Privacy Policy cm2bet —
Personal Data Protection for Malaysian Players

Welcome to the cm2bet Privacy Policy. This document is published by cm2bet to clearly and transparently explain how we handle the personal data of users on our platform in https://cm2bet.fun. We take your privacy seriously — not merely because the law requires it, but because it is the foundation of trust between our platform and every player who joins us.

This Privacy Policy applies to all users who access the cm2bet website, register a member account, use our mobile app, contact our customer support team, or interact with any digital service we provide. It covers how we collect, store, process, protect, and — where applicable — share your personal data.

By using the cm2bet platform, you agree to the data processing practices described in this document. If you disagree with any part of this Privacy Policy, please discontinue use of the platform and contact our support team for assistance with account closure.

Cm2bet only collects personal data that is strictly necessary to provide a safe, legal, and high-quality online betting service. We do not collect irrelevant or excessive data. The following are the categories of data we collect and their purposes:

Some data is collected directly when you provide it during registration or when contacting our support. Technical data is collected automatically when you access the platform — this is standard industry practice and is necessary for the security of your account.

Every piece of data cm2bet collects is used solely for legitimate, necessary, and proportionate purposes in line with our operational needs. We do not use your data for purposes unrelated to the services you use. The following are the primary purposes for which your personal data is used:

• Account Management: Creating, maintaining, and securing your member account, including secure login processes and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account quickly and accurately.
• Legal Compliance: Fulfilling our obligations under the PDPA, anti-money laundering (AML) laws, and know your customer (KYC) requirements set by the relevant authorities.
• Platform Security: Detecting and preventing fraud, hacking, unauthorised access, and activities that violate cm2bet's Terms and Conditions.
• Customer Support: Responding to enquiries, resolving complaints, and providing you with technical assistance promptly and efficiently.
• Service Communications: Sending transaction notifications, account security alerts, and important platform updates.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support, and providing effective self-control tools.
• Platform Improvements: Analysing aggregated usage data to improve user experience, platform performance, and the variety of games we offer.

Cm2bet does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute principle. However, in the course of legitimate platform operations, there are certain situations where data may need to be shared with selected and trusted parties:

• Payment Providers: Information required to process deposits and withdrawals is shared with our integrated payment providers — such as FPX, DuitNow, and e-wallet processors — all of whom are bound by strict confidentiality agreements.
• Game Providers: Gaming software companies, such as slot and live casino providers, may receive minimal technical data required to ensure games function correctly on your account.
• Regulatory Authorities: cm2bet fully complies with any lawful requests from Malaysian law enforcement agencies or regulatory bodies with the relevant jurisdiction.
• Technical Service Providers: Companies assisting us with hosting, cybersecurity, analytics, and technical support may access data within the limited scope required for their work, and all are bound by confidentiality agreements.
• Fraud Investigation: In cases of suspected fraud or illegal activity, data may be shared with law enforcement authorities or selected security firms for investigation purposes.

Every third party that receives cm2bet user data is required to sign a data processing agreement obligating them to protect that information to security standards equal to or exceeding our own.

The security of your personal data is the top technical priority for the cm2bet engineering team. We continuously invest in cutting-edge security infrastructure to ensure your data remains protected against all digital threats. Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your browser and cm2bet's servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the industry standard for international banking and finance.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 algorithms even when at rest.
• Firewall & Intrusion Prevention System: Our infrastructure is protected by next-generation firewalls and a real-time threat detection system that monitors traffic 24/7.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of protection on their account.
• Regular Security Audits: cm2bet conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.
• Internal Access Controls: Only cm2bet staff with a legitimate and specific business need are permitted to access user data, and all access is comprehensively logged.

Cm2bet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, account verification, and transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, errors encountered — to help us improve the user experience.
• Functional Cookies: Saving your preferences such as language, display settings, and login information (if you select "remember me") for your convenience.
• Analytics Cookies: Aggregated and anonymised data that helps us understand overall platform usage trends at a collective level, not at an individual level.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect your ability to log in or use certain features of the cm2bet platform.

As a user of the cm2bet platform and a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

Cm2bet retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are data retention guidelines by category:

• Active Account Data: Retained for the duration of your active account plus 7 years after account closure — this fulfils anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC Documents: Retained for 5 to 7 years after the business relationship ends, in accordance with regulatory requirements.
• Technical & Security Logs: Retained for 12 to 24 months for security investigation and dispute resolution purposes.
• Support Communication Records: Retained for 3 years for reference and quality control purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted or fully anonymised using standard security deletion procedures so that it can no longer be linked to your identity.

Cm2bet is an online betting platform that intended solely for individuals aged 18 and above. We take child protection extremely seriously and maintain a zero-tolerance policy against the participation of any underage individual on our platform.

• Cm2bet does not knowingly collect, store, or process the personal data of individuals under the age of 18.
• Our KYC process is specifically designed to detect and prevent registration by underage individuals.
• If we suspect or discover that a child's data has been collected without knowledge, we will immediately delete that data and close the relevant account.
• Parents or guardians who suspect their child has registered on our platform are urged to contact our support team immediately for prompt action.

If you have any questions, concerns, or wish to exercise your privacy rights, the cm2bet Data Protection Officer (DPO) team is ready to assist you. We are committed to responding to every privacy enquiry within 5 to 14 business days depending on the complexity of the request.

• Privacy Email: [email protected]
• Live Chat Support: Available 24/7 via the chat icon at the bottom right corner of the platform
• Document References: Please include "Data Privacy Request" in your message subject line for faster processing

For data deletion or data access requests, please provide sufficient identity verification information so we can process your request securely. cm2bet reserves the right to request additional identity verification before processing any request involving access to or deletion of sensitive data.