Cm2 Privacy Policy — Your Data Security Is Our Priority

1 Introduction

Cm2 is an online gaming platform operating under the domain cm2.live. We take user privacy very seriously and are committed to ensuring that every piece of information you share with us is handled with full responsibility, transparency, and the highest level of security.

This Privacy Policy is established in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and applicable international data protection standards. It details the types of data we collect, why we need it, how we use it, who we may share it with, and your rights as a user regarding that data.

We believe transparency is the foundation of trust. That is why we strive to present this policy in plain language that every cm2 user can understand, rather than complex legal jargon. If you have any questions after reading this document, our support team is available via Live Chat 24/7.

2 Information We Collect

Cm2 only collects information that is strictly necessary for legitimate purposes related to platform operations, account security, and legal compliance. The following are the categories of information we collect:

We also collect information automatically when you use our platform, including details about your device, language settings, time zone, and general usage patterns. This data cannot personally identify you and is used solely to improve the overall user experience.

For users who register an account, we also collect information provided during the KYC (Know Your Customer) process, which is a mandatory requirement under applicable anti-money laundering (AML) regulations. Documents you upload are stored securely and accessed only by authorized personnel.

3 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. cm2 does not use your data for purposes unrelated to platform operations or that could harm your interests. The following are the primary purposes for data use:

• Account management: To register, verify, and manage your account on the cm2 platform, including secure login and password recovery.
• Transaction processing: To process your deposits, withdrawals, and all financial transactions quickly and securely using your chosen payment method.
• KYC and AML Compliance: To fulfil legal compliance obligations including identity verification, fraud prevention, and reporting to the relevant authorities when required.
• Customer support: To resolve enquiries, complaints, and technical issues you raise via Live Chat, email, or other support channels.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop improved new features for your gaming experience.
• Security and fraud prevention: To detect and prevent suspicious activity, account intrusion attempts, and any form of fraud that could affect other users.
• Service communications: To send important notifications related to your account such as transaction confirmations, password changes, and policy updates.
• Marketing (with consent): To send promotional offers, bonuses, and information about new games — only if you have given consent to receive such communications.
• Responsible gaming: To monitor your wagering patterns and provide self-control tools that promote a healthy and responsible gaming experience.

4 Information Sharing

Cm2 does not sell, rent, or trade your personal data to any third party for commercial gain. However, there are certain situations where we may need to share some of your information with trusted parties:

• Payment service providers: Required transaction information is shared with licensed payment processors such as DuitNow, FPX, and e-wallet providers to process your deposits and withdrawals.
• Licensed game providers: Basic game data is shared with third-party game studios that provide content to the cm2 platform, solely for the purpose of running games correctly.
• Legal authorities: cm2 will disclose required information to government or law enforcement authorities when mandated by law, court order, or valid legal process.
• Audit and compliance partners: Limited information may be shared with independent auditors and regulatory bodies for compliance and game fairness certification purposes.
• Technology providers: Cloud service and technical infrastructure providers that help operate the cm2 platform may process your data, but are bound by strict confidentiality agreements.

All third parties receiving data from cm2 are bound by data protection agreements that require them to handle your data to the same high security standards as cm2.

5 Data Security

Cm2 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, alteration, or disclosure. The key security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and the cm2 servers are encrypted using the latest 256-bit SSL/TLS protocol.
• Two-factor authentication (2FA): cm2 supports two-factor authentication for an additional layer of protection when logging into your account.
• 24/7 Monitoring: Our security systems operate around the clock to detect and respond to any threats or suspicious activity in real time.
• Internal Access Controls: cm2 staff may only access user data on a need-to-know basis, with all access recorded and regularly audited.
• Secure backups: Your data is regularly backed up to a secure, encrypted location to ensure prompt recovery in the event of a technical incident.
• Penetration testing: cm2 conducts regular security audits by independent security experts to identify and patch any vulnerabilities before they can be exploited.

While cm2 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in protecting your account — always use a strong password, never share your login credentials, and always log out when using a shared device.

6 Cookie Policy

Cookies are small text files stored on your device when you visit the cm2 platform. We use cookies to enhance your experience and ensure the platform runs properly. Below are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform to function — including login session cookies and security cookies. Disabling them will affect core platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform, which pages are visited most, and where users encounter difficulties, so we can make improvements.
• Functional Cookies: Saves your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to collect general statistical data on platform usage for internal analytics purposes. This data is aggregated and cannot personally identify you.

You can control and manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or user experience of the cm2 platform.

7 Your Rights

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have certain rights regarding the personal data held by cm2. We fully respect these rights and provide straightforward channels for you to exercise them:

• Right to access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to rectification: If any information we hold is inaccurate or out of date, you have the right to request a correction promptly.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data from our systems, subject to our record-keeping obligations under applicable law.
• Right to restrict processing: You may request that we restrict how we process your data in certain situations, such as when you are disputing the accuracy of your data.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, and cm2 is obligated to comply with such requests.
• Right to data portability: You may request to receive your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the cm2 data protection team via email at [email protected] or through Live Chat on the platform. We will verify your identity before processing any request to ensure the security of your data.

8 Data Retention and Deletion

Cm2 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our data retention policy is as follows:

• Active account data: Retained for the duration of your active account plus 7 years after account closure, in line with Malaysia's financial legal requirements.
• Transaction records: Retained for a minimum of 7 years in accordance with AML compliance requirements and applicable financial regulations.
• KYC documents: Retained for the period prescribed by applicable compliance laws, typically no more than 10 years after the business relationship ends.
• Support communication logs: Retained for 3 years for reference and follow-up complaint resolution purposes.
• Analytics data: Aggregated usage data is retained indefinitely as it cannot be linked to any specific individual.

Once the retention period expires, your data will be deleted or converted into an anonymised format that cannot be used to identify you personally. The deletion process is carried out securely using methods that ensure data cannot be recovered.

9 Third-Party Links

The cm2 platform may contain links to third-party websites or services, particularly those related to integrated game providers and payment systems. Please note that the cm2 Privacy Policy does not apply to those third-party websites or services.

Every third-party provider integrated with the cm2 platform has its own privacy policy governing how it handles user data. cm2 recommends that you read the relevant third-party privacy policy before providing any personal information to them directly.

10 Changes to the Privacy Policy

Cm2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to the services we offer.

Any significant changes to this Privacy Policy will be communicated to you via a prominent notice on the cm2 platform and / or by email to your registered address, at least 7 days before the changes take effect.

The "Updated" date shown at the top of this document reflects the date of the latest version of the Privacy Policy. Your continued use of the cm2 platform following any changes to this Privacy Policy constitutes your acceptance of the updated version.

11 Contact Us

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of your privacy rights, please contact the cm2 data protection team through the following channels:

• Live Chat 24/7: The fastest and easiest way — directly within the cm2 platform. Our team responds within minutes.
• Email: [email protected] — for more detailed enquiries or those requiring supporting documents related to your privacy rights request.
• Response time: We are committed to responding to all privacy-related inquiries within 3 business days and resolving data rights requests within 14 business days.

If you believe that cm2 has not handled your data in accordance with applicable laws after you have contacted us and the issue has not been resolved satisfactorily, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner or the relevant regulatory authority.