Cm888 is fully committed to protecting the privacy and personal data of every member in Malaysia. This document transparently explains how we collect, use, store, and protect your information — and the rights you hold over that data.
Cm888's Privacy Policy is built on six core principles that ensure your data is always handled in a transparent, responsible, and legally compliant manner.
This Privacy Policy applies to all information collected by cm888 through our web platform at cm888.plus, mobile applications (where applicable), and any communications between you and us. By using the cm888 platform, you consent to the collection and use of data as described in this document. If you do not agree, please discontinue use of our platform and contact us to close your account.
cm888 collects certain categories of information to ensure our platform operates smoothly, meets legal requirements, and delivers the best possible experience to you as a Malaysian player.
| Data Category | Examples | Collected When |
|---|---|---|
| Identification Data | Full name, IC number, date of birth | Registration & KYC |
| Contact Data | Email, Malaysian phone number, address | Registration & Profile |
| Financial Data | Bank account number, TNG/DuitNow details | Deposits & withdrawals |
| Technical Data | IP address, device type, browser, OS | Automatically upon use |
| Usage Data | Games played, betting history, session duration | During gameplay |
| Communication Data | Live chat records, support emails | When contacting support |
Cm888 never collects your full credit/debit card number. All financial transactions are handled by certified third-party payment providers (such as the DuitNow and FPX gateways), which operate under their own security standards. We only receive confirmation of whether a transaction was successful or unsuccessful.
The information you provide must be accurate, complete, and up to date. Submitting false information is a violation of cm888's Terms of Use and may result in account closure. You are responsible for keeping your information current whenever changes occur, particularly your active phone number and email address.
Cm888 uses the information collected for specific and legitimate purposes. The following is a complete list of data usage purposes by cm888:
Cm888 does not use your data to make fully automated decisions that have legal or similarly significant effects on you without human intervention.
cm888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in the course of operating our services, there are situations where your information may be shared with certain parties:
| Third Parties | Data Shared | Purpose | Sold? |
|---|---|---|---|
| Payment Providers (TNG, DuitNow, FPX) | Transaction Details | Processing Deposits/Withdrawals | No |
| Game Providers (Pragmatic, Evolution) | Player ID, game history | Game provision | No |
| Hosting & Security Provider | Limited technical data | Platform Operations | No |
| Malaysian Authorities | Required data | Legal compliance | If Required |
All of cm888's third-party partners are required to sign strict data confidentiality agreements. They are only permitted to use your data for the specific purposes set out in those agreements, and are not allowed to process your data for their own purposes.
cm888 invest seriously in cybersecurity infrastructure to ensure your personal data is protected at every level. Below are the key security measures we have in place:
While cm888 takes all reasonable steps to protect your data, no security system in the world is 100% impenetrable. In the event of a data breach that affects you, cm888 will notify you within 72 hours in accordance with our incident response procedures.
Cm888 does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements:
| Data Type | Retention Period | Reason |
|---|---|---|
| Identification data (KYC) | 5 years after account closure | AML & Legal Requirements |
| Financial Transaction Records | 7 years | Tax & Legal Compliance |
| Game history | 3 years | Dispute management & audit |
| Support communication records | 2 Years | Customer support reference |
| Technical Data (Server Logs) | 90 days | Security & Troubleshooting |
| Non-essential cookie data | 13 months | Industry standards |
Once the retention period has lapsed or the purpose of collection is no longer relevant, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.
Platform cm888 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:
You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the cm888 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.
As a member cm888 based in Malaysia, you have the following rights under the Personal Data Protection Act (PDPA) 2010. cm888 is committed to respecting and facilitating the exercise of these rights:
You have the right to request a copy of the personal data cm888 holds about you. Requests will be processed within 21 business days.
If your personal data held by cm888 is inaccurate or incomplete, you have the right to request a correction at any time.
You may withdraw consent for the use of your data for marketing purposes at any time through your account settings or by contacting us.
In certain circumstances, you may request cm888 to delete your data. However, this may not be fully possible if the data is required for legal compliance.
You have the right to object to the processing of your data in certain circumstances, particularly for direct marketing purposes.
To exercise any of the above rights, please submit a written request to privacy@cm888.plus with the email subject line "PDPA Rights Request" along with your full name and IC number for identity verification. cm888 will respond within 21 business days from the date the request is received.
Platform cm888 is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from children or minors under the age of 18.
Should cm888 discover that we have collected personal data from an individual under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered with cm888 should contact us at support@cm888.plus without delay.
In the course of platform operations cm888, your data may be processed or stored on servers located outside Malaysia, particularly when utilising world-class infrastructure service providers. This includes cloud hosting and computing services hosted in data centres that comply with international security standards.
However, cm888 ensures that any international data transfers are carried out with safeguards equivalent to the level of protection afforded in Malaysia, including:
For further enquiries regarding international data transfers involving your data, please contact our privacy team at privacy@cm888.plus.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how cm888 handling your personal data, we encourage you to reach out to us directly. We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe.
If you are not satisfied with cm888's response to your privacy complaint, you have the right to lodge a complaint with Personal Data Protection Department (PDPD) under the Ministry of Digital Malaysia, which is the regulatory body for PDPA in Malaysia.
Your privacy is our priority. Register a cm888 account today and enjoy a safe, fair, and transparent experience across slots, live casino, e-sports, and Sports Betting — backed by PDPA-compliant personal data protection.