Privacy Policy & Data Protection CM8Play

1 Introduction

CM8Play (hereinafter referred to as "we", "our platform" or "cm8play") respects the privacy of every player and visitor who uses our platform. This Privacy Policy clearly and transparently explains how we collect, store, use and protect your personal information when you register, log in or use any of the services on cm8play.

By using the cm8play platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us for any further enquiries.

This Privacy Policy applies to all cm8play services including the official website, Android and iOS mobile apps, and all our official communication channels. We continually strive to keep this policy updated in line with data protection best practices and applicable legal requirements in Malaysia.

2 Information We Collect

We only collect information necessary to provide you with a secure, seamless, and personalised service. The information we collect falls into two main categories:

Information you provide directly:

• Full name as shown on a valid identification document (identity card or passport).
• Active email address used during registration.
• A valid Malaysian phone number for two-factor authentication and communications.
• Date of birth for age verification (18 years and above).
• Bank account or digital wallet details for deposit and withdrawal purposes.
• KYC (Know Your Customer) documents such as a photo of your identity card or bank statement when requested.
• Any information you share via live chat or communications with our support team.

Information collected automatically:

• IP address and general location information (country/region).
• Device type, operating system, and browser version used.
• Login session data including date, time and duration of use.
• Game history, wagering records, and transaction activity on the platform.
• Cookie and tracking technology data as described in Section 6.
• Technical performance information to identify and resolve technical issues.

3 How We Use Your Information

The information we collect is used solely for legitimate purposes directly related to delivering cm8play services to you. The following outlines how your data is used:

Purpose of Use	Data Type	Legal Basis
Registration & account management	Name, email, phone number	Contract performance
Identity Verification (KYC)	ID document, date of birth	Legal obligation
Deposit & withdrawal processing	Bank account information, transaction records	Contract performance
Fraud prevention & security	IP, session logs, activity patterns	Legitimate interests
Customer Support	Communication history, game records	Contract performance
Promotional communications (with consent)	Email, phone number	Consent
Platform enhancement	Anonymised analytics data	Legitimate interests

We do not use your data for any purpose beyond those stated above without obtaining your prior consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

4 Information Sharing & Disclosure

CM8Play does not sell, rent or disclose your personal information to third parties for marketing or commercial purposes. However, there are certain situations where information sharing is necessary and legally permitted:

• Accountable service providers: Payment gateways, identity verification service providers and technical infrastructure companies that assist us in operating the platform. All such providers are bound by strict confidentiality agreements.
• Legal requirement: We will disclose information to the relevant authorities when required by Malaysian law, court order, or legitimate law enforcement requests.
• Fraud prevention: In certain cases, we may share information with other platforms in the industry to prevent fraud involving multiple platforms.
• Protection of vital interests: If we believe that disclosure is necessary to protect the safety or vital interests of any individual.

5 Data Security

We implement multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure.

• 256-bit SSL/TLS Encryption for all communications between your device and cm8play servers.
• Two-Factor Authentication (2FA) available and recommended for all member accounts.
• 24/7 security monitoring by an experienced cybersecurity team.
• Regular security audits by independent security firms to identify and patch system vulnerabilities.
• Strict internal access controls — only authorised personnel may access players' personal data.
• Encrypted data backups in secure, geographically segregated data centres.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe. You also play an important role in keeping your account secure by using a strong password and never sharing your login details with anyone.

6 Cookies & Tracking Technologies

CM8Play uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns and deliver more relevant content to you.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous data on how you use the platform to help us improve our services.
• Functional Cookies: Saves your preferences such as language, theme, and display settings for a more convenient experience.
• Analytics Cookies: Helps us understand traffic and usage patterns in aggregate through trusted third-party analytics tools.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the cm8play platform.

7 Your Rights Over Personal Data

As a cm8play platform user, you have clear rights regarding your personal data. We fully respect these rights and make it easy for you to exercise them:

To exercise any of the above rights, please contact our support team via live chat or our official email. We will process your request within 30 business days.

8 Data Retention Period

CM8Play retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable laws and regulations.

• Active account data: Retained for as long as your account is active on the cm8play platform.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• KYC documents: Retained for 5 years after account closure or the date of the last transaction.
• Support communication logs: Retained for 2 years for reference and dispute resolution.
• Anonymised analytics data: Can be stored indefinitely as it contains no personally identifiable information.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-recognised deletion methods.

9 Changes to This Privacy Policy

CM8Play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our platform practices, technology, legal requirements or other legitimate reasons. Any material changes will be communicated to you via:

• In-app notifications on cm8play or on the website when you are logged in.
• Email to the address registered to your account.
• Notices prominently displayed at the top of this page.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. Your continued use of the cm8play platform after changes take effect signifies your acceptance of the updated Privacy Policy. Please check this page periodically.

10 Contact Us

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact our Data Protection Officer (DPO) team through the following channels:

We are committed to handling every privacy-related enquiry seriously and professionally. Our team will respond to each request within the stipulated timeframe and provide clear explanations of the actions taken.