Privacy Policy CYL88 — Our Commitment to Protecting Your Data

Cyl88 (referred to as "we", "the platform", or "cyl88" in this document) operates an online entertainment platform at cyl88.bar. In doing so, we collect and process personal data from our users.

This Privacy Policy details how cyl88 collects, uses, stores, protects, and in certain circumstances, shares your personal data. It also outlines the rights you hold regarding that personal data.

By registering an account with cyl88 or continuing to use this platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

Cyl88 collects personal data from various sources. Below is a summary table of the data types we collect and their sources:

We never collect sensitive data such as health information, religious beliefs, or political views. Full credit card numbers are not stored in our systems — they are processed directly through certified integrated payment gateways.

Cyl88 uses the personal data collected solely for the following purposes:

• Account management: Creating, verifying, and managing your user account, including the required identity verification (KYC) process.
• Service provision: Processing deposits, managing withdrawals, providing access to games, and ensuring the platform runs smoothly.
• Security and fraud prevention: Detecting and investigating suspicious activity, protecting user accounts from unauthorised access, and ensuring compliance with financial regulations.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support to users.
• Platform improvements: Analysing usage patterns to identify areas for improvement and enhance the overall user experience.
• Important communications: Sending account-related notifications, terms changes, security updates, and promotional information (unless you have unsubscribed).
• Legal compliance: Meeting reporting obligations required by relevant authorities, including anti-money laundering requirements.

Cyl88 does not sell users' personal data to any third party. However, in the course of platform operations, we may share data with the following parties under limited circumstances:

• Payment service providers: Payment gateways and financial institutions that process your deposits and withdrawals. They receive only the data necessary to complete each transaction.
• Game service providers: Gaming software companies that provide Live Casino, Slots, and Sports Betting on the cyl88 platform. Data shared is kept to a minimum and subject to confidentiality agreements.
• Cloud service providers: The hosting infrastructure and data storage used by cyl88 operate under strict data processing agreements.
• Statutory authorities: When required by law or a valid court order, cyl88 will comply with data disclosure requests from the relevant authorities.

All third parties receiving cyl88 user data are required to handle that information to a security and confidentiality standard equal to or higher than our own.

Cyl88 continually invests in security infrastructure to ensure your personal data remains protected at all times. Our technical and organisational measures include:

• 256-bit SSL Encryption for all data communications between the platform and users' devices.
• Data encryption at rest — data stored in our databases is in encrypted format.
• Role-based access control — only staff who require access to specific data to perform their duties are authorised to do so.
• 24/7 security monitoring with an intrusion detection system that responds automatically to suspicious activity.
• Regular security audits by independent third parties to identify and address system vulnerabilities before they can be exploited.
• Incident response plan available to ensure any data breach is addressed promptly and effectively.

Cyl88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how users interact with the platform to help us understand areas that need improvement.
• Functional Cookies: Saving user preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Used to understand overall platform traffic patterns in aggregate, not at the individual level.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the cyl88 platform.

As a cyl88 user, you hold the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If the data we hold is inaccurate or incomplete, you have the right to request a correction.
• Right to Erasure: In certain circumstances, you have the right to request that your personal data be deleted from our systems.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another platform.
• Right to Object: You may opt out of having your data processed for direct marketing purposes at any time.

To exercise any of the above rights, please contact the cyl88 support team via live chat or email. We will process your request within 30 business days. For complex requests, this period may be extended up to 60 days, with prior notification to you.

The cyl88 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that a child's personal data has been collected unintentionally, we will take immediate action to delete that data and close the relevant account. Parents or guardians who suspect their child has registered an account at cyl88 are urged to contact us immediately.

As part of integrated platform operations, users' personal data may be stored or processed on servers located outside Malaysia. This occurs when we utilise cloud service providers or international game software vendors.

Cyl88 ensures that all such cross-border data transfers are safeguarded by appropriate protection mechanisms, including:

• Contractually binding data processing agreements with all third-party vendors.
• Minimum security standards specified in every agreement.
• Periodic assessments of third-party vendors' compliance with their data protection obligations.

Cyl88 retains users' personal data only for as long as necessary for the purposes stated in this policy or as required by law:

• Active account data: Retained for as long as the account is active and for a period of 5 years after account closure.
• Financial transaction records: Retained for a minimum of 7 years to meet financial reporting and legal compliance requirements.
• Support communication logs: Retained for 2 years from the date of the last interaction.
• Technical log data: Retained for90 days for technical troubleshooting and security purposes.
• Marketing data: Retained until you unsubscribe or request deletion.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

Cyl88 reserves the right to amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform operations. Each new version will be published on this page with an updated revision date.

For amendments deemed significant, cyl88 will:

• Sending email notifications to all registered users at least 14 days before amendments take effect.
• Displaying clear notices on the platform's home page.
• In cases where changes significantly affect user rights, we may seek active consent before the amendments take effect.

Continued use of the cyl88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how cyl88 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly within the cyl88 platform — the fastest way to get a response.
• Email: [email protected] — for more detailed enquiries or those requiring written documentation.

Our team will endeavour to respond to all privacy-related enquiries within 3 business days. For more complex requests such as data access rights or deletion requests, processing may take up to 30 business days.