Privacy Policy

1. Who We Are

cylbet is an online casino and sports betting platform operating at cylbet.win and serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, and other regions. In the context of this Privacy Policy, "cylbet", "we", "us", and "our" refer to the cylbet platform and its affiliated operating entities.

cylbet acts as the data controller in respect of the personal data of its registered players and website visitors. If you have any questions about how cylbet handles your personal data, please contact our support team at [email protected].

2. Information We Collect

cylbet collects personal data through several channels, including registration, account activity, and platform interactions. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document number, as provided during KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, bank account name and number for FPX/DuitNow transactions), deposit and withdrawal history, and MYR account balance records.
• Account Activity Data: Login history, game play records, betting history, bonus usage, session duration, and responsible gaming tool settings.
• Device and Technical Data: IP address, browser type and version, operating system, device identifier, and approximate geographic location derived from IP.
• Communications Data: Records of any communications between you and cylbet's customer support team, including live chat transcripts and email correspondence.
• Verification Documents: Copies of identity documents (e.g., Malaysian MyKad, passport) and proof of address documents submitted during KYC review.

cylbet does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or medical information) in the ordinary course of providing its services.

3. How We Use Your Information

cylbet uses personal data collected from players for the following purposes:

• Account Management: To create, maintain, and secure your cylbet account, including processing deposits and withdrawals in MYR.
• Identity Verification (KYC): To verify your identity and age (21+) as required by our licensing obligations and anti-money laundering standards.
• Service Delivery: To provide access to cylbet's casino games, sportsbook, promotions, and customer support.
• Fraud Prevention and AML Compliance: To monitor for suspicious activity, detect fraud, prevent money laundering, and comply with applicable international AML regulations.
• Responsible Gaming: To administer responsible gaming tools such as deposit limits, session time reminders, cool-off periods, and self-exclusion requests.
• Communications: To send transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have consented, promotional communications about cylbet offers.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the performance and user experience of the cylbet platform.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce cylbet's Terms & Conditions.

4. Legal Basis for Processing

cylbet processes personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between cylbet and the player — including account creation, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing undertaken for cylbet's legitimate business interests, including fraud prevention, security monitoring, and platform analytics — where such interests are not overridden by the player's rights and interests.
• Consent: Processing based on your explicit consent, including sending promotional marketing communications. You may withdraw consent for marketing communications at any time by contacting cylbet support.

5. Sharing of Personal Data

cylbet does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. cylbet shares personal data with third parties only in the following circumstances:

• Payment Processors: Your payment details are shared with payment service providers — including Touch 'n Go, Boost, GrabPay, and FPX banking partners — solely to process your deposit and withdrawal transactions in MYR.
• KYC Verification Partners: Identity and address documents may be shared with third-party KYC and identity verification service providers engaged by cylbet to fulfil its regulatory obligations.
• Game Providers: Game providers (such as Evolution Gaming and Pragmatic Play) may receive your account identifier and session data to facilitate gameplay and settle game outcomes.
• Regulatory and Law Enforcement Authorities: cylbet may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or lawful regulatory request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cylbet's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third-party service providers engaged by cylbet are bound by confidentiality agreements and are prohibited from using your personal data for any purpose other than providing services to cylbet.

6. International Data Transfers

6.1 cylbet's operations and service providers are located in various jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, cylbet ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data protection mechanisms — to protect your data to a standard equivalent to applicable data protection law.

6.2 By using the cylbet platform, you acknowledge that your personal data may be transferred internationally as described in this section.

7. Data Retention

7.1 cylbet retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory retention obligations.

7.2 In accordance with standard AML regulatory requirements applicable to gaming operators, cylbet retains account records, transaction histories, and KYC documentation for a minimum of five (5) years following the closure of a player's account.

7.3 Where data is no longer required and no legal retention obligation applies, cylbet will securely delete or anonymise it in a manner that prevents reconstruction.

8. Cookies and Tracking Technologies

8.1 cylbet uses cookies and similar technologies (including pixel tags and local storage) on the cylbet platform. These technologies serve the following purposes:

• Essential Cookies: Strictly necessary to enable core platform functions such as authentication, session management, and navigation. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data about how players use the platform, enabling cylbet to identify performance issues and improve the user experience.
• Preference Cookies: Used to remember your language preferences, display settings, and other personalisation options.
• Analytics Cookies: Used to analyse aggregate usage patterns and platform metrics. Data collected through analytics cookies is not linked to individual player identities.

8.2 Non-essential cookies are subject to your consent. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the cylbet platform.

9. Security Measures

9.1 cylbet implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and cylbet's servers;
• Encryption of sensitive data fields (including payment details and identity document data) at rest;
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Two-factor authentication available on all player accounts;
• Automated real-time monitoring for suspicious login activity and anomalous account behaviour;
• Regular security assessments and penetration testing of cylbet's platform infrastructure.

9.2 While cylbet takes all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. In the event of a personal data breach that is likely to result in significant harm to affected players, cylbet will notify the relevant regulatory authority and affected players in accordance with applicable law.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by cylbet:

• Right of Access: You may request a copy of the personal data cylbet holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cylbet's legal retention obligations.
• Right to Restriction: You may request that cylbet restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request that cylbet provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact cylbet's support team at [email protected]. cylbet will respond to all verified requests within a reasonable timeframe.

11. Children and Minors

11.1 The cylbet platform is strictly for persons aged 21 years and older. cylbet does not knowingly collect personal data from persons under the age of 21. If cylbet becomes aware that it has collected personal data from a minor, that data will be deleted and the associated account will be immediately suspended.

11.2 If you believe that a minor has registered on the cylbet platform, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

12.1 cylbet may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version will always be available at cylbet.win/privacy-policy.

12.2 Where changes to this Privacy Policy are material, cylbet will notify registered players by email to the address on file with reasonable advance notice. Your continued use of the cylbet platform following the effective date of any change constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cylbet handles your personal data, please contact our data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the cylbet platform

cylbet is committed to resolving all privacy-related queries and complaints promptly and transparently.