cyl8 Privacy Policy – Updated January 2026 Data protected with 256-bit SSL Fully compliant Malaysia PDPA 2010 Your data not sold to third parties You have the right access, correct & delete your data Privacy support 24/7 in Bahasa Melayu cyl8 Privacy Policy – Updated January 2026 Data protected with 256-bit SSL Fully compliant Malaysia PDPA 2010 Your data not sold to third parties You have the right access, correct & delete your data Privacy support 24/7 in Bahasa Melayu
Updated: January 2026 · Effective immediately

Privacy Policy cyl8 – Our Commitment to Protecting Malaysian Players' Data

Cyl8 takes player data privacy seriously. This policy clearly explains what data we collect, why we need it, how we use it, and your rights as a player under Malaysia's Personal Data Protection Act (PDPA) 2010. No convoluted language — just clear, straightforward explanations.

SSL 256
Data Encryption Bits
PDPA
Malaysia Act 2010
0
Data Sold to Third Parties
24/7
Privacy Support Available

Cyl8's Privacy Commitment to Malaysian Players

Six key commitments we make regarding the protection of your personal data on the cyl8 platform

256-bit SSL Encryption at All Times

All data transmitted between your device and cyl8's servers is encrypted using 256-bit SSL technology — the same security standard used by major Malaysian banks such as Maybank and CIMB. This means your login credentials, account data, and transaction details cannot be intercepted or read by any third party in transit.

Full Compliance with Malaysia's PDPA 2010

Cyl8 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This is the federal law governing how organisations collect, use, and process the personal data of Malaysians. Our compliance goes beyond paperwork — it is embedded in how we run our operations every day.

Your Data Is Never Sold or Shared

Cyl8 has never and will never sell, rent, or share players' personal data with any advertiser, marketer, or third-party company for marketing purposes. Your data is used solely for the platform operations described in this policy — nothing more.

You Are in Control of Your Own Data

Under PDPA 2010, you have the full right to request access to your personal data held by cyl8, request corrections to any inaccurate data, and in certain circumstances, request the deletion of your data. We process all data rights requests within 14 business days.

Secure Servers & Strict Access Controls

Cyl8 player data is stored on servers protected by multi-layered firewalls and strict access controls. Only cyl8 staff who genuinely require access to specific data to perform their duties are permitted to do so — and all access is logged for internal security audit purposes.

Immediate Notification in the Event of an Incident

While cyl8 takes all reasonable precautions to prevent data breaches, should such an incident occur, we are committed to notifying affected players within the timeframe stipulated by Malaysian law and taking immediate remedial action to safeguard your data.

This Privacy Policy is effective from 1 January 2026. Previous versions are no longer applicable.

This Privacy Policy describes the personal data protection practices of cyl8 (cyl8.best) with respect to information we collect when you use our platform. By registering for or using cyl8, you agree to the collection and use of your personal data as described in this policy. If you have any enquiries, please contact us at support@cyl8.best.

1 Personal Data We Collect

Cyl8 collects various types of personal data when you use our platform. This data falls into two main categories: information you provide to us directly, and data collected automatically as you use the platform.

Data you provide directly:

  • Account registration information: Full name (as shown on your Malaysian identity card), active Malaysian phone number, email address, chosen username and password
  • Identity verification information: Malaysian identity card (MyKad) copy, selfie photo for facial verification (if requested for account security purposes)
  • Financial information: Account or digital wallet details used for deposits and withdrawals — including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay accounts, or FPX bank account numbers (Maybank2u, CIMB Clicks)
  • Communications with us: Live chat conversation history, emails sent to the support team, complaints or feedback submitted

Automatically collected data:

  • Platform usage data: Betting history, matches watched, games played, session duration, pages visited within the platform
  • Device and technical data: IP address, device type, operating system, browser type and version, screen resolution
  • Approximate location data: State or city based on IP address — we do not collect precise GPS location
  • Cookie and session data: Login session tokens, platform preference cookies, website usage analytics data
Important Note: cyl8 does not directly collect credit card or debit card numbers. All payments are processed through third-party payment service providers with their own security standards. cyl8 only receives transaction confirmation information (success/failure status and amount) from payment providers — not actual card details.

2 Purpose of Data Collection and Use

Cyl8 uses the personal data we collect solely for the following purposes. We do not use your data for any purpose not listed here without first obtaining your consent:

Purpose of Use Type of Data Used Legal Basis
Player account management and operations Name, email, phone number, password Contract performance
Processing of deposits and withdrawals Payment account details, transaction history Contract performance
Identity verification and fraud prevention ID documents, biometric data (where applicable), IP address Legitimate interest & legal compliance
AML (Anti-Money Laundering) compliance Identity information, transaction history Legal obligation
Customer support and issue resolution Account history, transaction logs, communication records Contract performance
Platform improvement and analytics Anonymised usage data, device data Legitimate interest
Personalised promotions and offers (with consent) Game preferences, activity history Consent

You may withdraw your consent to receive marketing communications at any time by contacting us at support@cyl8.best or through the communication settings in your account profile. Withdrawing marketing consent will not affect your ability to continue using the cyl8 platform.

3 How We Protect Your Data

Cyl8 implements a range of technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or accidental deletion:

  • Encryption in transit: All communications between your browser or app and cyl8's servers are encrypted using TLS 1.3 (Transport Layer Security) with 256-bit SSL key length. This means that even if someone manages to intercept your network traffic, the data captured would be completely unreadable.
  • Data encryption at rest: Sensitive data such as passwords is never stored in plain text — it is stored as a cryptographic hash using the bcrypt algorithm, which cannot be reversed.
  • Role-based access control: cyl8 staff may only access the player data necessary to carry out their specific duties. Access to sensitive data requires multi-level approval and is logged for audit purposes.
  • Two-factor authentication (2FA): All internal cyl8 accounts with access to the player data management system are required to use 2FA. Players are also encouraged to enable 2FA on their accounts via the security settings.
  • Regular penetration testing: cyl8 conducts regular security assessments including penetration testing by independent security experts to identify and address system vulnerabilities before they can be exploited.
  • 24/7 threat monitoring: cyl8's systems are continuously monitored for suspicious activity using automated threat detection tools capable of identifying and blocking unauthorised access attempts in real time.
Your Responsibilities: While cyl8 takes all reasonable steps to protect your data on our end, the security of your account also depends on how you manage your login credentials. Please use a strong, unique password, do not share your login details with anyone, and enable 2FA for an additional layer of protection.

4 Data Sharing with Third Parties

Cyl8 does not sell, rent, or disclose players' personal data to third parties for their marketing purposes. However, there are limited circumstances in which cyl8 may need to share certain data with carefully selected third parties:

  • Payment service providers: Information required to process your deposits and withdrawals is shared with your chosen payment provider — such as Touch 'n Go, GrabPay, DuitNow, or banks participating in FPX. This sharing is limited strictly to information needed to complete the transaction.
  • Game software providers: Certain gameplay data (username, betting records for the relevant game) may be shared with third-party game software providers that power games on the cyl8 platform. These providers are bound by strict confidentiality agreements.
  • Security and fraud prevention service providers: cyl8 uses specialised third-party services for fraud detection and anti-money laundering prevention. Data shared for this purpose is limited strictly to the information required for risk assessment.
  • Legal requirements: cyl8 may disclose player data to Malaysian authorities if required by court order, directive from a competent authority, or applicable legal obligation.

All third parties that receive data from cyl8 are bound by strict data processing agreements ensuring they use the data solely for authorised purposes and maintain adequate security standards.

cyl8 never: Sell player data to advertisers; share your betting history or financial data with any party for marketing purposes; or disclose your account information to any other individual — including family members or friends — without your explicit consent.

5 Cookies and Tracking Technologies

Like most digital platforms, cyl8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the platform to function and cannot be disabled. They include login session tokens, security settings, and core platform preferences. Without them, you will not be able to use the cyl8 platform properly.
  • Functional Cookies: These cookies remember your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time you log in.
  • Analytics Cookies: We use analytics data (in non-personally identifiable form) to understand how players interact with our platform — which pages are visited most, where players run into difficulties, and so on. This helps us continuously improve the platform for all users.
  • Performance Cookies: These cookies help us monitor platform performance, detect and resolve technical issues faster, and ensure the platform runs smoothly during peak traffic periods.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to log in and use the cyl8 platform fully. For guidance on managing cookies in your browser, refer to your browser's help documentation.

6 Your Rights Under Malaysia's PDPA 2010

As a cyl8 player based in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010. cyl8 is committed to respecting and facilitating the exercise of these rights:

  • Right to Access Data: You may request a copy of the personal data we hold about you. We will provide this information within 21 calendar days of receiving a valid request.
  • Right to Rectification: If you find that the personal data cyl8 holds about you is inaccurate, incomplete, or outdated, you may request a correction. Certain details such as your username and phone number can be updated directly through your account profile.
  • Right to Object to Processing: You may object to the processing of your personal data for specific purposes — such as marketing communications — without affecting your ability to continue using cyl8's core services.
  • Right to Withdraw Consent: For data processing based on your consent (such as personalised marketing communications), you may withdraw that consent at any time by contacting us.
  • Right to Lodge a Complaint: If you believe cyl8 has processed your personal data in a manner that violates the PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact cyl8's Data Privacy Officer by email support@cyl8.best with the subject line "PDPA Rights Request". Please include your full name and account number to help us process your request faster. cyl8 will acknowledge your request within 3 business days and provide a full response within 21 calendar days.

7 Data Retention and Deletion

Cyl8 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required under applicable Malaysian law:

  • Active account data: Retained for the duration your account remains active, plus a post-closure retention period as specified below.
  • Financial transaction data: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • Customer support communication records: Stored for 3 years for dispute reference and service improvement purposes.
  • Betting history data: Stored for 3 years from the date of the bet for dispute resolution purposes and regulatory compliance.
  • Security and audit logs: Stored for 1 year for threat detection and security incident investigation purposes.

When data is no longer required under the retention periods above, cyl8 will securely delete or anonymise it. Deletion is carried out using methods that ensure the data cannot be recovered.

If you close your cyl8 account, some of your data will be retained for the storage periods stated above as required by law — particularly financial data and betting history. This is a legal obligation that cannot be waived, even at a player's request.

Data Deletion Request: You may request the deletion of personal data not subject to mandatory legal retention by contacting us at support@cyl8.best. cyl8 will process such requests within 30 days and notify you of the action taken, as well as any data that cannot be deleted for legal reasons.

8 Changes to This Privacy Policy

Cyl8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new technologies we adopt, updated legal requirements, or player feedback. When we make significant changes, we will notify you via:

  • In-platform notification on cyl8 when you log in after the change's effective date
  • Email to the address registered to your account, for changes with significant impact
  • Updated effective date at the top of this Privacy Policy page

Continued use of the cyl8 platform after the amended Policy's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how cyl8 protects your information. If you have any questions about this Privacy Policy or how cyl8 handles your personal data, please contact our Data Privacy Officer at support@cyl8.best.

Applicable Law

This Privacy Policy is governed by the laws of Malaysia, in particular the Personal Data Protection Act (PDPA) 2010. Any disputes relating to the processing of your personal data by cyl8 will be resolved in accordance with the procedures set out under the PDPA 2010. For more information about the PDPA 2010 and your rights, you may refer to official Malaysian government sources. For enquiries relating to the Terms & Conditions of platform use, please visit the Terms & Conditions us.

Your Rights as a cyl8 Malaysia Player

Under the PDPA 2010, you have clearly defined rights — and cyl8 is fully committed to honouring them

Right to Data Access

Request a copy of all personal data cyl8 holds about you. We will make this available within 21 days.

Right to Data Correction

If your data is inaccurate or outdated, you may request a correction. Some information can be updated directly within your account profile.

Right to Object to Marketing

You may opt out of marketing communications at any time without affecting your access to the cyl8 platform.

Right to Data Deletion

Request deletion of data that is not subject to legal retention obligations. We will process this within 30 days.

Right to Withdraw Consent

For processing based on your consent, you may withdraw it at any time through your account settings or by emailing us.

Right to Lodge a Complaint

If you believe your privacy rights have been violated, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact us at support@cyl8.best with the subject line "PDPA Rights Request"

Why Data Privacy Matters to cyl8 and Malaysian Players

In the world of online betting, trust is everything. When a player from Kuala Lumpur, Penang, or Johor Bahru registers a cyl8 account, they are entrusting us with not just their money, but also highly sensitive personal information — their full name, phone number, banking details, and daily usage patterns. This responsibility is something we at cyl8 never take lightly.

Many Malaysian users are unaware that the PDPA 2010 grants them substantial rights over their personal data. The Act requires all organisations processing the personal data of Malaysians — including digital platforms such as cyl8 — to collect data for clearly defined purposes, use it only for those stated purposes, protect it to adequate standards, and delete it when it is no longer needed. Breaching the Act can result in significant fines and legal action against the organisation concerned.

Cyl8 complies with PDPA 2010 not merely because it is a legal requirement, but because we believe Malaysian players deserve this protection. When you use Touch 'n Go eWallet or DuitNow to deposit into your cyl8 account, we only retain information strictly necessary to process the transaction and identify your account — we do not store your wallet PIN or password, and we cannot initiate any transaction from your wallet without your active authorisation.

One aspect of privacy that is often overlooked yet critically important for betting platform players is the confidentiality of betting activity. cyl8 understands that not every player wants those around them to know about their betting hobby. That is why we never disclose any player's account information or betting history to another person — including family members claiming to be a spouse or parent — without a valid court order or written consent from the player themselves.

On the technology front, cyl8 continuously updates our security systems to keep pace with increasingly sophisticated cyber threats. The digital security landscape evolves rapidly — new attack methods emerge every day, and systems that are secure today may need to be strengthened tomorrow. The cyl8 security team monitors the threat landscape on an ongoing basis and implements regular security improvements to ensure our players' data is always protected in the most current and effective way possible.

For analytics data collected to improve the platform, cyl8 applies an anonymisation process before any analysis takes place. This means that when our product team reviews data to understand how players use the platform — which pages are visited most, which features are most popular, where users encounter navigation difficulties — they are looking at aggregated data that cannot be traced back to any specific individual. Your privacy remains protected even throughout this product improvement process.

Regarding marketing communications, cyl8 only sends promotional notifications, new game updates, or special offer alerts to players who have given explicit consent to receive such communications at registration or through the communication settings in their account profile. We do not believe in sending unsolicited marketing emails or selling player email lists to third parties for their own marketing purposes — this is not how cyl8 operates, and it never will be for as long as we run this business.

Contact the cyl8 Data Privacy Officer

For any enquiries, requests, or complaints relating to this Privacy Policy or the way cyl8 handles your personal data, please contact our Data Privacy Officer at support@cyl8.best with the subject line "Privacy Inquiry". We are committed to responding to all privacy inquiries within 3 business days. For information on responsible gambling, please visit our Responsible Gambling us.

FAQ – cyl8 Privacy Policy

Answers to the most frequently asked questions about data privacy on the cyl8 platform

No. cyl8 has never and will never sell, rent, or disclose players' personal data to any advertiser, marketer, or third-party company for their marketing purposes. Your data is only shared with a limited set of third parties — such as payment providers to process your transactions — and only the information strictly necessary for that purpose is shared. All such third parties are bound by strict confidentiality agreements with cyl8.

All financial transactions at cyl8 are encrypted using 256-bit SSL during transmission. It is important to note that cyl8 does not directly store your credit card details or digital wallet PIN numbers — payments are processed through payment service providers such as Touch 'n Go, DuitNow, or FPX, each with their own certified security systems. cyl8 only receives transaction confirmation responses (success or failure) and the transaction amount — not your sensitive card or account details.

You may request the deletion of personal data that is not subject to mandatory legal retention requirements. Please note, however, that financial and transaction data must be retained for a minimum of 7 years under Malaysian accounting and anti-money laundering laws — this cannot be waived. Betting history data is retained for 3 years for dispute resolution purposes. To submit a data deletion request, contact us at support@cyl8.best with the subject line "PDPA Data Deletion Request".

When you close your cyl8 account, your access to the platform will be terminated immediately. However, certain data will be retained for the periods required under Malaysian law — financial transaction data for 7 years, and betting history and communication records for 3 years. This is a legal obligation, not a discretionary choice. Once the retention period expires, your data will be securely deleted or anonymised. Data not subject to mandatory retention requirements will be deleted within 30 days of your account closure date.

Yes, you can opt out of marketing and promotional emails from cyl8 at any time in two ways: (1) click the "Unsubscribe" link found at the bottom of any marketing email you receive from cyl8, or (2) log in to your cyl8 account, go to Profile Settings, and update your communication preferences. Marketing unsubscriptions typically take effect within 48 hours. Please note that you may still receive important transactional emails related to your account (such as deposit/withdrawal confirmations) even after unsubscribing from marketing emails — these are necessary service communications, not marketing.

Your Data Is Safe at cyl8 – Register with Complete Confidence

Cyl8 protects your privacy and data to the highest standards under Malaysia's PDPA 2010. Deposit from RM 30 via Touch 'n Go or DuitNow and enjoy over 1,000 games on a secure, trusted platform.

Contact Us About Data Privacy

Our team is ready to help you understand or exercise your privacy rights

Privacy Officer Email

For PDPA requests and privacy enquiries

support@cyl8.best
Live Chat 24/7

Chat directly with our agents in Bahasa Malaysia

Available after login
FAQ

Answers to the most frequently asked questions

Visit the FAQ page
Related cyl8 Policy Documents

Cyl8 – A Safe, Transparent & Trustworthy Betting Platform in Malaysia

Your data is protected, your payments are secure, and your privacy is fully respected. Join over 850,000 Malaysian players who trust cyl8 today.

Bahasa Melayu