Cm2 Privacy Policy – Our Commitment to Malaysian Players

Cm2 respects and protects every player's privacy. This page clearly explains how we collect, use, store, and protect your personal data — in plain language, free from confusing legal jargon.

Updated: 2026 256-bit SSL Bahasa Melayu

Quick Summary: cm2 only collects data that is strictly necessary to operate our services. We does not sell your data to any third party. You have the right to access, correct, or request deletion of your data at any time. For privacy enquiries, contact us at support@cm2.casino.

Introduction – cm2's Privacy Commitment

This Privacy Policy explains how the cm2 platform ("we", "cm2", or "the platform") collects, uses, discloses and protects your personal information when you use the cm2.casino website and all related services.

Cm2 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to internationally recognised data protection standards. Every decision regarding how player data is collected and used is made with careful regard for the privacy rights of our players.

By registering for or using the cm2 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the cm2 platform and contact us to discuss the options available to you.

This Privacy Policy applies to all cm2 players in Malaysia who access the platform via the website, mobile app, or any other digital channel operated by cm2. It forms part of the overall agreement between you and cm2, together with Terms & Conditions ours.

cm2 Privacy Principles: We believe that privacy is a fundamental right, not a privilege. Every decision about player data at cm2 is made based on the principle minimum requirements – we only collect data that is genuinely necessary to provide you with a quality service.

Types of Personal Data We Collect

Cm2 collects your personal data through several means — information you provide directly during registration, information generated as you use the platform, and information we receive from trusted third-party service providers (such as payment processors) for verification and transaction processing purposes.

Data Category Type of Information How It Is Collected
Identity Full name, date of birth, Identity Card number Registration form & KYC verification
Relationships Email address, mobile phone number Registration & profile updates
Financial Payment methods, deposit & withdrawal records Payment transactions via secure gateway
Platform Activity Betting records, games played, login sessions The platform system automatically
Technical IP address, device type, web browser, operating system Cookies & tracking technologies
Communications Support chat logs, emails, feedback Interactions with the cm2 support team

Cm2 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, except in very specific circumstances and with your explicit consent. In the context of identity verification for premium accounts or large withdrawals, we may request a copy of your identification document — and such documents are handled with the highest level of protection.

How Your Personal Data Is Used

Cm2 uses your personal data only for specific and legitimate purposes. We will not use your data for any purpose not stated here without first obtaining your renewed consent.

The primary purposes for which cm2 uses your data:

  • Account management: Creating, verifying, and managing your cm2 account, including the login process, account security, and profile updates.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and managing your winnings withdrawals securely and accurately
  • Legal compliance: Fulfilling anti-money laundering (AML) legal requirements, Know Your Customer (KYC) verification, and reporting obligations to relevant authorities in accordance with Malaysian law
  • Platform security: Detecting and preventing fraud, unauthorised access, account misuse, and suspicious activity that could compromise your safety or that of other players
  • Service improvement: Analysing platform usage patterns to identify technical issues, understand the needs of Malaysian players, and improve the overall cm2 user experience
  • Service communications: Sends notifications relating to your account, platform updates, changes to Terms & Conditions or Privacy Policy, and other important information you need to know as a cm2 player
  • Marketing communications: Sending you information about cm2 promotions, bonuses, and offers that may interest you – but only if you have opted in to receive marketing communications. You can unsubscribe at any time.
  • Responsible gaming: Monitors gameplay patterns to identify signs of problem gambling and provide appropriate support in line with cm2's social responsibility commitments

Data Sharing with Third Parties

Cm2 does not sell, rent or trade players' personal data to any third party for their own marketing purposes. This is a non-negotiable commitment.

However, cm2 may share your data with selected third parties in the following limited and controlled circumstances:

  • Payment processors: Payment gateways that process your deposits and withdrawals – including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX service providers – receive the transaction data required to process your payments. All of these payment processors are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
  • Technology service providers: Companies that provide the technical infrastructure for the cm2 platform – such as cloud server services, fraud detection systems, and analytics tools – may process certain technical data as part of their services to cm2.
  • Regulatory bodies and law enforcement: cm2 will disclose player data to the relevant authorities when required by Malaysian law, a court order, or an official request from a legitimate law enforcement agency.
  • Audit and compliance: Independent auditors conducting compliance and game fairness audits may access relevant data within the scope of their audit, subject to strict confidentiality agreements

Every third party that receives cm2 player data is bound by a data processing agreement requiring them to protect your data to a standard equal to or higher than cm2's own. cm2 conducts regular reviews of all third-party service providers to ensure ongoing compliance.

cm2 Data Security Measures

Protecting your personal data is one of cm2's highest technical priorities. We continuously invest in security infrastructure to ensure your data remains safe from unauthorised access, loss, or misuse.

Technical security measures implemented by cm2:

  • 256-bit SSL Encryption for all data communications between your device and cm2's servers – meaning all information transmitted through the cm2 platform, including login details and payment information, is encrypted and unreadable to unauthorised parties.
  • At-rest data encryption for all sensitive data stored in cm2's databases, including financial information and identity verification documents
  • Role-based access control – only cm2 staff who require access to specific data to carry out their duties are authorised to access it. No single individual has blanket access to all player data.
  • 24/7 security monitoring uses automated intrusion detection systems that monitor all platform activity for suspicious or unusual patterns.
  • Two-factor authentication (2FA) available and strongly recommended for all cm2 player accounts as an additional layer of security
  • Regular security testing including penetration testing and security code reviews conducted by independent security experts

While we take all reasonable steps to protect your data, no digital system can guarantee 100% absolute security. In the event of a security breach affecting your data, cm2 will notify you within the timeframe required by applicable law and take immediate steps to limit any impact.

Data Retention Period

Cm2 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Below are general guidelines on how long cm2 retains various categories of data:

  • Active account data: Retained for the entire duration that your cm2 account remains active. This data is necessary for managing your account and providing you with uninterrupted service
  • Financial transaction records: Retained for a minimum of 7 years after the transaction occurs, in accordance with Malaysia's financial and anti-money laundering legal requirements.
  • Betting records: Retained for a minimum of 5 years for audit, dispute resolution and licensing compliance purposes
  • Support communication logs: Retained for 2 years to allow the cm2 support team to provide full context if you contact us about the same issue in the future.
  • Technical data (logs, IP): Retained for 90 days unless required for an ongoing security investigation
  • Closed account data: After account closure, your personal data will be deleted or anonymised within 90 days, except for records that must be retained longer in accordance with the legal requirements stated above

Data Deletion Request: If you have closed your cm2 account and wish to request deletion of your personal data, you may do so by contacting support@cm2.casino. cm2 will process this request within 30 days, subject to mandatory data retention requirements under Malaysian law.

Your Rights as a Data Subject

As a cm2 player accessing the platform from Malaysia, you have certain rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). cm2 fully respects and facilitates the exercise of these rights.

Your Privacy Rights at cm2

As a cm2 player, you have full control over your personal data. Find out what you are entitled to do.

Right of Access

You have the right to request a copy of all personal data cm2 holds about you. cm2 will provide a comprehensive data report within 30 days of receiving your request, in a clear and easy-to-read format.

Right to Rectification

If you find that your personal data held by cm2 is inaccurate or incomplete, you have the right to request a correction. Contact our support team or update your details directly in your cm2 account profile settings.

Right to Erasure

You have the right to request deletion of your personal data when it is no longer needed for the purpose it was collected, or when you withdraw your consent. Such requests will be processed subject to mandatory legal retention requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, cm2 will cease processing your data for that purpose immediately.

Right to Restrict Processing

In certain circumstances – such as when you are disputing the accuracy of your data – you may request that cm2 restrict the processing of your data. During this period, cm2 will only store your data without processing it for any other purpose.

Right to Data Portability

You have the right to receive the personal data you have provided to cm2 in a structured, machine-readable format. This right allows you to transfer your data to another platform should you choose to do so.

To exercise any of the rights above, contact the cm2 Privacy Officer at support@cm2.casino with the email subject line "Privacy Rights Request". cm2 will respond within 30 business days.

Cookies & Tracking Technologies

The cm2 platform uses cookies and similar tracking technologies to enhance your experience, maintain account security, and understand how players use our platform. Cookies are small files stored on your device when you visit a website — they allow the cm2 platform to "remember" certain things about your session and preferences.

Cm2 uses three main categories of cookies:

You can manage your cookie settings through your web browser at any time. However, disabling all cookies may affect the functionality of the cm2 platform.

Protection of Children's Data

The cm2 platform is intended solely for individuals aged 18 and above. cm2 does not knowingly collect or process personal data from individuals under the age of 18.

If cm2 discovers that personal data belonging to a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered an account with cm2 without authorization should contact us immediately at support@cm2.casino so we can take appropriate action.

Child protection is a priority at cm2. We use age verification systems during registration and may request additional proof of identity at any time. Any account confirmed to belong to an individual under 18 years of age will be closed immediately.

Amendments to This Privacy Policy

Cm2 reserves the right to update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable law, or feedback from our player community. Any amendments will be reflected in a new "last updated" date at the top of this page.

For significant changes to how we use or share your personal data, cm2 will notify you through:

  • A prominent notification within the cm2 platform during your next login session
  • An email to your registered email address summarising the key changes
  • Announcement banner on the cm2.casino homepage

Your continued use of the cm2 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes come into effect.

Last updated date of this Privacy Policy: January 2026.

Contact the cm2 Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how cm2 handles your personal data, please reach out to the cm2 Privacy Officer through the following channels:

  • Email: support@cm2.casino (with the subject line "Privacy Enquiry")
  • Live Chat: Available 24/7 via the cm2 platform — for urgent privacy enquiries
  • Response time: cm2 will respond to all privacy enquiries within 30 business days of receipt

For formal complaints regarding data processing that does not comply with Malaysia's PDPA, you also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Why Your Privacy Is Safe with cm2

Six concrete commitments from cm2 to protect the data and privacy of every Malaysian player.

Industry-Grade Encryption

All your personal and financial data at cm2 is protected with 256-bit SSL encryption in transit, and data-at-rest encryption for all sensitive information stored in our systems. These standards are on par with those used by Malaysia's leading financial institutions.

No Player Data Sales

Cm2 has never and will never sell, rent, or trade players' personal data to any third party for marketing purposes. Your data is not a cm2 business commodity – it is information entrusted to us, and we take that trust seriously.

Malaysia PDPA Compliance

All of cm2's data management practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally enforceable rights over your personal data on the cm2 platform.

Full Control in Your Hands

You can access, correct, request deletion of, or export your data at any time by contacting the cm2 privacy team. We treat all such requests seriously and process them within a reasonable timeframe, with no hidden fees.

Data Minimisation Principle

Cm2 only collects data that is genuinely necessary to deliver our services. We do not collect data on the basis that it "might come in handy someday" — every data point we retain has a specific, justified purpose under the PDPA.

Rapid Breach Notification

In the event of any security breach affecting your data, cm2 is committed to notifying you within the timeframe stipulated by law, with a clear explanation of what occurred and the steps we are taking to protect you.

How cm2 Uses Your Data to Enhance Your Gaming Experience

One aspect of data use that cm2 players sometimes want to know more about is how platform data analytics are used to improve the overall experience. The answer is straightforward – cm2 analyses aggregate usage patterns (not individual data) to understand which parts of the platform are most popular, where players frequently encounter technical issues, and what new features would deliver the most value to the Malaysian player community.

For example, when cm2 found that many Malaysian players were using the platform primarily to follow Malaysia Super League matches and BWF badminton, we invested in improving the quality and depth of markets for both sports, ensured live streaming was available for more matches, and optimised the in-play market interface for ongoing games. Product decisions like these come directly from usage data analysis – and they benefit every cm2 player.

For players who are more privacy-conscious, cm2 provides the option to restrict the use of your data for personalised marketing purposes while still allowing its use for core platform operational needs. You can manage these preferences in your account's privacy settings or by contacting the cm2 support team.

Financial Transaction Security at cm2

One of the top concerns players have when using an online entertainment platform is the security of their financial information. At cm2, we understand that your trust in the safety of your payment details is the foundation of our entire relationship.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u or CIMB Clicks, your payment details are never stored directly in cm2's systems. Instead, transactions are handled entirely by certified and fully secured payment gateways. cm2 only receives confirmation that the transaction was successful and the amount processed – not your account number, password, or digital wallet PIN.

This means that even in the event of a security incident involving cm2's systems, your sensitive payment details remain safe because they are never stored on our platform. This approach — known as payment tokenization — is an industry best practice that cm2 has had in place since day one of our operations.

As an additional layer of protection, cm2 monitors all transaction patterns to detect unusual activity. If our system flags a deposit or withdrawal attempt that appears suspicious — for example, an attempt from an IP address different from the one you normally use, or an amount that is significantly out of line with your usual pattern — your account may be temporarily suspended and you will be contacted for verification. This may occasionally cause minor delays, but it is part of an active protection system that helps keep your funds secure at cm2.

Personal Data in the Context of cm2 Responsible Gaming

One aspect of data use at cm2 that may differ from what you might initially expect is its role in supporting responsible gaming. cm2 uses analysis of gameplay activity data — not to exploit players, but to identify patterns that may indicate problem gambling and to offer appropriate support to players who may need it.

At cm2, using data to support responsible gambling is part of our commitment to player wellbeing — and it is a use of data that our players generally understand and appreciate. If your activity patterns suggest a potential concern, cm2 may proactively reach out to offer information about available self-management tools or relevant support resources. You are always free to disregard such communications if you feel they do not apply to your situation.

FAQ – cm2 Privacy Policy

No. cm2 does not sell, rent, or share players' personal data with any third-party marketing companies or advertisers. If you receive marketing communications from cm2, it is because you consented to receive them during registration or gave your consent at a later stage. You can unsubscribe from cm2 marketing communications at any time through your account settings or by clicking the "unsubscribe" link in any marketing email from us.

cm2 does not store sensitive details of your bank account or digital wallet (such as full account numbers, PINs, or passwords) in our systems. All payment transactions are handled by certified payment gateways that operate separately from the cm2 platform. We only receive a verification token confirming that a transaction was successful — not the actual financial information. This means that even in the highly unlikely event of a platform security breach, your payment details remain unexposed.

Yes. Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to request a copy of all personal data cm2 holds about you. Send your request to support@cm2.casino with the subject line "Data Access Request". cm2 will process your request within 30 working days and provide a data report in a clear, easy-to-understand format. No charges apply for reasonable data access requests.

When your cm2 account is closed, your personal data will be anonymised or deleted within 90 days, except for records that must be retained longer under legal requirements – primarily financial transaction records, which must be kept for 7 years under Malaysian financial law, and betting records for 5 years for audit and compliance purposes. Data retained during these mandatory periods is only accessed when required for legal compliance purposes.

cm2 uses data analytics and certain automated tools for security purposes (fraud detection), responsible gaming (identifying problematic play patterns), and platform improvement (understanding how players use different features). This analysis is conducted at an aggregate level for product improvements, and at an individual level specifically for security and responsible gaming purposes. cm2 does not use automated profiling to make legal decisions or other decisions that significantly affect you without human review.

There are three easy ways to opt out of marketing communications from cm2: (1) Click the "Unsubscribe" link found at the bottom of any marketing email you receive from cm2; (2) Log in to your cm2 account, go to "Notifications" or "Communication Preferences" settings, and disable marketing communication options; or (3) Contact the cm2 support team via live chat or email support@cm2.casino and request to be removed from our promotional mailing list. Note: Even if you opt out of marketing communications, cm2 will still send essential service communications such as account security notifications, policy updates, and transaction information.

Your Data is Safe, Your cm2 Experience Awaits

With cm2's full commitment to data protection and the privacy of Malaysian players, you can enjoy everything our platform has to offer — Sports Betting on the Malaysia Super League and EPL, Live Casino, jackpot slots, and more than 30 entertainment categories — with complete confidence that your information is always protected.

Register Free Now Login
Malaysia PDPA
256-bit SSL
No Data Sales
24/7 Support
Full Control
Licensed & Legitimate
Contact the cm2 Privacy Officer

For any enquiries, data access requests, or privacy-related complaints, please contact the cm2 Privacy Officer at support@cm2.casino with the subject line "Privacy Enquiry". cm2 is committed to responding to all privacy enquiries within 30 business days.

Please also read cm2 Terms & Conditions and page Responsible Gaming for a more complete understanding of how we operate and protect Malaysian players.

Secure Payment Methods at cm2

Deposits and withdrawals using trusted Malaysian local payment methods — all transactions are fully protected.

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow FPX / Maybank2u CIMB Clicks

All transactions are protected by 256-bit SSL. Payment details are not stored in cm2's systems. Minimum deposit RM20.

Bahasa Melayu