Privacy Policy & Data Protection

Privacy Policy Cylbet –
Personal Data Protection for Malaysia Members

At Cylbet, your privacy is more than a formality. This document transparently explains how we collect, store, use, and protect your personal information — so you can play with confidence without worrying about data security.

Updated: January 1, 2026

How Cylbet Protects Your Privacy

We take every aspect of data protection seriously. Here are the six key pillars of cylbet's privacy policy that keep your information safe at all times.

End-to-End Encryption

All communications between your device and cylbet servers are protected with 256-bit SSL encryption — the same technology used by leading financial institutions and banks worldwide.

Secure Data Storage

Members' personal data is stored on secured servers compliant with the international ISO 27001 security standard. Internal access to data is restricted on a need-to-know basis only.

No Sale of Data to Third Parties

Cylbet has never and will never sell, rent, or commercialize members' personal data to any third party for marketing or any other purposes unrelated to our services.

Data Control in Your Hands

Every cylbet member has the right to access, correct, or request deletion of their personal data. Such requests can be made through customer support and will be processed within 30 days.

International Standards Compliance

Cylbet's privacy policy is designed in line with international data protection principles, including GDPR. Although GDPR is a European regulation, we adopt it as our benchmark as it represents the highest standard of global privacy protection.

Controllable Marketing Preferences

Members have full control over their marketing communication preferences. You may opt out of promotional emails, in-app notifications, or any other marketing communications at any time.

1

Introduction

Cylbet values the privacy of every member. This Privacy Policy document explains in detail how we collect, store, process, and protect the personal information you provide when registering and using the Cylbet platform.

By registering a Cylbet account or using any part of our platform, you consent to the collection and processing of your personal data in accordance with this Privacy Policy. If you do not agree with any part of this policy, please contact us or stop using the platform before proceeding with registration.

Data Controller: Cylbet acts as the data controller for all personal information collected through the platform. Any privacy-related inquiries may be directed to our data protection team through the available support channels.

This policy applies to all users of the Cylbet platform, including website visitors, registered members, and anyone who interacts with any of our services. It also covers interactions through the Cylbet mobile app for Android and iOS.

2

Personal Data We Collect

Cylbet collects various categories of data depending on your level of interaction with the platform. Below is a summary of the data types collected and their purposes:

Data Categories Example Information How It's Collected
Personal Identity Full name, date of birth, identification card number Registration form, KYC process
Contact Information Email, phone number, residential address Account registration, profile updates
Financial Data Bank account number, bank name, transaction history Deposit and withdrawal processing
Usage Data Game history, betting records, login logs, session times Automatically during platform use
Technical Data IP address, device type, operating system, browser Automatically via cookies and server logs
Verification Documents MyKad copy, bank statements, utility bills KYC process and identity verification

We only collect data that is strictly necessary for the stated purpose — nothing more. This data minimisation principle is at the core of how cylbet handles member privacy.

3

How Cylbet Uses Your Data

All data collected by cylbet is used solely for legitimate, explicitly stated purposes. We never use your data for purposes outside the following scope without obtaining your additional consent:

  • Account management: Creating, verifying, and managing your account so you can access all cylbet services seamlessly.
  • Transaction processing: Ensuring deposits are credited correctly and withdrawals are sent to the right payment method within the designated timeframe.
  • Identity verification (KYC): Meeting legal compliance requirements and preventing fraud, money laundering, and unauthorised account use.
  • Customer support: Resolving complaints, answering enquiries, and helping you enjoy the best possible experience at cylbet.
  • Platform improvements: Analysing usage patterns to identify areas for improvement in functionality, speed, and user experience.
  • Marketing communications: Sending information about promotions, bonuses, and the latest offers — only to members who have consented to receive such communications.
  • Legal compliance: Fulfilling obligations under applicable laws, including cooperation with authorities when required by court order or legitimate requests from enforcement bodies.

Direct Marketing: You may withdraw consent to receive marketing communications at any time by contacting Cylbet customer support or through the notification preference settings in your account. Withdrawing consent does not affect any data processing that has already taken place.

4

Data Sharing with Third Parties

Cylbet does not sell or rent members' personal data to any third party. However, there are limited situations where we need to share your data with other parties to enable our services to function properly:

  • Payment processing providers: To process deposits and withdrawals, the required transaction information is shared with payment gateway providers that have been security-vetted.
  • Game providers: Usernames and account IDs may be shared with third-party game providers to enable access to their gaming platforms within the cylbet ecosystem.
  • Identity verification services: KYC documents are shared with approved third-party identity verification services for faster automated verification.
  • Legal authorities: We will disclose required data to authorities when mandated by a court order, official investigation, or valid legal requirement.

All third parties that receive data from cylbet are subject to strict data processing agreements and are only permitted to use that data for the purposes specified in those agreements.

5

Data Security at cylbet

Cylbet continuously invests in security infrastructure to ensure member data is always protected against unauthorized access, breaches, or misuse. Key security measures we implement include:

  • 256-bit SSL encryption for all data communications between clients and servers.
  • Data encryption at rest for sensitive information such as financial details and KYC documents.
  • Multi-layer access control for internal systems, including two-factor authentication for staff with access to member data.
  • Continuous 24/7 security monitoring with automated intrusion detection systems.
  • Regular independent security audits to identify and patch any vulnerabilities.
  • A tested data incident response plan to ensure a swift response in the event of any security breach.

Data Breach Notice: In the event of any data security breach that materially affects members' personal information, cylbet will notify the affected members within a reasonable time after the breach is confirmed, in accordance with applicable legal obligations.

While we implement comprehensive security measures, no online system can be guaranteed 100% secure. Members are also encouraged to take personal precautions such as using strong, unique passwords and never sharing login credentials with anyone.

6

Cookie Usage

Cylbet uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver more relevant content. The types of cookies we use are as follows:

Cookie Types Purpose Status
Essential Cookies Enabling core platform functions such as login, sessions, and security Mandatory
Preference Cookies Storing user settings such as language, time zone, and display preferences Options
Analytics Cookies Collecting anonymous usage data to help us understand how members use the platform Options
Performance Cookies Monitor platform speed and performance to identify technical issues Options

You can manage and delete cookies through your browser settings. However, deleting essential cookies may affect platform functionality and your login experience. Optional cookies can be declined without impacting core platform functions.

7

Your Rights as a Data Subject

As a cylbet member, you have the following rights regarding your personal data. All requests relating to these rights may be submitted to cylbet customer support and will be processed within 30 calendar days:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide a complete report in an easy-to-read format.

Right to Rectification

If any data we hold about you is inaccurate or outdated, you have the right to request a correction. Simple updates can be made directly through your account profile.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data in certain circumstances. Please note that some data may need to be retained to fulfill legal obligations even after a deletion request is received.

Right to Restrict Processing

In certain situations, you may request that we restrict how we process your data — for example, while a dispute regarding data accuracy is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format — and to request that we transfer it to another data controller where technically feasible.

8

Data Retention Period

Cylbet retains members' personal data only for as long as necessary to fulfill the original purpose of collection, or as required by applicable law. General data retention periods are as follows:

  • Active account data: Retained for the duration of the active account and for 5 years after account closure for audit record purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with standard financial reporting legal requirements.
  • KYC Documents: Retained for 5 years after the end of the business relationship in accordance with anti-money laundering requirements.
  • Access and security logs: Retained for 2 years for security incident investigation purposes if required.
  • Support communication data: Retained for 3 years after resolution for reference and service quality audit purposes.

Upon expiry of the designated retention period, data will be securely deleted or anonymised using procedures that ensure the information cannot be recovered.

9

Child Protection

The cylbet platform is strictly for adults aged 18 and above. cylbet does not intentionally collect or process personal data of individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will promptly delete that data and suspend the relevant account. Anyone who believes a child may have registered a cylbet account is encouraged to report it to our customer support immediately.

10

Amendments to the Privacy Policy

Cylbet reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or service improvements. Any material changes will be communicated to members via email or a prominent in-platform notification at least 14 days before the changes take effect.

Continued use of the cylbet platform after the effective date of any amended policy constitutes acceptance of the updated privacy terms. The latest update date is always displayed at the top of this document.

The current version of this Privacy Policy is effective as of January 1, 2026. Please check this page periodically.

11

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your rights regarding personal data, please contact the cylbet data protection team via:

  • Live Chat: Available 24 hours a day via the cylbet platform — the fastest way to get an immediate response.
  • Email: [email protected] — for specific privacy inquiries and data rights requests.
  • Support Email: [email protected] — for general inquiries including those related to privacy.

We are committed to handling every privacy enquiry seriously. All requests received will be acknowledged within 48 hours and resolved within 30 calendar days, unless exceptional complexity requires more time — in which case, we will notify you of the expected resolution timeframe.

You're Always in Control of Your Data

Rights You Hold
  • Access to all data we hold about you
  • Correct any inaccurate information
  • Request data deletion in eligible situations
  • Limit how we process your data
  • Receive your data in a portable format
  • Withdraw marketing consent at any time
  • Report privacy concerns to the regulatory authority
cylbet's Data Protection Guarantee
  • Your data will not be sold to any party
  • 256-bit SSL encryption for all transactions
  • Internal access is strictly restricted
  • Regular security audits by independent third parties
  • 48-hour response for all privacy inquiries
  • Immediate notification in the event of a security incident
  • Compliance with international GDPR and ISO 27001 standards

Play at Cylbet with Peace of Mind — Your Data is Fully Protected

With a transparent privacy policy and industry-grade security measures, Cylbet is a safe choice for your online gaming experience. Register today and enjoy complete peace of mind.

Bahasa Melayu