cly88 Privacy Policy — Your Data, Handled With Care

1.1 This Privacy Policy is issued by the entity operating cly88.asia ("cly88", "we", "us", "our"). cly88 is the data controller responsible for personal data collected through the cly88 website and all associated gaming products and services.

1.2 If you have any questions or concerns regarding this Privacy Policy or cly88's data practices, you may contact us via the support email address displayed in the footer of this page. We aim to respond to all privacy-related enquiries within 10 working days.

2.1 Registration & Identity Data. When you create a cly88 account, we collect your full name, date of birth, Malaysian identity card number (MyKad) or passport number, residential address, email address, and Malaysian mobile phone number. This data is required to create and administer your account and to verify your identity as required for responsible gaming compliance and anti-money-laundering obligations.

2.2 Financial Data. We collect information about the payment methods you use to deposit and withdraw funds — including e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow account references, and FPX bank account information sufficient to process transactions. cly88 does not store full bank account numbers or card numbers directly; payment processing is handled by PCI-DSS compliant third-party payment processors.

2.3 Transaction & Gaming Data. We collect records of all deposits, withdrawals, bets, game play sessions, and account balance movements associated with your cly88 account. This data is used for account administration, dispute resolution, fraud detection, and responsible gaming monitoring.

2.4 Technical & Usage Data. When you access cly88, we automatically collect your IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, features used, and timestamps of access. This data is used for platform security, fraud prevention, and aggregate analytics.

2.5 Communications Data. We retain records of communications between you and cly88 support, including live chat transcripts, emails, and any documents you submit during identity verification or dispute resolution.

2.6 Responsible Gaming Data. Where you use cly88's responsible gaming tools — including deposit limits, session timers, loss limits, or self-exclusion — we record the settings you apply and the dates on which they were applied. This data is used solely to operate the responsible gaming programme and is not used for marketing purposes.

3.1 Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, place a bet, use live chat support, or otherwise interact with the cly88 platform.

3.2 Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the cly88 website or application.

3.3 From third parties — from identity verification service providers during the KYC process; from payment processors confirming transaction status; and, where applicable, from fraud prevention and credit reference agencies used to screen accounts for financial crime risk.

cly88 processes personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of the contract between you and cly88 (i.e., the provision of gaming services).
• Identity verification (KYC) — necessary for compliance with applicable legal and regulatory obligations, including anti-money-laundering requirements.
• Payment processing — necessary for the performance of the contract; processing your deposits and paying out your winnings.
• Fraud detection and prevention — necessary for legitimate interests in protecting the integrity of the platform and all players.
• Responsible gaming monitoring — necessary for compliance with applicable gaming regulations and for legitimate interests in player welfare.
• Customer support — necessary for the performance of the contract and for legitimate interests in maintaining service quality.
• Marketing communications — based on your consent, where you have opted in to receive promotional emails or SMS from cly88. You may withdraw consent at any time.
• Platform analytics and improvement — based on legitimate interests in understanding how the platform is used and improving the user experience.
• Legal and regulatory compliance — necessary for compliance with applicable laws, court orders, or regulatory requests.

5.1 cly88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

5.2 cly88 shares personal data with the following categories of third parties, strictly for the purposes described in this policy:

• Payment processors and e-wallet operators (including Touch 'n Go, Boost, GrabPay, and FPX banking partners) — to facilitate deposits and withdrawals.
• Identity verification providers — to perform KYC checks as required by applicable regulations.
• Fraud prevention and financial crime screening services — to detect and prevent money laundering, fraud, and other financial crime.
• Game software providers — game platforms and studios may receive your account identifier and relevant game session data for the purpose of delivering the game and recording outcomes.
• IT infrastructure and cloud service providers — providing hosting, database, and security services under data processing agreements with cly88.
• Customer support platforms — enabling live chat and email support.
• Regulatory and law enforcement authorities — where required by law, court order, or regulatory direction.

5.3 All third-party service providers that process personal data on behalf of cly88 are required to do so under data processing agreements that impose confidentiality and security obligations at least equivalent to those described in this policy.

6.1 Some of cly88's service providers and game software partners may be located in or process data in countries outside Malaysia. Where such transfers occur, cly88 takes steps to ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.

6.2 By registering a cly88 account and using the platform, you acknowledge that your personal data may be transferred and processed outside of Malaysia as described above.

7.1 cly88 retains personal data for as long as is necessary to fulfil the purposes described in this policy, including for the duration of your account relationship with cly88 and for a period thereafter as required by applicable legal and regulatory obligations.

7.2 As a general guide, the following retention periods apply:

• Account registration and identity verification data: retained for the life of the account and for a minimum of 5 years following account closure, in accordance with anti-money-laundering requirements.
• Financial transaction records: retained for a minimum of 7 years following the date of the transaction.
• Customer support communications: retained for up to 3 years from the date of last interaction.
• Marketing consent records: retained until consent is withdrawn and for a further 2 years as evidence of the consent obtained.
• Technical and usage logs: retained for up to 12 months for security and fraud prevention purposes.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8.1 cly88 uses cookies and similar technologies including web beacons and local storage to operate the platform, maintain your session, remember your preferences, prevent fraud, and understand aggregate usage patterns.

8.2 The categories of cookies used by cly88 include:

• Strictly necessary cookies — required for the platform to function. These cannot be disabled without impairing core functionality such as login session management.
• Functional cookies — used to remember your language preferences, display settings, and other non-essential but convenience-oriented configurations.
• Analytics cookies — used to collect anonymised data about how visitors use cly88, which pages are most visited, and how users navigate the platform. This data is used to improve the platform experience.
• Security cookies — used to detect and prevent fraud, including session hijacking and brute-force login attempts.

8.3 You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect your experience on the cly88 platform.

Subject to applicable law, you have the following rights in relation to your personal data held by cly88:

• Right of access — you may request a copy of the personal data cly88 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing — you may request that cly88 restrict the processing of your data in certain circumstances.
• Right to data portability — you may request that cly88 provide you with a copy of your personal data in a structured, machine-readable format.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact cly88 support. We will respond to verifiable requests within 30 calendar days. We may need to verify your identity before processing a request.

10.1 cly88 implements technical and organisational security measures appropriate to the risk posed by the processing of your personal data. These include TLS 1.3 encrypted data transmission, AES-256 encryption of data at rest, access controls limiting data access to authorised personnel, multi-factor authentication for administrative systems, and regular penetration testing and security audits.

10.2 Whilst cly88 takes all reasonable steps to protect your personal data, no online platform can guarantee complete security. You are responsible for maintaining the security of your cly88 account credentials. If you suspect that your account has been compromised, contact cly88 support immediately.

10.3 In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, cly88 will notify affected individuals in accordance with applicable data protection law.

11.1 The cly88 platform is strictly for individuals aged 21 years and above. cly88 does not knowingly collect personal data from persons under the age of 21. If cly88 discovers that personal data has been collected from a person under 21, that account will be closed, the data will be deleted (except where retention is required by law), and any associated funds will be handled in accordance with applicable regulatory requirements.

11.2 If you believe that a minor has registered a cly88 account, please contact cly88 support immediately.

12.1 cly88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

12.2 Where changes are material, cly88 will notify registered players via their registered email address or via a notice on the cly88 platform. Continued use of the platform following notification of a material change constitutes acceptance of the revised Privacy Policy.

13.1 For any questions, concerns, or requests relating to this Privacy Policy or cly88's data practices, please contact the cly88 Data Protection team at: [email protected]

13.2 Email addresses displayed on this page are provided for informational reference only and are not formatted as clickable links.

13.3 If you are not satisfied with cly88's response to a privacy-related complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.