CM8Play Privacy Policy – Personal Data Protection for Malaysia Users

CM8Play ("we", "Platform") is committed to protecting the privacy of every user who registers and uses our services on the cm8play.click website and the cm8play mobile app. This Privacy Policy has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

This document explains in detail what types of personal data we collect, how it is used, how it is stored securely, and what your rights are as the data owner. We believe that transparency in data management is not merely a legal obligation — it is part of the trust we have built with over 850,000 active cm8play members across Malaysia.

This Privacy Policy applies to all users of the cm8play platform regardless of how they access it — whether via web browser, Android or iOS app, or any other digital channel associated with cm8play.

CM8Play only collects data necessary to provide you with a secure, compliant, and quality service. The data we collect can be grouped into several key categories:

2.1 Sensitive Data

For identity verification (KYC) purposes required prior to withdrawal processing, cm8play may request documents containing more sensitive data, such as a copy of your Malaysian MyKad or passport, as well as a bank statement or payment account details. All such documents are handled with high-level encryption and are accessible only to authorised personnel, strictly for verification purposes.

CM8Play collects personal data through transparent and lawful methods. You can be assured that no data is collected covertly or without your knowledge:

• Account Registration: Basic information you provide when registering a new cm8play account — name, phone number, email, and password.
• KYC Process: Identity documents and proof of payment submitted for verification purposes prior to your first withdrawal.
• Financial Transactions: Data automatically generated when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or FPX CIMB Clicks.
• Platform Activity: Data regarding the games you play, bets placed, session duration, and your interactions with cm8play platform features.
• Support Communications: Records of live chat conversations, emails, or any communication between you and the cm8play support team.
• Cookies & Tracking Technologies: Technical information about your device and usage patterns, collected automatically when you access the platform.
• Information from Third Parties: In certain cases, we may receive information from payment providers or regulatory bodies for compliance purposes.

The data we collect is used exclusively for the following purposes, all of which are directly related to the delivery of cm8play's services to you:

4.1 Account Operations & Services

• To create, manage, and maintain your cm8play account
• Processing deposits and withdrawals via supported payment methods
• To verify your identity in accordance with KYC requirements and legal compliance obligations
• Provides access to all games and services on the platform — Live Casino, slots, football and badminton Sports Betting, e-sports, lottery, and table games

4.2 Security & Protection

• To detect and prevent fraud, money laundering, and suspicious activity
• Monitoring and protecting the platform's integrity against misuse
• Verifying that all users meet the minimum age requirement of 18 years
• Compliance with anti-money laundering laws and regulatory requirements

4.3 User Experience & Communications

• Sending important notifications relating to your account, transactions, and security
• Keeping you informed about relevant promotions and bonus offers based on your gaming history
• Delivering more effective and personalised customer support via 24/7 live chat
• Enhancing the overall user experience based on usage pattern analysis

4.4 Responsible Gambling

This is one of the purposes cm8play takes most seriously. Your gaming activity data is used to monitor patterns that may indicate signs of problem gambling — such as frequent deposit limit increases, unusually long session durations, or concerning loss patterns. This monitoring is carried out solely to protect your wellbeing, not for any commercial purpose.

CM8Play does not sell, rent, or trade your personal data to any third party for their commercial purposes. This is a principle we do not compromise on. However, there are limited situations in which we may need to share certain information:

5.1 Trusted Service Providers

We share necessary data with service providers that help us operate the platform — including payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX, licensed casino game providers, and cloud technology service providers that host our infrastructure. All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by cm8play.

5.2 Legal & Regulatory Requirements

CM8Play may be required to disclose information to the relevant authorities when:

• Required under Malaysian law or a valid court order
• Requested by a gambling regulatory body with jurisdiction over cm8play's operations
• Required for fraud investigations or anti-money laundering inquiries by law enforcement agencies
• Necessary to protect the security or legal rights of cm8play or its users

5.3 Business Transfer

In the event of any merger, acquisition, or transfer of cm8play's business assets, user data may be transferred as part of that transaction. In such cases, you will be notified and your rights under this Privacy Policy will be upheld by the receiving party.

CM8Play invests seriously in security infrastructure to ensure that every member's personal data and financial information is protected at all times. Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your device and cm8play's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's major banking institutions.
• Stored Data Encryption: Sensitive personal data stored in our databases is also encrypted, meaning that even in the event of unauthorised access, the data cannot be read without the appropriate encryption key.
• Strict Access Controls: Only staff with specific authorisation may access members' personal data, and solely for permitted purposes such as customer support or KYC processing.
• 24/7 Security Monitoring: An automated monitoring system tracks all account activity and transactions in real time to detect any anomalies or unauthorised access attempts.
• Two-Factor Authentication (2FA): CM8Play supports two-factor authentication for member accounts, adding an extra layer of protection beyond passwords alone.
• Regular Security Assessments: The cm8play platform undergoes regular penetration testing and security audits by independent security experts to identify and address any potential vulnerabilities.

CM8Play uses cookies and similar tracking technologies to enhance the user experience and conduct analysis that helps us improve the platform. Cookies are small text files stored on your device when you visit the cm8play platform.

7.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Stores your preferences and settings such as interface language, default betting values, and personalised display configurations.
• Analytics Cookies: Helps us understand how users interact with the platform — most visited pages, session duration, and navigation patterns — for ongoing improvements.
• Performance Cookies: Used to optimise platform loading speed and responsiveness, particularly during live betting sessions and live casino streaming on Malaysia's 4G networks.

7.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies. However, please note that blocking all cookies may affect the functionality of the cm8play platform, including potential issues with logging in or saving your account settings.

For the cm8play mobile app, you can manage data permissions through the privacy settings on your Android or iOS device.

CM8Play retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active or as required to provide services to you.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Log & Security Data: Retained for 2 years for digital forensics and security investigation purposes if required.
• Communications Data: Customer support conversation records are retained for 2 years for reference and service improvement purposes.
• Closed Accounts: Following account closure, data will be deleted or anonymised within 90 days unless a longer retention period is required by law.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and cm8play's internal policies, you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Correction: If the data we hold is inaccurate or out of date, you have the right to request a correction within a reasonable timeframe.
• Right to Erasure: You may request the deletion of your personal data, subject to any legal requirements that may mandate its retention.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data.
• Right to Object: You may object to the use of your data for marketing communications at any time.
• Data Portability Right: You have the right to receive your personal data in a machine-readable format for transfer to another service where applicable.
• Right to Withdraw Consent: You may withdraw consent for certain data processing, though this may affect our ability to provide some services.

To exercise any of the rights above, contact the cm8play privacy team by email at support@cm8play.click with the subject line "Personal Data Rights Request". We will respond within 14 business days of receiving your request.

The cm8play platform is strictly for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Every new account registration requires age verification, and cm8play conducts ongoing age checks as part of the KYC process. Should we discover that data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who are concerned that their child or ward may have accessed the cm8play platform, please contact us immediately at support@cm8play.click. We will treat this matter with the highest priority.

CM8Play reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. Each new version will be published at cm8play.click/privacy-policy with a clear effective date.

For material changes — those that significantly affect how we process your data — cm8play will endeavour to provide advance notice via registered email or in-platform notification at least 14 days before the changes take effect.

Your continued use of the cm8play platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes made, you have the right to close your account by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how cm8play handles your personal data, please contact us through the following channels:

• Privacy Email: support@cm8play.click (please include the subject line "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the cm8play platform

Our data protection team will respond to all privacy-related enquiries within 3 business days. For formal data deletion or access requests, the response time is within 14 business days as provided under Malaysia's PDPA.

CM8Play is committed to handling all privacy-related enquiries and complaints with seriousness and professionalism. We believe your trust is our most valuable asset, and we will continue to uphold high data protection standards for all 850,000+ active members across Malaysia.