Cm8ply Privacy Policy – Your Personal Data Protection

Cm8ply takes its responsibility to protect your privacy very seriously. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information when you use our online entertainment platform.

We understand that your trust is our most valuable asset. Every decision regarding data handling is made with our users' best interests in mind – not merely to meet legal requirements, but because it is the right thing to do.

This policy applies to all services provided by cm8ply, including the official website, mobile apps for Android and iOS, and all official communication channels including live chat and support email. If you have any questions after reading this policy, our privacy team is always ready to assist.

Cm8ply only collects data that is genuinely necessary to provide a safe, fair, and quality service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, sexual orientation, or political views unless directly relevant to your request to us.

Every use of your personal data by cm8ply has a clear and lawful purpose. We use your data for the following purposes:

• Account Operations: Registering and managing your account, processing deposits and withdrawals, and providing access to all platform games and services.
• Identity Verification: Implementing mandatory KYC procedures to ensure the security of financial transactions and prevent money laundering.
• Platform Security: Detecting and investigating suspicious activity, protecting your account from unauthorized access, and maintaining platform integrity.
• Service Communications: Sending important account-related notifications, transaction confirmations, policy changes, and security updates.
• Experience Personalization: Personalizing game recommendations, relevant promotional offers, and the platform interface based on your preferences.
• Legal Compliance: Meeting compliance obligations under PDPA 2010 and applicable financial regulations.
• Service Improvement: Analyzing usage patterns to improve platform performance, enhance user experience, and develop new features.

Cm8ply does not sell your personal data to any party. However, in certain limited situations, we may share data with the following parties:

• Payment Providers: Information required to process deposit and withdrawal transactions is shared with licensed and audited payment providers such as FPX, DuitNow, and registered digital wallet providers.
• Game Providers: Minimum data required to operate a game session is shared with registered casino and slot game software providers, subject to strict confidentiality agreements.
• Authorities: cm8ply will comply with court orders, legal warrants, or lawful requests from relevant authorities, including the MACC, Royal Malaysia Police, or Bank Negara Malaysia, when required by law.
• Technical Services: Cloud computing, hosting, and technical infrastructure service providers that process data on our behalf are subject to strict data processing agreements.

All third parties involved in processing your data are required to comply with security standards equal to or higher than those we uphold. Such data sharing is carried out solely to enable us to deliver our services to you.

Cm8ply uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how the platform is used to help us identify and resolve technical issues.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand aggregate usage patterns for platform improvement purposes.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's guide.

Cm8ply continually invests in security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

• Data Encryption: All data in transit is protected with 256-bit SSL/TLS encryption. Stored data uses industry-standard AES-256 encryption.
• Access Controls: A role-based access control (RBAC) system ensures that only specifically authorised personnel can access users' personal data.
• Continuous Monitoring: An intrusion detection system (IDS) and security monitoring operate 24/7 to detect and respond to threats.
• Security Audit: Independent security assessments and penetration testing are conducted periodically by third-party security experts.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all user accounts.

Cm8ply retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Records: Retained for 6 years after the end of the business relationship in accordance with anti-money laundering legal requirements.
• Communication Logs: Customer support and communication records are retained for 2 years for complaint resolution and service improvement purposes.
• Technical Data: Access logs and technical data are retained for 90 days for security and investigation purposes.

When data is no longer required, it will be securely deleted or anonymised using industry-standard data disposal procedures.

As a user of the cm8ply platform residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, subject to our legal obligations.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another service.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain situations.

To exercise any of the above rights, contact our privacy team via live chat or email at [email protected]. We will process your request within 30 business days.

Cm8ply services are exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and close the associated account. Parents or guardians with concerns about this matter are encouraged to contact us promptly.

The cm8ply platform may contain links to third-party websites or services in certain contexts, such as payment providers or game providers. This Privacy Policy applies to the cm8ply platform only.

Cm8ply is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of any third-party platform you visit before providing them with any personal information.

Cm8ply reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer.

When significant changes are made, we will notify you via in-platform notifications or email to the address registered in your account, at least 14 days before the changes take effect. The last updated date is always displayed at the top of this document.

Continued use of the cm8ply platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the cm8ply privacy team through the following channels:

• Live Chat: Available 24/7 via the live chat button on the cm8ply platform.
• Privacy Email: [email protected] – for specific enquiries related to privacy and data rights requests.
• Support Email: [email protected] – for general enquiries related to your account and services.

We are committed to responding to all privacy-related inquiries within 5 business days. For data rights requests, processing time is up to 30 business days in accordance with PDPA 2010 requirements.