CMB8 Privacy Policy – Malaysia Member Personal Data Protection

CMB8 collects several categories of personal information from our members. This collection is necessary to provide services that are safe, efficient, and compliant with regulatory requirements. The data categories we collect are as follows:

CMB8 collects your personal information through several transparent and appropriate methods:

• Registration form: When you register a new account at CMB8, you provide basic information such as your name, email, phone number, and date of birth directly.
• KYC verification process: During the identity verification process, we require supporting documents such as a copy of your MyKad or passport and a recent bank statement.
• Financial transactions: Every time you make a deposit or withdrawal, the details of that transaction are automatically recorded by our system.
• Platform usage: Our system records usage activity such as games played, total bets placed, session duration, and navigation behaviour for security and service improvement purposes.
• Device and connection: Technical information such as IP address, device type, and web browser is collected automatically when you access the CMB8 platform.
• Support communications: When you contact our customer support team via live chat or email, records of those communications are retained for reference and quality control purposes.

Every piece of data we collect has a clear and specific purpose. cmb8 uses your personal information for the following purposes only:

• Account management: Creates, maintains, and protects your CMB8 account, including login processing and suspicious activity detection.
• Transaction processing: Processes your deposits, withdrawals, and account balance management accurately and securely.
• Regulatory compliance: Meets legal and regulatory requirements related to identity verification (KYC) and anti-money laundering (AML).
• Service communications: Sends important account-related notifications, promotions you are eligible for, and service terms updates.
• Platform security: Detects and prevents fraud, unauthorized access, and activities that violate the terms of use.
• Service improvement: Analyzes usage patterns in aggregate (not at the individual level) to enhance the platform experience and deliver more relevant content.
• Customer support: Enables us to provide accurate and effective assistance when you contact our support team.

CMB8 does not sell or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties to enable our services to function:

• Payment service providers: Payment gateways such as DuitNow, FPX, and e-wallet providers receive the transaction information necessary to process your deposits and withdrawals. They are subject to their own privacy policies and security standards.
• Game providers: Game developers partnered with CMB8 may receive the game session data required to ensure games function correctly. This data does not contain your personal financial information.
• Identity verification agency: To complete the KYC process, cmb8 uses authorised third-party services to verify the authenticity of the documents you submit.
• Legal authority: CMB8 will disclose required information to law enforcement agencies or regulatory bodies when mandated by law or court order.

In all of the above data-sharing cases, CMB8 ensures that the relevant third parties are bound by strict confidentiality agreements and may only use the data for the specified purpose.

CMB8 takes a layered approach to protecting your personal data. Our security infrastructure includes:

• Transmission encryption: All data transmitted between your device and cmb8 servers is protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage encryption: Sensitive data stored in our databases uses AES-256 encryption to ensure security even in the event of unauthorised access.
• Access controls: Access to members' personal data is restricted to authorised CMB8 staff only, with detailed audit logs maintained for every access made.
• Continuous monitoring: The cmb8 security monitoring system operates 24/7 to detect any unauthorised access attempts or suspicious activity.
• Secure backup: Your data is regularly backed up to a separate secure location to ensure service continuity under any circumstances.

Regarding retention periods, CMB8 keeps your personal data for as long as your account is active and for a period defined by legal requirements after account closure — typically between 5 and 7 years for financial records, in accordance with applicable regulatory requirements.

The cmb8 platform uses cookies and similar technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance cookies: Collects information about how you use the platform — pages visited, session duration, and any errors encountered. All data is aggregated and does not identify individuals.
• Functional cookies: Saves your preferences such as language, display settings, and login details you choose to have remembered.
• Analytics cookies: Helps us understand overall usage patterns to improve platform design and content.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some areas of the CMB8 platform. Session cookies are deleted automatically when you close your browser, while persistent cookies have a set expiry period.

As a cmb8 member, you have the following rights regarding your personal data. cmb8 is committed to respecting and facilitating the exercise of these rights:

CMB8 is a platform restricted to individuals aged 18 years and above only. We do not intentionally collect or process any personal data from individuals under the age of 18.

If we discover that personal data belonging to a minor has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered with cmb8 may contact us for prompt action.

The cmb8 platform may contain links or integrations with third-party services such as game providers and payment gateways. It is important that you understand the following:

• CMB8's Privacy Policy applies only to the CMB8 platform itself and does not cover third-party websites or services you may access through our platform.
• Each third-party provider has its own privacy policy governing how they handle your data.
• CMB8 is not responsible for the privacy practices of third parties, even those who are our partners. We encourage you to read the privacy policy of every third-party service you use.

CMB8 carefully selects third-party partners and only works with entities that have a strong track record of privacy compliance. Nevertheless, exercising caution is best practice when dealing with any party outside the official CMB8 platform.

CMB8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When material amendments are made:

• We will display a clear notice on the platform's main page for at least 7 days before any amendment takes effect.
• Active members will receive notifications via their registered email regarding important changes.
• The "Updated" date at the top of this document will be revised to reflect the date of the latest amendment.
• Continued use of the CMB8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, the cmb8 team is ready to assist you through the following channels:

• Live Chat: The fastest way to get help — available 24 hours a day, 7 days a week, directly on the CMB8 platform.
• Email: [email protected] — for enquiries requiring detailed clarification or supporting documentation.
• FAQ: Visit the FAQ us for quick answers to the most frequently asked questions.

For formal requests relating to your privacy rights (access, correction, deletion), please submit your request by email, including your account number and a clear explanation of the request. We aim to respond to all requests within 3 business days and complete the required action within 14 business days.