CM2 Slot Privacy Policy — Data Protection for Malaysian Players

Introduction & Scope of Privacy Policy

This Privacy Policy describes the data collection, use, disclosure, and personal data protection practices of CM2 Slot ("we", "platform") operating under the domain cm2slot.click. It applies to all users who visit our website, register an account, use the mobile app, or interact with any of the services we provide.

We understand that when you register at CM2 Slot and carry out activities such as depositing via Touch 'n Go eWallet or GrabPay, playing baccarat at the live casino, or placing bets on Malaysia Super League matches, you are entrusting us with valuable personal information. We take that trust very seriously.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We are committed to ensuring your personal data is handled in a lawful, fair, and transparent manner.

Types of Personal Data We Collect

Cm2 slot only collects data necessary for platform operations and regulatory compliance. The following are the categories of data we collect:

• Identity Data: Full name, national identity card (NRIC) or passport number, date of birth, and gender — collected during the identity verification (KYC) process.
• Contact Data: An active Malaysian phone number, email address, and mailing address where applicable.
• Financial Data: eWallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for withdrawals via DuitNow or FPX, and a full record of all deposit and withdrawal transactions on the platform.
• Game Activity Data: Betting history, games played (slots, live casino, Sports Betting, poker, roulette), wins, losses and session records.
• Technical Data: IP address, device type, operating system, browser type, login sessions, and platform usage information.
• Communication Data: Records of conversations with our customer support team via live chat, WhatsApp, or email, retained for service quality purposes.
• Cookie Data: Preference settings, navigation patterns, and session data collected via cookies and tracking technologies as further described in Section 7.

We no collect sensitive data such as health information, religious beliefs, or political views unless explicitly stated and with your consent.

How We Collect Your Personal Data

Your personal data is collected through various channels during your interactions with the platform CM2 Slot:

• Account Registration: When you register a new account, you provide your name, phone number, and other basic information directly.
• Identity Verification (KYC): When you request a withdrawal above a certain threshold, or at the request of our compliance team, you may be asked to upload an identity document such as your MyKad or passport.
• Financial Transactions: Every time you make a deposit using Touch 'n Go, GrabPay, DuitNow, or any other method, the transaction data is automatically recorded by our system.
• Platform Usage: Your activity on the platform — games played, bets placed, time spent and navigation patterns — is recorded automatically.
• Communications with Us: When you contact customer support via live chat, email or WhatsApp, the information you provide during that conversation is collected.
• Cookies and Similar Technologies: Your web browser and mobile application may automatically collect technical data through the cookies and tracking technologies we use.
• Third Parties: In certain cases, we may receive information from identity verification providers, payment providers or our game partners for verification and security purposes.

How We Use Your Personal Data

CM2 Slot uses your personal data solely for legitimate and necessary purposes in the operation of the platform. The following outlines the primary purposes for which your data is used:

• Account Management: Processing registrations, verifying your identity, managing account balances, and ensuring secure login.
• Transaction Processing: Processing deposits from your Malaysian eWallet, verifying transactions, and processing winnings withdrawals to your registered bank account or eWallet.
• Gaming Operations: Running slots, live casino, Sports Betting and other games of your choice, and maintaining accurate records for every activity.
• Customer Support: Providing technical assistance, resolving complaints, and responding to your enquiries promptly and accurately.
• Legal Compliance: Fulfilling compliance obligations including anti-money laundering (AML), Know Your Customer (KYC) and reporting requirements to the relevant authorities.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, system abuse, collusion, and the use of multiple accounts.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need support.
• Service Communications: Sending important notifications relating to your account, transactions, policy updates and promotional information that you have agreed to receive.
• Platform Improvements: Analyses usage patterns in aggregate (without identifying individuals) to improve user experience, platform performance and new features.

Data Sharing with Third Parties

Cm2 slot does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where data sharing is necessary for platform operations:

• Payment Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the necessary transaction information is shared with the relevant payment provider to process your payment.
• Game Providers: Our gaming partners such as Evolution Gaming, Pragmatic Play, and SA Gaming may receive session data required to run the games. These providers are bound by strict confidentiality agreements.
• Identity Verification Provider: For the KYC process, we may engage recognised third-party services to verify your identity documents.
• Authorities and Regulatory Bodies: We are required by law to disclose certain information to Malaysian authorities or international regulatory bodies upon lawful request.
• Fraud Investigation: In cases of suspected fraud or money laundering, we may share the necessary information with law enforcement agencies.
• Business Transfers: If cm2 slot is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third parties that receive your data are bound by data protection agreements and are permitted to use that data only for the specified purposes.

Data Security & Protection Measures

Cm2 slot continually invests in security infrastructure to ensure your data is protected at all times. The following are the technical and organisational measures we have in place:

• 256-bit SSL Encryption: All communications between your device and CM2 Slot's servers are encrypted using TLS protocol with 256-bit keys — the same standard used by Malaysia's major banks, including Maybank and CIMB.
• Stored Data Encryption: Sensitive personal data stored in our database is encrypted using industry standards to ensure it remains unreadable even in the event of unauthorised access.
• Two-Factor Authentication (2FA): CM2 Slot accounts use two-factor authentication via your Malaysian phone number as an added layer of security during login and important transactions.
• Internal Access Controls: Only staff with a legitimate business need are granted access to members' personal data, and every access is audited and recorded.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect suspicious activity, unauthorised access attempts, and cybersecurity threats.
• Regular Security Audits: CM2 Slot conducts independent third-party security audits on a regular basis to identify and address system vulnerabilities before they can be exploited.
• Incident Response Plan: We have a clear incident response procedure in place. Should a data breach occur that affects your information, we will notify you within 72 hours of becoming aware of the incident.

While we take all reasonable precautions, no digital security system is entirely without risk. You are also responsible for keeping your account password confidential and not sharing your login credentials with anyone.

Cookies & Tracking Technologies

Cm2 slot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as maintaining your login session, remembering your account balance and enabling deposit transactions to process securely. Without them, the platform cannot function properly.
• Preference Cookies (Optional): Saving your preferences such as interface language, favourite chip denominations, and Live Casino table display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand how Malaysian players use the platform — which pages are visited most, which games are most popular, and where users encounter difficulties. This data is used in aggregate form only to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, identify logins from new devices, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For the cm2 slot mobile app, you can manage tracking permissions through your Android or iOS device settings.

Data Retention & Deletion

Cm2 slot retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, and for as long as required under Malaysian law.

• Active Account Data: For as long as your account remains active on cm2 slot, your personal data and activity records are retained to enable full platform functionality.
• After Account Closure: When your account is closed at your request, we retain the necessary records for a minimum of 7 years as required by legal compliance and anti-money laundering obligations.
• Financial Transaction Records: All transaction records — deposits via Touch 'n Go or FPX, withdrawals to bank accounts, wins and losses — are retained for a minimum of 7 years for audit and compliance purposes.
• Communication Data: Customer support conversation records are retained for 3 years for service quality and dispute resolution purposes.
• Analytics & Log Data: Technical logs and anonymised analytics data are retained for 2 years for security and system improvement purposes.

Once the designated retention period has lapsed, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process follows industry-standard procedures to ensure the data is unrecoverable.

Your Rights Regarding Personal Data

As a member CM2 Slot and under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a complete request.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. However, we may not be able to fulfil this request in full if the data is required for legal compliance or the resolution of outstanding disputes.
• Right to Withdraw Consent: Where data processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to your withdrawal.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes. Once you object, we will cease such processing immediately.
• Right to Data Portability: You may request your data in a structured, machine-readable format for the purpose of transferring it to another service provider.

To exercise any of the rights above, please contact our privacy team at support@cm2slot.click with the subject line "Privacy Request" along with your account details. We will verify your identity before processing any data-related request to ensure the security of your account.

Child Data Protection

CM2 Slot is a platform specifically intended for individuals who are 18 years of age and above only. We do not knowingly collect or process personal data from children or minors under the age of 18.

We enforce age verification during the registration process and conduct periodic checks to identify any accounts that may have been registered by underage individuals. Should we discover that personal data of a minor has been collected unintentionally, we will take immediate steps to delete that data and close the account in question.

Links to Third-Party Websites

Platform CM2 Slot may contain links to or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow) and game providers. This Privacy Policy applies only to the CM2 Slot platform itself.

When you click on links to third-party websites or services, or when you use a Malaysian eWallet to make a deposit, you are entering a third-party environment that has its own privacy policy. We encourage you to read the privacy policy of any third-party service you use alongside the CM2 Slot platform.

Cm2 slot is not responsible for the privacy practices or content of third-party websites, even where links to those sites are provided on our platform.

Privacy Policy Amendments

CM2 Slot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments.

• Major amendments that materially affect your privacy rights will be communicated via your registered email address and through in-platform notifications at least 14 days before in effect.
• Minor amendments such as spelling corrections or clarification of terms may take effect immediately without prior notice.
• The "Last Updated" date at the top of this page will always reflect the date of the most recent version of this Privacy Policy.
• Continued use of the CM2 Slot platform after any amendment takes effect constitutes your acceptance of the revised policy.

We encourage you to review this page periodically. If you disagree with any amendments made, please stop using the platform and contact us to close your account.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cm2 slot handles your personal data, we welcome your feedback.

• Privacy Email: support@cm2slot.click — please use the subject line "Privacy Enquiry" or "Privacy Request" for faster handling
• Live Chat: Available 24 hours a day within the platform — for general privacy-related enquiries
• WhatsApp: For a more detailed discussion about your personal data — contact us through the platform for the current number

We are committed to responding to all privacy-related enquiries within 5 working days. For requests requiring identity verification — such as data access, correction or deletion requests — the resolution period is up to 30 days as stipulated by Malaysia's PDPA.

Our Bahasa Malaysia-speaking cm2 slot privacy team is ready to help you understand your rights and ensure your personal data is handled properly and responsibly.