Cylbet Privacy Policy

1 Introduction and Scope

This Privacy Policy describes how Cylbet handles information relating to individuals who visit, register with, or use the Cylbet platform. It applies to account registration, sportsbook betting, live football markets, slot and live dealer play, payments, promotions, customer support, security reviews, and responsible gambling services.

By using Cylbet, you acknowledge that personal information may be processed as described in this policy. Where consent is required for a particular activity, Cylbet will request it separately or provide an appropriate choice. This Privacy Policy should be read together with the Cylbet Terms & Conditions.

2 Information Cylbet Collects

Cylbet may collect account and identity information such as your legal name, date of birth, nationality, residential address, email address, mobile number, username, encrypted password, and communication preferences. This information enables Cylbet to create and maintain an accurate account record.

Cylbet may also process copies or details from identity documents, including a MyKad, passport, proof of address, payment ownership evidence, and an identity-verification image. KYC information is used to verify age and identity, prevent duplicate accounts, reduce fraud, and support applicable anti-money laundering checks.

Transaction information may include deposit and withdrawal values, MYR balances, transaction references, payment channel, bank name, partially masked account details, and processing status. Relevant Malaysian payment methods may include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong.

Activity information may include bets, stakes, winnings, losses, bonus use, account limits, live casino activity, and sports markets viewed, such as EPL, UFC, Liga Super Malaysia, or live football. Cylbet also records customer support messages, complaint details, account notes, and the outcome of security or payment reviews.

3 How Information Is Collected

Cylbet receives information directly when a player opens an account, completes KYC, makes a payment, places a wager, sets a responsible gambling limit, contacts support, or updates account details. Providing mandatory registration and verification information is necessary to use relevant Cylbet services.

Certain technical information is collected automatically when the platform is accessed. This may include IP address, browser type, operating system, device identifiers, preferred language, approximate location derived from an IP address, login time, pages viewed, session duration, and security events.

Cylbet may also receive limited information from payment processors, identity-verification providers, fraud-prevention services, game suppliers, and other service providers involved in delivering the platform. Such information is assessed according to its source, relevance, and the applicable processing purpose.

4 Purposes and Grounds for Processing

Cylbet processes personal information for purposes that include:

• Creating, authenticating, maintaining, and securing a Cylbet player account.
• Verifying identity and confirming that a player is aged 21 or above.
• Accepting deposits, settling wagers, and processing legitimate withdrawals.
• Providing sportsbook, slots, live casino, bonuses, and VIP services.
• Detecting account takeover, collusion, bonus abuse, money laundering, and other prohibited activity.
• Responding to support requests, complaints, payment queries, and technical issues.
• Applying deposit limits, self-exclusion, cooling-off periods, and other player-protection controls.
• Improving performance, correcting errors, and understanding how Cylbet services are used.
• Meeting legal, regulatory, record-keeping, and dispute-resolution obligations where applicable.

Depending on the circumstances, processing may be necessary to perform the agreement between Cylbet and the player, meet applicable obligations, protect legitimate business and security interests, safeguard players, or act on consent. Where Cylbet relies on consent, it may be withdrawn for future processing, although earlier lawful processing remains unaffected.

5 Payments, Withdrawals, and KYC Records

Cylbet processes financial and verification data to confirm that deposits and withdrawals belong to the registered account holder. Payment information is also used to investigate failed transactions, chargebacks, recipient mismatches, duplicate payments, and suspicious transaction patterns.

Cylbet does not normally require or store a complete online banking password, e-wallet PIN, or card security code. Players must never disclose those credentials to Cylbet support. Payment providers may process additional information under their own privacy practices when a transaction is completed through their systems.

KYC access is limited to personnel and authorised providers who require it for verification, risk, security, payment, or compliance work. Cylbet may request updated documents where information has expired, changed, appears inconsistent, or requires further verification before a withdrawal can be approved.

6 Cookies and Device Information

Cylbet may use cookies and similar technologies to maintain secure login sessions, remember basic settings, monitor platform performance, detect fraudulent activity, and understand service usage. Essential cookies support functions such as authentication, navigation, account security, and payment continuity.

Analytics information may help Cylbet understand which pages work well, identify loading problems, and improve the experience for players using mobile devices in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. Where required, optional technologies will be used according to the choices presented to the player.

Browser controls can block or remove cookies. However, disabling essential cookies may prevent login, interrupt game sessions, or make certain Cylbet account features unavailable.

7 When Information May Be Shared

Cylbet does not sell personal information. Information may be disclosed only where reasonably necessary to operate the platform, protect players, process transactions, investigate misuse, obtain professional support, or meet an applicable legal requirement.

Relevant recipients may include:

• Payment processors, e-wallet operators, and banking partners handling deposits or withdrawals.
• Identity-verification, fraud-prevention, hosting, security, and technical service providers.
• Game and sportsbook suppliers where limited data is needed to settle activity or investigate an error.
• Professional advisers, auditors, insurers, and dispute-resolution specialists subject to confidentiality duties.
• Competent authorities where disclosure is lawfully required or reasonably necessary to prevent serious wrongdoing.
• A successor organisation if Cylbet undergoes a genuine business transfer, restructuring, or acquisition.

Cylbet requires service providers to handle information only for authorised purposes and to apply appropriate safeguards. Shared information is limited where reasonably practicable to what the recipient needs to perform the relevant service.

8 International Processing

Some Cylbet technology, game, security, or support providers may process data outside Malaysia. Privacy and data protection standards can differ between countries. Where a cross-border transfer occurs, Cylbet seeks to use contractual, technical, and organisational safeguards appropriate to the nature of the information and the destination.

Cylbet assesses service access, confidentiality requirements, storage arrangements, and security controls when engaging relevant providers. Players may contact Cylbet for general information about the safeguards applied to international processing, subject to security and commercial confidentiality limitations.

10 Data Retention

Cylbet retains personal information for as long as reasonably necessary to maintain an active account, deliver requested services, complete payments, resolve disputes, enforce agreements, prevent fraud, support responsible gambling controls, and meet applicable record-keeping obligations.

Account closure does not always result in immediate deletion. Certain identity, transaction, exclusion, complaint, and security records may need to remain available for a legally or operationally appropriate period. For example, Cylbet may retain a minimal self-exclusion record to prevent an excluded player from reopening an account during the selected exclusion period.

When information is no longer required, Cylbet will take reasonable steps to delete, anonymise, or securely restrict it. Retention periods may vary according to the record type, processing purpose, sensitivity, legal context, and whether a dispute or investigation remains open.

11 Player Privacy Rights

Subject to applicable law and appropriate identity verification, a player may ask Cylbet to confirm whether personal information is held, provide access to eligible information, or correct inaccurate or incomplete details. A player may also request deletion, restriction, or objection where the relevant right applies.

Players may withdraw eligible marketing consent and may ask Cylbet to review a significant account decision that was made using an automated process, where applicable. Cylbet may need to retain or continue processing certain information despite a request where this is required for security, payments, legal claims, self-exclusion enforcement, fraud prevention, or another lawful purpose.

To protect player accounts, Cylbet will verify the identity of anyone making a privacy request. Cylbet aims to respond within a reasonable period and will explain if more time, additional information, or a lawful limitation applies.

12 Responsible Gambling Information

Cylbet may process information relating to deposit limits, loss limits, cooling-off periods, session controls, self-exclusion, account restrictions, and communications concerning gambling harm. This information is considered sensitive in context and is used to apply requested safeguards and support responsible operation of the Cylbet platform.

A self-exclusion request may require Cylbet to restrict access, block promotional messages, reject new registration attempts, and preserve enough identifying information to enforce the restriction. The player should not attempt to avoid these controls by opening another account.

More information about available tools and support can be found on the Cylbet Responsible Gambling page. Gambling should be entertainment rather than a source of income, and Cylbet services are for players aged 21 and above only.

13 Players Under 21

Cylbet does not permit anyone under 21 to register, deposit, bet, or play casino games. Cylbet may use date-of-birth checks and KYC documents to verify eligibility. If information indicates that an account holder is under 21, the account may be suspended while the matter is investigated.

A parent or guardian who believes that a person under 21 has provided information to Cylbet should contact our support team. Cylbet will review the report, verify relevant details, and take appropriate steps consistent with account safety, payment obligations, and applicable requirements.

14 Changes to This Privacy Policy

Cylbet may update this Privacy Policy when services, technology, processing practices, or applicable requirements change. The effective date displayed at the top of the page identifies the current version.

Where a change materially affects how Cylbet processes personal information, reasonable notice may be provided through the platform or another appropriate channel. Continued use of Cylbet after an update means the revised policy will apply from its stated effective date, subject to any consent that must be obtained separately.

15 Contact Us

Questions about this Privacy Policy, Cylbet data practices, account information, or a privacy rights request may be directed to the support team. Please include enough detail for Cylbet to understand the request, but do not send an online banking password, e-wallet PIN, or other unnecessary secret credential.

Cylbet may ask for identity verification before disclosing or changing account information. This helps prevent an unauthorised person from using a privacy request to gain access to a player's account.