At cm8, your privacy is more than a formality — it is the foundation of trust between us and every member. This document transparently explains how we collect, use, store, and protect your personal data when you use the cm8 casino and sports betting platform.
All data transmitted between your device and cm8 servers is protected by 256-bit SSL/TLS encryption — the same technology used by Malaysia's major banking institutions. No one can intercept your information in transit.
Cm8 members' personal data is accessible only to authorised staff with a legitimate operational need. All access is recorded and periodically audited to ensure no misuse occurs from within the organisation.
CM8 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data belongs to you and we use it solely to operate CM8's services.
CM8 only collects data that is strictly necessary for platform operations and regulatory compliance. We do not collect excessive or irrelevant information beyond what is required to provide casino and betting services to you.
Your personal data is retained only for as long as necessary for the stated purpose or as required by law. Once an account is closed and the mandatory retention period has expired, data is securely deleted from cm8's systems.
In the event of any security breach affecting your personal data, cm8 will notify you within the timeframe required by applicable law. We have comprehensive incident response procedures in place to address such situations promptly.
Welcome to the Privacy Policy CM8 — Malaysia's leading online casino and sports betting platform. This policy is crafted to clearly and transparently explain how cm8 ("we", "Platform") collects, processes, stores, and protects your personal data ("member", "user") when you use our services.
This Privacy Policy applies to all users who access the cm8 platform via the official website, mobile app, or any other access method provided by cm8. By registering an account or using cm8's services, you agree to the information collection and usage practices described in this policy.
CM8 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for online user privacy protection. We take our responsibilities as a data controller seriously to ensure your personal information is always protected.
Important Note: This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy CM8, which constitutes the entire agreement between you and our platform.
CM8 collects several categories of personal data from our members for legitimate purposes. Below is a full description of the types of data collected and how they are obtained:
This information is obtained directly from you during the registration process, account verification, or when you contact the cm8 support team:
| Data Type | Example Information | Purpose of Collection |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad number | Identity verification (KYC) & legal compliance |
| Contact Information | Mobile number, email address | Account communications, notifications & support |
| Financial Information | Bank account number, bank name, transaction records | Processing deposits & withdrawals |
| Verification Documents | MyKad copy, bank statement | KYC compliance & fraud prevention |
When you use the CM8 platform, our systems automatically record certain technical information to ensure platform security and performance:
In certain circumstances, cm8 may receive information about you from trusted third-party sources, including identity verification service providers, payment providers such as FPX and DuitNow, and approved gambling self-exclusion databases.
Data Minimisation Principle: CM8 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive personal information such as biometric data or medical information unless specifically required by applicable law.
Every piece of personal data collected by cm8 is used on a lawful basis and for transparent purposes. cm8 will not use your data for any purpose other than those stated in this policy without first obtaining your consent.
CM8 may use your email address or phone number to send information about promotions, exclusive offers, and platform updates — but only if you have consented to receive such communications during registration or through your account settings. You may withdraw this consent at any time via the unsubscribe link in any email or by contacting the CM8 support team.
Non-personally identifiable usage data is used by cm8 to analyse usage patterns, identify technical issues, and develop new features that enhance the overall experience for our platform members.
Legal Basis: CM8 processes your personal data on the basis of contractual compliance (to operate the services you request), legal obligations (for KYC and PDPA compliance), and our legitimate interests in running a safe and responsible business.
CM8 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are specific situations where CM8 may need to share your information with other parties for legitimate reasons:
CM8 works with selected third-party service providers to handle specific aspects of our platform. These parties are given access only to the data required for their specific functions and are bound by strict confidentiality agreements:
CM8 may be required to disclose your personal data to government authorities, law enforcement bodies, or regulatory agencies when mandated by applicable Malaysian law. This includes investigations into financial crimes, money laundering, or valid court orders.
International Data Transfers: If your data is processed outside Malaysia — for example, via international cloud infrastructure — cm8 ensures that protection equivalent to Malaysia's PDPA standards is maintained through appropriate contractual safeguard mechanisms.
CM8 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, alteration, disclosure, or accidental destruction.
At the organisational level, cm8 enforces a role-based access control policy whereby each staff member has access only to the data required for their role. All access to sensitive data is automatically audited and logged. cm8 staff also undergo regular data security and privacy training.
While cm8 takes all reasonable precautions, the security of your account also depends on your own actions. cm8 recommends that you:
Fraud Warning: CM8 will never ask for your password, PIN, or OTP via email, SMS, or Live Chat. If you receive any such request, it is a fraudulent attempt — do not comply and report it to the CM8 support team immediately.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by cm8. We are committed to fully facilitating the exercise of these rights:
You have the right to request a copy of the personal data held by CM8 about you at any time. Such requests will be processed within 21 working days.
If any of your personal data is inaccurate or outdated, you have the right to request a correction through the account settings page or by contacting the support team.
You may withdraw consent for certain data processing at any time, particularly for marketing communications.
You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated.
Under certain circumstances, you may request that CM8 restrict the processing of your data while an issue is being investigated or disputed.
Once an account is closed and there is no legal obligation to retain the data, you may request deletion of your personal data from CM8's systems.
How to Exercise Your Rights: To submit any request relating to your privacy rights, please contact the cm8 Data Protection team via Live Chat or support email. Please provide your member number to expedite the verification process.
The cm8 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security and analyse platform performance. Cookies are small text files stored on your device by your web browser when you visit the cm8 website.
| Cookie Categories | Function | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Maintaining login sessions, account security, and core platform functionality | No — required for platform operations |
| Preference Cookies | Remembering language settings, display preferences and user choices | Yes — via browser settings |
| Analytics Cookies | Collecting anonymous usage data for platform performance analysis | Yes — via browser settings |
| Security Cookies | Detecting fraud attempts and suspicious activity | No — required for security |
You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling essential cookies may significantly affect the functionality of the CM8 platform, including your ability to log in to your account.
CM8 takes child protection very seriously. The CM8 platform is strictly for individuals aged 18 years and above only. cm8 does not intentionally collect, store or process any personal data from individuals under the age of 18.
All new members are required to confirm they have reached the minimum age at registration. cm8 also conducts additional age checks as part of the KYC process to ensure no underage individuals successfully register an account.
Should cm8 discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. If you have reason to believe that an underage individual is using the cm8 platform, please contact our support team immediately.
Family Protection: Parents and guardians are encouraged to use parental control software and monitor their children's internet usage. cm8 fully supports efforts to prevent underage gambling in Malaysia.
CM8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we handle members' personal data.
When there are material amendments — changes that significantly affect your privacy rights — CM8 will notify you through the following means:
Your continued use of the cm8 platform after notification of any amendments constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and stop using cm8 services.
We recommend that you check this Privacy Policy page periodically to stay informed about how cm8 protects your personal information.
Current Version: This Privacy Policy is effective from 1 January 2026. Any amendments after this date will be clearly stated along with their new effective date.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how cm8 handles your personal data, our Data Protection team is ready to assist you.
You may contact CM8 through the following methods:
Available 24 hours a day, 7 days a week
Instant support in Bahasa Malaysia
For enquiries specifically related to PDPA or data deletion, clearly state the subject line "Data Protection Enquiry" in your message so it can be directed straight to the responsible officer.
Response Time: CM8 is committed to responding to all privacy-related enquiries within 21 working days as required under Malaysia's PDPA. For urgent cases such as suspected account fraud, please use Live Chat for an immediate response.