unauthorised access, disclosure, alteration, misuse, or loss. Measures may include encryption in transit, restricted administrative access, logging, monitoring, secure credential handling, staff confidentiality requirements, and periodic security review.

No online service can guarantee absolute security. Players also have an important role: use a strong and unique password, protect authentication codes, sign out on shared devices, and contact CYL888 promptly if suspicious activity occurs. Support will never ask for a banking password, e-wallet PIN, or complete one-time password.

If a personal data incident creates a material risk, CYL888 will investigate, contain the incident, document relevant findings, and provide notifications where required by applicable law.

CYL888 retains personal information for as long as reasonably necessary to maintain an active account, deliver services, resolve disputes, prevent fraud, support responsible gambling controls, and satisfy applicable accounting, compliance, or legal requirements.

Retention periods vary according to the category and purpose of the information. Account records, transaction histories, identity verification material, self-exclusion records, and complaint files may need to be retained after account closure. This helps CYL888 enforce exclusions, answer later payment queries, and demonstrate compliance.

When information is no longer required, CYL888 will take reasonable steps to delete, anonymise, or securely isolate it in accordance with applicable retention procedures. A deletion request may not result in immediate removal where continued retention is legally permitted or required.

Subject to applicable law and appropriate identity verification, a player may ask CYL888 to provide information about personal data held, correct inaccurate or incomplete information, withdraw consent for optional processing, restrict certain uses, or delete information that no longer has a valid retention basis.

A request should identify the account and clearly describe the action sought. CYL888 may ask for evidence of identity before releasing or changing personal information. This verification protects players against fraudulent requests. Requests may be limited or refused where an exemption applies, the request would affect another person's rights, or the information must be retained for legal, security, payment, anti-fraud, or responsible gambling purposes.

Players may opt out of promotional messages while continuing to receive essential notices concerning account security, transactions, policy changes, or service availability. Privacy choices do not override an active self-exclusion, deposit limit, or other protective restriction.

CYL888 may process information concerning deposit limits, session controls, cool-off periods, self-exclusion, affordability concerns, or communications about gambling-related harm. Such information is handled with additional care because it may reveal sensitive circumstances.

CYL888 uses responsible gambling information to apply requested restrictions, monitor compliance with those restrictions, avoid inappropriate marketing, provide relevant support, and protect the integrity of self-exclusion arrangements. A player who requests self-exclusion should not attempt to open another CYL888 account.

Responsible gambling records may be retained after account closure where necessary to ensure that a restriction remains effective. For information about deposit limits, cool-off periods, self-exclusion, and support options, players should review the Responsible Gambling page. CYL888 services are for players aged 21 and above only.

CYL888 does not knowingly offer accounts or gaming services to anyone under 21. A person below that age must not create an account, submit identification, deposit funds, or use another person's CYL888 credentials.

If CYL888 has reason to believe that an account belongs to an underage person, the account may be suspended while age and identity are investigated. Information may be retained where necessary to prevent repeat registration, manage transactions, or meet legal obligations.

A parent or guardian who believes an underage person has supplied personal data should contact CYL888 using the plain-text email address stated below. Sufficient information should be provided to locate the relevant record without submitting unnecessary sensitive material.

CYL888 may update this Privacy Policy to reflect changes in services, technology, security practices, payment arrangements, legal requirements, or operational procedures. The effective date at the top of the page identifies the latest published version.

Material changes may be communicated through an account notice or another appropriate channel. Players should review this page periodically. Continued use of CYL888 after an update means that the revised policy will apply to subsequent processing, except where fresh consent is legally required.

Questions, complaints, and privacy requests may be sent to the CYL888 support team. The website email is [email protected] and is displayed as plain text only. Please state “Privacy Request” and provide enough information to identify the relevant account and request.

CYL888 may need to verify the requester's identity before discussing an account or releasing information. Players should not send a banking password, e-wallet PIN, complete payment card number, or one-time password.

General explanations about accounts, payments, privacy, and verification are also available on the FAQ page. This policy should be read together with the CYL888 Terms and Conditions and Responsible Gambling information.