This Privacy Policy describes how cyl8 collects, uses, stores, and protects the personal data of users who access and use our online gaming platform at cyl8.cam. We are committed to handling your information responsibly, transparently, and in compliance with applicable data protection principles.
We never sell, rent, or share your personal data with third-party marketers under any circumstances.
All data in transit is protected by bank-grade SSL encryption. Data at rest is secured with industry-standard protocols.
You have the right to access, correct, or request deletion of your personal data at any time.
All data-related requests are handled promptly by our support team via live chat or email.
This Privacy Policy ("Policy") issued by cyl8 ("Company", "We", "Us", "Our"), the operator of the online gaming platform accessible at cyl8.cam ("Platform"). This Policy applies to all individuals ("Users", "Players", "You") who visit, register on, or otherwise interact with the Platform.
cyl8 is committed to protecting the privacy and security of all personal data we process. This Policy explains in plain terms what information we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you have over your own data.
By creating an account on the cyl8 Platform, making a deposit, or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.
Important: The cyl8 Platform is exclusively for players aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will delete it immediately and close the associated account.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, all of which form part of the overall contractual framework governing your use of the Platform.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, IP address, and device identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, retrieval, and deletion. |
| Data Controller | cyl8, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third party that processes personal data on behalf of cyl8 under a written data processing agreement. |
| KYC Data | Identity verification documents and information collected as part of our Know Your Customer obligations, including government-issued ID, proof of address, and date of birth. |
| Cookies | Small text files placed on your device by the Platform to store session information, preferences, and anonymised analytics data. |
| Third-Party Service Provider | External companies engaged by cyl8 to perform specific operational functions (e.g., payment processors, fraud detection services, technology infrastructure providers). |
cyl8 collects personal data through multiple channels in the course of operating the Platform. The categories of data we collect include:
3.1 Registration Data
When you create a cyl8 account, we collect the information you provide, which typically includes:
3.2 KYC Verification Data
To comply with our identity verification obligations and to confirm player eligibility, we may request and collect:
3.3 Financial Transaction Data
When you deposit or withdraw funds, we record and retain:
3.4 Gaming Activity Data
We automatically record all gaming activity conducted on the Platform, including:
3.5 Technical & Device Data
When you access the Platform, our systems automatically collect:
3.6 Communications Data
If you contact our support team — whether through live chat, email, or any other support channel — we retain records of:
cyl8 uses the personal data we collect strictly for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC data, contact details |
| Age and identity verification | Date of birth, government ID, biometric data where applicable |
| Processing deposits and withdrawals | Financial transaction data, payment method identifiers |
| Fraud detection and prevention | Technical data, transaction data, gaming activity, IP address |
| Responsible gambling monitoring | Gaming activity data, session data, deposit frequency |
| Customer support and dispute resolution | Communications data, account, transaction records |
| Platform security and integrity | Device data, IP address, session logs |
| Regulatory compliance and legal obligations | KYC data, transaction data, communications records |
| Service communications (transactional) | Email address, phone number — for account notifications only |
cyl8 does not use your personal data for unsolicited marketing purposes without your explicit, separately obtained consent. Transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts) are not considered marketing and may be sent without separate consent as they are necessary for service delivery.
cyl8 processes personal data one or more of the following legal grounds:
cyl8 does not sell, rent, or exchange your personal data with any third party for commercial or marketing purposes. Data may be shared in the limited and specific circumstances described below:
6.1 Payment Service Providers
To facilitate deposits and withdrawals, we share relevant transaction data with our payment processing partners. These include providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency processing services. Payment partners operate under their own privacy policies and are bound by applicable financial data protection standards.
6.2 Identity Verification Services
KYC data may be shared with authorised identity verification service providers to validate the authenticity of documents and confirm player eligibility. These providers are engaged under strict contractual data processing terms.
6.3 Fraud Prevention and Security
We may share technical data, IP addresses, and transaction patterns with fraud prevention and cybersecurity services to identify and respond to fraudulent activity, account abuse, or security threats.
6.4 Regulatory and Legal Authorities
cyl8 may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory instruction. We will notify affected users of such disclosures where legally permitted to do so.
6.5 Technology Infrastructure Providers
Hosting, cloud storage, and related infrastructure services are provided by third-party technology partners. These partners process data strictly on our instructions and under binding data processing agreements that prohibit unauthorised use.
In all cases where personal data is shared with third parties, cyl8 ensures that appropriate contractual safeguards, including data processing agreements, are in place. Third parties are permitted to process your data only for the specific purpose for which it was shared and are prohibited from using it for any other purpose.
cyl8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention periods applicable to different data categories are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration and KYC data | 5 years after account closure, or as required by applicable law |
| Financial transaction records | 7 years from the date of transaction (anti-money laundering compliance) |
| Gaming activity logs | 3 years from the date of activity |
| Customer support communications | 3 years from the date of the last communication |
| Technical and device log data | 12 months from collection |
| Cookie data (session cookies) | Deleted when the browser session ends |
| Cookie data (persistent analytics) | Up to 24 months, subject to consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction. Where anonymisation is applied, the resulting data is no longer considered personal data and may be retained for statistical or analytical purposes without time limit.
cyl8 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, cyl8 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.
The cyl8 Platform uses cookies and similar tracking technologies to support the operation of the Platform, maintain session continuity, and collect anonymised usage analytics. The types of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, process transactions, and enable core Platform functionality. Cannot be disabled without impairing use of the Platform. | No |
| Functional | Remember your language preferences, display settings, and personalisation choices between sessions. | No |
| Analytics | Collect anonymised data on how users navigate the Platform to help us improve usability and content. No personal identifiers are included. | Yes |
| Security | Identify and prevent fraudulent or abusive sessions by analysing device fingerprints and behavioural signals. | No |
You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary or security cookies may impair your ability to use the Platform. Withdrawing consent for analytics cookies will not affect your account access.
As a data subject, you have the following rights in relation to personal data that cyl8 holds about you. Requests to exercise any of these rights should be directed to our support team via live chat or the email contact below.
These rights are available to all cyl8 users. To exercise any right, contact our support team — we respond to all data requests within 30 days.
The cyl8 Platform is strictly for adults aged21 years and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. Our registration process includes date-of-birth capture and KYC identity verification to enforce this age restriction.
If a parent or guardian believes that a person under the age of 21 has created an account or submitted personal data through the Platform, they should contact our support team immediately. Upon confirmation, we will close the account and delete all associated personal data without undue delay.
cyl8 may transfer personal data to, or process it in, countries outside Malaysia in connection with the use of third-party service providers for payment processing, cloud hosting, and identity verification. Where such transfers occur, cyl8 ensures that appropriate safeguards are in place, including:
cyl8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where amendments are material, we will notify active users via the Platform or by email prior to the changes taking effect.
The "Last Updated" date at the top of this document will always reflect the most recent revision. Continued use of the Platform following publication of an amended Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we handle your data.
For any privacy-related enquiries, data subject rights requests, or concerns regarding how cyl8 processes your personal data, please contact us through one of the following channels:
Live Chat Support: Available 24/7 directly on the cyl8 Platform. Average response time: 3–5 minutes.
Email: [email protected]
Supported Languages: English, Bahasa Melayu, and Chinese.
Response Timeframe: All data rights requests will receive an acknowledgement within 72 hours and a substantive response within 30 days.
For responsible gambling enquiries or self-exclusion requests, please visit our Responsible Gambling page or contact support directly via live chat.
This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. cyl8 reserves all rights not expressly granted herein.
Six principles that guide how cyl8 handles your data — every day, across every interaction on the Platform.
We collect only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect data speculatively or for undefined future use.
We will never send you promotional communications without your explicit, separately obtained consent. You may withdraw marketing consent at any time via your account settings.
cyl8 does not sell, rent, or exchange your personal data. Your information is used solely to deliver our gaming services and comply with our legal obligations.
All personal data is stored using encryption at rest on secure, access-controlled infrastructure. Access is strictly limited to authorised personnel with a legitimate operational need.
This Privacy Policy is reviewed and updated whenever our data practices change or applicable regulations are amended. The Last Updated date is always current and visible at the top of this page.
We write privacy documentation in plain, accessible English — not dense legal language designed to confuse. If something is unclear, our support team will explain it directly.
Our support team handles all privacy and data requests 24/7 — in English, Bahasa Melayu, and Chinese. We respond to all formal data requests within 30 days.
See also: Terms & Conditions | Responsible Gambling | 21+ only. Play responsibly.