CLY8 takes the privacy of every member seriously. This document transparently explains how we collect, use, store, and protect your personal information — in accordance with data protection laws in force in Malaysia.
Privacy is more than a legal obligation for us — it is a moral responsibility to every member who trusts cly8.
All data transmitted between your device and cly8's servers is protected with 256-bit SSL encryption — the same standard used by leading banks in Malaysia — ensuring your information cannot be intercepted in transit.
CLY8 has never and will never sell, rent, or trade members' personal information to any third party for marketing purposes. Your data belongs to you — it is not a business commodity of ours.
CLY8's Privacy Policy is fully drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every aspect of data handling complies with the latest local legal requirements.
We do not hide what we do with your data. This document clearly explains every type of information collected, the reason for collection, how it is used and how long it is retained — no terms buried in fine print.
Only cly8 staff who require access to your data for operational purposes are permitted to do so. All access is logged and audited regularly. No employee may view your sensitive information without valid authorisation.
You have the right to access, correct, transfer, or request the deletion of your personal data at any time. CLY8 provides a straightforward mechanism for managing these rights through our support team.
CLY8 collects only the data necessary to provide its services. We do not sell your data. You may request access, correction, or deletion of your data at any time. All data is protected with high-grade encryption. This policy applies to all CLY8 platforms including the website, Android app, and iOS app.
CLY8 collects various types of personal information to enable us to provide a safe, seamless, and personalised experience to every member. Generally, the information we collect falls into three main categories:
Personal Identification Information: This includes your full name, national identification number (MyKad), date of birth, email address, mobile number and residential address. This information is required during account registration and the identity verification (KYC) process, carried out in accordance with legal compliance requirements.
Financial Information: To facilitate deposit and withdrawal processes, we collect bank account details, bank name, and account numbers used for transactions. Credit or debit card numbers are not stored directly by CLY8 — they are processed entirely through certified third-party payment gateways integrated with our platform.
Platform Usage Information: When you use the CLY8 platform, we automatically collect technical data including IP address, device type, operating system, browser version, pages visited, gaming session duration, games played, and transaction records. This data is used for security purposes, service improvement, and anonymised usage behaviour analysis.
| Data Category | Example Information | Requirements |
|---|---|---|
| Identity Verification | Name, MyKad, email, phone | Required – registration & KYC |
| Financial | Bank account number, bank name | Required – deposits & withdrawals |
| Technical | IP address, device, browser, OS | Automatic – security |
| Behavioral | Game records, sessions, preferences | Automatic – improvement |
| Communications | Support logs, feedback | Optional — when interacting |
CLY8 collects your personal information through several different channels. It is important for you to understand each of these channels so you can make informed decisions about the data you share with us.
Directly From You: When you register a new account, complete your profile, submit KYC documents, contact the CLY8 support team, or fill in any feedback form, you are directly providing us with personal information. This is the primary channel through which we collect the most sensitive data.
Automatically During Use: The cly8 platform uses cookies, web beacons, and tracking scripts — all fully managed by cly8 — to automatically collect usage data. This data is collected each time you access the cly8 website or mobile app, whether via mobile phone, tablet, or laptop.
From Trusted Third-Party Sources: In certain situations, CLY8 may receive information about you from trusted third parties including identity verification service providers, fraud prevention agencies, and payment service providers. This information is used solely for verification and security purposes.
CLY8 only collects information that is genuinely necessary to provide its services. We do not collect sensitive information such as biometric data, medical records, or your political views.
Every piece of information cly8 collects is used for clear and lawful purposes. We do not use your data for undisclosed purposes without your prior consent. The following are the primary purposes for which your personal data is used:
CLY8 applies a "data minimisation" principle — we only collect and process information that is strictly necessary for each stated purpose. Data that is no longer needed will be deleted according to a defined retention schedule.
CLY8 does not sell, rent, or disclose members' personal information to third parties for their own marketing purposes. This is our absolute commitment to every member. However, there are limited situations where CLY8 may need to share your data with certain parties:
cly8 Integrated Service Providers: CLY8 works with carefully selected third-party service providers to help operate our platform. These include payment gateway providers who process your financial transactions, identity verification service providers for KYC processes, server hosting and cloud infrastructure companies, and gaming software providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by CLY8.
Legal Authorities: CLY8 will disclose your personal information to legal authorities, enforcement agencies, or regulatory bodies when required to do so by Malaysian law, court order, or licensing compliance requirements. In such situations, CLY8 will endeavour to notify you in advance where permitted by law.
Fraud Prevention: Certain information may be shared with industry fraud prevention networks to protect all platform users from fraudulent activity, money laundering and other security threats.
Business Transfer: Should cly8 be involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction. In such situations, you will be notified and your privacy will continue to be protected in accordance with the terms of this policy.
CLY8 does not transfer your personal data across international borders without ensuring that an adequate level of data protection exists in the destination country, in accordance with Malaysia's PDPA requirements.
CLY8 continuously invests in cutting-edge security infrastructure to ensure members' personal data is protected at every stage — during transmission, during processing, and during storage.
Technical Security Measures: The cly8 platform employs 256-bit SSL/TLS encryption for all data communications, AES-256 encryption for data stored in databases, 24-hour active intrusion detection systems (IDS/IPS), enterprise-grade firewalls, and real-time security monitoring by the cly8 cybersecurity team.
Organisational Security Measures: Access to members' personal data is restricted to CLY8 staff who require it to carry out their duties, based on a "minimum access privilege" principle. All CLY8 staff undergo background checks and data protection training before being granted access to systems containing personal data.
Data Retention Period: CLY8 retains your personal data for as long as necessary to fulfil the purpose for which it was collected. In general:
While cly8 implements comprehensive security measures, no security system in the world is entirely impenetrable. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.
The cly8 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and ensure certain features function correctly. The following are the types of cookies used by cly8:
You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the CLY8 platform and prevent you from accessing certain features.
Most web browsers allow you to view, delete and block cookies through your browser's privacy settings. Please refer to your browser's documentation (Chrome, Firefox, Safari, Edge) for detailed guidance on managing cookies.
As a cly8 member and as an individual whose personal data is processed by cly8, you have the following rights under Malaysia's PDPA and cly8's privacy policy:
To exercise any of the above rights, please contact the cly8 support team via live chat within the platform. We will process your request within a reasonable timeframe and may require identity verification beforehand to ensure the security of your data.
The cly8 platform may contain links to third-party websites or applications in certain contexts. Please note that cly8's Privacy Policy applies solely to the cly8 platform — namely the cly8.app website and the cly8 mobile app.
CLY8 is not responsible for the privacy practices or content of any third-party websites you may access through links on our platform. We encourage you to read and understand the privacy policy of each website you visit separately.
Third-party game software providers integrated within the cly8 platform are bound by strict data confidentiality agreements with cly8. These providers are only permitted to process the technical data necessary to operate the games and may not use that data for any other purpose.
The cly8 platform is strictly for individuals aged 18 and above. cly8 does not intentionally collect or process personal data from individuals under 18 years of age. If you discover that a child or minor has registered a cly8 account, please contact our support team immediately.
Should cly8 discover that personal data of an individual under 18 has been collected without our knowledge, the account in question will be terminated immediately and all related data will be permanently deleted from our systems.
CLY8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes to this policy will be communicated to members via a notice on the CLY8 platform or by email at least 14 days before the changes take effect.
The "Updated" date shown at the top of this page reflects the date of the most recent amendments made. Your continued use of the cly8 platform after any such amendments take effect constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy page periodically — especially before making any transaction or submitting new personal information — to ensure you are always informed of how cly8 handles your data.
If you have any questions, concerns, or complaints regarding cly8's Privacy Policy or how we handle your personal data, our team is ready to assist. You may reach us through the following channels:
For requests relating to personal data rights (access, correction, deletion), please clearly state the type of request and include sufficient identifying information so we can process your request securely and accurately.