Privacy Policy cm8play – Personal Data Protection for Malaysia Members

Cm8play values the privacy of every member who entrusts us with their personal data. This Privacy Policy is set out to ensure you have a clear understanding of what information we collect, why it is collected, how it is used, and how it is protected throughout your time on the cm8play platform.

This policy applies to all users of the CM8Play platform, including registered members, website visitors and any individuals who interact with our services through cm8play.biz. It also covers all official CM8Play communication channels, including email, live chat and any other form of written communication.

CM8Play collects personal data in two main categories — data you provide directly and data collected automatically as you use the platform.

Data you provide directly:

• Identity information: Full name, Malaysian identity card number (MyKad), date of birth and gender.
• Contact information: An active Malaysian mobile number and email address.
• Account information: Username, password (stored in encrypted form), and security questions.
• Financial information: Account name and eWallet or bank account number for withdrawal of winnings (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX account via Maybank2u or CIMB Clicks).
• Verification documents: A copy of your MyKad or other identity document if requested for account verification purposes.

Automatically collected data:

• The device's IP address and location information derived from it.
• Web browser type and version, operating system, and device information.
• Activity history on the platform, including games played, bets placed and access times.
• Deposit and withdrawal transaction logs including date, time, and amount.
• Cookie data and similar tracking technologies (see section 8 for further details).

Cm8play collects members' personal data through several different methods:

• Account registration form: When you register a new CM8Play account, you provide basic information such as your phone number, name, and date of birth.
• Identity verification process (KYC): When CM8Play requires identity verification for security or compliance purposes, you may be asked to provide additional identity documents.
• Financial transactions: Every time you make a deposit or withdrawal, the transaction details are automatically recorded in our system.
• In-platform activity: cm8play's system records your gaming and betting activity for security purposes, fraud detection and improvement of the user experience.
• Customer support communications: All conversations conducted via live chat or email with the CM8Play support team may be recorded for training and service improvement purposes.
• Cookies and tracking technologies: While you browse the CM8Play website, cookies are automatically collected to enhance your user experience and analyse website usage.

CM8Play uses members' personal data only for legitimate, clearly stated purposes. The following are the primary purposes for which your personal data is used:

• Account management: Creating, managing, and maintaining your account on CM8Play, including processing deposits, withdrawals, and any other account activity.
• Identity verification: To verify your identity, ensure membership eligibility requirements are met, and prevent underage registration or platform abuse.
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks, and withdrawing winnings to your account.
• Fraud prevention: Detecting, investigating and preventing fraudulent activity, money laundering or any misuse of the platform.
• Customer support: Providing you with assistance and support whenever needed, including resolving technical issues and handling account or transaction enquiries.
• Service communications: Sending important notifications related to your account, transactions, security, and any changes to terms or policies that affect you.
• Platform improvement: Analysing usage patterns to improve the design, functionality and overall experience of the cm8play platform.
• Legal compliance: To fulfil legal obligations, including Malaysia's PDPA requirements and any directives from relevant authorities.

CM8Play is committed to not disclosing members' personal data to third parties arbitrarily. Your personal data will only be shared under the following limited circumstances:

• Payment service providers: Transaction information that needs to be shared with payment processors such as eWallet gateway and FPX Malaysia providers in order to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Technical service providers: Technology companies that assist cm8play in operating the platform's infrastructure — including cloud service and cybersecurity providers — all of whom are bound by data protection agreements.
• Legal requirements: Where cm8play is required by Malaysian law, a court order, or a directive from a relevant authority to disclose certain information.
• Financial crime prevention: In cases involving investigations into fraud, money laundering or other unlawful activity, CM8Play reserves the right to share relevant information with the appropriate authorities.
• Business transfers: In the event that CM8Play is involved in a merger, acquisition or asset sale, member data may be transferred as part of that transaction, with prior notice given to affected members.

CM8Play will not sell, rent, or trade members' personal data to advertisers, data brokers, or any third party for commercial purposes under any circumstances.

CM8Play continually invests in the latest security technologies and procedures to ensure members' personal data is protected at all times. The key security measures we implement include:

• 256-bit SSL Encryption: All communications between your web browser and CM8Play's servers are encrypted using 256-bit TLS/SSL protocol, ensuring no third party can intercept or read the data transmitted.
• Password encryption: Account passwords are stored in hashed form that cannot be read — not even by cm8play staff. We have no way of viewing your original password and will never ask you to share it with anyone.
• Two-factor authentication (2FA): An OTP system via your registered phone number is used to verify your identity during login and sensitive transactions.
• Suspicious activity monitoring: CM8Play's security systems monitor account activity in real time to detect any unusual patterns that may indicate unauthorised access or attempted fraud.
• Internal access controls: Only cm8play staff who require access to specific data in order to perform their duties are permitted to access it, with all access logged and audited.
• Independent security audit: Our security systems are regularly audited by independent security experts to identify and address vulnerabilities before they can be exploited.

While cm8play takes all reasonable measures to protect your data, no online system can be guaranteed 100% secure against every threat. We therefore encourage members to take an active role in protecting their own accounts — use a strong password, never share your login credentials with anyone, and report any suspicious activity to us immediately.

CM8Play retains members' personal data for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. The following guidelines govern our data retention periods:

• Active account data: For as long as your account remains active on CM8Play and for 7 years following account closure, to meet financial record-keeping and audit requirements.
• Transaction records: All deposit, withdrawal and betting activity records are retained for a minimum of 7 years in accordance with Malaysian legal requirements governing financial records.
• Communication logs: Customer support conversation records and official emails are retained for 3 years for reference and dispute resolution purposes.
• Cookie data: Session cookies expire when you close your web browser, while persistent cookies are stored for a set period as defined in our cookie policy (typically between 30 days and 2 years).

Once the applicable retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual. You may request early deletion of your data, subject to legal obligations that may prevent us from doing so (see Section 9 on member rights).

Cm8play uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session management, security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how you use the platform — pages visited, time spent, and any error messages. This data is used to improve the platform and does not personally identify you.
• Functional cookies: Saving your preferences such as preferred language and display settings so you do not have to reconfigure them each time you visit.
• Analytical cookies: Helps us understand aggregate platform usage patterns for continuous improvement purposes. This data is not shared with third-party advertisers.

You can manage your cookie settings through your web browser settings at any time. However, disabling certain cookies may affect the functionality and your experience when using the CM8Play platform. CM8Play does not use cookies for third-party targeted advertising purposes.

As a CM8Play member and as a Malaysian citizen or resident, you have the following rights with respect to your personal data under Malaysia's PDPA:

• Right to access: You have the right to request a copy of the personal data cm8play holds about you. We will provide this information within 21 days of receiving your request.
• Right to rectification: If your personal data held in cm8play's systems is inaccurate or incomplete, you have the right to request a correction. You can update much of your basic information directly from your account settings.
• Right to withdraw consent: You may withdraw consent previously given for CM8Play to use your data for specific purposes (such as marketing communications) at any time, without affecting your right to continue using the platform.
• Right to object to processing: Under certain circumstances, you have the right to object to CM8Play's processing of your personal data.
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.
• Right to request erasure: You may request the deletion of your personal data, subject to legal restrictions that require CM8Play to retain certain records for a prescribed period.

To exercise any of the rights listed above, please contact the cm8play customer support team via live chat or email at support@cm8play.biz. We will process your request within the timeframe required by law and keep you informed of the action taken.

CM8Play is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should CM8Play become aware of or have reason to believe that personal data belonging to a child (an individual under 18 years of age) has been collected without valid parental or guardian consent, we will take the following steps immediately:

• Immediate closure of the associated account.
• Deleting all personal data relating to that individual from our systems.
• Returning any deposited funds that can be clearly identified as belonging to the individual concerned.

If you are a parent or guardian and believe your underage child has registered an account with cm8play, please contact us immediately at support@cm8play.biz so we can take the appropriate action.

Cm8play reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When changes are made:

• The "Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.
• For material changes, CM8Play will endeavour to notify members via their registered email or in-platform notification at least 14 days before the changes take effect.
• Continued use of the cm8play platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
• If you do not agree with any changes made, you have the right to close your account before those changes take effect.

It is each member's responsibility to review this Privacy Policy page periodically to stay informed of CM8Play's current privacy practices.

If you have any questions, concerns, or complaints regarding how CM8Play handles your personal data, or if you wish to exercise any of your privacy rights outlined in this Policy, please contact us via:

• Live Chat: Available 24/7 in Bahasa Malaysia on every page of the CM8Play platform. This is the fastest way to get a response to your privacy enquiries.
• Email: support@cm8play.biz – for privacy enquiries requiring more detailed discussion, or to submit a written request regarding your personal data rights. We will respond within 3 business days.