Privacy Policy CM8Game – How We Protect Your Personal Data in Malaysia

1.1 Who We Are

CM8Game ("we", "platform", "cm8game") operates an online betting and casino platform serving Malaysia, accessible at cm8game.best. We act as the data controller for all personal information collected through our platform, including the website, mobile app, and all related services.

1.2 Scope of This Policy

This Privacy Policy applies to:

• All registered members and prospective members of cm8game
• Visitors to the cm8game website who have not yet registered
• Anyone who interacts with cm8game through customer support channels
• Anyone using any service provided by cm8game

2.1 Data You Provide Directly

When you register or use the cm8game platform, you may provide the following personal data:

• Identity Information: Full name, identity card number (MyKad), date of birth, gender
• Contact Information: Email address, phone number, residential address in Malaysia
• Financial Information: Bank account details, digital wallet numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow), and records of deposit and withdrawal transactions in Malaysian Ringgit (RM)
• Verification Documents: Copies of MyKad, bank statements, or other documents required for the KYC (Know Your Customer) process
• Account Information: Username, encrypted password, account preferences

2.2 Automatically Collected Data

When you use the cm8game platform, our systems automatically collect the following technical information:

• IP address and network information
• Device type and version, operating system, and web browser
• Session data – login time, session duration, pages visited
• Betting records and gaming activity (including bets placed, matches followed, and game outcomes)
• Approximate geolocation data (based on IP address) for geographic region verification
• Cookie data and similar tracking technologies (see Section 8)

2.3 Data from Third-Party Sources

In certain circumstances, cm8game may receive personal data about you from legitimate third-party sources, including identity verification service providers, payment method providers such as FPX via Maybank2u or CIMB Clicks for transaction verification purposes, and relevant regulatory bodies. All data from these sources is used solely to fulfil cm8game's legal compliance obligations.

2.4 Sensitive Data Categories

CM8Game may process information considered sensitive under Malaysia's PDPA, including information relating to your financial status (in the context of responsible gaming deposit limits) and health information you voluntarily disclose during the self-exclusion process. This information is processed solely with your explicit consent and for clearly stated purposes.

CM8Game uses your personal data for the following purposes:

Under Malaysia's PDPA 2010, cm8game processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing required to provide the betting and casino services you have requested, including account management, financial transaction processing in MYR, and bet settlement
• Legal Obligation: Processing required to comply with Malaysian legal obligations, including anti-money laundering (AML) requirements, identity verification (KYC), and reporting to the relevant authorities
• Legitimate Interests: Processing for cm8game's legitimate business purposes, such as fraud prevention, platform security, and service improvement – provided these interests do not override your privacy rights
• Consent: Processing for direct marketing and promotional communications — you may withdraw this consent at any time by contacting the cm8game support team

5.1 Core Principle – We Do Not Sell Your Data

Cm8game never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. This is our absolute commitment.

5.2 Trusted Service Providers

CM8Game shares limited personal data with selected third-party service providers to enable us to operate the platform effectively, including:

• Payment processing providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX/Maybank2u, CIMB Clicks) – to process deposits and withdrawals in MYR
• Third-party identity verification service providers – for KYC purposes
• Cloud infrastructure and server providers that host our data
• Analytics software providers that help us understand platform usage (anonymised where possible)

All of these service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes defined. They are not authorised to process your data for their own purposes.

5.3 Authorities & Legal Requirements

Cm8game may disclose your personal data to Malaysian government authorities or law enforcement bodies where required by law, court order, or in circumstances where disclosure is necessary to prevent financial crime, money laundering, or threats to public safety. In all such cases, cm8game will ensure that only the minimum necessary and relevant data is disclosed.

5.4 Business Acquisition or Merger

In the event that cm8game is involved in any merger, acquisition, or sale of business assets, members' personal data may be transferred to the receiving entity. Members will be notified via an in-platform notification or email should such an event occur, and the right to withdraw consent will remain intact.

Cm8game retains your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by Malaysian law. In general:

• Active account data: Retained for as long as your cm8game account remains active
• Financial transaction records (MYR): Minimum 7 years from the transaction date, in accordance with Malaysian financial regulatory requirements
• KYC Documents: Minimum 5 years after account closure, in accordance with AMLA requirements
• Betting logs and activity: 3 years from the date of the bet for audit purposes
• Customer support communication records: 2 years from the date of last interaction
• Marketing data (with consent): Until you withdraw your consent

Once the relevant retention period has expired, cm8game will securely delete or destroy your personal data, or convert it into an anonymised form that can no longer be identified as you.

CM8Game implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure:

• Transmission encryption: SSL/TLS 256-bit encryption protects all data transmitted between your device and cm8game's servers
• Storage encryption: Sensitive data such as financial information and KYC documents are stored in encrypted form
• Access Controls: Only staff who require access to specific data to perform their duties are permitted to do so – based on the principle of least privilege
• Two-factor authentication (2FA): Available to all cm8game member accounts and required for administrative access
• Continuous security monitoring: Automated monitoring systems detect unusual activity 24 hours a day, 7 days a week
• Penetration testing: Conducted periodically by independent third parties to identify system vulnerabilities
• Staff training: All cm8game staff receive regular data security training

8.1 Types of Cookies Used

CM8Game uses cookies and similar tracking technologies to enhance your experience on our platform:

• Essential Cookies: Required for core platform functionality – login, session management, and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use the cm8game platform (pages visited, time spent) to help us improve the user experience. This data is collected anonymously.
• Functional Cookies: Saving your preferences (such as language and display settings) so you don't have to reconfigure them each time you log in to cm8game.
• Marketing Cookies: Used to display relevant cm8game promotions (with your consent only). You can opt out at any time.

8.2 Managing Cookies

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies will affect the functionality of the cm8game platform. For optional cookies, you can update your preferences at any time via the privacy settings panel located at the bottom of the cm8game website.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by cm8game:

In some circumstances, your personal data may be processed or stored on servers located outside Malaysia – for example, for data backup purposes or the use of international cloud infrastructure services. Where this occurs, cm8game ensures that such transfers are carried out in accordance with the requirements of Malaysia's PDPA 2010, including ensuring that the recipient country or entity provides a comparable level of data protection to that of Malaysia. CM8Game uses recognised standard data transfer agreements to protect your data in such international transfers.

The cm8game platform is strictly for users aged 18 and above. CM8Game does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe your child under 18 has registered on cm8game, please contact our support team immediately at support@cm8game.best.

CM8Game reserves the right to amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or the way we handle personal data. Any material changes to this policy will be communicated to members via in-platform notifications on cm8game or by registered email at least 14 days before the changes take effect. The "Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this policy periodically.

If you have any questions, concerns, or complaints regarding how cm8game handles your personal data, or if you wish to exercise any of the privacy rights set out in this policy, please contact us via:

• 24/7 Live Chat: Directly through the cm8game platform – the fastest way to get an immediate response
• Email: support@cm8game.best — for written requests relating to privacy rights

If you are not satisfied with cm8game's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory authority for PDPA in Malaysia.