Official Privacy Document

Cm8x Privacy Policy – Member Data Protection and Privacy for the Malaysia Platform

Your privacy is more than a written commitment — it is a core value upheld in every aspect of cm8x operations. Find out exactly how your data is collected, used, and protected.

Updated: 1 January 2026

Commitment Privacy cm8x — Six Core Principles

This is the foundation of how cm8x handles the personal data of every member using our platform.

256-bit SSL Encryption

All data transmitted between your device and cm8x servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks. No data is transmitted in plain text.

Data Is Not Sold to Third Parties

Cm8x never sells, rents, or commercialises your personal data to any third party for marketing or advertising purposes. Your data belongs to you entirely.

Minimum Data Collection

We only collect data that is genuinely necessary to provide cm8x services and to comply with legal requirements. No excess data is collected without a clear and lawful purpose.

Access Rights & Correction

You have the right to access, correct, and update your personal data in your cm8x account at any time. Data deletion requests can also be submitted through our support channels.

Regular Security Audits

Regular security testing is conducted by independent cybersecurity experts to identify and remediate any vulnerabilities before they can be exploited.

Privacy Controls in Your Hands

Your cm8x account privacy settings can be managed directly from the dashboard. You can control what is shared, manage communication preferences, and request data deletion at any time.

1Introduction

This Privacy Policy describes how cm8x ("we", "the platform") collects, uses, stores, and protects your personal information when you use our platform, services, website, and applications. This document forms part of Terms and Conditions cm8x and must be read together.

Cm8x takes member privacy very seriously. In today's digital environment, data protection is not just a legal requirement — it is a moral responsibility we embrace wholeheartedly. Every decision relating to data handling is made with our members' best interests as the top priority.

Consent: By using the cm8x platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

2Personal Data We Collect

Cm8x collects various types of personal data depending on how you interact with our platform. Our principle is data minimisation — we only request what is strictly necessary.

2.1 Data You Provide Directly

  • Registration information: full name, date of birth, gender, mobile number, email address, and username.
  • Identity verification (KYC): copy of MyKad, passport, or driving licence; selfie with identification document; proof of current address if required.
  • Financial information: bank account name, account number (for withdrawals), registered e-wallet details. cm8x does not store your bank account password or PIN.
  • Communications: any messages, complaints, or enquiries you send to our support team via live chat or email.

2.2 Data Collected Automatically

  • Device & technical data: IP address, device type, operating system, browser version, screen resolution.
  • Usage data: pages visited, games played, session duration, click records, and in-platform navigation.
  • Transaction data: deposit history, withdrawals, wagering, wins, and all financial activity within the account.
  • Location data: approximate location information based on IP address for security and compliance purposes.
Important Note: cm8x does not directly store credit/debit card numbers or card verification details (CVV). All card information is processed through third-party payment gateways that are fully PCI DSS compliant.

3How We Use Your Data

Collected data is used only for clear and lawful purposes. cm8x does not use your data for any purpose other than those stated below without first obtaining your consent.

  • Service provision: process registration, verify identity, enable deposits and withdrawals, and provide access to games.
  • Security & Fraud Prevention: detect and block suspicious activity, protect accounts from unauthorised access, and comply with AML (Anti-Money Laundering) requirements.
  • Platform improvements: analyse usage patterns to improve the performance, interface, and overall experience of the cm8x platform.
  • Service communications: send transaction notifications, account security updates, relevant bonus alerts, and responses to support enquiries.
  • Legal compliance: comply with legal reporting requirements, court orders, or requests from lawful authorities.
  • Marketing (with consent): send promotional information, exclusive offers, and the latest news about cm8x — only if you have given consent, which can be withdrawn at any time.
Opt-out Right: You can stop receiving marketing emails from cm8x at any time by clicking the "unsubscribe" link in any of our emails, or by contacting our support team directly.

4Data Sharing with Third Parties

Cm8x does not sell your personal data to any third party. However, in the course of operating the platform, we may share certain data with the following categories of parties:

4.1 Trusted Service Providers

Technical service providers that help cm8x operate, including cloud computing providers, licensed payment gateways, and identity verification companies. All providers are bound by strict confidentiality agreements and are prohibited from using your data for their own purposes.

4.2 Competent Authorities

Cm8x may disclose personal data when legally required, including to financial authorities, crime prevention agencies, or pursuant to a valid court order. In such situations, we will disclose only the minimum data necessary.

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, member data may be transferred as part of the business assets. In such situations, you will be notified before your data becomes subject to a different privacy policy.

Reminder: cm8x will never ask you to provide your password, PIN, or full card details through any channel, including live chat, email, or phone calls. Be cautious of any party claiming to be cm8x and requesting such sensitive information.

5Data Security and Protection Infrastructure

Cm8x continuously invests in a multi-layered data security infrastructure. Our approach to data security is comprehensive — from the technical infrastructure level through to daily operational policies.

  • Encryption in transit: All communications between the cm8x platform and your device are encrypted using TLS 1.3 and 256-bit SSL.
  • Encryption of stored data: Sensitive data stored in the cm8x database is encrypted using AES-256 standard.
  • Access controls: Access to member data within cm8x is restricted based on the principle of least privilege — only staff who genuinely need access to carry out their duties are permitted.
  • Real-time monitoring: An intrusion detection system (IDS) monitors cm8x infrastructure around the clock to identify any abnormal activity.
  • Secure backups: Data backups are performed regularly and stored at separate locations, also protected with full encryption.
  • Penetration Testing: Regular security testing is conducted by independent cybersecurity experts to identify and remediate any vulnerabilities before they can be exploited.
Incident Response: In the event of a data breach involving your personal data, cm8x will notify you within 72 hours of becoming aware of the incident, along with details of what occurred, the data potentially affected, and the steps being taken.

6Cookies and Tracking Technologies

Cm8x uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

6.1 Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as maintaining your login session and saving language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collect information about how you use the platform — which pages are visited most frequently and any error messages encountered. All information is anonymous.
  • Functional cookies: Remember your preferences such as display settings, preferred language, and login details (if you choose to save them).
  • Security cookies: Helps detect suspicious login attempts and protects your account from unauthorized access.

You can control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the cm8x platform and your gaming experience.

7Your Rights Regarding Personal Data

As a cm8x member, you have certain rights regarding your personal data. cm8x fully respects and facilitates the exercise of these rights.

Your Rights Description Status
Access Rights Request a copy of the personal data we hold about you ✓ Available
Right to Rectification Correct inaccurate or incomplete data ✓ Available
Right to Erasure Request deletion of your personal data ("right to be forgotten") ⚠ Subject to terms
Right to Restriction Restrict data processing in certain situations ✓ Available
Right to Portability Receive your data in a machine-readable format ✓ Available
Right to Object Object to the processing of your data for marketing purposes ✓ Available

To exercise any of the above rights, contact the cm8x support team via live chat or email. We will process your request within 30 business days. In some cases, we may require identity verification before processing the request.

8Cross-Border Data Transfers

In operating the platform, your personal data may be processed or stored on servers located in countries or regions outside Malaysia. Such cross-border data transfers occur under the following circumstances:

  • Use of international cloud computing services that comply with high security standards.
  • Transaction processing through licensed international payment gateways.
  • Use of technical support services from selected global providers.

In all cases of cross-border data transfers, cm8x ensures that data recipients have equivalent or higher protection measures than those required under Malaysian data protection law. Legally binding data processing agreements are signed with all such providers.

9Data Retention Period

Cm8x retains your personal data only for as long as required for the purposes stated in this policy, or as mandated by applicable laws.

  • Active account data: Retained for the duration your account is active and for an additional period after account closure to comply with legal requirements.
  • Financial transaction records: Retained for a minimum of seven (7) years from the transaction date, in accordance with financial and anti-money laundering legal requirements.
  • KYC documents: Retained throughout the active account period and for an additional five (5) years after account closure.
  • Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
  • Technical log data: Typically retained for 12 months for security and technical troubleshooting purposes.

Once the retention period ends, your data will be deleted or anonymized in a secure and irreversible manner.

10Children's Privacy

The cm8x platform is exclusively for individuals aged 18 and above. cm8x does not knowingly collect personal data from individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account at cm8x, please contact us immediately.

Parental Responsibility: Parents and guardians must ensure that children in their care do not access online gambling platforms such as cm8x. Please use parental control software where necessary.

11Changes to This Privacy Policy

Cm8x reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to members via in-platform notifications and/or email at least 14 days before the changes take effect.

Non-material changes — such as spelling corrections, language clarifications, or formatting updates — may be made without prior notice. The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy.

Continued use of the cm8x platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy.

12Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the cm8x privacy team is ready to assist you. We are committed to addressing every inquiry seriously and within a reasonable timeframe.

Contact the cm8x Privacy Team:
Email: [email protected] (please state "Privacy Inquiry" in the subject line)
Live Chat: Available 24/7 on the cm8x platform
Typical response time: 1–3 business days

For requests involving data access, correction, or deletion, please include sufficient identity verification information so we can process your request securely and accurately.

Question Common about cm8x Privacy

Answers to the most frequently asked questions from members about privacy and data protection at cm8x.

No, cm8x does not store your full card number, CVV code, or internet banking password. All financial transactions are processed through licensed, PCI DSS-compliant third-party payment gateways. For withdrawals, we only retain the account holder name and bank account number — the minimum information required to process fund transfers to you.

Yes, you may request the deletion of your personal data. However, exceptions apply where we are legally required to retain certain records — particularly financial transaction records, which must be kept for seven years under Malaysia's financial regulations. Data not subject to legal retention requirements will be deleted or anonymised within 30 business days of the request being received.

Access to member personal data within cm8x is strictly limited on a "need-to-know" basis. Only staff in customer support, finance, security, and technical departments with direct responsibilities relating to your data are granted access. All access is logged and monitored. No staff member is permitted to access member data for personal purposes.

No. cm8x only sends marketing communications to members who have given explicit consent during registration or via account settings. You may withdraw consent at any time by clicking the "unsubscribe" link in any of our marketing emails, or by contacting customer support. Transactional and security emails (such as deposit confirmations and security notifications) will still be sent regardless of your marketing preferences.

After account closure, cm8x will retain your data for the period required by law — financial records for seven years and KYC documents for five years after closure. After this period, all data will be securely deleted. During the mandatory retention period, access to your data is restricted to legal compliance requirements only and is not used for any marketing or business purposes.
Your Data Is Safe With Us

Join cm8x with Confidence — A Platform That Puts Your Privacy & Security First

256-bit SSL encryption, no data selling, regular security audits, and 24/7 privacy support — cm8x is built for Malaysian players who care about their data security.

Secure Account Registration Login
Bahasa Melayu