Official Documents

Privacy Policy
cm2 Platform

Your privacy is our priority. This document clearly explains how cm2 collects, uses, stores and protects your personal data. We believe every member has the right to know what happens to their information.

Last Updated: 1 January 2026
SSL 256-bit Protected
Version 2.4
Contents
Latest Policy
Effective from 1 January 2026. Supersedes all previous versions.
Important Note: This Privacy Policy explains cm2's practices regarding the collection and processing of personal data. By using our platform, you acknowledge that you have read and understood this policy. We encourage you to read this document carefully in its entirety.

1Introduction & Our Commitment

Cm2 takes the privacy of its members' personal data very seriously. As an online entertainment platform operating in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA) and comply with all relevant legal provisions on data protection.

This Privacy Policy applies to all personal data you provide to us during registration, use of the platform, communication with our support team, and other activities related to cm2 services. It also applies to data we collect automatically when you browse our platform.

We understand that your trust is our most valuable asset. We are therefore committed to ensuring your data is managed responsibly, transparently, and securely. None of your information will be used for any purpose other than those stated in this policy without your prior consent.

cm2's Core Privacy Principles: We only collect what is truly necessary, retain it only for as long as needed, and never sell it to third parties for marketing purposes. Transparency is the cornerstone of how we handle your information.

2Personal Data We Collect

Cm2 collects various types of personal data depending on how you interact with our platform. Below is a comprehensive overview of the types of data we collect:

2.1 Data You Provide Directly

  • Full name, date of birth and IC or passport number for identity verification (KYC) purposes.
  • Email address, mobile number, and residential address for communication and account verification.
  • Bank account details, card numbers or e-wallet information used for deposits and fund withdrawals.
  • A selfie or copy of an identification document submitted during the KYC process.
  • Any information you share while communicating with our customer support team.

2.2 Data Collected Automatically

  • IP address, device type, operating system, and browser version when you access the platform.
  • In-platform activity data including games played, wagering amounts, session dates and times, and transaction records.
  • General location data based on IP address for compliance and security purposes.
  • Access logs, including pages visited, time spent and navigation paths within the platform.
Data Category Example Information Primary Purpose
Identity Name, IC, date of birth KYC verification, legal compliance
Contact Email, phone number Communications, account notifications
Finance Bank details, transaction records Deposit & withdrawal processing
Technical IP, device, browser Security, fraud prevention
Usage Game records, activity logs Service improvement

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data arbitrarily — every use is based on a valid operational need or a legal obligation we are required to fulfil.

  • Account Management: To securely create, verify, and maintain your account on the cm2 platform.
  • Transaction Processing: To process deposits, withdrawals, and any financial transactions you carry out through the platform.
  • KYC & AML Compliance: To fulfil legal requirements relating to identity verification and anti-money laundering.
  • Platform Security: To detect and prevent fraud, unauthorised access, or any suspicious activity.
  • Customer Support: To provide effective support when you contact our support team.
  • Service Communications: To send important notifications relating to your account, transactions, terms updates, and security information.
  • Product Improvement: To analyse usage patterns in order to improve game quality and the overall platform experience.
  • Responsible Gaming: To monitor gameplay patterns and provide appropriate assistance to members showing signs of problem gambling.
Marketing Communications: cm2 will only send you marketing communications such as bonus offers and the latest promotions if you have given your consent to receive them during registration or through your account settings. You may unsubscribe at any time.

4Data Sharing & Disclosure

Cm2 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations in which we may need to share your information:

4.1 Trusted Service Providers

We work with third-party service providers who assist us in operating the platform, processing payments, and providing technical support. All such providers are bound by strict data protection agreements and are only permitted to use your data for purposes we specify.

4.2 Legal Obligations

Cm2 may be required to disclose your data to the relevant authorities when required by law, court order, or a legitimate law enforcement agency. In such situations, we will notify you wherever possible unless doing so is prohibited by law.

4.3 Business Transfers

If cm2 is involved in any merger, acquisition or asset sale, user data may be transferred as part of that process. You will be informed before your data becomes subject to a different privacy policy.

International Data Transfers: Some of our service providers operate outside Malaysia. In such cases, we ensure that data transfers are carried out with adequate protections equivalent to the standards set out under the PDPA 2010.

5Data Storage & Security

We invest seriously in security infrastructure to ensure your data is always protected against unauthorised access, loss, or destruction.

5.1 Security Measures

  • All data is transmitted through connections protected by 256-bit SSL encryption, ensuring your information cannot be intercepted in transit.
  • Passwords are stored in hashed format using strong encryption algorithms and cannot be decrypted by anyone, including cm2 staff.
  • Our server infrastructure is protected by multi-layered firewalls, intrusion detection systems, and round-the-clock security monitoring.
  • Access to sensitive data within our organisation is restricted to staff who genuinely require it, in accordance with the principle of least privilege.
  • Regular security audits are conducted by independent parties to ensure our systems consistently meet the latest security standards.

5.2 Data Retention Period

Cm2 retains your personal data for as long as your account is active or as long as required for the purposes stated in this policy. Financial transaction data is retained for a minimum of 7 years to meet legal and tax requirements. Once an account is closed, your data will be deleted or anonymised within a reasonable period, unless longer retention is required by law.

Incident Response: In the event of a data breach that may affect your information, cm2 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international data protection best practices.

6Your Rights as a Data Subject

Under the Personal Data Protection Act 2010, you have certain rights regarding your personal data held by cm2. We fully respect and facilitate the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any personal data that is inaccurate or incomplete.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You may request your data in a structured, machine-readable format for transfer to another platform.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances permitted by law.

Right to Erasure

You may request the deletion of your data when it is no longer required, subject to legal obligations.

How to Submit a Request: To exercise any of the rights above, please contact our Data Protection Officer by email at [email protected]. We will process your request within 21 business days. Complex requests may take longer, and we will notify you if that is the case.

7Cookies & Tracking Technologies

The cm2 platform uses cookies and similar tracking technologies to enhance your experience, ensure security and analyse platform usage. Here is more information on how we use these technologies:

7.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
  • Functional Cookies: Allows the platform to remember your preferences such as language, currency and display settings for your convenience.
  • Analytics Cookies: Helps us understand how members use the platform so we can make meaningful improvements.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect platform functionality.

8Child Data Protection

Cm2 does not target its services at individuals under the age of 18, and we do not knowingly collect personal data from minors. Our platform is intended solely for adult members who meet the minimum age requirement.

If we find that we have collected personal data from someone under the age of 18 without proper parental consent verification, we will immediately take steps to delete that data and close the relevant account.

Child-Related Reports: If you believe a minor has registered for or is using the cm2 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

9Privacy Policy Amendment

Cm2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. Whenever we make significant changes, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Notifying all registered members via email or in-platform notifications at least 14 days before changes take effect.
  • Maintaining an archive of previous versions of this policy, which members may request for reference.

Continued use of the cm2 platform after the effective date of any changes constitutes acceptance of the updated policy terms. If you disagree with the changes, you should stop using the platform and contact us to close your account.

10Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

  • Privacy Email: [email protected]
  • Support Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon on the platform
  • Response Time: Within 5 business days for general enquiries; 21 business days for data rights requests

You may also refer to Terms and Conditions us and the Responsible Gaming for more information on how we protect your interests.

Complaints to the Relevant Authority: If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.

Why Your Data Safe with cm2

We do not merely comply with the law — we go beyond the minimum requirements to ensure your privacy is consistently upheld.

Military-Grade Encryption

All sensitive data is protected with the same 256-bit SSL encryption used by leading banking institutions. Your information remains unreadable even if intercepted by unauthorised parties.

Dedicated Data Protection Officer

Cm2 has appointed a dedicated Data Protection Officer (DPO) to ensure that all data handling practices comply with the PDPA 2010 and the latest international standards.

Minimum Collection Principle

We only collect data that is genuinely necessary to deliver our services. No excess data is collected "just in case" — every data field has a clear and defined purpose.

Regular Security Audits

Our security systems are regularly assessed by independent third-party auditors to identify and address any vulnerabilities before they can be exploited.

Control in Your Hands

Through your account settings, you can easily manage marketing preferences, update personal information and control cookies. You are in full control of your own data.

Immediate Incident Notification

In the event of any security incident involving your data, we are committed to notifying you within 72 hours — not waiting days or weeks.

Play with Peace of Mind — Your Data is Protected

Now you know how cm2 protects your privacy. Register a free account today and enjoy safe, fair and exciting online entertainment alongside hundreds of thousands of loyal cm2 members.

Bahasa Melayu