cmc88 Privacy Policy

Introduction and Scope

This Privacy Policy applies to personal information processed through the cmc88 website and related account services. In this policy, “cmc88”, “we”, “our” and “us” refer to the platform operator, while “user”, “you” and “your” refer to any person who visits or uses cmc88.

By accessing cmc88 or providing personal information, you acknowledge that your information may be processed as described in this policy. This acknowledgement does not remove any privacy right available to you under applicable law. If you do not agree with the cmc88 Privacy Policy, you should stop using the platform and avoid providing further personal information.

cmc88 serves an adult audience and is not intended for anyone under 21. The platform may request evidence of identity and age to enforce this restriction. If cmc88 learns that personal information belongs to an underage person, the related account may be suspended and the information reviewed for secure deletion, subject to legal obligations.

Information cmc88 May Collect

cmc88 may collect information directly from users, automatically from their devices, or from service providers involved in identity and payment verification. The information collected depends on how an individual interacts with cmc88.

Account and identity information

• Legal name, date of birth, nationality, residential address and preferred language.
• Email address, username, encrypted password records and account security settings.
• Identity documentation, such as a MyKad or passport, where required for KYC review.
• Proof of address and information needed to establish ownership of a payment account.

Transaction and gameplay information

cmc88 may record MYR deposits, withdrawals, payment references, bonus activity, wagers, game outcomes, sports selections and account balance changes. This can include activity relating to slots, live dealer games, EPL markets, Liga Super Malaysia fixtures or UFC events. Such records help cmc88 maintain account histories, resolve disputes and identify unusual transactions.

Device and technical information

When a user visits cmc88, technical records may include an IP address, browser type, operating system, device identifier, preferred display settings, approximate location, session time and pages viewed. cmc88 may also receive security signals that indicate automated access, repeated login failures or potentially unauthorised account use.

How Personal Data Is Processed

cmc88 processes personal information only for defined operational, security, legal and service purposes. Depending on the circumstances, cmc88 may use information to:

• Create, maintain and authenticate a cmc88 account.
• Confirm identity, age and payment ownership through KYC procedures.
• Process MYR deposits and withdrawals through selected payment channels.
• Maintain accurate records of wagers, balances, promotions and bonus conditions.
• Respond to questions, complaints and account access requests.
• Detect fraud, bonus abuse, money laundering, collusion and security incidents.
• Apply deposit limits, cooling-off periods and self-exclusion instructions.
• Improve site navigation, mobile performance and service reliability.
• Meet record-keeping, dispute and legal compliance requirements.

cmc88 does not intend to use identity documents for unrelated advertising purposes. Where service messages are necessary for account security, a transaction or a material policy change, cmc88 may send those messages even if a user has declined optional promotional communications.

Legal Grounds and User Consent

The legal basis for cmc88 processing depends on the information, purpose and governing jurisdiction. Processing may be necessary to perform an agreement with the user, meet a legal or regulatory obligation, protect legitimate operational interests, prevent harm, or act on valid consent.

Where consent is the appropriate basis, cmc88 will seek a clear indication of agreement. A user may withdraw consent for future optional processing by contacting cmc88. Withdrawal does not invalidate processing that occurred before the request and may not affect information retained under a separate lawful obligation.

Legitimate interests may include platform security, fraud detection, service improvement and the defence of legal claims. cmc88 aims to balance those interests against the privacy expectations and rights of users. The platform does not claim that one legal basis automatically applies in every country.

KYC and Malaysian Payment Information

cmc88 may require KYC verification before processing a withdrawal or when transaction activity creates a security concern. Verification can involve checking a user’s identity document, residential address, age and ownership of the selected payment method.

When Malaysian users select Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow or FPX, cmc88 may process a transaction reference, account-holder name, payment status, amount and time. cmc88 should not require users to provide online banking passwords or one-time security codes. Users must never share those credentials with anyone claiming to represent cmc88.

For eligible cryptocurrency transactions involving BTC, ETH, USDT or LTC, cmc88 may record wallet addresses, transaction hashes, network details and the MYR-equivalent value at the time of processing. Public blockchain records may remain visible independently of cmc88 and cannot generally be erased from the relevant network.

Cookies and Similar Technologies

cmc88 may use cookies, local storage and similar technologies to support login sessions, remember display preferences, protect accounts and understand website performance. Some technologies are necessary for essential functions, while others may assist with aggregated service analysis.

Users can usually control cookies through their browser settings. Blocking essential cookies may prevent account login, payment navigation or other cmc88 functions from operating correctly. Browser controls do not necessarily remove information already stored in server-side security logs.

cmc88 does not authorise unrelated third parties to place tracking code merely for their own purposes. If the technology used by cmc88 changes materially, the Privacy Policy may be updated to explain the new processing clearly.

Disclosure to Service Providers

cmc88 may share limited personal information with carefully selected providers that perform services necessary to operate the platform. These may include payment processors, KYC verification services, hosting providers, cybersecurity specialists, customer support systems and professional advisers.

Providers should receive only the information reasonably required for their function and should be subject to confidentiality, security and data-use restrictions. cmc88 does not sell identity documents or payment records as a commercial product.

Information may also be disclosed when required by valid legal process, to investigate suspected fraud, to protect the safety of users, or to establish and defend legal rights. cmc88 may review the scope and legitimacy of a request before disclosure where legally permitted.

International Data Transfers

Because cmc88 operates in an international service environment, personal information may be processed outside Malaysia or outside the user’s usual location. Privacy laws and enforcement standards can differ between jurisdictions.

Where applicable, cmc88 seeks to use contractual, technical or organisational safeguards for international transfers. These safeguards may include data-processing terms, access controls, encryption and review of provider security practices. No transmission or storage system can be guaranteed to be completely secure.

International processing does not change the principle that information should be used only for stated purposes. Users may contact cmc88 for general information about the safeguards relevant to their records, subject to security and confidentiality limitations.

Data Retention and Security

cmc88 retains personal information for as long as reasonably necessary to provide services, maintain accurate transaction records, resolve complaints, enforce account restrictions and meet applicable legal requirements. Retention periods may differ according to the type of record.

For example, basic account records may be retained after closure where needed to enforce self-exclusion, prevent duplicate registrations or respond to a dispute. KYC and payment records may be held for a period required by applicable financial crime, licensing or record-keeping obligations. Data that is no longer required should be securely deleted or anonymised.

cmc88 uses measures intended to protect information from accidental loss, unauthorised access and improper alteration. These may include encryption in transit, restricted staff access, authentication controls, activity monitoring, secure backups and incident response procedures.

User Rights and Privacy Requests

Subject to applicable law and appropriate identity verification, users may have rights concerning their personal information. A request may involve:

• Asking whether cmc88 processes personal information about the user.
• Requesting access to a copy of eligible personal information.
• Correcting information that is inaccurate, incomplete or out of date.
• Requesting deletion where cmc88 has no continuing legal basis to retain the information.
• Objecting to, or seeking restriction of, certain forms of processing.
• Withdrawing consent for future optional promotional communications.

cmc88 may ask for information sufficient to confirm the requester’s identity before responding. This step protects account holders from unauthorised disclosure. Some requests may be limited where records must be retained for fraud prevention, self-exclusion enforcement, legal claims, payment disputes or another lawful purpose.

cmc88 aims to respond within a reasonable period. A complex or unusually broad request may require additional time, in which case the user should receive an appropriate update.

Responsible Gambling and Sensitive Decisions

cmc88 may analyse account activity to identify patterns associated with possible gambling harm, fraud or loss of control. Relevant information can include deposit frequency, rapid balance changes, repeated limit changes and contact with support. Such review supports responsible gambling interventions and account safety.

When a user requests a deposit limit, cooling-off period or self-exclusion, cmc88 may retain the instruction and identifying details needed to enforce it. This information may remain after account closure where retention is necessary to prevent an excluded user from opening another account.

cmc88 services are for eligible adults aged 21 and above only. Privacy rights must not be used to defeat age verification, an active self-exclusion or lawful security controls. Further information about limits and self-exclusion is available on the Responsible Gambling page.

Policy Changes and Contact Us

cmc88 may update this Privacy Policy when processing practices, technology, legal obligations or platform services change. The effective date shown at the top indicates the current version. Where a change is material, cmc88 may provide an additional notice through the website or an account communication.

Continued use after an update does not remove any consent requirement that may apply to new optional processing. Users should review the cmc88 Privacy Policy periodically and contact cmc88 if any provision is unclear.