cly888 Privacy Policy

1. Who We Are

cly888 operates the online gaming platform accessible at https://cly888.app and all associated sub-pages (collectively, the "Platform"). In this Privacy Policy, references to "cly888", "we", "us", or "our" refer to the operator of the Platform. References to "you", "your", or "Member" refer to any individual who registers an account on or accesses the cly888 Platform.

cly888 acts as the data controller in respect of personal data collected directly from Members via the Platform. Where cly888 shares data with third-party processors — such as payment gateways, game providers, or identity verification services — those third parties act as data processors under cly888's instruction and are contractually bound to process data only for the purposes specified by cly888.

2. Data We Collect

2.1 Registration Data

When you create a cly888 account, we collect the information you provide during registration, which may include:

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — you must be 21 or older to use cly888)
• Email address
• Mobile phone number
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor)
• Preferred currency (MYR)
• Username and hashed password

2.2 Identity Verification Data (KYC)

To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, cly888 may request copies of identity verification documents at registration or before processing a withdrawal. This may include:

• Malaysian National Identity Card (MyKad) or passport
• Proof of address (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of e-wallet or bank account in your name)

2.3 Financial Transaction Data

cly888 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and transaction timestamps. Payment method identifiers — such as the last four digits of a bank account or an e-wallet account reference — are stored for fraud prevention and chargeback management purposes. Full card or account numbers are never stored by cly888; these are handled directly by the payment processor.

2.4 Gaming Activity Data

We collect data about your gaming activity on cly888, including game sessions, bet amounts, win and loss records, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, bonus settlement, and fraud detection.

2.5 Technical & Device Data

When you access cly888, we automatically collect technical data including IP address, browser type and version, operating system, device identifiers, session timestamps, and referral URL. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

2.6 Communications Data

If you contact cly888 via Live Chat, email, or any other support channel, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

3. How We Collect Data

cly888 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — through cookies, server logs, and similar tracking technologies when you access or use the Platform. See Section 7 for full details on cookies.
• From third parties — from identity verification providers, payment processors, fraud prevention services, and game providers where necessary to deliver Platform services or comply with regulatory requirements.

4. How We Use Your Data

cly888 uses the personal data we collect for the following purposes:

• Account creation and management: Creating and maintaining your cly888 Member account, including authentication and security.
• Service delivery: Processing deposits and withdrawals, crediting bonuses, settling bets, and providing access to games.
• Identity verification and AML compliance: Verifying your identity, age, and the source of funds deposited to the Platform as required by our licensing obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and money laundering.
• Responsible gaming: Monitoring gaming behaviour patterns to identify signs of problem gambling and applying account protections where appropriate.
• Customer support: Responding to your queries, complaints, and support requests.
• Legal compliance: Complying with applicable laws, court orders, regulatory requests, and our obligations under international gaming licensing.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Direct communications: Sending you account notifications, transaction confirmations, security alerts, and promotional communications (where you have not opted out).

5. Legal Basis for Processing

cly888 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Platform services you have contracted for by registering an account and accepting the Terms and Conditions.
• Legal obligation: Processing required to comply with AML, KYC, and other regulatory obligations applicable under our gaming licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: For direct marketing communications, where we have requested and received your consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or contacting support.

6. Data Sharing

cly888 does not sell your personal data. We share data only in the following circumstances:

6.1 Service Providers

We share data with third-party service providers engaged to support Platform operations, including:

• Payment processors: Touch n Go, Boost, GrabPay, FPX banking networks (Maybank, CIMB, Public Bank), USDT processors, and 7-Eleven Cliqq — to process deposits and withdrawals.
• Game providers: Licensed game studios (e.g., PG Soft, Pragmatic Play, Evolution) — to authenticate your session and record game results.
• Identity verification providers: To verify your identity documents and age as part of KYC compliance.
• Fraud prevention and cybersecurity services: To detect and prevent fraudulent activity on the Platform.

All service providers are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

6.2 Regulatory and Legal Disclosure

cly888 may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required to do so by law, court order, or in connection with the exercise or defence of legal claims.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cly888's assets, personal data held by cly888 may be transferred to the acquiring entity, subject to that entity honouring the terms of this Privacy Policy.

7. Cookies & Tracking Technologies

cly888 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for Platform functionality, including session management, authentication, and security. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect anonymised analytics data about how Members use the Platform — including page load times, error rates, and navigation paths — to improve performance.
• Functional cookies: Used to remember your preferences, such as language settings, last visited game category, and display preferences.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use cly888. We do not use third-party advertising or retargeting cookies.

8. Data Security

cly888 implements a layered security architecture to protect your personal data, including:

• TLS 1.3 encryption for all data in transit between your browser and cly888 servers
• AES-256 encryption for sensitive personal data stored at rest
• Multi-factor authentication options for Member accounts
• Intrusion detection and real-time security monitoring
• Access controls that restrict employee access to personal data on a need-to-know basis
• Regular security audits and penetration testing by independent parties

While cly888 takes all reasonable technical and organisational measures to protect your data, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe your cly888 account has been compromised, please contact Live Chat support immediately.

9. Data Retention

cly888 retains personal data for the following periods, unless a longer retention period is required by law:

• Account data: Retained for the duration of your membership and for 5 years following account closure, to comply with AML regulatory record-keeping obligations.
• Transaction records: Retained for 7 years following each transaction, consistent with standard financial record-keeping obligations.
• KYC documents: Retained for 5 years following account closure or the last transaction, whichever is later.
• Support communications: Retained for 3 years following resolution of the relevant query or dispute.
• Technical logs: Retained for up to 12 months for security and fraud investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual.

10. Your Rights

Subject to applicable law and our legitimate interests in data retention for regulatory and fraud prevention purposes, you have the following rights in relation to personal data held by cly888:

• Right of access: You may request a copy of the personal data cly888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where there is no legitimate reason for its continued processing, subject to our legal retention obligations.
• Right to restrict processing: You may request that cly888 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to data portability: Where processing is based on your consent or contract performance, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the cly888 support team via Live Chat or email (displayed in the footer of every page). We will respond within 30 days of receiving a verified request. We may need to verify your identity before processing a data rights request.

11. Children's Privacy

cly888 is strictly an adults-only Platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21, that account will be immediately suspended, any funds returned to the source payment method, and all associated personal data deleted from our systems in accordance with our data retention procedures.

If you believe that a minor has registered on cly888, please notify us immediately via Live Chat support so we can investigate and take appropriate action.

12. International Data Transfers

cly888 may transfer personal data to third-party service providers located outside Malaysia, including game studios, payment processors, and cloud infrastructure providers that operate globally. Where such transfers occur, cly888 ensures that appropriate safeguards are in place, including contractual data protection clauses that impose equivalent data protection standards on the receiving party.

cly888's primary data processing infrastructure is hosted in secure, ISO 27001-certified data centres. Regardless of where data is processed, it remains subject to the protections described in this Privacy Policy.

13. Third-Party Links

The cly888 Platform may display links to third-party game provider pages, licensing authority pages, or payment processor pages. cly888 is not responsible for the privacy practices of those third-party websites and recommends that you review their respective privacy policies before submitting any personal data to them. The inclusion of any link on the Platform does not constitute an endorsement of the linked website's privacy practices by cly888.

14. Changes to This Policy

cly888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable law. Material changes will be communicated to registered Members via account notification or email at least 7 days before the changes take effect.

The effective date of the most recent version of this Policy is displayed at the top of this page. We encourage Members to review this page periodically. Your continued use of cly888 following notification of changes constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cly888 handles your personal data, please contact us via:

• 24/7 Live Chat: Available directly on the Platform. Average response time is 3–5 minutes.
• Email: [email protected] (displayed as plain text in the footer of all pages — not a clickable link).

For formal data protection requests (access, erasure, portability), please include "Data Rights Request" in the subject line of your email or opening chat message to ensure it is directed to the appropriate team. We will acknowledge receipt within 3 business days and respond in full within 30 days.

This Privacy Policy is to be read alongside and forms part of the cly888 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.