Privacy Policy CM8App

CM8App recognises that privacy is a fundamental right of every user. We are committed to ensuring that all personal information entrusted to us is handled with full responsibility, transparency, and in accordance with high data protection standards.

This Privacy Policy details how CM8App, as the data controller, collects, processes, stores, and protects your personal data. It also outlines the rights you hold regarding that data and how to exercise those rights.

We encourage you to read this document carefully. If you have any questions about our privacy practices, the cm8app support team is ready to assist via live chat within the platform.

CM8App collects various types of data depending on how you interact with the platform. Generally, the data collected falls into three categories:

Data you provide directly:

• Full name, date of birth, and identity card number (during registration and the KYC process).
• Email address and mobile phone number.
• Current residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity documents submitted for account verification.
• Communications you send to our support team.

Data collected automatically:

• IP address and device information (device type, operating system, web browser).
• General location data based on IP address.
• Activity records within the platform — games played, bets placed, session duration.
• Cookie data and session identifiers (further details in Section 6).

Data from third parties:

• Verification information from approved KYC service providers.
• Payment verification data from payment gateways integrated with the platform.

Every piece of data collected by cm8app is used for a specific and legitimate purpose. We do not process your data beyond the scope of the following purposes:

• Account Management — to create, verify and maintain your member account.
• Service Delivery — to allow you to access games, make deposits, withdrawals and use all platform features.
• Identity Verification (KYC) — to ensure compliance with legal requirements and prevent fraud.
• Payment Processing — to facilitate accurate and secure financial transactions.
• Customer Support — to respond to enquiries, resolve complaints and provide technical assistance.
• Platform Security — to detect and prevent fraudulent activity, hacking and account abuse.
• Service Improvement — to analyse usage patterns and improve the overall user experience.
• Important Communications — to send account-related notifications, transaction updates and security alerts.
• Legal Compliance — to fulfil reporting and record-keeping obligations required by law.

Should cm8app wish to use your data for any new purpose not stated above, we will seek your consent in advance via an in-platform notification.

CM8App does not sell members' personal data. However, in certain situations, we share data with carefully selected third parties to facilitate service delivery:

• KYC Service Providers — for member identity verification to prevent fraud and ensure legal compliance.
• Payment Gateway — information required to securely process deposits and withdrawals via FPX, DuitNow and e-wallets.
• Game Providers — minimum session data required for smooth game delivery from certified providers.
• Analytics Services — aggregated and anonymised data to understand overall platform usage patterns.
• Authorities — when required by law, court order or a valid criminal investigation.

All third parties working with cm8app are required to comply with strict data protection agreements. They are only permitted to use shared data for the stated purposes.

CM8App members' personal data is stored in data centres equipped with multiple layers of physical and digital protection. The security measures we practise include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Data encryption at rest for all sensitive information.
• Role-based access control — only authorised staff can access member data, and every access is audited.
• Continuous 24/7 security monitoring with an automated intrusion detection system.
• Regular penetration testing conducted by qualified independent parties.
• Regular data backups to prevent information loss.

Data retention period: CM8App retains your personal data for as long as necessary to fulfil the purpose of collection, or as required by applicable law — whichever is longer. Financial transaction data is retained for a minimum of five years in accordance with compliance requirements.

Once the retention period expires, data will be deleted or anonymised in a secure and irreversible manner.

CM8App uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. There are several types of cookies we use:

• Essential Cookies — required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies — to collect information on how you use the platform, helping us identify technical issues and improve performance.
• Functional Cookies — to store your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies — to help us understand aggregated and anonymised usage patterns for product improvement purposes.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some parts of the platform. Essential cookies cannot be disabled as they are required for the security of your login session.

As a cm8app member, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat.

CM8App will process all privacy rights requests within 30 business days. For complex cases, this period may be extended with prior notification to you.

The cm8app platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we discover that data belonging to an underage individual has been collected without our knowledge, the account in question will be closed immediately and all related data will be permanently deleted from our systems.

If you are a parent or guardian and are concerned that your child has registered on the cm8app platform, please contact our support team immediately for remedial action.

The cm8app platform is integrated with several third-party services such as payment gateways and game providers to deliver a complete experience to members. These services have their own privacy policies that are separate from the cm8app Privacy Policy.

CM8App is not responsible for the privacy practices of third-party services integrated with the platform. However, we ensure that all third-party partners comply with the minimum data protection standards we set through contractual agreements.

We encourage you to read the privacy policy of the payment gateway service you use to understand how your financial information is managed outside the cm8app platform.

CM8App reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or new platform features.

Each time the Privacy Policy is updated, the "Last Updated" date at the top of this page will be changed to reflect the latest amendment date. For material amendments — those that significantly alter how we process your data — cm8app will notify you via your registered email or an in-platform notification before the changes take effect.

Continued use of the cm8app platform after any amendments take effect will be considered your acceptance of the latest version of the Privacy Policy. It is your responsibility to review this page periodically.

For any enquiries, concerns or requests related to the cm8app Privacy Policy and your personal data, please use the following support channels:

• Live Chat: Available 24/7 on the cm8app platform or app — the fastest way to get a response.
• Privacy Email: [email protected] (displayed as text — not a clickable link)

The cm8app privacy team will handle every enquiry with full attention. We are committed to responding to all privacy-related enquiries within a reasonable timeframe.

For information on how we manage the platform service as a whole, please refer to our cm8app Terms and Conditions. For frequently asked questions about your account and platform, visit FAQ page .