CYL88 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains in plain and formal terms what information we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject.
Effective Date: 1 January 2026These cards outline the key principles of how CYL88 handles your data. They are a plain-language summary — the full policy below is the authoritative version.
CYL88 collects personal data solely for the purpose of operating your account, processing transactions, complying with KYC obligations, and improving your experience on the platform. We do not collect data we have no use for.
All personal data is stored using 256-bit SSL encryption at rest and in transit. Access to personal data within CYL88 is restricted on a strict need-to-know basis and governed by internal data access policies.
CYL88 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data is shared only with vetted service providers who process it on our behalf, and only to the extent strictly necessary.
You have the right to access, correct, and request deletion of your personal data. You may also object to certain types of processing. Requests are handled within 30 days of receipt and processed at no charge.
CYL88 uses cookies and similar technologies solely for platform functionality, session management, and aggregate analytics. We do not use advertising tracking cookies or sell cookie data to third-party ad networks.
Personal data is retained for as long as your account is active, plus the minimum retention period required by applicable law (typically 5–7 years for financial records). Data no longer required is securely destroyed.
This Privacy Policy ("Policy") is issued by CYL88 ("CYL88", "we", "us", "our") and applies to all personal data collected, processed, stored, and disclosed in connection with your use of the CYL88 website, mobile platform, and all associated account, gaming, and payment services (collectively, the "Platform").
CYL88 recognises the importance of personal data protection and is committed to handling your information responsibly, transparently, and in accordance with applicable privacy legislation. This Policy describes our practices in relation to personal data and sets out the rights available to you as a data subject.
By registering an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to arrange account closure.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Data Subject" | The natural person to whom the Personal Data relates — in the context of this Policy, primarily you as a registered or prospective CYL88 player. |
| "Data Controller" | CYL88, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of CYL88, pursuant to a data processing agreement, for purposes defined by CYL88. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by a Data Subject to the processing of their Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process conducted by CYL88 to comply with anti-money laundering and responsible gambling obligations. |
CYL88 collects Personal Data across several categories, depending on the nature of your interaction with the Platform:
CYL88 collects Personal Data through the following means:
CYL88 processes Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your CYL88 account; processing login authentication; managing account settings and preferences. |
| Identity Verification (KYC) | Verifying your identity and age (21+) to comply with anti-money laundering, counter-terrorism financing, and responsible gambling obligations. |
| Payment Processing | Processing deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. |
| Fraud Prevention | Detecting and preventing fraudulent transactions, bonus abuse, account compromise, money laundering, and other prohibited conduct. |
| Responsible Gambling | Monitoring gameplay patterns to identify signs of problem gambling; administering self-exclusion, deposit limits, and cool-off tools; maintaining exclusion records. |
| Customer Support | Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality and compliance purposes. |
| Platform Improvement | Analysing aggregate usage data to improve platform performance, game selection, and user experience. No individual profiling for this purpose. |
| Legal Compliance | Meeting regulatory reporting obligations, responding to lawful requests from competent authorities, and maintaining records for the period required by law. |
| Marketing Communications | Sending promotional offers and bonus notifications to opted-in players only. You may withdraw consent at any time by contacting support or updating account preferences. |
CYL88 processes Personal Data on one or more of the following legal bases:
CYL88 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We may share Personal Data with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:
Given the international nature of CYL88's operations, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, CYL88 ensures that appropriate safeguards are in place, including contractual clauses and data processing agreements that provide an equivalent level of protection to that afforded under Malaysian data protection law.
CYL88's primary data infrastructure is hosted within secure data centres, and all transfers of sensitive Personal Data — including identity documents and financial records — are encrypted in transit using TLS 1.2 or higher. If you wish to obtain details of the specific safeguards applicable to any particular international transfer, please contact us at the address listed in Section 16.
CYL88 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Records | Duration of account plus 7 years following account closure (for AML compliance) |
| Financial Transaction Records | Minimum 7 years from the date of the transaction (regulatory requirement) |
| KYC Documents | Duration of account plus 7 years (anti-money laundering obligations) |
| Gaming & Bet History | Duration of account plus 5 years following account closure |
| Customer Support Records | 3 years from the date of the last support interaction |
| Self-Exclusion Records | Indefinite — maintained to prevent re-registration during exclusion period |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years for evidentiary purposes |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard methods. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.
CYL88 uses cookies and similar tracking technologies to support the operation of the Platform. Cookies are small data files placed on your device by your browser when you visit the Platform.
CYL88 does not deploy advertising or cross-site tracking cookies. We do not sell cookie data or share cookie-derived profiles with advertising networks, data brokers, or third-party marketers.
You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including login and payment functionality. Instructions for managing cookies are available in your browser's help documentation.
Subject to applicable law and certain exceptions, you have the following rights in respect of your Personal Data held by CYL88. Requests may be submitted to [email protected] and will be processed within 30 days of receipt.
Request a copy of the Personal Data CYL88 holds about you, along with details of how it is processed.
Request correction of any inaccurate or incomplete Personal Data held in your account records.
Request deletion of your Personal Data where it is no longer needed for the purpose it was collected, subject to legal retention obligations.
Request that CYL88 limit the processing of your data in certain circumstances, such as during the resolution of an accuracy dispute.
Receive a structured, machine-readable copy of Personal Data you have provided to CYL88, where technically feasible and legally applicable.
Object to processing based on legitimate interests, including direct marketing. Marketing objections are actioned immediately upon receipt.
Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting prior processing.
CYL88 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:
While CYL88 takes all reasonable precautions, no data transmission over the internet is entirely risk-free. You are responsible for maintaining the security of your account credentials and for immediately reporting any suspected unauthorised access to [email protected].
The CYL88 Platform is strictly intended for adults aged 21 years and above. CYL88 does not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires confirmation of age, and KYC verification requires submission of a valid government-issued identity document confirming the player is of eligible age.
If CYL88 becomes aware that Personal Data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all data associated with that account will be reviewed and deleted to the extent legally permissible, and any deposits will be returned following investigation.
If you have reason to believe that a minor has registered an account on CYL88, please notify us immediately at [email protected].
The CYL88 Platform may reference third-party payment services (including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay) as part of our deposit and withdrawal functionality. These services are operated by independent third parties whose own privacy policies govern the data they collect and process in connection with your use of their services.
CYL88 is not responsible for the privacy practices of third-party payment processors or software providers. We recommend that you review the privacy policy of any third-party service before providing your personal information to them directly.
CYL88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via a Platform notification, email to your registered address, or both — no less than seven (7) days before the revised Policy takes effect.
The date shown at the top of this page ("Effective Date") reflects when the current version entered into force. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and contact us to arrange account closure.
The current version of this Policy is always available at cyl88.cam/privacy-policy. Previous versions are archived and available upon request.
For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by CYL88, please use one of the following contact channels:
Now that you understand how CYL88 protects your personal data, you can play knowing your information is handled with care. Deposit from RM30 using DuitNow or Touch 'n Go eWallet and get started today. For players aged 21 and above only.