Privacy Policy

This Privacy Policy ("Policy") is issued by cly888 ("we", "us", "our", "the Company", "the Platform") and applies to all personal data collected from users ("you", "User", "Player") of the cly888 website and associated services accessible at cly888.cam.

We recognise that when you share personal information with us — whether to register an account, complete identity verification, process a DuitNow transfer, or contact our support team — you are placing trust in how we handle that data. We take that responsibility seriously. This Policy is intended to be transparent, specific, and genuinely readable — not a document designed to obscure what we actually do.

By registering a cly888 account or otherwise using our platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, location data, or online identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — cly888, which determines the purposes and means of processing your personal data.
• "Data Processor" — A third party that processes personal data on behalf of cly888 pursuant to a written data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specified purposes.
• "KYC Data" — Identity and verification documents submitted by Users to satisfy Know Your Customer obligations, including copies of the Malaysian MyKad, passport, proof of address, and payment method verification.
• "Cookies" — Small text files placed on your device by the cly888 platform to facilitate session management, analytics, and personalisation functions.

The categories of personal data collected by cly888 depend on how you interact with our platform. The following table sets out the main categories and examples:

4.1 Directly From You

The majority of personal data we hold is provided directly by you during the following interactions: account registration form submission; KYC document upload; payment method verification; customer support contact via live chat or email; participation in surveys or promotions; and when you update your account settings or personal details.

4.2 Automatically Through Platform Use

When you access cly888 through your web browser or mobile device, certain technical data is automatically collected by our platform infrastructure. This includes your IP address, device identifiers, browser type and version, operating system, referral source URL, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies.

4.3 From Third-Party Service Providers

We may receive personal data about you from third-party partners in the following circumstances: identity verification and fraud screening services (for KYC purposes); payment processors including FPX network operators and e-wallet platforms such as Touch 'n Go eWallet, Boost, and GrabPay; analytics providers; and responsible gambling screening services. All such third-party processors are bound by contractual data protection obligations consistent with this Policy.

cly888 processes personal data only where a valid legal basis exists. The following table summarises the primary purposes for which we process your data and the corresponding legal basis:

cly888 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share data only with carefully selected processors and only to the extent necessary for specific operational purposes.

Categories of third parties with whom we share data include:

• Payment processors — FPX network participants, DuitNow infrastructure providers, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processing partners, for the sole purpose of executing deposit and withdrawal transactions
• Identity verification services — KYC and AML screening providers who verify the authenticity of identity documents and conduct adverse media and sanctions checks
• Fraud prevention services — Providers that assist in detecting and preventing fraudulent account activity, bonus abuse, money laundering, and unauthorised access
• Platform technology providers — Game content studios, live dealer platform operators, and hosting infrastructure providers who process technical and usage data incidentally in the course of providing their services
• Regulatory and legal authorities — Where required by law, court order, or regulatory obligation, we may disclose personal data to government authorities, law enforcement bodies, or our licensing regulator
• Professional advisors — Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations

All third-party data processors engaged by cly888 are subject to written data processing agreements that impose obligations consistent with this Privacy Policy and applicable data protection law.

cly888 uses cookies and similar technologies to ensure the platform functions correctly, to personalise your experience, and to gather analytics information that helps us improve our services. The following categories of cookies may be placed on your device when you visit cly888.cam:

• Strictly necessary cookies — Required for basic platform functionality, including session management, login state, and security tokens. These cannot be disabled without impacting platform usability.
• Functional cookies — Store your preferences such as preferred language, display settings, and region, so you do not need to re-enter them on each visit.
• Analytics cookies — Collect anonymised and aggregated data about how players use the platform, including pages visited, time on site, and navigation paths. This data is used solely for internal improvement purposes.
• Security cookies — Assist in identifying unusual or suspicious activity patterns and contribute to fraud detection and account protection systems.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the cly888 platform. Our cookies do not track your activity across third-party websites unrelated to cly888.

cly888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention principles are as follows:

• Active account data — Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements under our licensing obligations
• KYC and identity documents — Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later
• Financial transaction records — Retained for a minimum of five (5) years to satisfy financial record-keeping obligations
• Customer support communications — Retained for up to three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution purposes
• Technical and usage logs — Retained for up to twelve (12) months unless extended retention is required for security investigation purposes
• Marketing preferences and consent records — Retained for the duration of the account relationship plus three (3) years to demonstrate consent compliance

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with a specific individual.

cly888 implements a multi-layered technical and organisational security framework designed to protect personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Key security measures include:

• End-to-end TLS 1.3 encryption for all data in transit between users and the cly888 platform
• AES-256 encryption for sensitive personal data and financial credentials stored at rest
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Two-factor authentication (2FA) options for user accounts and mandatory 2FA for all internal administrative access
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties
• Automated monitoring systems for detection of unusual access patterns, large-scale data queries, and potential account takeover attempts
• Incident response procedures with defined escalation paths and notification timelines in the event of a confirmed data breach

As an international online gaming platform serving Malaysian players, certain processing activities may involve the transfer of personal data to servers or processors located outside of Malaysia. This occurs in the context of cloud infrastructure hosting, game content delivery, and certain third-party KYC and fraud prevention services.

Where personal data is transferred internationally, cly888 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections afforded within Malaysia. Such safeguards may include contractual data protection clauses, processor agreements that impose equivalent data protection standards, or transfers to jurisdictions that provide an adequate level of data protection.

You may exercise any of the data rights described in this Policy at any time by contacting our support team. We will respond to all valid requests within a reasonable period, and in any event within thirty (30) calendar days of receipt. In cases of complexity or a high volume of requests, this period may be extended by a further thirty (30) days, with notice to you.

To protect your privacy and the security of your account, we may require you to verify your identity before we process a data rights request. This is to prevent unauthorised third parties from accessing or deleting data on your behalf.

Please note that certain rights may be subject to limitations under applicable law or our licensing obligations. For example, we cannot delete financial transaction records that we are legally required to retain. Where a right cannot be fully exercised, we will explain the reason clearly in our response.

cly888 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration, and our KYC verification procedures are designed to detect and prevent underage registration.

If cly888 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, the account will be immediately closed, all associated data will be deleted, and any funds deposited will be returned to their origin minus any losses incurred in breach of our Terms and Conditions.

If you believe a minor has registered on the cly888 platform, please contact our support team immediately so that we can investigate and take appropriate action.

cly888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the structure of the platform. The "Last Updated" date at the top of this document will be revised upon any material change.

Where changes are material — such as a significant new category of data collection or a new purpose for processing — we will provide advance notice by email to your registered account address. For minor administrative or clarificatory amendments, posting the updated Policy on this page constitutes sufficient notice.

We encourage you to review this Policy periodically. Your continued use of cly888 following the publication of an updated Policy constitutes acceptance of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by cly888, please contact our Data Support team. We are available 24/7 and aim to respond to all privacy-related enquiries within 5 business days.

Email (plain text — not a clickable link):
[email protected]

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your situation. We will always provide details of the appropriate authority upon request.