CM8Pro Privacy Policy — Personal Data Protection for Malaysian Members

CM8Pro is an online entertainment and betting platform accessible at cm8pro.net, serving Malaysian users with services including football betting (EPL, Liga Super Malaysia, UCL, La Liga, and over 500 other leagues), live casino, slots, cricket betting, virtual sports, and live matches. In delivering these services, CM8Pro needs to collect and process certain personal data from our members.

CM8Pro takes data protection responsibilities very seriously. As a platform serving Malaysian users, we are fully bound by the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in Malaysia. This Privacy Policy has been written to meet PDPA transparency requirements and to ensure you have a clear understanding of how CM8Pro handles your information.

This Policy applies to all CM8Pro platform users, including registered members, unregistered website visitors, and anyone who interacts with CM8Pro through our official communication channels. In the event of a conflict between this Policy and any version in another language (if applicable), this Malay-language version shall prevail.

CM8Pro collects several categories of personal data from members and visitors to our website. The type of data collected depends on how you interact with the CM8Pro platform:

Data You Provide Directly:

• Identity Information: Full name, date of birth, Malaysian identity card number (MyKad), passport number (for non-citizens), and a photo of your identity document as required for account verification.
• Contact Information: Your Malaysian mobile number, email address, and Malaysian residential address as provided during registration or profile updates.
• Financial Information: Details of the payment method you use, including your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow account name, or FPX account number (Maybank2u, CIMB Clicks), for processing deposits and withdrawals in Malaysian Ringgit (RM). CM8Pro does not store credit or debit card numbers directly.
• Account Information: Username, password (stored in encrypted form), account preferences, and responsible gaming limits you have set.

Automatically Collected Data:

• Platform Usage Data: Betting records, casino and slots game history, total deposits and withdrawals, login and logout times, and general activity on the CM8Pro platform.
• Technical Data: Device IP address, web browser type and version, device type (mobile, tablet, or desktop), operating system, screen resolution, and session data.
• Cookie Data: Information collected through cookies and similar tracking technologies to enhance the user experience and analyse usage patterns on the CM8Pro platform.

CM8Pro uses collected personal data solely for legitimate purposes that are directly related to providing our platform services to you. The following are the specific purposes for which CM8Pro uses personal data:

• Account Management & Verification: Creating, verifying, and managing your CM8Pro account — including identity and age verification as required by our platform policies and Malaysian law.
• Financial Transaction Processing: Processing your deposits and withdrawals in Malaysian Ringgit (RM) through your chosen Malaysian local payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or local bank FPX. This includes payment verification, transaction records, and resolution of payment-related disputes.
• Platform Service Provision: Gives you access to all CM8Pro services, including Sports Betting, Live Casino, slots, cricket betting, Virtual Sports, and live matches. This includes saving your personal preferences and settings within the platform.
• Account-Related Communications: Sending you important account notifications — such as deposit confirmations, withdrawal alerts, password changes, and account security updates — via SMS to your Malaysian mobile number or by email.
• Promotional & Bonus Information: With your consent, we may send you information about new bonuses, seasonal promotions (such as those for Hari Raya or the EPL season), and special offers relevant to your activity on CM8Pro. You may unsubscribe from these marketing communications at any time.
• Security & Fraud Prevention: Monitoring account activity to detect and prevent fraud, money laundering, bonus abuse, or any conduct that violates CM8Pro's Terms & Conditions. This is a key responsibility we uphold to protect all platform members.
• Responsible Gaming: Using gameplay activity data to identify patterns that may indicate problem gambling, and to enable CM8Pro's responsible gaming tools to function effectively in safeguarding member wellbeing.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements to Malaysian authorities where required by law.
• Platform Improvement: Analysing aggregated usage data (not at the individual level) to understand how members use the CM8Pro platform, improve the user experience, resolve technical issues, and develop new features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), CM8Pro must have a valid legal basis for processing your personal data. The bases we rely on are as follows:

• Your Consent: For most data processing, we rely on the consent you provide when registering a CM8Pro account or when interacting with our platform. You may withdraw this consent at any time, though doing so may mean you can no longer access certain CM8Pro services.
• Contract Performance: Some data processing is necessary to fulfil the contract between you and CM8Pro — namely the Terms & Conditions you accepted upon registration. This includes payment processing and basic account management.
• Legal Obligation: In certain circumstances, CM8Pro is required by Malaysian law to process your personal data — for example, to comply with anti-money laundering requirements.
• Legitimate Interest: CM8Pro also processes certain data on the basis of legitimate business interests — such as fraud detection and platform security improvements — provided these interests do not override your privacy rights.

CM8Pro does not sell, rent, or disclose member personal data to third parties for marketing purposes. However, in the course of operating the platform, CM8Pro may share certain information with the following parties under limited circumstances:

• Payment Service Providers: CM8Pro shares the necessary transaction details with Malaysian payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banking institutions supporting FPX (including Maybank, CIMB, RHB) to process your deposits and withdrawals in MYR. This sharing is limited strictly to information required to complete the transaction.
• Platform Technology Providers: CM8Pro uses third-party technology providers for server hosting, security infrastructure, casino and slots game software, and betting management systems. These providers are bound by strict data confidentiality agreements and may only use your data for the purpose of supporting CM8Pro's services.
• Legal Authorities: CM8Pro will disclose members' personal data to Malaysian authorities (such as the police, the Malaysian Anti-Corruption Commission, or the courts) if required by law, court order, or to support a legitimate criminal investigation.
• Business Transfer: In the event that CM8Pro is involved in a merger, acquisition, or asset transfer, members' personal data may be transferred as part of the business assets. We will notify members before their data is transferred to any new party.

CM8Pro continually invests in security infrastructure to ensure our members' personal data remains protected at all times. The technical and organisational security measures we employ are as follows:

• Data Encryption in Transit: All data transmitted between your device and CM8Pro's servers is protected by TLS 1.3 with 256-bit SSL encryption — ensuring no third party can intercept or read your information in transit.
• Data Encryption at Rest: Sensitive personal data stored in CM8Pro's databases — including passwords (stored as non-recoverable hashes), financial information, and identity details — is protected with AES-256 encryption.
• Access Control: Access to members' personal data within CM8Pro's internal systems is restricted to staff who genuinely need it to perform their duties. All access is logged and audited on a regular basis.
• 24/7 Security Monitoring: CM8Pro's systems are continuously monitored for security threats, intrusion attempts, and suspicious activity. Our cybersecurity team responds to incidents promptly.
• Regular Security Audits: CM8Pro conducts regular security audits and penetration testing by independent third parties to identify and address any potential security vulnerabilities.
• Incident Response Procedure: CM8Pro has a comprehensive incident response procedure to address data breaches promptly. Should a data breach occur that may affect you, CM8Pro will notify you within the timeframe required by Malaysia's PDPA.

CM8Pro uses cookies and similar tracking technologies to enhance your experience on our platform and to understand how our platform is being used. The types of cookies we use are as follows:

• Essential Cookies: These cookies are required for the basic functionality of the CM8Pro platform, such as maintaining your login session, remembering language preferences, and securing transactions. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: CM8Pro uses analytics cookies to understand how members use our platform — which pages are visited most often, how long users spend on them, and where technical issues arise. This data helps us improve the platform for a better overall experience.
• Functional Cookies: This cookie allows the CM8Pro platform to remember your preferences, such as display layout, favourite football teams, preferred leagues (EPL, Malaysia Super League, and others), and other personal settings.
• Security Cookie: This cookie is used to detect fraudulent attempts, protect your account from unauthorized access, and monitor suspicious activity on the CM8Pro platform.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the CM8Pro platform. Continued use of the CM8Pro platform after being notified of our cookie policy is considered your consent to the use of those cookies.

In the course of operating the CM8Pro platform, member personal data may be stored or processed on servers located outside Malaysia — for example, by international technology infrastructure service providers that CM8Pro relies upon.

When personal data is transferred outside of Malaysia, CM8Pro ensures that:

• The recipient country or organization maintains a level of data protection that is equivalent to or greater than what is required under Malaysia's PDPA.
• A legally binding data transfer agreement exists between CM8Pro and the recipient, ensuring your data is protected to the same standard as it is in Malaysia.
• Data transfers are carried out solely for the purposes stated in this Privacy Policy and for no other purpose.

CM8Pro does not transfer members' personal data to countries without adequate data protection laws, except where appropriate safeguards are in place and your consent is obtained when required.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by CM8Pro:

The CM8Pro platform is restricted to individuals aged 18 and above. CM8Pro does not knowingly collect, store, or process any personal data of individuals under the age of 18.

If CM8Pro discovers that personal data has been collected from an individual under the age of 18 without appropriate parental or guardian verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their minor child has registered a CM8Pro account should contact us immediately at support@cm8pro.net.

The CM8Pro platform may contain links or references to third-party websites or services in certain contexts. This CM8Pro Privacy Policy applies only to the cm8pro.net platform and CM8Pro services.

CM8Pro is not responsible for the privacy practices or content of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of every website you visit. Please note that CM8Pro has no control over how third-party websites collect or use your data.

CM8Pro reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements, or changes in how we operate the platform. All amendments take effect upon publication of the latest version on cm8pro.net.

For material changes — such as changes to how we use your personal data or new rights granted to you — CM8Pro will endeavour to notify you via in-platform notifications or your registered email address before those changes take effect.

You are encouraged to review this Privacy Policy periodically. The "Updated" date at the top of this document indicates when the last amendment was made. Continued use of the CM8Pro platform following the publication of any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints about how CM8Pro handles your personal data, or if you wish to exercise any of your data rights, please reach out to us through the following channels:

• Privacy Email: support@cm8pro.net — please use "Data Privacy Request" as your email subject for faster handling. We will acknowledge receipt of your request within 3 business days and resolve it within the timeframe set by Malaysia's PDPA.
• Live Chat: Available directly within the CM8Pro platform, 24 hours a day, 7 days a week — for urgent privacy enquiries that require a prompt response.

If you are not satisfied with CM8Pro's response to your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia under the Ministry of Communications and Digital, which is the regulatory authority responsible for enforcing the PDPA in Malaysia.

This Privacy Policy is the latest version and takes effect from the date of 1 January 2026. All previous versions are no longer applicable and are superseded entirely by this document.