Privacy Policy CYL88 Rock — Malaysia User Data Protection

1. Introduction

CYL88 Rock ("we", "our platform") is committed to the privacy of every user who uses our services. This Privacy Policy transparently explains how we collect, process, store, and protect your personal information when you register and use the CYL88 Rock digital entertainment platform.

This document applies to all users who access our platform via the website cyl88rock.pro or the cyl88 rock mobile app on iOS and Android devices. By registering or continuing to use our services, you consent to the data processing practices described in this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and operate in accordance with internationally recognised data protection principles. If you have any questions after reading this document, our team is ready to assist you.

2. Information We Collect

We collect several categories of information to enable us to provide you with a safe, efficient, and personalised service. The following are the types of data we collect:

2.1 Registration & Identity Information

• Full name as it appears on official identification documents.
• National identity card number (MyKad) or passport number.
• Date of birth for age verification purposes.
• Email address and mobile phone number.
• Current residential address.

2.2 Financial Information

• Bank account number or e-wallet details for processing deposits and withdrawals.
• Transaction history including deposits, withdrawals, and wagering activity.
• Source of funds verification documents where required for compliance purposes.

2.3 Usage & Technical Data

• IP address, device type, operating system, and browser version.
• Platform activity logs including login times, games played, and session duration.
• Cookie data and device identifiers for an improved user experience.
• General location information (state/city level only, not precise GPS).

3. How We Use Your Data

The information we collect is used responsibly for legitimate purposes only. We do not use your data for any purpose unrelated to the services you use.

For promotional communications, you may withdraw your consent at any time through the notification settings in your account or by contacting our support team. Withdrawing consent does not affect any data processing that has already taken place.

4. Sharing Information with Third Parties

CYL88 Rock does not sell or disclose your personal information to third parties for marketing purposes. However, in certain limited situations, we may need to share your data with the following parties:

4.1 Integrated Service Providers

We work with carefully selected third-party service providers to help us operate the platform, including payment gateway providers, identity verification services, and cloud infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

4.2 Legal Requirements

We may disclose your information to government authorities, regulatory bodies, or law enforcement agencies when required to do so by applicable Malaysian law, court order, or to comply with mandatory reporting requirements.

4.3 Business Transfers

In the event of any merger, acquisition, or asset transfer involving cyl88 rock, user information may be transferred as part of that transaction. You will be notified in advance should this occur, and your rights will continue to be protected.

5. Data Security

We continuously invest in security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse. Key security measures we have implemented include:

• Full data encryption — all sensitive data is encrypted both in transit and at rest using AES-256 standards.
• Two-factor authentication (2FA) — available for all user accounts as an additional layer of security during login.
• 24/7 Threat Monitoring — an automated intrusion detection system monitors for suspicious activity at all times.
• Regular security audits — our platform undergoes regular penetration testing and security audits by independent experts.
• Internal access controls — only authorised personnel with a legitimate need may access user data, and all access is logged and monitored.

While we take all reasonable precautions, no security system can be guaranteed to be one hundred percent foolproof. Should a data breach occur that affects you, we will notify you within the timeframe required by applicable law.

6. Your Rights as a User

As a cyl88 rock user residing in Malaysia, you have certain rights regarding your personal data under the PDPA 2010. We fully respect and support these rights:

To exercise any of the above rights, please contact our customer support team via Live Chat or email. We will process your request within 30 calendar days of receipt, in accordance with Malaysia's PDPA requirements.

7. Cookies & Tracking Technologies

CYL88 Rock uses cookies and similar tracking technologies to enhance user experience, analyse platform traffic, and secure your session. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for core platform functions such as login authentication, session management, and security. Without them, the platform cannot function properly. You cannot disable this type of cookie.

7.2 Performance & Analytics Cookies

We use analytics tools to understand how users interact with our platform. Data collected is aggregated and anonymised — it helps us identify technical issues and improve the overall experience.

7.3 Functional Cookies

These cookies remember your preferences such as language, display settings, and preferred region so you do not have to reset them each time you log in to the cyl88 rock platform.

8. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. In general, our retention policy is as follows:

• Active account data — retained for as long as your account remains active and for a reasonable period thereafter.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC Documents — retained for 5 years after the business relationship ends, in compliance with anti-money laundering legal requirements.
• System and technical logs — retained for a maximum of 12 months for security and troubleshooting purposes.
• Customer support communication records — retained for 3 years for reference and training purposes.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.

9. Links to Other Platforms

The cyl88 rock platform may contain links to third-party sites or services such as payment providers or social media platforms. This Privacy Policy applies solely to the cyl88 rock platform.

We are not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of each site you visit separately, especially before providing any of your personal information to them.

10. Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, our Data Protection Officer (DPO) team is ready to assist you through the following channels:

• Live Chat — Available 24/7 directly within the cyl88 rock platform for immediate response.
• Email — [email protected] (plain text display only, not a clickable link).
• Telegram — Through verified official cyl88 rock channels.

We will acknowledge receipt of your request within 3 business days and provide a full response within 30 calendar days. For more complex cases, we will notify you if additional time is required.