Privacy Policy cly888 – Data Protection & Information Security

Welcome to the cly888 Privacy Policy page. We understand that your trust is our most valuable asset, and we take our responsibility to protect your personal data very seriously.

This Privacy Policy describes cly888's privacy practices regarding the collection, use, disclosure, and protection of your personal information when you use the cly888.win website, our mobile app, and all related services we offer (collectively referred to as the "Platform").

By registering an account, accessing, or using the cly888 Platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you are advised not to use our Platform.

This Privacy Policy should be read together with Terms & Conditions cly888, which is the related document governing the overall use of our Platform.

Cly888 collects various types of personal information required for platform operations, legal compliance, and service improvement. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive information such as your medical records, religious beliefs, or political views.

Cly888 collects your personal information through several different methods, depending on how you interact with our Platform:

• Account Registration: When you register a new account, you provide us directly with basic information such as your name, email, and phone number.
• KYC Process: During the identity verification process, you upload verification documents and any additional information required to meet legal requirements.
• Financial Transactions: Every time you make a deposit or withdrawal, our system records the transaction details, including the payment method and amount involved.
• Platform Usage: Your activity while playing games, placing bets, or navigating the platform is automatically recorded by our system.
• Support Communications: When you contact our support team via Live Chat or email, those conversations are stored for service quality and reference purposes.
• Cookies and Similar Technologies: Our Platform uses cookies and tracking technologies to collect technical data about your device and usage patterns.

The personal information we collect is used responsibly for lawful and specific purposes. The following are the primary purposes for which cly888 uses your data:

• Account Management: Creating, managing, and maintaining your account on the cly888 Platform, including login processing and account security controls.
• Transaction Processing: Verifying and processing all financial transactions including deposits, withdrawals, and bonus payments accurately and securely.
• Identity Verification (KYC): Meeting anti-money laundering (AML) compliance obligations and KYC requirements mandated by regulatory authorities.
• Customer Support: Providing effective technical assistance and customer support services whenever you need help.
• Platform Security: Detecting and preventing fraud, account misuse, unauthorised access, and other security threats to the Platform and our members.
• Service Improvement: Analysing usage patterns to improve Platform features, develop new games, and enhance the overall user experience.
• Marketing Communications: Sending promotional information, exclusive offers, and Platform updates — only to members who have consented to receive such communications.
• Legal Compliance: Fulfilling legal obligations, handling legal claims, and exercising our rights under agreements with you.

Cly888 ensures that every use of your data has a solid legal basis — whether based on your consent, contractual necessity, legal obligations, or legitimate interests we hold as a platform operator.

Cly888 is very strict about the sharing of your personal information. We does not sell, does not rent and does not trade your personal data with any party for marketing purposes. Information sharing only occurs in the following limited circumstances:

• Trusted Service Providers: Third parties that help us operate the Platform, such as payment processors (FPX, Touch 'n Go, GrabPay), cloud computing service providers, and game providers. All such third parties are bound by strict confidentiality agreements and may only use your data for purposes we have specified.
• Legal Requirements: When we are required by law, court order, or directive from a competent authority to disclose certain information.
• Legitimate Interest Protection: In situations involving a serious threat to personal safety or to prevent financial crime such as money laundering.
• Business Transfers: In the event of a merger, acquisition, or sale of cly888 assets, user data may be transferred as part of the business assets, with reasonable prior notice provided to you.

Cly888 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, loss, alteration, or accidental disclosure:

• 256-bit SSL Encryption: All communications between your device and cly888 servers are protected with the highest industry-standard encryption.
• Multi-Layer Access Control: Access to user data is restricted to staff who genuinely require it, with all access logged and regularly audited.
• Two-Factor Authentication (2FA): The 2FA system is available for all cly888 member accounts as an added security layer, and we strongly encourage you to activate it.
• Real-Time Threat Monitoring: Our automated security system monitors any unusual or suspicious activity on every account and across the Platform as a whole.
• Regular Security Audits: cly888 conducts regular penetration testing and security audits by independent third parties to ensure our defence systems remain up to date.
• Encrypted Data Storage: Data stored in our databases is encrypted using the latest encryption methods. Your password is never stored in plain text.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of any security incident affecting your data, cly888 will notify you as promptly as possible in accordance with applicable legal requirements.

Cly888 uses cookies and similar tracking technologies to enhance your experience on our Platform. The following are the types of cookies we use:

• Essential Cookies: Required for core Platform functions such as login verification, session management, and security. These cookies cannot be disabled as they are critical to Platform operation.
• Performance Cookies: Collecting information about how you use our Platform — which pages are visited most frequently, time spent on each page, and any error messages encountered. This data is used to improve Platform performance.
• Functional Cookies: Allowing the Platform to remember your preferences such as language, display settings, and login details (if you choose to save them) for a more personalised experience.
• Analytics Cookies: Helping us understand aggregated Platform usage patterns for continuous improvement purposes. This data is anonymised and cannot be linked to any specific individual.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of your cly888 Platform.

Cly888 retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for the duration your account remains active, plus any additional period required by our legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian financial and tax legislation.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Support Communication Logs: Retained for 2 years for service quality purposes and reference in the event of a dispute.
• Closed Account Data: After an account is closed, personal data no longer required will be deleted or anonymised within 90 days, except for data that must be retained for legal compliance.

As a user of the cly888 Platform, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 30 working days.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal information in our records.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal information — subject to our legal obligations to retain certain data.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time by contacting us.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict how we use your personal information.
• Right to Data Portability: You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time, without affecting the validity of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact the cly888 data protection team via email at [email protected] or via Live Chat. We will process your request as quickly as possible and provide a response within 30 days.

The cly888 Platform is exclusively for individuals aged 18 and above. We do not knowingly collect, use, or process personal information of individuals under the age of 18.

If we determine that we have collected personal information from someone under the age of 18, that account will be terminated immediately and all associated information will be deleted from our systems without delay.

If you are a parent or guardian and discover that your child who is underage has registered an account at cly888, please contact us immediately via email [email protected] for us to take immediate action.

In operating the Platform globally, your personal information may be transferred to and stored on servers located outside Malaysia. cly888 ensures that all cross-border data transfers are conducted in accordance with strict data protection standards.

Steps we take to protect your data during cross-border transfers include:

• Ensuring that data recipients maintain a level of data protection equal to or higher than Malaysia's standards.
• Using internationally recognised standard contractual clauses with all data processing partners outside the country.
• Applying the same technical security requirements to all data processors regardless of their geographic location.

Cly888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in data security technology.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a clear notice on the cly888 Platform to inform members of the changes.
• Sending email notifications to registered members for material changes that directly affect their privacy rights.

Continued use of the cly888 Platform after any Privacy Policy changes take effect constitutes your acceptance of the latest version of the policy. We encourage you to review this page periodically to stay informed about cly888's privacy practices.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by cly888, you may contact us through the following channels:

• Privacy Email: [email protected] — for all privacy-related inquiries and data rights requests.
• Live Chat: Available 24/7 directly from the cly888 Platform — for general enquiries related to your privacy and account security.

The cly888 Data Protection Team is committed to responding to all privacy enquiries within 5 working days and processes all official data rights requests within 30 working days.