CMB8 takes the privacy of every user seriously. This document clearly explains how we collect, use, protect, and manage your personal data when you use the CMB8 platform.
CMB8 is an online casino and betting platform that operates with full responsibility towards the privacy of its users. We understand that your trust in us begins with how we handle the personal information you share with us.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. Every process we carry out on your data has a clear, lawful, and transparent purpose — no data is collected without reason, and no data is shared without your consent.
As a platform serving over 500,000 Malaysian users, cmb8 continuously invests in data security infrastructure, staff training, and internal audit systems to keep your personal data safe at all times. We never sell, rent, or transfer your personal data to third parties for marketing purposes.
CMB8 only collects personal data that is genuinely necessary to provide you with a quality, secure, and legally compliant service. The following are the types of data we collect:
| Data Category | Type of Information | Purpose of Collection |
|---|---|---|
| Identification Information | Full name, date of birth, identity card / passport number | Identity verification (KYC), legal compliance |
| Contact Information | Email address, phone number, residential address | Account communications, security notifications |
| Financial Data | Bank account details, e-wallets, transaction history | Deposit & withdrawal processing, fraud prevention |
| Technical Data | IP address, device type, web browser, operating system | Account security, unauthorized access detection |
| Usage Data | Game history, betting habits, game preferences | Enhanced user experience, responsible gambling |
| Cookie Data | Session cookies, preference cookies, analytics cookies | Platform functionality, performance improvements |
We do not collect sensitive information such as biometric data, medical records, or religious information unless required by law and with your prior consent.
The personal data we collect is used responsibly and solely for the following purposes:
CMB8 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, in certain limited and legitimate circumstances, your data may be shared with the following parties:
All third parties that receive your data are bound by confidentiality and data protection obligations that meet or exceed cmb8's own standards. We conduct thorough due diligence before engaging any service provider that may process our users' data.
CMB8 invests seriously in data security infrastructure to protect your personal and financial information. The following are the layers of protection we employ:
CMB8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality or your experience on the CMB8 platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and CMB8's policy, you have the following rights regarding your personal data:
CMB8 retains your personal data for as long as your account is active and for the period required after account closure to fulfil relevant legal and business obligations.
Once the designated retention period has elapsed, your data will be securely deleted using methods that ensure it cannot be recovered or reused.
CMB8 reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, technological developments, or changes in our business practices. The date of the most recent update will always be displayed at the top of this document.
For significant changes, CMB8 will notify you via an in-platform notification or your registered email before the changes take effect. Continued use of the CMB8 platform after changes take effect will be considered your acceptance of the updated policy.
We encourage you to review this page regularly to stay informed about how we protect your personal data.
If you have any questions, concerns, or wish to submit a request regarding your personal data, the cmb8 Data Protection Officer (DPO) team is here to assist you:
For data access, correction, or deletion requests, please include your cmb8 account number and a copy of a valid identification document so we can process your request efficiently and securely.
Under Malaysia's PDPA, CMB8 ensures you have clear and enforceable rights over your personal data.
You have the right to request a copy of all personal data we hold about you. We will provide a full report within 14 business days.
If any of your personal data is inaccurate or outdated, you have the right to request immediate correction through your account settings or via cmb8 support.
You may request the deletion of your personal data upon account closure, subject to applicable legal retention obligations.
You have the right to object to the processing of your personal data for marketing purposes at any time, without needing to provide a reason.
You may request your personal data in a machine-readable format for transfer to another platform of your choice.
In certain circumstances, you have the right to request that we restrict the processing of your data while a dispute or review is being resolved.
All data transmitted through the cmb8 platform is protected with 256-bit SSL encryption — the same security technology used by Malaysia's largest banks and financial institutions.
CMB8 fully complies with Malaysia's Personal Data Protection Act 2010. We have a dedicated Data Protection Officer (DPO) to ensure ongoing compliance.
CMB8 only collects data that is strictly necessary. We do not collect real-time location data, the content of private communications, or information irrelevant to our services.
In the event of any data security incident, cmb8 is committed to notifying affected users within 72 hours, in line with international best practices.
Through your cmb8 account settings, you can manage communication preferences, review stored data, download your account history, and initiate account closure at any time.
Every service provider with potential access to your data undergoes rigorous security vetting and signs a binding data processing agreement prior to engagement.