Cm2my Privacy Policy – Malaysia User Personal Data Protection

Cm2my takes user privacy very seriously. This Privacy Policy ("Policy") describes our privacy practices when you use the website, mobile app, and all services associated with the cm2my platform ("Platform").

This policy is designed to ensure you fully understand what data we collect from you, why we need it, how it is used, and who may view or access it. We believe transparency is the foundation of trust — and your trust is what we value most.

By using the cm2my Platform, you consent to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the Platform.

Cm2my collects several categories of information depending on how you interact with our Platform. The following are the types of data we collect:

A. Registration & Identity Information

When you register an account with cm2my, we collect the following information:

B. KYC (Identity Verification) Information

To meet compliance requirements and ensure the safety of all users, we require identity verification documents such as a copy of your MyKad or passport, along with proof of current address. This KYC process is mandatory before your first withdrawal can be processed.

C. Financial Information

To process deposits and withdrawals, we collect information related to your chosen payment method — including the bank account holder's name, account number (partial), or digital wallet details. Full card numbers are not stored on cm2my servers and are processed directly through certified third-party payment gateways.

D. Usage & Technical Data

• IP address and general location information
• Device type, operating system, and browser version
• Game activity logs and transaction records
• Login timestamps, session duration, and usage patterns
• App performance data and error reports

Collected data is used solely for legitimate and necessary purposes in operating the cm2my platform. We do not use your data for unrelated purposes without your consent.

• Account management — Creating, verifying, and maintaining your user account
• Transaction processing — Securely processing deposits, withdrawals, and bonus transfers
• Legal compliance — Meeting KYC, AML (Anti-Money Laundering), and relevant industry regulatory requirements
• Platform security — Detecting and preventing fraud, unauthorized access, and system abuse
• Customer support — Helps you resolve technical issues or account-related inquiries
• Experience personalisation — Personalizing game recommendations and promotions based on your preferences
• Important communications — Sending account-related notices, terms changes, or security updates
• Platform improvements — Analyzing aggregated usage data to improve platform performance and user experience

Cm2my continually invests in security infrastructure to ensure your data is protected at every stage — in transit, in processing, and in storage.

Security measures we practice:

• 256-bit SSL encryption for all communications between your device and cm2my servers
• Password storage using a one-way cryptographic hashing algorithm (bcrypt) — we cannot view your password
• Two-factor authentication (2FA) available and recommended for all accounts
• Data segregation — Sensitive data is stored in an isolated environment with restricted access
• Regular security audits by an independent third party
• 24/7 threat monitoring using an automated intrusion detection system

Data retention period: Your personal data is retained for as long as your account is active, plus any additional period required by Malaysia's financial compliance laws. Closed account data is typically held for a minimum of 7 years for regulatory compliance purposes before being securely deleted.

Cm2my does not sell, rent, or disclose your personal data to third parties for marketing purposes. We only share your data in limited, necessary situations:

• Approved service providers — Payment gateways, KYC providers, game developers, and technology infrastructure providers that help us operate the platform. All providers are bound by strict confidentiality agreements.
• Legal requirements — When required by Malaysian law, court order, or direction from a competent authority.
• Fraud prevention — With industry bodies or relevant authorities to detect and prevent fraudulent activity or money laundering.
• Business transfers — Should cm2my be involved in a merger or acquisition, user data may be transferred as part of those assets, subject to notice being provided to you.

In all data sharing cases above, we ensure that recipients adhere to data protection standards equal to or higher than our own.

Cm2my uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly.

Types of cookies we use:

• Essential cookies — Required for core platform functions such as login session verification and security. Cannot be disabled.
• Performance cookies — Helps us understand how users interact with the platform to improve the experience. Data is collected anonymously.
• Preference cookies — Saving your settings such as language, theme, and game preferences for a smoother return experience.
• Analytics cookies — Used to analyze platform traffic and usage patterns for continuous improvement.

You can manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality. Continued use of the cm2my platform is considered your consent to the use of cookies as described above.

As a cm2my user, you have certain rights regarding your personal data. We are committed to helping you exercise these rights with ease.

As an online platform, some of your data may be processed or stored on servers located outside Malaysia. When such transfers occur, cm2my ensures that an equivalent level of data protection is maintained through:

• Data processing agreements with all service providers, incorporating standard data protection clauses
• Selection of service providers operating in jurisdictions with recognised data protection laws
• Periodic assessments of the data protection practices of third parties we work with

Data transferred across borders is subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and related regulations. cm2my will not transfer your data to jurisdictions without adequate protection without your prior consent.

The cm2my platform is restricted to individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we find that personal data has been inadvertently collected from a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who discover that their child has registered on the cm2my platform are asked to contact our support team immediately.

Cm2my reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements.

When significant amendments are made, we will notify you via the email registered to your account or through an in-platform notice at least 7 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. We recommend reviewing this page periodically. Continued use of the platform after any amendments take effect constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or wish to exercise your privacy rights, the cm2my team is ready to assist. Please contact us via live chat on our platform or mobile app, available 24/7.

For requests specifically related to data privacy, please indicate that your request concerns the Privacy Policy so it can be directed to the responsible officer as promptly as possible.