cylbet Privacy Policy

1. Who We Are

cylbet ("cylbet", "we", "us", "our") operates the online casino and sports betting platform accessible at cylbet.co. We are the data controller responsible for the personal data you provide when registering and using the cylbet platform. cylbet operates under internationally recognised gaming authority guidelines, which impose specific obligations on how we collect, store, and process personal data.

References to "you" or "the Player" in this Privacy Policy mean any individual who registers an Account, accesses the cylbet Platform, or otherwise interacts with cylbet's services.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an Account or use cylbet services, you provide us with personal data including:

• Identity data: Full name, date of birth, nationality, gender.
• Contact data: Email address, mobile phone number, residential address.
• Identity verification data: MyKad number, Passport number, copies of identity documents submitted for KYC purposes.
• Payment data: Payment method details (e.g., Touch n Go eWallet account identifier, bank account details for CIMB/Maybank/Public Bank withdrawals, USDT wallet address). cylbet does not store full payment instrument credentials — these are processed through PCI-compliant payment gateways.
• Account credentials: Username and hashed password. cylbet does not store plain-text passwords.
• Responsible gaming data: Deposit limits, session limits, self-exclusion requests, and related settings you configure in your Account.

2.2 Data Collected Automatically

When you access the cylbet Platform, we automatically collect certain technical and behavioural data, including:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and feature interactions.
• Transaction data: Deposit and withdrawal history, bet history, bonus activity, and account balance changes.
• Location data: Derived from IP address for access control and jurisdictional compliance purposes. cylbet does not collect precise GPS location data.

2.3 Data from Third Parties

cylbet may receive personal data about you from third-party sources in the following contexts:

• Identity and age verification service providers used to conduct KYC checks.
• Payment processors confirming successful or failed payment transactions.
• Anti-fraud and AML screening service providers.
• Responsible gaming databases, where you have registered a self-exclusion that applies to the cylbet Platform.

3. How We Use Your Personal Data

cylbet uses your personal data for the following purposes:

4. Legal Basis for Processing

cylbet processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to perform the contract between you and cylbet — i.e., to provide you with the cylbet gaming services you have registered for.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including KYC/AML obligations, age verification, and gaming regulatory reporting.
• Legitimate interests: Processing is necessary for cylbet's legitimate interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing & Disclosure

cylbet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment service providers: To process deposits and withdrawals. Providers include Touch n Go eWallet, Boost, GrabPay, and banking partners. These providers process data under their own privacy policies and PCI DSS security standards.
• KYC and identity verification providers: To verify your identity and age as required by our licensing obligations.
• AML screening and fraud prevention providers: To screen transactions for suspicious activity and protect the integrity of the cylbet Platform.
• Game software providers: Game studios such as Pragmatic Play, PG Soft, and Asia Gaming may receive limited technical data (e.g., session tokens) to deliver their games through the cylbet Platform. No personal identity data is shared with game studios beyond what is technically required.
• IT infrastructure and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and legal authorities: cylbet may be required to disclose personal data to law enforcement, gaming regulators, financial intelligence units, or other competent authorities in response to lawful requests or as required by applicable law.
• Responsible gaming databases: In jurisdictions where cylbet participates in centralised self-exclusion register schemes, relevant exclusion data may be shared with the operating body of such schemes.

6. Cookies & Tracking Technologies

The cylbet Platform uses cookies and similar tracking technologies to operate and improve our services. Cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, account security, and load balancing. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised data about how Players use the cylbet Platform, to identify performance issues and improve the user experience.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit displays, and session reminder configurations.
• Marketing cookies: Used where you have consented to receive personalised offers and promotional communications from cylbet. These track your activity to help us tailor relevant offers to you.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using cylbet, but may affect certain personalisation features.

7. Data Retention

cylbet retains your personal data for as long as your Account is active and for such period thereafter as is required by our legal and regulatory obligations. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years following Account closure, in compliance with AML regulatory requirements applicable to our licensing jurisdiction.
• Transaction and bet records: Retained for a minimum of five (5) years following the date of the transaction, as required by applicable gaming and financial regulations.
• Support correspondence: Retained for three (3) years from the date of the interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

When personal data is no longer required, cylbet disposes of it securely using industry-standard data destruction methods.

8. Data Security

cylbet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cylbet servers.
• Encryption of sensitive data at rest, including KYC document storage.
• Access controls ensuring that cylbet staff can only access personal data required for their specific role.
• Regular security audits, vulnerability assessments, and penetration testing of the cylbet Platform.
• Two-factor authentication available for all player Accounts and enforced for administrative access.
• Incident response procedures for the prompt detection, containment, and notification of personal data breaches.

While cylbet takes all reasonable measures to protect your data, no internet transmission or electronic storage system can be guaranteed as completely secure. You are responsible for maintaining the security of your Account login credentials.

9. Your Privacy Rights

As a cylbet player, you have the following rights in respect of your personal data, subject to applicable law and our legal retention obligations:

• Right of access: You may request a copy of the personal data cylbet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your Account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (which may require us to retain certain data for up to five years following Account closure).
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to object: You may object to processing of your personal data where we rely on legitimate interests as our legal basis, and where your privacy rights override those interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via your Account settings or by contacting support.
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format.

To exercise any of these rights, please contact the cylbet data team at [email protected]. We will respond to valid requests within a reasonable timeframe.

10. Children's Privacy

The cylbet Platform is strictly for persons who are 21 years of age or older. cylbet does not knowingly collect personal data from persons under 21. If cylbet discovers or is informed that a User is under the required age, the Account will be closed immediately and any personal data associated with the underage User will be deleted in accordance with our data retention policies, except where retention is required for regulatory reporting purposes.

If you believe that a person under 21 has registered an Account on the cylbet Platform, please notify us immediately at [email protected].

11. International Data Transfers

cylbet may transfer your personal data to service providers located outside Malaysia in connection with the provision of IT infrastructure, KYC verification, payment processing, or game delivery services. Where such transfers occur, cylbet ensures that appropriate safeguards are in place to protect your personal data, including data processing agreements incorporating standard contractual clauses or equivalent protections recognised under applicable data protection law.

12. Third-Party Links

The cylbet Platform does not contain links to external third-party websites. In the event that any such links appear in future, cylbet is not responsible for the privacy practices or data security standards of third-party websites. This Privacy Policy applies solely to the cylbet Platform at cylbet.co.

13. Updates to This Privacy Policy

cylbet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users via email or an in-platform notification. The revised Privacy Policy will take effect from the date it is published at cylbet.co/privacy-policy. Continued use of the cylbet Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or cylbet's handling of your personal data, please contact us:

This Privacy Policy was last reviewed and updated in June 2026 and applies to all users of the cylbet Platform. For legal terms governing use of the cylbet Platform, please refer to the cylbet Terms & Conditions available at cylbet.co/terms-conditions.