Cyl88 Privacy Policy – Malaysian Member Personal Data Protection

1 Privacy Policy Introduction and Scope

This Privacy Policy is published by cyl88 ("we", "Platform") and applies to all users who access or register an account on the cyl88.pw website and the official cyl88 mobile app. By using our platform, you agree that your personal data will be managed in accordance with the terms set out in this document.

Cyl88 takes member privacy very seriously. We understand that your trust in us is not something to be taken lightly. That is why we have built a comprehensive data protection system — not merely to meet legal requirements, but because we believe it is our moral responsibility to every member who has entrusted this platform.

This policy covers all aspects of personal data management, including the collection, storage, use, sharing, and deletion of member data. It also outlines your rights as a member and how you may exercise those rights.

2 Personal Data We Collect

Cyl88 collects information in two main categories — information you provide directly while using the platform, and information collected automatically as you browse the website or use our app.

We do not collect sensitive information such as biometric data, medical records, or credit card details directly. All financial transactions are processed through registered and trusted third-party payment providers, and no card data is stored in our systems.

3 Purpose of Data Collection and Use

Every piece of data collected by cyl88 has a clear and specific purpose. We do not use your data for any purpose beyond those stated below without obtaining fresh consent from you:

• Identity verification (KYC) — Ensures every member is a real, eligible individual, preventing identity fraud and underage account use.
• Account management — Allows you to log in, manage account settings, and process deposits and withdrawals securely.
• Customer support services — Helps our support team resolve any issues or complaints you report more efficiently.
• Fraud detection and security — Monitors suspicious activity to protect your account from unauthorised access.
• Platform communications — Sends important notifications related to your account, transactions, policy updates, and relevant promotional offers.
• Platform improvements — Analyses usage patterns in aggregate (not individually) to improve the overall user experience.
• Regulatory compliance — Fulfils reporting obligations to relevant authorities in accordance with applicable laws.

4 How We Protect Your Data

Cyl88 invests seriously in security infrastructure to ensure member personal data is always protected. The safeguards we implement cover multiple layers of technical and operational security:

• Data encryption in transit — All communications between your device and cyl88 servers are protected by TLS 1.3 protocol with 256-bit SSL encryption.
• Data encryption at rest — Sensitive data such as banking information and passwords are stored in encrypted form using the latest encryption algorithms.
• Internal access controls — Only specifically authorised staff may access member data, and every access is logged for auditing purposes.
• 24/7 Monitoring — The security monitoring system operates around the clock to detect and respond to any security threats promptly.
• Regular penetration testing — Our platform undergoes regular security testing by independent security experts to identify and patch any vulnerabilities.
• Two-factor authentication — Members are encouraged to enable two-factor authentication (2FA) for an extra layer of protection on their account.

5 Third-Party Data Sharing

Cyl88 does not sell member personal data to any party. However, there are limited situations where data may be shared with selected third parties for platform operational purposes:

• Payment providers — Required transaction data is shared with licensed payment providers to process your deposits and withdrawals.
• Technology service providers — Cloud infrastructure providers and technical support service providers bound by strict data confidentiality agreements.
• Regulatory body — Required information may be shared with relevant authorities when mandated by law.
• Game service providers — Minimum technical data required to run games is shared with licensed game software providers.

All third parties that receive cyl88 member data are bound by strict data protection agreements and are required to handle that data to the same or higher standards that we uphold.

6 Cookies and Tracking Technologies

The cyl88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The cookies we use fall into several categories:

• Essential cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — Collects information about how you use the platform (pages visited, time spent) to help us improve design and content.
• Preference cookies — Saves your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the platform.

7 Your Rights as a cyl88 Member

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by cyl88:

8 Data Retention and Deletion Period

Cyl88 retains member personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law:

• Active account data — Retained for the duration your account is active and up to 7 years after account closure for legal compliance and audit purposes.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements.
• Platform activity log — Retained for 2 years for security and fraud detection purposes.
• Marketing data — Deleted within 30 days after you withdraw consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to your identity.

9 Changes to This Privacy Policy

Cyl88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. When significant changes are made:

• All registered members will be notified via email or in-platform notification at least 14 days before any changes take effect.
• The effective date of each new version will be updated at the top of this document.
• For minor changes that do not affect members' fundamental rights, we may update the document without a separate notice.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after any changes take effect constitutes your acceptance of the updated policy.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints about how cyl88 handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us via:

• Live Chat — Available 24 hours a day, 7 days a week within the cyl88 platform.
• Email — Send your enquiry to [email protected] (displayed as plain text, no links).

We are committed to responding to all privacy-related enquiries within 3 business days. For cases requiring more in-depth investigation, we will provide a progress update within 14 business days.