CM88 Official Documents

CM88 Privacy Policy — Member Personal Data Protection

Cm88 takes the privacy of every Malaysian member seriously. This document clearly explains how we collect, use, store, and protect your personal information when you use our platform.

Updated: January 2026  |  Compliant with the Personal Data Protection Act 2010 (PDPA)

This Privacy Policy describes cm88's data protection practices and complies with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the cm88 platform, you agree to this Privacy Policy. Please read it carefully before providing us with any personal information.

01Introduction & CM88 Privacy Commitment

Cm88 is an online gaming platform serving users in Malaysia. We understand that privacy is more than a legal obligation — it is the foundation of trust between us and every member who entrusts us with their personal information. This Privacy Policy ("Policy") explains clearly and transparently how cm88 manages your personal data.

This Policy applies to all information we collect through the cm88 website, mobile applications (where applicable), email, live chat, WhatsApp, and all other communication channels between you and cm88. It also applies to information we collect automatically when you use our platform.

Cm88 acts as the data controller under Malaysia's Personal Data Protection Act 2010. This means we are fully accountable for how your personal data is collected, processed, and protected. If you have any questions about how we handle your data, our privacy team can be reached via support@cm88.cash.

The cm88 Privacy Promise: We never sell your personal data to third parties for marketing purposes. Your information is used solely to deliver better service to you and to comply with applicable legal requirements.

02Types of Personal Data Collected by CM88

Cm88 only collects personal data that is necessary to deliver our services safely and efficiently. The data we collect falls into several categories:

Identity & Contact Data

Full name MyKad Number Phone number Email address Date of birth State / city

Financial Data

Bank name & account number Digital wallet ID (TNG/GrabPay) Transaction history Deposit & withdrawal records

Usage & Technical Data

IP address Device type & OS Browser type Game history Session time & duration Click & navigation logs

Identity Verification Data (KYC)

To comply with anti-money laundering (AML) requirements and Know Your Customer (KYC) policies, we may require additional documents such as a copy of your MyKad or passport, proof of address (utility bill), and a selfie with your identification document for withdrawals exceeding certain limits.

03How We Collect Your Personal Data

Cm88 collects personal data through a variety of legitimate channels:

  • Account registration: Information you provide when registering as a new cm88 member.
  • Financial transactions: Data generated when you make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as when you withdraw to your Malaysian bank account.
  • Platform usage: Data is automatically collected as you browse and use the cm88 platform — including games played, bets placed, and time spent.
  • Customer support communications: Records of live chat conversations, emails, and WhatsApp messages you have sent to the cm88 support team.
  • Cookies and tracking technologies: Data collected automatically via cookies, pixels, and similar technologies when you visit the cm88 website.
  • KYC Verification: Documents submitted by you for the identity verification process.

Cm88 will never ask for your account password via email, WhatsApp, or any other communication channel. If you receive any such request, please report it to our security team immediately.

04Purposes for Using Your Personal Data at CM88

Every piece of data collected by cm88 has a clear and legitimate purpose. We use your personal data for the following:

Purpose of Use Legal Basis
Creating and managing your cm88 member account Contract performance
Processing deposits & withdrawals via Malaysian payment methods Contract performance
Identity verification (KYC) & AML compliance Legal obligation
Providing customer support and resolving complaints Contract performance
Sending promotional notifications, bonuses & platform updates Legitimate interest / consent
Detecting & preventing fraud, hacking & illegal activity Legitimate interests
Analyzing usage patterns to improve the cm88 platform Legitimate interests
Complying with court orders or regulatory directives Legal obligation

Cm88 only uses your data for the purposes stated at the time of collection, or for purposes reasonably related to them. Should we wish to use your data for a new and different purpose, we will notify you in advance and obtain your consent where required.

05Data Sharing with Third Parties

Cm88 do not sell your personal data to any third party. However, in the course of operating the platform, we may share your data with selected third parties in the following limited circumstances:

  • Payment providers: Transaction information is shared with the payment gateways that process your deposits and withdrawals — including Touch 'n Go eWallet, GrabPay, DuitNow, and FPX operators. This sharing is necessary to complete your financial transactions.
  • Gaming software providers: Minimal gameplay data is shared with slots, Live Casino, and Sports Betting providers solely to enable you to access those games through the cm88 platform.
  • Cloud & IT service providers: cm88's technical infrastructure is powered by enterprise-grade cloud service providers that comply with international security standards.
  • Regulatory bodies & law enforcement: cm88 will disclose personal data where required by Malaysian law or pursuant to a valid court order.
  • Fraud & AML consultant: Minimal data is shared with independent specialists for the purpose of investigating suspected fraud or money laundering cases.

All third parties working with cm88 are bound by strict data confidentiality agreements and are required to uphold data protection standards equivalent to or higher than those of cm88 itself.

06CM88 Data Security & Protection

The security of your personal data is cm88's highest priority. We implement multiple layers of technical and organisational safeguards to keep your data protected at all times:

  • 256-bit SSL/TLS Encryption: All communications between your device and cm88's servers are fully encrypted. Data in transit cannot be intercepted or read by unauthorised parties.
  • Hashed password storage: Your password is never stored in plain text. We use advanced one-way hashing algorithms to store passwords securely.
  • Two-factor authentication (2FA): An additional security layer is available for all cm88 accounts, protecting your account even if your password is compromised.
  • 24/7 Monitoring: An automated threat detection system monitors all platform activity around the clock to identify intrusion attempts or suspicious behaviour.
  • Restricted data access: Only cm88 staff who require access to your data to carry out their authorised duties are permitted to view that information — and this is subject to regular audits.
  • Regular security testing: The cm88 platform undergoes regular penetration testing and security audits conducted by independent experts.

While cm88 takes all reasonable precautions, no system is entirely foolproof. In the event of a data breach that affects your rights, cm88 will notify you and the relevant authorities within the timeframe stipulated by Malaysian law.

07CM88 Cookies & Tracking Technologies

The cm88 website uses cookies and similar tracking technologies to enhance your experience and analyze platform usage. The types of cookies we use are:

Essential Cookies (Required)

These cookies are essential for the core functionality of the cm88 platform — including maintaining your login session, remembering language preferences, and securing transactions. The platform will not function properly without them and they cannot be disabled.

Performance & Analytics Cookies

These cookies help us understand how members use the cm88 platform — which pages are visited most frequently, how long members spend on the platform, and where they encounter difficulties. All data is anonymised and used solely to improve the user experience.

Functional Cookies

These cookies remember your preferences and settings — such as display theme, preferred language, and other personal configurations — so you do not have to reconfigure them each time you log in.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the cm88 platform. For more information on managing cookies, refer to your browser's help documentation.

08Your Rights Under the CM88 Privacy Policy

As a cm88 member whose personal data we hold, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

✏️
Right to Rectification

You may request corrections to any inaccurate or incomplete personal data held in our records.

🗑️
Right to Erasure

You may request the deletion of your personal data, subject to any legally required retention obligations.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

📦
Data Portability Right

You may request your data in a machine-readable format for transfer to another platform.

⏸️
Right to Restrict Processing

You may request that we restrict the processing of your data under certain specified circumstances.

To exercise any of the rights above, please contact the cm88 privacy team via support@cm88.cash specifying the right you wish to exercise and your account details. We will respond within 14 business days.

09CM88 Data Retention Periods

Cm88 does not retain your personal data for longer than necessary for its original purpose. The following are our data retention guidelines:

  • Active account data: Retained for the lifetime of your account and for 7 years following account closure, in accordance with Malaysian financial regulatory requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
  • KYC Documents: Retained for 5 years after the business relationship ends or after any related investigation concludes, whichever is later.
  • Customer support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Technical log data: Retained for 90 days for security and technical troubleshooting purposes.

When data is no longer needed, cm88 will securely delete it using methods that ensure it cannot be recovered by any party.

10Links to Third-Party Websites

The cm88 platform may contain links to third-party websites or services — including game providers and payment partners. The cm88 Privacy Policy not applicable to the respective third-party website or service.

Each third-party website operates under its own privacy policy, independent of cm88. We encourage you to review the privacy policy of any third-party website before submitting personal information to them. cm88 is not responsible for the privacy practices or content of those third-party websites.

11Children's Privacy

The cm88 platform is strictly for individuals aged 18 years and above. We do not knowingly collect any personal data from children under the age of 18. If you believe your child or any minor has provided personal information to cm88, please contact us immediately at support@cm88.cash and we will take immediate action to delete that information.

Cm88 employs multiple age-verification mechanisms during the registration process to prevent underage individuals from creating accounts. However, the responsibility of parents and guardians in monitoring their children's internet usage is equally important.

12Contact the CM88 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cm88 handles your personal data, please contact us through the following channels:

  • Privacy Email: support@cm88.cash
  • Live Chat: Available 24 hours a day, 7 days a week through the cm88 platform
  • Response time: We are committed to responding to all privacy enquiries within 14 business days

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you via email or an in-platform notification on cm88. The "Updated" date at the top of this document indicates when the last revision was made.


Advanced-Grade Protection

Why Your Privacy is Safe with CM88

Six layers of protection we have in place to safeguard your personal data

🔐

Military-Grade Encryption

Your data is encrypted using 256-bit SSL — the same technology trusted by Malaysia's largest banks, such as Maybank and CIMB, to protect their financial transactions.

⚖️

PDPA Malaysia Compliant

All of cm88's data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary privacy legislation.

🚫

No Data Selling

Cm88 has never sold, and will never sell, your personal data to advertisers, data brokers, or any third party for marketing purposes. This is our absolute commitment to every member.

🛡️

24/7 Security Monitoring

Cm88's threat detection system operates around the clock to identify and block any unauthorised access attempts on your data before they can occur.

Full Control in Your Hands

Through your cm88 account settings, you can update your personal information, manage communication preferences, and request access to or deletion of your data at any time.

🇲🇾

Data Stored Locally

Personal data of cm88 Malaysian members is processed and stored in accordance with Malaysian legal guidelines, ensuring your data remains under the protection of our country's laws.


Your Data is 100% Secure

Play with Peace of Mind, Privacy Guaranteed

With a transparent Privacy Policy and robust data protection standards, you can focus on enjoying your experience at cm88 without worrying about the safety of your personal information.

PDPA Malaysia Compliant 256-bit SSL No Data Selling Full Member Control
Bahasa Melayu