CM8 Agent Privacy Policy – Malaysian Player Data Protection

At cm8 agent, we understand that the trust of Malaysian players is not something to be taken lightly. When you register an account on our platform, you are entrusting us with sensitive personal information — your name, phone number, financial details, and usage patterns. We take that responsibility seriously.

This Privacy Policy is designed to give you a clear and transparent picture of data handling practices at cm8 agent. It explains what data we collect, why we need it, how it is used, how long it is retained, and what rights you have over that data. This document also outlines the technical and organisational security measures we take to protect your data from unauthorised access, loss, or misuse.

The cm8 agent Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices for data protection in the online services sector. We view compliance with privacy law not merely as a legal obligation, but as part of our commitment to being a platform that Malaysians can trust.

This policy applies to all information collected through cm8agent.net, the cm8 agent mobile app (if applicable), any communications between you and the cm8 agent team via email, live chat, WhatsApp, or Telegram, and any financial transactions carried out through the platform.

CM8 agent collects personal data through several channels — directly from you during registration or platform use, automatically via website tracking technologies, and in certain circumstances from legitimate third-party sources. The following are the categories of data we collect:

CM8 agent uses collected personal data only for legitimate and necessary purposes. We do not process your data excessively or for purposes unrelated to the services you use. The following are the primary purposes for which data is used:

• Account Management: Creates and manages your account, verifies your identity at login, processes password change requests, and keeps your account secure from unauthorized access.
• Transaction Processing: Processes deposits and withdrawals accurately and securely using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks.
• Service Delivery: Allows you to access and use all cm8 agent games and services, including live baccarat, blackjack, roulette, EPL and Malaysia Super League football betting, BWF badminton, and e-sports.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account registrations, and any other security threats that could compromise the platform or other players.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA and other applicable regulations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Customer Support: Providing effective assistance when you contact the cm8 agent support team, resolving disputes, and improving service quality based on your feedback.
• Experience Personalisation: Delivers relevant content, promotions, and game recommendations based on your usage patterns — for instance, if you frequently bet on badminton, we may display information about upcoming BWF tournaments.
• Marketing Communications: Sending you information about promotions, new bonuses, and platform updates — provided you have given your consent to receive such communications. You may withdraw this consent at any time.

CM8 agent does not sell, rent, or disclose players' personal data to third parties for marketing purposes. However, in the course of operating the platform, there are specific situations where data may be shared with trusted parties:

• Payment Service Providers: Transaction data that must be shared with e-wallet and online banking providers such as Touch 'n Go, GrabPay, and FPX banks to process deposits and withdrawals. These providers are bound by their own strict privacy policies.
• Game Providers: Game session information is shared with the Live Casino software providers and sports platforms integrated within cm8 agent. This is necessary to ensure games function correctly and winning records are properly processed.
• Independent Auditors: Appointed fair gaming audit bodies tasked with verifying the integrity of the cm8 agent system may be granted limited access to the technical data required for audit purposes. All auditors are bound by strict confidentiality agreements.
• Legal Authorities: CM8 agent will disclose necessary data to Malaysian authorities or relevant law enforcement bodies when required to do so by law, court order, or for crime prevention purposes such as money laundering or fraud.
• Business Transfer: In exceptional circumstances such as a merger, acquisition, or sale of business assets, player data may be transferred to the acquiring entity. In such situations, players will be notified in advance and the same or stronger privacy policy will apply.

In all of the above cases, cm8 agent ensures that all data recipients are bound by confidentiality and data security obligations that are equivalent to or stricter than the standards we apply ourselves.

CM8 agent continually invests in security infrastructure to ensure that players' personal data remains protected at all times. The following are the key technical and organisational security measures we have in place:

• Data in Transit Encryption: All communications between your device and cm8 agent's servers use TLS 1.3 protocol with 256-bit SSL encryption. This means that data in transit — including login credentials, personal details, and transaction data — cannot be read by any third party during transmission.
• Data at Rest Encryption: Personal data stored in cm8 agent's databases is encrypted using industry-standard encryption algorithms. Even in the event of unauthorised server access, stored data cannot be read without the corresponding encryption key.
• Strict Access Controls: Only cm8 agent staff with a legitimate business need and who have passed thorough background checks are permitted to access player data. All access is logged and continuously monitored.
• 24/7 Monitoring: The cm8 agent security team continuously monitors systems to detect any anomalies, intrusion attempts, or suspicious activity that could compromise player data security.
• Regular Security Testing: Penetration testing and security audits are carried out periodically by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: cm8 agent maintains a comprehensive incident response plan to address any data breaches swiftly and effectively, including procedures to notify affected players within the timeframe required by law.

The cm8 agent platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics data that helps us improve our services. The following are the types of cookies we use:

• Session Cookies (Required): These cookies are required for the platform to function properly. They store your login session information so you do not need to log in again each time you navigate to a new page. These cookies expire automatically when you close your browser or log out.
• Preference Cookies (Functional): Saves your preferences such as display language and other interface settings so you don't have to reconfigure them each time you visit the platform.
• Security Cookies (Required): Used to detect suspicious access attempts, protect against CSRF (Cross-Site Request Forgery) attacks, and keep your session secure during active use.
• Analytics Cookies (Optional): Helps cm8 agent understand how players interact with the platform — which pages are visited most, how long players spend in each section, and where technical issues may occur. This data is used in aggregate form and does not identify individual players.
• Performance Cookies (Optional): Monitors platform performance and detects technical issues that may affect the gaming experience, so the cm8 agent technical team can address them promptly.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the cm8 agent platform. Optional cookies can be disabled without impacting the platform's core functions.

CM8 agent retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Below is a guide to our data retention periods:

• Active Account Data: Personal data from active accounts is retained for as long as your account remains active, and for a reasonable period after closure to allow for the resolution of any claims or disputes that may arise.
• Financial Transaction Records: Records of all financial transactions (deposits and withdrawals in MYR) are retained for a minimum of seven years in accordance with applicable Malaysian accounting and financial regulatory requirements.
• Security Logs: Security and activity logs are retained for one year for the purposes of security incident investigation and compliance with AML (Anti-Money Laundering) requirements.
• Communication Data: Customer support transcripts are retained for two years for reference and service quality improvement purposes.
• Analytics Data: Anonymized analytics data that cannot identify individual players may be retained for a longer period for platform improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, cm8 agent will securely delete or anonymize it using methods that ensure it cannot be recovered.

You may request deletion of your personal data by contacting the cm8 agent support team. However, we may be unable to fulfill a deletion request in full if there are legal obligations to retain certain data, or if the data is needed to resolve an outstanding dispute.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and cm8 agent's commitment to player privacy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 business days from the date a complete request is received.
• Right to Correction: If you believe any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Inaccurate data will be updated within a reasonable timeframe following verification.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to cm8 agent's legal obligations to retain specific data, such as financial transaction records.
• Right to Withdraw Consent: You may withdraw your consent to data processing for marketing purposes at any time without affecting your betting activities. Marketing consent can be withdrawn through your account settings or by contacting support.
• Right to Restrict Processing: Under certain circumstances, you may request that cm8 agent restrict the processing of your data — for example, while you are disputing the accuracy of the data or during an ongoing complaint investigation.
• Complaint Rights: If you are dissatisfied with how cm8 agent handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

To exercise any of these rights, please contact the cm8 agent privacy team by email at support@cm8agent.net with the subject line "Data Privacy Request", or via live chat within the platform. We will verify your identity before processing any data request to protect your privacy from unauthorised access.

Platform cm8 agent is a service intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

If cm8 agent discovers that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data from our systems and close the associated account. Parents or guardians who have reason to believe their child has registered an account with cm8 agent must contact us immediately at support@cm8agent.net.

CM8 agent reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle player data.

When material amendments are made to this Privacy Policy, we will notify players via a prominent notice on the cm8 agent platform or by email to the registered address, at least seven days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Continued use of the cm8 agent platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account and process the deletion of your data.

It is your responsibility to review this Privacy Policy page periodically. The "Updated" date at the top of this document will always reflect the date of the most recent revision.

If you have any questions, concerns, or complaints regarding how cm8 agent handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@cm8agent.net (email subject: "Privacy Policy Enquiry" or "Personal Data Request")
• Live Chat: Available 24/7 on the cm8 agent platform — select the "Privacy & Data Security" category
• WhatsApp & Telegram: Available to registered members via the number listed on the platform

Our privacy team operates in Bahasa Melayu and will respond to privacy enquiries within three business days for general matters, and within 24 hours for urgent data security issues. The effective date of this Privacy Policy: January 2026.