The administration of the Cybet platform ensures a high level of security for user data. This document sets out in detail the principles of collection, use, storage, and protection of information belonging to the platform’s participants.
The project was launched in 2025 and operates strictly in accordance with licence ALSI-202409034-FI2, issued by the Anjouan Offshore Finance Authority. The requirements of this regulator regarding information processing are uniform and apply to all registered players, regardless of their geographical location.
Personal Data Collection
The main difference between Cybet and traditional fiat operators lies in the exclusive use of cryptocurrency payment methods. The platform does not request users’ full names, home addresses, scans of bank cards, or bank statements. The digital footprint of players on the website is kept to the technically necessary minimum.
To create an account, only one parameter is required — an up-to-date email address. Other information markers are recorded automatically in the background during interaction with the platform’s interface. The areas of collection for this technical information are distributed as follows:
| Automatic marker | Technical purpose on the platform | Justification of necessity |
| Session parameters | Determination of IP address, device type, and operating system. | Interface adaptation for the screen, session integrity verification, and blocking of automated flood attacks. |
| Geolocation tags | Recording the approximate location of the user based on the IP address. | Compliance with licensing requirements and automatic restriction of access from prohibited jurisdictions. |
| Activity logs | Analysis of behaviour patterns when navigating through website pages. | Optimisation of the gaming lobby loading speed and timely detection of multi-account creation. |
| Transactional addresses | Recording public wallet addresses involved in operations. | Necessary for subsequent AML audits. The transfers themselves are processed directly within the blockchain network. |
Personal Data Use
The processing of any data on the platform has a clear legal and logical justification. The pipeline of processes is divided into three directions: fulfilling the terms of the user agreement, protecting the ecosystem against fraud, and complying with international AML (Anti-Money Laundering) standards.
Main directions of information processing:
- Provision of the gaming process. Technical markers are necessary for the correct calculation of bets, real-time balance updates, and providing uninterrupted access to a catalogue of over 6,000 slots, live tables, and original Cybet games (In-house titles).
- Security and risk monitoring. Automated algorithms monitor suspicious authorisation attempts, device changes, and atypical payout requests, preventing unauthorised access to profiles.
- Service notifications. The email address is used to send critical system messages: deposit confirmations, transaction reports, password reset links, and two-factor authentication (2FA) codes.
- Product improvement. The study of anonymised statistics allows for the identification of overloaded sections of the website, increasing the processing speed of payment gateways, and improving general navigation.
Under no circumstances is the personal data of Cybet users sold, rented, or transferred to third-party marketing agencies or advertising brokers.
Cookies and Tracking
Cookies are classified into three functional groups, allowing users to flexibly manage their privacy through individual browser settings:
- Technical (Strictly Necessary). These files are responsible for authorisation, saving the active session, and the stable operation of the gaming wallet. Without their activation, the correct functioning of the website is impossible, so they are launched automatically.
- Analytical. These allow for the collection of general website visit statistics. These files are completely depersonalised and do not link actions on the platform to a specific email address. This function can be disabled by the user at any time.
- Functional. These are responsible for saving personal preferences (for example, fixing one of the 13 available interface languages chosen during previous visits). Disabling them does not affect access to the gaming process.
Third-Party Data Sharing
Interaction is carried out exclusively with those counterparties without whose integration it is technically impossible to provide the gaming service. No excessive information is transferred to partners.
- Gaming providers. When launching slot machines from studios such as Evolution Gaming, Pragmatic Play, NetEnt, Nolimit City, or Hacksaw Gaming, partners receive only the technical ID of the gaming session. This is required to synchronise gaming rounds, record winnings, and ensure fair RTP algorithms. Providers do not have access to players’ emails or personal logs.
- Blockchain infrastructure. Public wallet addresses are transferred to decentralised networks and automated analytical monitoring services solely for the verification of transactions and checking the cleanliness of assets.
- Anti-fraud systems. Specialised services analyse digital device fingerprints to promptly detect hacking attacks and bonus hunting at an early stage.
All Cybet partners are bound by strict non-disclosure agreements (NDAs). They are categorically prohibited from using the platform’s technical data for their own commercial or marketing purposes.
Data Security Measures
The protection of user information is implemented on two levels: network (traffic encryption) and profile (account access control). All information flows between the user’s browser and Cybet servers are encrypted using TLS/HTTPS protocols, which rules out the possibility of intercepting data during transmission.
Account-level security control tools are distributed across the following stages:
| Stage of interaction | Security tool applied | Target purpose |
| Profile registration | Email verification | Confirmation of account authenticity and creation of a communication channel. |
| Daily authorisation | Two-factor authentication (2FA) | Balance protection via Google Authenticator in case the mailbox is compromised. |
| Hacking attempt | Automatic session block | Account freezing upon detection of a login from a suspicious IP address or atypical location. |
| Withdrawal of funds | Manual transaction audit | Additional checking of payouts that exceed the platform’s internal security limits. |
The blockchain technology itself acts as an independent technical protection circuit. Since all financial operations take place on-chain, the history of deposits and withdrawals is immutable, transparent, and protected from any external manipulation.
User Privacy Rights
Every registered participant of Cybet, regardless of their region of residence, is provided with a full range of rights regarding their personal data. Players can flexibly manage their privacy and use the following control tools:
- Right to access and obtain a statement — requesting detailed information about exactly what personal data is stored on the platform.
- Right to rectification — a requirement to promptly change or update outdated and inaccurate information.
- Right to restriction of processing — submitting an application for the temporary or partial suspension of certain actions with the information.
- Right to data portability — receiving a download of one’s linear data in a structured electronic format.
- Right to erasure (the right to be forgotten) — complete clearing of the profile, which is implemented by contacting the platform’s support team.
When exercising the right to erasure, an important legal limitation applies: AML rules and the conditions of the Anjouan licence oblige the platform to store transaction history and the associated email for 5 years after the official closure of the account. This period is necessary for passing regulatory audits and resolving potential financial disputes. Upon the expiry of 5 years, the data is destroyed irretrievably.
To exercise any rights related to privacy, requests should be sent to the email address [email protected] with the subject line “Privacy Request”.
Policy Updates and Breaches
In the event of a change in the principles of data processing, the text of this Policy is updated with the recording of the current effective date of the changes. In the event of large-scale changes, registered users are additionally notified by email. Continued use of Cybet services after the rules have been updated is regarded as automatic consent to the new conditions.
Upon detection of threats of information leakage or unauthorised access to servers, the security service operates according to the regulations:
- Localisation. The affected sector of the network is immediately isolated and the vulnerability is eliminated.
- Notification. Within 72 hours from the moment the incident is recorded (in accordance with the GDPR Article 33 standard), affected users are officially notified by email, and a statement is published on the platform.
- Reporting. A detailed report on the investigation and the measures taken is sent to the licensing regulator.
The intentional provision of false data, creation of duplicate accounts, or systemic abuse of bonuses are considered a violation of the platform’s rules. In such cases, the account is temporarily frozen for an internal investigation.
The Cybet support service operates 24/7. If you have any questions regarding the processing of personal data, communication with operators is possible via live chat on the website or at [email protected].
FAQ
Just an email. That’s the only thing you enter manually. Everything else — IP address, device type, operating system, approximate location — gets logged automatically when you use the platform. Since there are no fiat payments here, card numbers and bank details are never collected. The only payment-related record is the public wallet address tied to each transaction.
No. Advertisers and data brokers get nothing. Data goes to three categories of partners: game providers like Evolution Gaming and Pragmatic Play (they need session data to run games), blockchain infrastructure (to confirm transactions), and fraud detection tools (to flag unusual behavior). That’s the full list.
Email [email protected] — put “Privacy Request” in the subject line. Keep in mind that some data can’t be deleted on demand. AML rules require us to hold certain records for up to five years after an account closes. That’s a licensing obligation, not a choice.
You’ll get an email to the address on your account. The updated version goes live on the platform with a new effective date marked on the page. If you continue using the platform after that date, it counts as acceptance of the new terms. No separate confirmation is required from your side.
The account gets frozen while the case is reviewed. If the investigation confirms fraud — fake registration data, multiple accounts, bonus farming — the account closes permanently and bonuses are cancelled. If there’s no deliberate fraud, the deposit is returned minus the network fee, which runs $1.00–$3.00 depending on the blockchain.