Privacy Policy cm8ply – How We Protect Malaysian Players' Information

1. Introduction

This Privacy Policy explains how cm8ply ("we," "the platform," or "cm8ply.best") collects, uses, stores, and protects your personal information when you register, log in, or use any of the services provided through the cm8ply platform.

We take this responsibility seriously because we understand that your trust — especially when it involves financial and personal information — is something that must be earned and maintained, not assumed. This document is written in plain language, free of unnecessary legal jargon, because we want you to genuinely understand your rights.

2. Data We Collect

2.1 Information You Provide Directly

When you register or use cm8ply's services, we collect the following information:

• Identity information: Full name, date of birth, identification card number (for KYC verification).
• Contact information: Email address, mobile phone number.
• Account information: Username and password (stored in encrypted form — we cannot read your original password).
• Financial information: Details of the payment methods you use, such as your DuitNow account, FPX account number, or Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay wallet ID. We do not store full credit or debit card numbers.
• Verification documents: A copy of your identity card or passport when requested for KYC purposes.

2.2 Automatically Collected Information

When you use the cm8ply platform, our system automatically collects the following technical information:

3. How We Use Your Data

Cm8ply uses collected data for specific, legitimate purposes only. We do not use your data for any other purpose without your prior consent. Our data usage includes:

• Account operations: Processing your registration, login, deposits, and withdrawals in Malaysian Ringgit (MYR).
• Security: Detecting and preventing fraud, money laundering, multiple account abuse, and other suspicious activity.
• Legal compliance: Meeting the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by regulatory bodies.
• Customer support: Effectively managing your enquiries, complaints, and support requests.
• Responsible gaming: Monitoring usage patterns to identify players who may benefit from responsible gaming support.
• Platform improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve cm8ply's performance and user experience.
• Marketing communications: Sending promotional information, bonus offers, and the latest updates — only to players who have consented to receive such communications.

4. Sharing Information with Third Parties

Cm8ply does not sell your personal data to any third parties. However, there are limited situations where we are required to share certain information:

4.1 Technical Service Providers

We work with trusted technical service providers to operate our platform — including payment processors such as DuitNow and FPX, cloud service providers, licensed casino game providers, and analytics service providers. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for purposes we specify.

4.2 Legal Requirements

Cm8ply may be required to disclose your personal information to authorities when mandated by Malaysian law or relevant regulatory bodies — including in cases involving financial crime investigations or valid court orders. In such situations, cm8ply will endeavour to notify you of the disclosure to the extent permitted by law.

4.3 Business Transfers

Should cm8ply be involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that business transaction. In such cases, cm8ply will notify you in advance and ensure that the incoming entity applies a Privacy Policy of equivalent or greater stringency.

5. Data Security

Protecting your data is a core technical priority at cm8ply. The security measures we have in place include:

• Data-in-transit encryption: All communications between your browser and the cm8ply platform are secured by TLS 1.3 protocol with 256-bit SSL certificates that are regularly renewed.
• Storage encryption: Sensitive data such as financial information and identity documents is stored in encrypted form using AES-256 encryption standards.
• Role-based access control: cm8ply staff can only access data required for their specific roles. No staff member has blanket access to all user data.
• Two-factor authentication: All internal system access by cm8ply staff is protected with 2FA. Players are also encouraged to enable 2FA on their accounts.
• Regular security audits: cm8ply conducts penetration testing and independent third-party security audits at least once a year.
• Real-time monitoring: An automated threat detection system monitors for unusual activity around the clock and will trigger an immediate response upon detecting any threat.

6. Cookies & Tracking Technologies

6.1 Types of Cookies We Use

The cm8ply platform uses cookies and similar tracking technologies to enhance your experience and keep your account secure. The types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and remembering your language preferences. Cannot be disabled without affecting platform functionality.
• Security cookies: Used to detect suspicious activity, verify your identity during a session, and protect against CSRF attacks. Required for account security.
• Preference cookies: Saves your personal settings such as odds display preference, interface language, and sports preferences.
• Analytics cookies: Collecting aggregated data on how players use the platform to help us identify issues and opportunities for improvement. This data does not identify individuals.

6.2 Cookie Controls

You can manage your cookie settings through your web browser's settings panel. Please note that disabling essential or security cookies will affect your ability to log in and use the cm8ply platform securely. cm8ply does not use third-party cookies for targeted advertising purposes.

7. Data Retention & Deletion

Cm8ply retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy. Our general data retention guidelines are as follows:

Once the retention period expires, your data will be securely deleted or anonymised. If you close your cm8ply account, we will initiate the data deletion process within 30 days, subject to any minimum retention obligations required by law.

8. Your Rights as a cm8ply User

As a cm8ply player, you have the following rights regarding your personal data. All requests can be submitted to our privacy team by email at support@cm8ply.best and will be processed within 30 working days:

9. Protection of Children's Data

The cm8ply platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

If we discover or are notified that we have collected data from a minor, we will take immediate steps to delete that data and close the account in question. If you are aware that someone under the age of 18 has registered a cm8ply account, please notify us via support@cm8ply.best immediately.

10. International Data Transfers

As a platform operating under an international licence, cm8ply may process or store some of your data on servers located outside Malaysia. In such cases, we ensure that protection equivalent to or exceeding Malaysia's PDPA standards is applied through:

• Data transfer agreements that comply with recognised international data protection standards.
• Use of certified cloud service providers with independently audited security track records.
• Technical and organisational controls that ensure continuous data protection regardless of the physical location of servers.

Countries or regions used for data processing are those that have received recognition of adequate data protection equivalence, or where specific data protection agreements have been put in place.

11. Amendments to the Privacy Policy

Cm8ply reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments. Any material changes will be communicated to you via:

• An email notification to your registered email address, at least 14 days before the changes take effect.
• A prominent notice on the cm8ply main page for at least 30 days after the changes take effect.
• Update the "Last Updated" date at the top of this document.

Continued use of the cm8ply platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account and withdraw your balance before the amendment date.

12. Contact Us About Privacy

If you have any questions, concerns, or wish to submit a request regarding your privacy rights, the cm8ply data privacy team is here to help. You can reach us via:

• Privacy Email: support@cm8ply.best (please state "Privacy Inquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week through the cm8ply platform
• Response Time: We aim to provide an initial response within 48 hours and full resolution within 30 working days

We handle all privacy enquiries in Bahasa Malaysia, so there is no need to worry about language barriers when dealing with our team.