OFFICIAL PRIVACY DOCUMENT

CM8Play Privacy Policy – Data Protection & Privacy for Malaysian Players

Your privacy is our priority at cm8play. This document clearly explains how we collect, use, store, and protect your personal data as a player on our platform in Malaysia. We have written this in plain, straightforward language — not in legal jargon that gives you a headache.

Last Updated: January 2026 · Version 2.4
Privacy Policy Contents
01Data We Collect
02How We Use Your Data
03Data Sharing
04Data Security
05Cookies & Tracking Technologies
06Your Rights
07Retention & Deletion
08Marketing Communications
09Policy Amendments
10Contact Us
🛡️ CM8Play's Privacy Commitment to Malaysian Players

Six core principles that guide how cm8play handles your personal data on a daily basis.

No Sale of Personal Data

CM8Play has never and will never sell players' personal data to third parties for marketing or commercial purposes. Your data is not a product we trade in. This is not merely a policy — it is a core value that is non-negotiable at cm8play.

Absolute Guarantee
256-bit SSL Encryption

Every bit of data transmitted between your device and cm8play's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB. No third party can intercept or read your data in transit.

Bank-Grade
Your Data, Your Control

You have the right to access, correct, delete, and export the personal data cm8play holds about you. Requests can be submitted at any time through our customer support and will be processed within 30 business days.

Full Player Rights
Restricted Internal Access

Within cm8play, players' personal data is accessible only to staff who genuinely require it to carry out their duties — such as the customer support and finance teams. All internal access is logged and audited on a regular basis.

Internal Access Controls
Policy in Bahasa Malaysia

Many platforms write their privacy policies in technical language that is difficult to understand. CM8Play is committed to providing a privacy policy that is clear and easy for all Malaysian players to follow, with no legal background required.

Clear & Easy to Understand
Policy Change Notifications

When cm8play makes significant changes to this Privacy Policy, we will notify you by email before the changes take effect — so you won't miss any important updates that affect how your data is handled.

Email Notification
Table of Contents

This Privacy Policy explains how CM8Play ("we", "our platform") collects, uses, stores, and protects your personal information when you use the cm8play.best website and all related services. By registering or continuing to use the cm8play platform, you agree to the practices described in this policy. If you have any questions, we're here to help via support@cm8play.best.

01

Personal Data We Collect

CM8Play collects personal data from you in several ways — directly from you during registration and platform use, and automatically through the technologies that support the platform's operations. The following are the categories of data we collect:

Data Type Specific Examples Basis for Collection
Identity Data Full name, MyKad number, date of birth, KYC document images Contract
Contact Data Email address, Malaysian phone number, residential address Contract
Financial Data E-wallet account numbers (TnG, GrabPay), bank name, FPX account numbers, MYR transaction history Contract
Technical Data IP address, device type, browser, operating system, time zone Legitimate Interests
Usage Data Logins, games played, bets placed, session duration Contract
Communication Data Live chat records, support emails, feedback, and complaints Legitimate Interests
Cookie Data Session cookies, preference cookies, anonymised analytics data Consent
Important Note: CM8Play does not directly collect credit or debit card information. All payments are processed by third-party payment gateways that comply with PCI-DSS security standards. We only receive transaction confirmation, not full card details.

We do not collect special categories of sensitive data — such as health information, religious beliefs, or political affiliations — unless you voluntarily share them while communicating with the cm8play support team, and even then, such information is used solely for the purpose of that specific interaction.

02

How CM8Play Uses Your Data

CM8Play uses the personal data we collect for the following purposes, all of which are directly related to providing the platform's services to you:

  • Account Management: Creating and maintaining your cm8play account, verifying your identity (KYC), and processing deposit and withdrawal requests in MYR.
  • Service Delivery: Enabling you to play slots, bet on EPL football, the Malaysia Super League, BWF badminton, cricket, and all other games available on cm8play.
  • Security & Fraud Prevention: Detecting suspicious activity and preventing fraud, money laundering, and multi-account abuse.
  • Customer Support: Resolving inquiries, complaints, and technical issues that you report to the cm8play team.
  • Legal Compliance: Fulfilling legal obligations related to our operating licence, anti-money laundering requirements, and regulatory reporting.
  • Platform Improvements: Analyzes usage data (in anonymized, aggregated form) to improve the platform experience, introduce new features, and resolve technical issues.
  • Responsible Gaming: Monitoring playing patterns to identify players who may need Responsible Gaming support.
  • Marketing Communications: Sending bonus offers and promotions via email or notifications — only if you have opted in to receive such communications.

CM8Play does not use your data to make automated decisions that have legal or similarly significant effects on you without human review.

03

Data Sharing & Disclosure to Third Parties

CM8Play does not sell your personal data to anyone. However, there are specific situations where we need to share data with certain parties in order for the platform to function properly:

  • Payment Processors: Payment gateways supporting Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX need to receive transaction details in order to process your deposits and withdrawals. All payment processors we work with are PCI-DSS compliant and bound by strict data protection agreements.
  • Game Software Provider: Third-party casino game providers whose slots, Live Casino, and table games are available on cm8play may require minimal technical data to ensure games load correctly. This does not include your financial information or full identity details.
  • Technology Infrastructure Provider: Cloud and hosting service providers that store cm8play platform data are bound by data processing agreements that require them to protect data to the same standards as cm8play.
  • Regulatory Authority: CM8Play may be required to disclose certain information to the regulatory body that issued our operating licence, or to law enforcement authorities when mandated by a court order or applicable legislation.
Important: Every instance of data sharing with third parties is conducted on a "minimum necessary" basis — only the data genuinely required for a specific purpose is shared. We do not grant any third party unrestricted access to the cm8play player database.

In the event that cm8play undergoes a structural business change such as an acquisition or merger, existing player data will be handled in accordance with the same or stricter privacy standards. Players will be informed of any significant change in ownership.

04

Data Security Measures at CM8Play

CM8Play invests seriously in security infrastructure to protect player data. The following are the key layers of protection we have in place:

  • Encryption in Transit: All communications between your browser or app and cm8play's servers use TLS 1.3 protocol with 256-bit encryption — meaning your data cannot be read even if it is intercepted in transit.
  • Encryption at Rest: Sensitive data such as MyKad numbers and bank account details are stored in encrypted form within cm8play's database. Even internal staff cannot view the actual values — they only see a masked version.
  • Two-Factor Authentication (2FA): CM8Play supports 2FA for all player accounts as an added layer of security. We encourage all players to enable this feature in their account settings.
  • 24/7 Security Monitoring: cm8play's automated monitoring system detects unusual activity in real time and will take immediate action — including temporary account suspension — if there are signs of unauthorised access.
  • Regular Security Audits: CM8Play conducts penetration testing and security audits by independent third parties at least twice a year to identify and address vulnerabilities before they can be exploited.
  • Staff Training: All cm8play staff with access to player data undergo regular data protection training and are bound by strict confidentiality agreements.

While cm8play takes all reasonable security measures, no online system is 100% impenetrable. If you suspect your account has been accessed without authorisation, please contact the cm8play support team immediately via live chat or email at support@cm8play.best.

05

Cookies & Tracking Technologies

CM8Play uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance your experience. The following are the types of cookies we use:

Mandatory
Essential Cookies – Required for core cm8play platform functionality. This includes login session cookies, security tokens, and language preference cookies. Without these, you will not be able to log in or play. These cookies do not require your consent as they are essential for the platform to operate.
Analytics
Analytics Cookies – Helps cm8play understand how players use the platform — which pages get the most visits, how long sessions last, and where players run into issues. This data is aggregated and anonymised — we cannot identify you individually from it. You can decline these cookies without affecting the core functionality of the platform.
Functional
Functional Cookies – Saves your preferences such as your chosen language, display settings, and game preferences so you don't have to reconfigure them each time you log in. These cookies improve your experience but are not required for the core functionality of cm8play.

You can manage your cookie settings through your browser. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, blocking essential cookies will affect your ability to log in and use the cm8play platform.

CM8Play Note: We do not use cookies to track your activity on other websites outside of cm8play.best. Our cookie tracking is limited to activity within our platform only.
06

Your Rights as a CM8Play Player

As a cm8play player, you have the following rights regarding your personal data. To exercise any of these rights, contact the cm8play support team by email at support@cm8play.best and specify which right you wish to exercise:

Right of Access

Request a copy of all personal data cm8play holds about you. We will provide it in a readable format within 30 business days.

Right to Rectification

Request corrections to inaccurate or incomplete data. For example, if your phone number or email address has changed, you can ask us to update it.

Right to Erasure

Request deletion of your personal data under certain circumstances, such as when your account is closed. Subject to applicable legal retention obligations.

Right to Object

Object to the processing of your personal data for direct marketing purposes. You can do this at any time without providing a reason.

Right to Data Portability

Request a copy of your data in a structured, machine-readable format (JSON or CSV) so it can be transferred to another service provider if needed.

Right to Restrict Processing

Request that cm8play temporarily suspend processing of your data in certain circumstances — for example, while an investigation into the accuracy of that data is ongoing.

07

Data Retention & Deletion Period

CM8Play retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable laws and regulations. The following are general retention guidelines:

  • Active Account Data: For as long as your cm8play account remains active. Data is updated whenever changes occur and is retained to allow us to continue providing services to you.
  • Data After Account Closure: After account closure, cm8play retains certain records (such as transaction history and KYC records) for a minimum of 5 years to meet anti-money laundering compliance obligations and operating licence requirements.
  • Communication Records: Customer support and live chat records are retained for 2 years from the date of communication for training and dispute resolution purposes.
  • Cookie Data: Session cookies expire when you close your browser. Persistent cookies expire after a set period — typically between 30 days and 1 year, depending on the cookie type.
  • Technical Logs: Server logs and security logs are retained for 90 days for debugging and security incident investigation purposes.

Once the retention period expires and there is no legal requirement to keep the data longer, cm8play will securely delete or anonymise it so it can no longer be linked back to you.

08

Marketing Communications & Notifications

CM8Play respects your communication preferences. We distinguish between two types of communication:

  • Transactional Communications (Mandatory): Deposit confirmations, withdrawal notifications, customer support responses, account security alerts, and terms update notices. These communications cannot be opted out of as they are essential to the operation of your account. CM8Play will always send these through your registered email or SMS.
  • Marketing Communications (Optional): Bonus offers, new game promotions, news on BWF badminton tournaments or the Malaysia Super League that you can bet on at cm8play, and other entertainment content. You can opt out of these communications at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting cm8play support to update your preferences.
Your Options: Unsubscribing from marketing communications will not affect your account, any existing bonuses, or the cm8play services you use. You will still receive important transactional communications relating to your account.

CM8Play does not send marketing communications to players who have set a low deposit limit or are currently in a cooling-off period or self-exclusion. This is part of our commitment to responsible gaming.

09

Amendments to This Privacy Policy

CM8Play reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features involving data collection. When changes are made:

  • The "Last Updated" date at the top of this page will be revised to reflect the latest version.
  • For significant changes affecting how we use or share your data, we will send an email notification to all active cm8play members at least 14 days before the changes take effect.
  • Notices of upcoming changes will also be prominently displayed within the cm8play platform.

Continued use of the cm8play platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of data that is not legally required to be retained.

10

How to Contact CM8Play About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how cm8play handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@cm8play.best – Include "Privacy Request" in the subject line to ensure your email is routed to the right team.
  • Live Chat: Available 24/7 within the cm8play platform. Please indicate that your inquiry is related to data privacy at the start of the chat session.
  • Response Time: Privacy inquiries are typically responded to within 2 business days. More complex requests, such as full data access or data deletion requests, are handled within 30 business days.
CM8Play's Commitment: Our team takes every privacy enquiry seriously. You will always receive a clear, helpful response — not a generic template that fails to address your question. Your privacy is our responsibility, and every request will be handled with respect and professionalism.
🔐 Security Standards Upheld by CM8Play

The security infrastructure and industry standards protecting the personal data of cm8play Malaysia players.

SSL/TLS 1.3
256-bit encryption for all data in transit
PCI-DSS
Payment card industry data security standard
2FA Active
Two-factor authentication for all accounts
Anonymised Data
Platform analytics using aggregated data
Independent Audit
Third-party security testing twice a year
Data Encryption
Sensitive data is stored in encrypted form

Privacy Isn't Just a Document — It's How CM8Play Operates

Many online platforms have well-written privacy policies, but their actual practices don't match what's on paper. At cm8play, we believe Malaysian players deserve to know exactly what happens to their data — and more importantly, they deserve confidence that what is written here reflects what actually happens in practice.

When you register on cm8play and enter your Malaysian phone number for the first time, that information is stored in our system with encryption. When you make a deposit via Touch 'n Go eWallet or DuitNow, your transaction details are transmitted through secure channels — and once verified, only the transaction value is stored in cm8play's system, not your full e-wallet account number. That's how it actually works, not just a generic statement in a policy document.

For Malaysian players on cm8play, trust is the foundation of our relationship. You entrust cm8play with your financial account details when making a deposit, your identity during the KYC process, and your betting activity records every time you play. We take that trust seriously — investing in robust security infrastructure, restricting access to your data, and giving you the tools to review and manage it yourself.

One thing we will never do at cm8play is use your data to generate revenue outside of our relationship as a platform and player. Your betting activity data will not be sold to advertisers. Your phone number will not be shared with marketing brokers. Your MYR transaction history will not be used for third-party credit profiling. This is not merely a policy — it is a line we will not cross.

❓ Frequently Asked Questions – CM8Play Privacy Policy

The most frequently asked questions by Malaysian players about privacy and data security at cm8play.

No. CM8Play has never sold, rented, or shared players' personal data with any external marketing parties or data brokers. Your data is only shared in three strictly limited situations: with payment processors (such as gateways for Touch 'n Go or GrabPay) to facilitate MYR transactions; with technical infrastructure providers that host platform data under strict confidentiality agreements; and with legal authorities when required by a court order or applicable legislation. In all these cases, only the minimum necessary data is shared — not your full profile.

CM8Play retains identity data (name, MyKad, date of birth), contact data (email, phone number), financial data (MYR transaction history, payment methods used), usage data (game history, betting records), and technical data (IP address, device type). While your account is active, this data is retained to enable us to provide our services. After account closure, transaction and KYC records are kept for a minimum of 5 years for anti-money laundering legal compliance. Communication records are retained for 2 years. Technical logs are retained for 90 days. You may request a full copy of your data by contacting support@cm8play.best.

CM8Play uses multiple layers of protection for your financial information. First, we do not store full e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account numbers — only representative tokens that cannot be used to access your accounts directly. Second, all financial communications are transmitted via TLS 1.3 encryption at 256-bit. Third, payment processing is handled by third-party gateways that comply with PCI-DSS standards — cm8play never handles raw payment data. Fourth, cm8play's monitoring system will flag and investigate any unusual transaction patterns that may indicate unauthorised use.

Yes, you have the right to request data deletion at cm8play. However, there are important limitations: certain records cannot be deleted due to legal obligations. Financial transaction records and KYC data must be retained for a minimum of 5 years after account closure to meet anti-money laundering legal requirements and operating licence conditions. Data beyond legal retention requirements — such as marketing preferences, marketing communication history, and anonymised technical data — can be deleted upon request. To submit a deletion request, contact support@cm8play.best with the subject line "Data Deletion Request". We will notify you within 30 business days of what can and cannot be deleted, along with the reasons.

There are two simple ways to stop receiving promotional emails from cm8play. The first and easiest is to click the "Unsubscribe" link found at the bottom of any marketing email you receive. This will remove your email from the cm8play marketing communications list immediately. The second is to contact the cm8play support team via live chat or email at support@cm8play.best and request an update to your communication preferences. Please note that you will still receive important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts — these cannot be unsubscribed from as they are essential to the security and operation of your account.

Your Data Is Safe at CM8Play – Register with Confidence!

Cm8play is a licensed platform that uses bank-grade encryption and is fully committed to the privacy of Malaysian players. Register today and enjoy a welcome bonus of up to RM888, with the peace of mind that your data is protected.

Register Free Now Already Have an Account
No Data Sales 256-bit SSL Full Data Control 24/7 Support
Bahasa Melayu