cm2bet Privacy Policy

1. Introduction and Scope

cm2bet ("we", "us", "our") operates the online gaming platform accessible at cm2bet.win, including all associated games, sportsbook services, account management functions, live casino, and promotional tools. This Privacy Policy explains how cm2bet collects, uses, stores, shares, and protects the personal data of individuals who register for, access, or interact with the cm2bet Platform in any capacity.

This Policy applies to all players registered on cm2bet, including those accessing the Platform from Malaysia and any other jurisdiction where cm2bet Services are accessible. By registering a cm2bet account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood its contents.

This Privacy Policy should be read in conjunction with the cm2bet Terms & Conditions, which govern your use of the Platform as a whole. Defined terms used in this Policy carry the same meaning as defined in the Terms & Conditions.

2. Data Controller Information

For the purposes of applicable data protection law, the data controller responsible for the personal data you provide to the cm2bet Platform is the cm2bet operating entity licensed under international gaming authority guidelines.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to:

3. Personal Data We Collect

cm2bet collects personal data through several means: directly from you during registration and account use, automatically through platform interaction, and from third-party verification services where required for KYC compliance.

3.1 Data You Provide Directly

• Registration data: full legal name, date of birth, email address, username, and password;
• KYC verification documents: government-issued photo identification (e.g., MyKad, passport), proof of address (e.g., utility bills, bank statements), and source-of-funds documentation where required;
• Financial data: payment method details including e-wallet account identifiers, bank account numbers (last four digits for verification purposes), and transaction history within the Platform;
• Communication data: the content of messages sent to cm2bet customer support via live chat, email, or any other support channel;
• Responsible gaming preferences: any self-imposed deposit limits, session limits, or self-exclusion settings you configure through your account.

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone;
• Usage data: pages visited, games played, wagers placed, session duration, click-path data, and navigation patterns within the Platform;
• Location data: approximate geographic location derived from your IP address for geolocation compliance purposes;
• Cookie data: session identifiers, preference cookies, and analytics data as described in Section 7 of this Policy.

3.3 Data from Third Parties

• Identity verification data returned from licensed KYC and AML screening providers;
• Payment confirmation data from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank FPX gateways;
• Fraud prevention signals from third-party risk assessment services;
• Publicly available information where relevant to AML or regulatory compliance obligations.

4. How We Use Your Personal Data

cm2bet processes your personal data for the following purposes:

• Account creation and management: to register and maintain your cm2bet account, verify your identity, and enable access to Platform Services;
• Service delivery: to process deposits and withdrawals, settle wagers, administer bonuses, and deliver the gaming experience you have requested;
• KYC and AML compliance: to fulfil our obligations under applicable anti-money-laundering and know-your-customer regulatory requirements;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, account takeovers, and misuse of the Platform;
• Responsible gaming: to monitor gambling patterns, enforce self-imposed limits, and identify potential problem gambling behaviour in accordance with our responsible gaming commitments;
• Customer support: to respond to your enquiries, process complaints, and provide technical assistance;
• Platform improvement: to analyse usage patterns, conduct A/B testing, and improve the functionality, design, and content of the Platform;
• Marketing communications: to send you promotional offers, bonus notifications, and news about cm2bet products and features — subject to your communication preferences and applicable opt-out rights;
• Legal compliance: to comply with applicable law, court orders, regulatory directions, and to establish, exercise, or defend legal claims.

5. Legal Basis for Processing

Where data protection law requires a legal basis for processing personal data, cm2bet relies on the following grounds:

• Performance of a contract: processing necessary to provide you with the cm2bet gaming services you have contracted for — this covers account creation, deposits, withdrawals, and game participation;
• Compliance with a legal obligation: processing required to meet our KYC, AML, and regulatory reporting obligations under applicable law;
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your rights and interests;
• Consent: processing for direct marketing communications, where we rely on your opt-in consent. You may withdraw consent at any time through your account notification settings or by contacting [email protected].

6. Data Sharing and Third-Party Disclosure

cm2bet does not sell your personal data to third parties. We may share your data in the following circumstances:

• Game providers: your account identifier and relevant session data is shared with licensed game providers (such as Pragmatic Play, PG Soft, Evolution Gaming) solely to facilitate game delivery and dispute resolution;
• Payment processors: financial transaction data is shared with your chosen payment provider (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard) as necessary to process deposits and withdrawals;
• KYC and AML service providers: identity and document data is shared with licensed verification and screening vendors to fulfil regulatory compliance obligations;
• Fraud prevention partners: technical and behavioural data may be shared with anti-fraud service providers to protect the Platform and its players;
• Regulatory and law enforcement authorities: we will disclose data as required by applicable law, court order, or direction from a regulatory authority with jurisdiction over cm2bet's operations;
• Business transfers: in the event of a merger, acquisition, or asset sale involving cm2bet, player data may be transferred as part of the transaction, subject to equivalent privacy protections.

All third parties with whom cm2bet shares personal data are contractually required to process that data in accordance with applicable data protection standards and solely for the purposes specified.

7. Cookies and Tracking Technologies

cm2bet uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly necessary cookies: required for the Platform to function — these include session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without significantly affecting functionality;
• Functional cookies: store your preferences such as language settings, remembered username (if selected), and responsible gaming display preferences;
• Analytics cookies: collect anonymous usage data to help us understand how players navigate the Platform, which games are most popular, and where technical issues occur — this data is aggregated and does not identify individual players;
• Marketing cookies: used where you have provided consent to receive personalised promotional content based on your gaming activity and preferences.

8. Data Retention

cm2bet retains your personal data for as long as is necessary for the purposes for which it was collected, taking into account applicable legal retention obligations. Specific retention periods are as follows:

• Account data: retained for the duration of your active account plus five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations;
• KYC documentation: retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in compliance with AML regulatory requirements;
• Transaction records: retained for five (5) years from the date of each transaction for regulatory and dispute resolution purposes;
• Support communications: retained for two (2) years from the date of the last interaction;
• Marketing consent records: retained for the duration of the consent plus one (1) year to demonstrate compliance.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

cm2bet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit TLS/SSL encryption on all data in transit between your browser and cm2bet servers;
• Encryption of sensitive data fields (including payment identifiers and KYC document metadata) at rest;
• Role-based access controls ensuring that staff access to personal data is restricted to those with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Login anomaly detection and automated alerts for suspicious account activity;
• Two-factor authentication (2FA) available to players through account security settings — strongly recommended for accounts with significant balances or withdrawal history.

While cm2bet implements industry-standard security practices, no online system is entirely immune from risk. Players are encouraged to maintain strong, unique passwords for their cm2bet accounts and to report any suspected security incidents to [email protected] immediately.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by cm2bet:

• Right of access: you may request a copy of the personal data cm2bet holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations;
• Right to restrict processing: you may request that we limit how we use your data in certain circumstances;
• Right to data portability: you may request a structured, commonly used, machine-readable copy of personal data you have provided to us;
• Right to object: you may object to processing based on our legitimate interests, and to processing for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with "Privacy Request" in the subject line. We will respond within 30 calendar days. We may request proof of identity before processing data subject requests.

11. Children and Minors

If you are a parent or guardian and have reason to believe that a person under the age of 21 has registered on the cm2bet Platform, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

cm2bet operates in the online gaming industry with game providers, payment processors, and technology partners located in various jurisdictions globally. As a result, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, cm2bet takes steps to ensure that adequate protections are in place, including contractual data processing agreements with transferee entities that impose equivalent data protection obligations.

By using the cm2bet Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia in accordance with the purposes described in this Policy.

13. Changes to This Privacy Policy

cm2bet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide. When material changes are made, we will notify registered players via the email address on file and update the "Last Updated" date at the top of this Policy.

Your continued use of the cm2bet Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14. Contact the Data Team

For any privacy-related queries, subject access requests, or complaints regarding how cm2bet handles your personal data, please contact us through the following channel:

If you are not satisfied with how cm2bet has handled your privacy complaint after contacting us directly, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.