Your privacy is more than a legal obligation to cyl8 — it is a trust we take seriously every day. This document explains transparently how we collect, use, store and protect your personal data when you use the cyl8 platform.
Below is a summary of the key privacy protection measures cyl8 has implemented to keep every member's personal information secure.
All data transmitted between your device and cyl8's servers is encrypted using TLS protocol with AES-256-bit encryption — the same standard used by leading banking and financial institutions in Malaysia.
Cyl8 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we treat it as a trust.
Only cyl8 staff with a legitimate job requirement may access your personal data. All access is logged and audited regularly. Violations of internal access policy are met with strict disciplinary action.
The cyl8 Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all data collection and processing practices comply with applicable Malaysian law.
You have the right to request deletion of your personal data from cyl8's systems upon account closure, subject to data retention obligations under Malaysian law. Requests are processed within 30 working days.
You have full control over marketing communications from cyl8. Unsubscribe from any marketing mailing list at any time through your account settings or by contacting our support team.
Welcome to cyl8's Privacy Policy. This document explains the privacy practices of the cyl8 platform, accessible via the domain cyl8.click. We understand that your trust is our most valuable asset, and protecting your personal information is our foremost responsibility.
This Privacy Policy applies to all users of the cyl8 platform, including visitors browsing the website without a registered account, active registered members, and former members who have closed their accounts. By using the cyl8 platform, you agree to the data collection and processing practices described in this document.
Important Note: This Privacy Policy is to be read together with Terms & Conditions and the Responsible Gaming cyl8. Together, these three documents form the complete service agreement between you and cyl8.
Cyl8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that every aspect of collecting, storing, processing and sharing your personal data meets the legal requirements in force in Malaysia.
Cyl8 collects various types of information depending on how you interact with our platform. Below is a summary table of the data categories we collect and the reasons for doing so:
| Data Category | Examples of Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, identity card number | Identity verification & legal compliance |
| Contact Data | Malaysian phone number, email address | Account communications & OTP verification |
| Financial Data | Bank account number, digital wallet holder name | Deposit & withdrawal processing in MYR |
| Game Data | Betting history, games played, total wins/losses | Responsible gaming monitoring & support |
| Technical Data | IP address, device type, web browser, operating system | Account security & platform improvement |
| Usage Data | Pages visited, session duration, clicks & in-platform actions | Usage analytics & experience improvement |
This is information you consciously provide when registering an account, submitting identity verification documents, contacting the support team, completing feedback forms, or interacting with any part of the cyl8 platform that requires input from you.
When you visit or use the cyl8 platform, our systems automatically collect certain technical information such as your IP address, device and browser type, session time and duration, and your navigation patterns within the platform. This information is collected for security, fraud detection, and platform improvement purposes.
Cyl8 collects your personal data through several different methods when you interact with our platform:
When you register a cyl8 account, you provide a Malaysian phone number and a password. Your phone number is used for OTP verification and serves as your account's unique identifier. At this stage, we only collect the minimum information needed to create and verify your account.
When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u or CIMB Clicks, certain transaction details are recorded for payment processing, anti-money laundering (AML) compliance, and dispute resolution purposes. We do not store full card numbers or security codes (CVV) for any payment instrument.
For withdrawals that exceed certain limits, or at the request of our compliance team, you may be asked to submit a copy of your identity card or other supporting documents. These documents are used solely for identity verification purposes and are stored with strict security protections.
The cyl8 platform uses cookies and similar tracking technologies to collect usage information. Further details are explained in Section 7 of this document.
Support Communications: When you contact the cyl8 support team by email at support@cyl8.click, the content of that communication is retained for reference purposes, staff training, and to ensure service continuity for you.
Cyl8 uses the personal data collected for the following purposes, all of which are subject to the purpose limitation principle under Malaysia's PDPA:
Purpose Limit: cyl8 will not use your personal data for any purpose beyond what is stated in this policy without first obtaining your consent, except where required by Malaysian law.
Cyl8 takes a highly restricted approach to sharing your personal data. We do not sell, rent, or trade your data. Data sharing only takes place in the following circumstances:
Cyl8 works with selected third-party service providers to help operate the platform — including payment processors (enabling us to accept deposits via Touch 'n Go, DuitNow, FPX and more), licensed game providers, cloud computing service providers, and analytics tool providers. These providers receive only the minimum data necessary to carry out their specific functions and are bound by strict confidentiality agreements.
Cyl8 may be required to disclose your personal data to Malaysian government authorities, law enforcement agencies, or regulatory bodies when obligated to do so under applicable Malaysian law, including under the PDPA, anti-money laundering regulations, or by court order.
In the event of a merger, acquisition, or sale of cyl8's assets, users' personal data may be transferred as part of the business assets. In such circumstances, cyl8 will ensure that the receiving party is bound by privacy protection standards equivalent to or higher than our own, and you will be notified before your data is transferred.
Our Commitment: All third parties that receive cyl8 user personal data are bound by data processing agreements requiring them to use that data only for specified purposes and to protect it to a standard equivalent to the protections we provide.
Cyl8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, damage, or inadvertent disclosure.
Cyl8 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. In general:
Once the retention period expires, data is securely deleted or anonymised in accordance with established data disposal procedures.
Cyl8 user data is stored on servers located in the Asian region, maintained to high physical and digital security standards. Should any transfer of data outside Malaysia be required for platform operations, we ensure equivalent protections are in place in accordance with PDPA requirements.
The cyl8 platform uses cookies and similar tracking technologies to enhance your experience, ensure account security, and understand how users interact with our platform.
You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect the functionality of the cyl8 platform, including your ability to log in or make transactions. Disabling performance cookies will not affect core platform functionality.
Note: cyl8 does not use third-party cookies for external advertising purposes. All cookies in use are strictly for operational, security and platform improvement needs.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and cyl8's privacy commitments, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. Requests are processed within 21 working days.
You have the right to request correction of any inaccurate or incomplete personal data held in your cyl8 records.
You have the right to request deletion of your data upon account closure, subject to statutory data retention obligations.
You have the right to object to the processing of your data for direct marketing purposes at any time, without providing a reason.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service.
You have the right to opt out of marketing communications from cyl8 at any time through your account settings.
To exercise any of the rights above, please contact our privacy team by email at support@cyl8.click with the subject “Privacy Rights Request”. Please include your account number and specific details of your request. We will respond within 21 working days of receipt.
The cyl8 platform is intended solely for users aged 18 and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 18.
Should we discover that personal data belonging to a person under 18 has been collected without our knowledge — for example, through registration using false information — we will take the following steps immediately: close the account in question, delete all associated personal data from our systems, and report the incident to the relevant authorities where required under Malaysian law.
To Parents & Guardians: If you believe your child has registered or used the cyl8 platform without your knowledge, please contact us immediately at support@cyl8.click. We will act promptly to close the account and delete all associated data.
The cyl8 platform may contain links or references to third-party websites in certain contexts. This Privacy Policy applies solely to the cyl8 platform and does not cover the privacy practices of any third-party websites.
Cyl8 is not responsible for the content, privacy practices, or security policies of any third-party website. We recommend that you read the privacy policy of any third-party website you visit separately before providing them with any personal information.
This includes the websites of payment providers such as FPX banking portals, the Touch 'n Go eWallet app, GrabPay and others — even if you are directed to those sites while making a deposit or withdrawal from cyl8. These payment providers have their own privacy policies that are independent of cyl8.
Cyl8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, updated legal requirements, or other legitimate operational reasons. The “Last updated” date at the top of this document will always reflect the date of the most recent revision.
For material changes to how we collect or use your personal data, cyl8 will endeavour to provide reasonable notice to affected members — whether through in-platform notifications, an email to your registered address, or a prominent notice displayed on the platform's main page.
Continued use of the cyl8 platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your cyl8 account and request deletion of your data by contacting our team.
Recommendation: We recommend reviewing this Privacy Policy page regularly — at least once every few months — to stay up to date with cyl8's latest privacy practices.
If you have any questions, concerns or complaints regarding this Privacy Policy or how cyl8 handles your personal data, we encourage you to reach out to us directly:
Our privacy team consists of staff trained in data protection matters and will handle your enquiry with full professionalism and confidentiality. We take every privacy-related enquiry seriously and are committed to providing clear, helpful responses.
This Privacy Policy should be read together with Terms & Conditions and the Responsible Gaming cyl8 for a complete overview of your rights and responsibilities as a user of our platform.
When you play your favourite slots, place bets on a Malaysia Super League football match, or play live blackjack on cyl8, you are trusting us with more than just your money — you are trusting us with your personal information. That trust is not something we take lightly.
Picture this: you've just hit a big win at a cyl8 roulette table and want to withdraw your winnings via Touch 'n Go eWallet. To do that, we need to process your digital wallet account details. The question is — what happens to that information once the transaction is complete? The answer is straightforward: it is stored with industry-grade security, used only for purposes you have agreed to, and never sold or shared with any unrelated party.
Malaysia's Personal Data Protection Act 2010 (PDPA) grants you concrete rights over your personal data. The law requires all organisations processing the personal data of Malaysians to comply with seven core principles: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle.
Cyl8 plans and evaluates all data handling practices against these principles. These are not merely boxes to tick on a compliance checklist — they reflect how we operate every day. Whenever we develop a new feature or introduce a new payment method such as ShopeePay or Boost, a privacy impact assessment is completed before any changes go live.
When you make a deposit via FPX to Maybank2u or CIMB Clicks, or a withdrawal via DuitNow, multiple parties are involved in the transaction chain. cyl8 retains only the minimum information necessary — we do not store full card numbers, security codes (CVV), or your internet banking passwords. The payment processors we work with are licensed providers that are also subject to Bank Negara Malaysia's regulations.
Financial transaction records are retained for the period required by Malaysian financial law — not because we want to hold on to your data longer than necessary, but because this is a legal obligation that also protects you. Should a dispute arise over a transaction from 3 years ago, those records can be referenced to resolve the matter fairly.
One way we use data that may differ from other platforms is cyl8's use of your gameplay pattern data for responsible gaming purposes. This means our system monitors certain indicators — such as a sudden increase in deposit frequency or amounts, unusual betting patterns, or withdrawal attempts inconsistent with your normal behaviour.
This monitoring is not about judging how you play — it's about making sure your entertainment stays just that: entertainment. If our system flags any concerning patterns, our team may reach out personally to check in on you and share information about available support resources. This is our responsibility as a platform that genuinely cares about its members' wellbeing.
While cyl8 invests heavily in security infrastructure, we also maintain a comprehensive incident response plan in the event of an unexpected data breach. In line with Malaysia's PDPA requirements, should a data breach occur that poses a risk to individuals' rights and freedoms, cyl8 will notify affected users and the relevant authorities within the timeframe prescribed by law.
The notification will clearly explain what occurred, what data was affected, the steps we have taken to address the incident, and what you should do to protect yourself. Transparency in difficult situations is part of our commitment to you.
Privacy enquiries are handled 24/7 by our Malay-speaking support team.
support@cyl8.clickHere are the questions most frequently asked by cyl8 users about their privacy and personal data protection.
Register free in 2 minutes, deposit via Touch 'n Go or DuitNow, and enjoy over 500 games in MYR — with industry-grade privacy and security.
For users aged 18 and above only • Please play responsibly • Responsible Gaming