Cm2 Privacy Policy – Player Data Protection

Cm2 is committed to protecting the privacy and personal data of every Malaysian player. Find out how we collect, use, and safeguard your information transparently and responsibly.

Updated: January 2026 SSL 256-bit Data Encrypted & Protected

Cm2's Privacy Commitment to Players

Your privacy is more than a legal obligation — it is a moral responsibility of cm2 as the platform you trust.

High-Level Data Encryption

All your personal data and financial transactions are encrypted using SSL 256-bit technology — the same security standard used by leading banking institutions worldwide.

No Sale of Personal Data

Cm2 has never and will never sell, rent, or distribute players' personal data to third parties for marketing purposes without your explicit consent.

Full Control in Your Hands

You have the right to access, correct, and request deletion of your personal data at any time through your account settings or by contacting the cm2 support team.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, strict access controls, and round-the-clock continuous security monitoring.

PDPA Legal Compliance

The cm2 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are fully respected at all times.

Flexible Communication Options

You can easily manage your marketing communication preferences — including the option to unsubscribe from promotional emails and in-account notifications within your cm2 account.

Important Note: By using the cm2 platform, you agree to the collection and use of information as described in this Privacy Policy. Please read this document carefully in its entirety before registering an account.

1 Introduction

This Privacy Policy explains how cm2 ("we", "Platform", "cm2.run") collects, uses, stores, and protects your personal data when you use our website and services. It also outlines your rights regarding that data and how you may exercise them.

Cm2 treats every player's privacy as a top priority. We believe that transparency in data management is the foundation of trust between a platform and its users. That is why we have written this Privacy Policy in clear, straightforward language for Malaysian players.

This Privacy Policy applies to all users who register an account on cm2.run, browse our website, use any games or services provided, or interact with any features of our platform. By using cm2 services, you acknowledge that you have read and understood this Privacy Policy.

2 Information We Collect

Cm2 collects several categories of information to ensure our services function properly, remain secure, and are tailored to your needs as a Malaysian player.

A) Information You Provide Directly

  • Full name, date of birth and gender upon account registration.
  • Email address and phone number for communication and verification.
  • KYC information including copies of identity cards (MyKad), passports or other identity verification documents.
  • Bank account details, e-wallet numbers or other payment information for deposit and withdrawal purposes.
  • Information you share when contacting our customer support team.

B) Information Collected Automatically

  • IP address, device type, operating system, and browser type that you use.
  • Activity log data including the date, time, and duration of your login sessions.
  • Game records, betting history, deposits and withdrawals in your account.
  • Cookie data and session identifiers to retain your preferences and settings.
  • General geolocation information (country/region level) for security and compliance purposes.

C) Information from Third Parties

  • Identity verification via third-party KYC services that we use.
  • Payment verification details from payment processors and financial institutions.
  • Blacklist screening data to prevent fraud and money laundering.

We only collect information necessary to provide our services, fulfil legal requirements, and protect platform security. We do not collect information irrelevant to those purposes.

3 How We Use Your Data

The data we collect is used responsibly for legitimate purposes only. The table below shows the purposes of data use and their corresponding legal basis.

Purpose of Use Data Type Legal Basis
Registration & account management Name, email, phone Contract performance
Identity verification (KYC) Identity document Legal obligations
Deposit & withdrawal processing Payment information Contract performance
Fraud prevention & security IP, activity logs, transaction records Legitimate interests of cm2
Customer Support Communication records, account history Contract performance
Promotional communications & bonuses Email, phone Your consent
Platform analytics & improvements Anonymous usage data Legitimate interests of cm2
Regulatory compliance & reporting Transaction records, identity Legal obligations

Cm2 will not use your data for any purpose beyond those stated above without obtaining your consent first, or as required by applicable law.

4 Sharing Information with Third Parties

Cm2 does not sell, rent, or distribute your personal data to third parties for their own marketing purposes. However, we may share your information with the following parties under limited and controlled circumstances:

  • KYC service providers: To verify your identity in order to meet compliance requirements.
  • Payment processors and financial institutions: To enable deposits and withdrawals to be processed securely.
  • Third-party game providers: Minimum data required to deliver the gaming experience within the cm2 lobby.
  • Regulatory authorities and law enforcement agencies: When required by Malaysian law or a valid court order.
  • Auditors and professional consultants: Bound by strict confidentiality obligations.

All third parties we work with are required to meet data security standards equal to or higher than our own. We ensure that appropriate data protection agreements are signed before any data sharing takes place.

Important: If cm2 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be informed via a clear notice before your data becomes subject to a different privacy policy.

5 Your Personal Data Security

Protecting your personal data is cm2's top priority. We implement comprehensive technical and organisational security measures to prevent unauthorised access, disclosure, alteration or destruction of your data.

The security measures we implement include:

  • 256-bit SSL Encryption for all data transmitted between your browser and cm2 servers.
  • Hashed password storage using irreversible cryptographic algorithms.
  • Role-based access control (RBAC) which ensures only authorised personnel can access sensitive data.
  • 24/7 security monitoring by sophisticated intrusion detection systems.
  • Two-factor authentication (2FA) available for all player accounts for added security.
  • Regular security audits by independent cybersecurity experts to identify and address vulnerabilities.
  • Encrypted data backups on a regular basis to ensure data recovery in the event of a technical incident.

In the event of any data breach affecting your information, cm2 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

6 Cookies and Tracking Technologies

Cm2 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how players use our services, and deliver more relevant content.

Types of Cookies We Use

  • Essential Cookies: Required for essential platform functions such as login sessions, security, and navigation. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how players use the website to help us improve the user experience.
  • Functional Cookies: Remembering your preferences and settings such as language, display settings and game preferences.
  • Marketing Cookies: Used to display relevant offers and promotions to you. These cookies are only active with your consent.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect certain functions of the cm2 platform. For more information on managing cookies, refer to your browser's help section.

7 Your Rights Regarding Personal Data

As a cm2 player and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

Your Rights as a cm2 Player

Malaysia's PDPA provides you with comprehensive protection. The following are rights you may exercise at any time.

Right of Access

You have the right to request a copy of the personal data we hold about you at any time by submitting a written request to our team.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction through your account settings or by contacting cm2 customer support.

Right to Erasure

You may request deletion of your personal data when it is no longer required, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any justification.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider of your choice.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time without affecting core services.

To exercise any of the above rights, contact the cm2 Privacy team at [email protected] or via live chat on the platform.

8 Data Retention and Deletion

Cm2 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

  • Active account data: Retained for the duration your account remains active on the cm2 platform.
  • KYC and compliance data: Retained for a minimum of 5 years after account closure in line with anti-money laundering (AML) legal requirements.
  • Financial transaction records: Retained for 7 years in accordance with financial and tax reporting requirements.
  • Customer support communication logs: Retained for 2 years from the date of last interaction.
  • Security log data: Retained for 12 months for security incident investigation purposes if required.
  • Marketing data (with consent): Retained until you withdraw your consent.

Once the specified retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to any individual. Deletion is carried out using methods that meet industry security standards to ensure data cannot be recovered.

9 Children's Privacy

The cm2 platform is restricted to individuals aged 18 and above only. We do not intentionally collect or process personal data from children under the age of 18.

If we become aware that personal data of an underage child has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account.

If you believe your underage child has registered an account at cm2, please contact us immediately at [email protected] so that we can take immediate action.

10 Links to Other Platforms

The cm2 website may contain links to third-party game provider platforms or services integrated with our platform. This Privacy Policy applies only to the cm2.run platform and does not cover the privacy practices of those other platforms.

Cm2 is not responsible for the content, privacy policies, or security practices of third-party platforms. We encourage you to read the privacy policy of each platform you visit separately before providing any personal information.

11 Changes to This Privacy Policy

Cm2 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technology, legal requirements, or other operational reasons. We are committed to informing you of any material changes.

When we make significant changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displaying a clear notice on the platform's home page for at least 7 days before the changes take effect.
  • Sending a notification to your registered email address for critically important changes.

Your continued use of the cm2 platform after those changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account and request data deletion.

12 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, the cm2 Privacy team is ready to assist you through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the cm2.run platform
  • Response Time: Within 3 business days for data privacy-related inquiries

For more information about your rights under Malaysia's PDPA, you may refer to the official website of the Department of Personal Data Protection (JPDP) Malaysia. To understand your responsibilities and ours in the context of the gaming platform, please also read Terms and Conditions as well as the guidelines Responsible Gaming ours.

This Privacy Policy is effective from January 2026 and supersedes all previous versions.

Your Data is Safe. Your Game is Secure.

Create your cm2 account today and enjoy a safe, transparent, and exciting gaming experience with Malaysia's fast-growing player community.

Bahasa Melayu