cyls88 Privacy Policy

1. Who We Are & Data Controller

This Privacy Policy is issued by cyls88, the operator of the online gaming platform accessible at cyls88.app ("cyls88", "we", "us", "our"). cyls88 acts as the data controller in respect of the personal data of Members and visitors to the cyls88 Platform, meaning we determine the purposes and means by which your personal data is processed.

If you have any questions regarding this Privacy Policy or the manner in which cyls88 processes your personal data, please contact us via the support channels set out in Section 13 of this Policy.

2. Personal Data We Collect

cyls88 collects the following categories of personal data from Members and Platform visitors:

2.1 Identity & Contact Data

• Full legal name;
• Date of birth;
• National identification number or passport number (for KYC verification);
• Email address;
• Residential address;
• Mobile phone number.

2.2 Financial Data

• Payment method details (bank account numbers, e-wallet identifiers, FPX details — stored only to the extent necessary for transaction processing and regulatory record-keeping);
• Transaction history (deposits, withdrawals, wagering activity);
• Account wallet balance history.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Login timestamps and session durations;
• Pages visited, games accessed, and features used on the Platform;
• Cookie identifiers and session tokens.

2.4 Communications Data

• Records of live chat conversations with the cyls88 support team;
• Email correspondence with cyls88;
• Complaint and dispute records.

3. How We Collect Your Data

cyls88 collects personal data through the following means:

• Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a promotion;
• Automated collection: Through cookies, server logs, and analytics tools as you navigate the cyls88 Platform;
• Third-party sources: From payment processors (for transaction verification), identity verification service providers (for KYC compliance), and fraud prevention services where applicable.

4. Purposes & Legal Basis for Processing

cyls88 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of the Member agreement between you and cyls88;
• Identity verification and KYC compliance — required by our gaming licence and applicable anti-money laundering obligations;
• Payment processing — necessary for processing your deposit and withdrawal transactions in MYR;
• Fraud prevention and security — legitimate interest of cyls88 and compliance with applicable law;
• Responsible gaming monitoring — legal obligation and legitimate interest in preventing gambling-related harm;
• Customer support — necessary for the performance of the Member agreement;
• Platform analytics and improvement — legitimate interest in improving cyls88 services;
• Marketing communications — where you have provided explicit consent, and subject to the opt-out rights described in Section 9.

5. Sharing Your Personal Data

cyls88 does not sell or rent your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: FPX, Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank Online, and other payment service providers as necessary to process your transactions;
• Identity verification providers: Third-party KYC and age verification services used to confirm Member identity in compliance with our licensing requirements;
• Game software providers: To the extent necessary for game operation, providers may receive technical session data but not your full personal profile;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory obligation, including suspicious transaction reporting;
• IT and infrastructure service providers: Cloud hosting and cybersecurity service providers operating under binding data processing agreements with cyls88.

6. International Data Transfers

As cyls88 operates under an international gaming licence, some of your personal data may be stored or processed outside of Malaysia — including within the jurisdiction of our licensing authority and by service providers based in other countries. Where such transfers occur, cyls88 ensures that appropriate safeguards are in place to protect your personal data, including contractual data transfer agreements that reflect the requirements of applicable data protection law.

7. Data Retention

cyls88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements;
• KYC verification documents are retained for the period required by our licensing authority's record-keeping obligations;
• Support communications are retained for two (2) years from the date of the interaction;
• Technical and usage data collected via cookies and analytics may be retained for up to thirteen (13) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies & Tracking Technologies

The cyls88 Platform uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Required for the Platform to function — including login session management, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Analytics cookies: Used to collect aggregated, anonymised data about how Members navigate and use the Platform, enabling cyls88 to improve its services. No personally identifiable information is included in analytics data;
• Preference cookies: Used to remember your Platform preferences (e.g., display language, game lobby sort settings) across sessions.

cyls88 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect your ability to use the Platform.

9. Your Rights as a Data Subject

Subject to applicable data protection law and our regulatory obligations, you have the following rights in respect of your personal data held by cyls88:

• Right of access: You may request a copy of the personal data cyls88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: In certain circumstances, you may request deletion of your personal data (subject to overriding regulatory retention obligations);
• Right to restriction of processing: You may request that cyls88 restrict processing of your personal data in specific circumstances;
• Right to data portability: You may request that cyls88 provide your personal data in a commonly used machine-readable format;
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the cyls88 support team via live chat or at the email address provided in Section 13. cyls88 will respond to all data subject requests within thirty (30) days of receipt.

10. Children's Privacy

The cyls88 Platform is strictly for adults aged 21 years and above. cyls88 does not knowingly collect, process, or store personal data from individuals under the age of 21. If cyls88 becomes aware that personal data has been collected from an underage individual, that data will be deleted promptly and the associated Account suspended in accordance with our Terms & Conditions and responsible gaming obligations.

If you believe an individual under 21 has registered an Account with cyls88, please notify our support team immediately so that appropriate action can be taken.

11. Security Measures

cyls88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction, including:

• SSL/TLS encryption for all data transmission between your device and the cyls88 Platform;
• Encryption of sensitive data fields (including financial data and identity documents) at rest;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular external penetration testing and security audits;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures for timely detection, containment, and notification of data breaches where required by applicable law.

While cyls88 takes all reasonable steps to secure your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for notifying cyls88 promptly of any suspected unauthorised access.

12. Changes to This Policy

cyls88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, cyls88 will notify you by email to your registered address or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the cyls88 Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how cyls88 protects your personal data. The date at the top of this page indicates when the Policy was last updated.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or cyls88's handling of your personal data, please contact our support team through the following channels:

cyls88 is committed to handling all privacy-related enquiries promptly, professionally, and in strict confidence. If you are not satisfied with our response to a data subject request or privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated on 1 January 2026 and applies to all cyls88 Members and Platform visitors from that date.