Privacy Policy CM8 Asia – Our Commitment to Protecting Your Data

CM8 Asia understands that trust is the foundation of our relationship with every member. When you register an account with CM8 Asia, make a deposit via Touch 'n Go eWallet or DuitNow, play slots or live casino, or reach out to our support team — you are entrusting us with your personal information. That trust is not something we take lightly.

This Privacy Policy is written in plain, straightforward language — not obscure legal jargon. We want you to genuinely understand what happens with your data, not simply tick a consent box without reading. This transparency is one of CM8 Asia's core values.

This policy applies to all CM8 Asia platform users in Malaysia, including those who access our services via web browser on a desktop, smartphone or tablet. If you have any questions after reading this policy, our Malay-speaking support team is available via live chat or email at support@cm8asia.best.

CM8 Asia only collects information necessary to provide, improve and secure our services. The following are the categories of data we collect:

CM8 Asia uses collected information solely for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your consent:

• Processing account registration and verifying your identity in accordance with KYC requirements and Malaysian anti-money laundering laws.
• Processing deposits via e-wallet and FPX, handling withdrawal of winnings, and managing your account transaction history.
• Providing gaming services – slots, live casino, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), roulette, and all other games available on the platform.
• Sending important account-related communications such as deposit confirmations, withdrawal notifications, security alerts and service updates.
• To verify that you meet the age eligibility requirement (minimum 18 years old) to use the platform.
• Detecting and preventing fraud, account abuse, money laundering and other harmful activities that could compromise the security of the platform or other members.
• Complying with Malaysian legal and regulatory requirements, including PDPA 2010 and the Anti-Money Laundering Act.
• To improve the user experience by analyzing anonymized usage patterns for platform development purposes.
• With your consent, sending you information about CM8 Asia promotions, bonuses and new offers that may be of interest to you.

CM8 Asia does not sell, rent or transfer members' personal data to third parties for their own marketing purposes. This is an absolute commitment on our part. However, there are limited situations where we may need to share your data with certain parties for legitimate operational purposes:

• Payment service providers – including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX processors – to handle your deposit and withdrawal transactions. These providers are bound by strict confidentiality agreements.
• Game software providers — such as Evolution Gaming, Pragmatic Play and Playtech — which supply live casino, slots and table games. Data shared is limited strictly to what is necessary to operate the games.
• Malaysian legal authorities — police, courts or regulatory bodies — when we are required by law to do so or where there is reasonable cause to prevent criminal activity.
• Independent audit and compliance firms engaged in CM8 Asia's security auditing and regulatory compliance — bound by professional confidentiality agreements.
• In the event of a merger, acquisition or sale of company assets — where member data may be transferred to a new entity, subject to prior notice being given to affected members.

CM8 Asia uses secure server infrastructure with multiple layers of technical and organisational protection to safeguard your personal data against unauthorised access, disclosure, alteration or destruction:

• Data encryption in transit using TLS 1.3 and at rest using AES-256 encryption.
• Role-based access control (RBAC) ensuring that only authorised staff can access member data, and only to the extent required for their role.
• 24/7 system monitoring with automated intrusion detection and real-time alerts for suspicious activity.
• Regular data backups to secure, geographically separated locations to ensure service continuity.
• Regular penetration testing by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Mandatory privacy and security awareness training for all CM8 Asia staff with access to member data.

Your personal data is retained for as long as necessary for the purpose it was collected, or to meet Malaysian legal requirements — typically no more than 7 years after account closure for financial records, in accordance with the requirements of the Malaysian Companies Act.

CM8 Asia uses cookies and similar tracking technologies to enhance the user experience and secure the platform. Cookies are small text files stored in your browser when you visit our website. The following are the types of cookies we use:

You can manage and delete cookies through your browser settings. However, disabling necessary and security cookies may affect the functionality of the CM8 Asia platform. We do not use third-party cookies for targeted advertising purposes.

Under Malaysia's Personal Data Protection Act 2010, you have specific rights regarding the personal data held by CM8 Asia. We fully respect and facilitate the exercise of these rights:

To exercise any of the rights above, contact the CM8 Asia support team via live chat or email at support@cm8asia.best. We will verify your identity before processing any data-related request to prevent unauthorised access to your information.

The CM8 Asia platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

All new account registrations require age verification. CM8 Asia uses several mechanisms to prevent underage registration, including date of birth checks during sign-up, MyKad verification in the KYC process and monitoring for suspicious usage patterns.

CM8 Asia may update this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements or platform improvements. Whenever this policy is updated, the following will apply:

• The "Updated" date at the top of this policy will be changed to reflect the date of the latest amendment.
• If an amendment is material — meaning it involves significant changes to how your data is used — we will notify you via an in-account notification or email at least 14 days before the change takes effect.
• For minor amendments such as language corrections or clarifications that involve no substantive changes, a notification may not be sent, but the effective date will be updated accordingly.

Your continued use of the CM8 Asia platform after any policy amendment takes effect will be considered your acceptance of the updated privacy terms. We therefore encourage you to review this Privacy Policy page periodically.

CM8 Asia is committed to addressing all privacy-related enquiries, concerns or complaints seriously and promptly. If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of your data rights, please reach us through the following channels:

• Live Chat — the fastest method, available 24/7 in Bahasa Melayu. You will be connected to a support agent within minutes.
• Privacy email: support@cm8asia.best — please include "Privacy Enquiry" in the subject line. We aim to respond within 2 hours on business days and within 24 hours on weekends.

If you are not satisfied with our response to a privacy enquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.