CM2 Slot Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy sets out the commitment of cm2 slot regarding the protection of personal information for all players using our platform at cm2slot.best. This document outlines the data collection, usage, storage and protection practices we follow in our day-to-day platform operations.

By registering an account or continuing to use our services cm2 slot, you agree that your personal data may be collected and used in the manner described in this Privacy Policy. We encourage you to read this document in full to understand your rights and how we handle your data.

This Privacy Policy applies to all registered players in Malaysia – whether you play premium slots, Live Casino, Malaysia Super League or EPL Sports Betting, number lottery, or any other game available on the platform cm2 slot. It also applies to all communication channels between you and our team, including live chat, email, and our internal support system.

CM2 Slot collects personal data through several channels – directly from you during account registration and platform use, as well as automatically through industry-standard tracking technologies. Below is a full breakdown of the data we collect:

2.1 Data You Provide Directly

When you register an account at cm2 slot, you provide the basic information needed to create and manage your account. This includes your full name as shown on your MyKad or passport, an active Malaysian phone number for OTP verification, a valid email address, your date of birth for age verification, and a password of your own choosing.

2.2 Financial Transaction Data

When you make a deposit using DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX (Maybank2u, CIMB Clicks), we record transaction details for security and compliance purposes. This includes the amount, timestamp, payment method and transaction reference number. We do not directly store your PIN, e-wallet password or bank account credentials.

2.3 Technical & Device Data

Our system automatically collects certain technical information when you access the platform cm2 slot, including your IP address, device and browser type, operating system, screen resolution and gaming session data. This data is used solely for security purposes, fraud detection and platform technical improvements.

2.4 Identity Verification (KYC) Data

For withdrawals exceeding certain limits, or when required by compliance obligations, CM2 Slot may request identity verification documents such as a copy of your valid MyKad or passport and proof of current address. These documents are transmitted through secure, encrypted channels, stored with the highest level of security protection, and are not shared with any external party except as required by law.

The personal data we collect is used only for specific, legitimate purposes. Below are the primary ways your data is used by cm2 slot:

3.1 Account Management & Services

• Creating and managing your playing account on the cm2 slot platform.
• Verifying your identity during login and the KYC process.
• Processing deposits and withdrawals through your preferred Malaysian payment method.
• Managing the VIP Rewards programme and automatically calculating your VIP points.
• Sending important notifications regarding your account, transactions and VIP upgrades.

3.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and unauthorised access.
• Monitoring account activity for unusual behaviour to protect your funds and information.
• To verify that players meet the minimum age requirement (18 years and above).
• Complying with KYC requirements and anti-money laundering legislation.

3.3 Service Improvement

Aggregated usage data (non-personal) is used to understand how Malaysian players interact with the platform cm2 slot, which games are most popular at any given time, and which areas of the platform need improvement in terms of user experience. This helps us deliver a better gaming experience for all players.

3.4 Service Communications

We use your contact information to send important account-related communications such as deposit confirmations, withdrawal notifications, security alerts, and policy update notices. For promotional communications such as bonus offers and the latest promotions, you may opt out of receiving these notifications through your account settings at any time.

CM2 Slot does not sell, rent, or trade players' personal data to third parties for their own marketing purposes – this is an absolute and unwavering commitment. However, there are limited situations where we need to share your data with certain parties in order for our services to function:

4.1 Trusted Service Providers

CM2 Slot works with a number of third-party service providers essential to platform operations — including payment processors for DuitNow, Touch 'n Go eWallet, GrabPay and FPX transactions, server and cloud infrastructure providers, and communication platforms for email and SMS. All such providers are bound by confidentiality agreements and are not permitted to use your data for their own purposes.

4.2 Legal Requirements

CM2 Slot may be required to disclose personal data to the relevant authorities when mandated by applicable law, a valid court order, or in the course of an official investigation into fraud or money laundering. In all such cases, we will disclose only the minimum data necessary and will notify you where permitted by law.

4.3 Game Providers

Certain game session data is shared with reputable game providers such as Pragmatic Play, PG Soft, and Habanero, solely to enable gameplay, resolve technical disputes, and verify game integrity. These providers do not receive your full personal identity information.

Protecting players' personal data is a technical priority that we invest significant resources in. Below are the layers of protection we apply to keep your data secure on the platform cm2 slot:

5.1 Encryption and Secure Infrastructure

All communications between your browser or mobile app and CM2 Slot's servers are encrypted using TLS 1.3 with AES 256-bit encryption. Data stored in our databases is also encrypted at rest using the same standard. Our servers are hosted in certified data centres with physical security, multi-layered access controls, and intrusion detection systems.

5.2 Staff Access Controls

Internal access to player data is strictly controlled using a least-privilege approach — each cm2 slot staff member can only access the data necessary to perform their specific job duties. All access is automatically logged, monitored by the security team, and regularly audited. Internal passwords are protected using one-way encryption that cannot be reversed.

5.3 Continuous Security Monitoring

• An intrusion detection system (IDS) monitors network traffic 24/7 to identify abnormal activity.
• Security testing and penetration testing are conducted regularly by independent third-party security experts.
• All system logs are retained and analysed to detect any unauthorised access.
• A clearly defined incident response procedure is in place to address any security breaches swiftly and effectively.

5.4 Response to a Data Breach

If CM2 Slot detects any security breach affecting players' personal data, we are committed to notifying affected players within 72 hours of confirming the incident — describing the nature of the data involved, the steps taken to address the situation, and what you can do to protect yourself.

CM2 Slot does not retain your personal data indefinitely. We apply different retention periods to different types of data, based on operational requirements and legal compliance obligations:

• Active account data: Retained for the duration of your active account plus 5 years after account closure, to meet audit and compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements.
• Support communication logs: Retained for 2 years from the date of communication for quality control and dispute resolution purposes.
• KYC Documents: Retained for 5 years after the business relationship ends, in accordance with KYC compliance requirements.
• Technical data and logs: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, data is securely deleted using an irreversible deletion method. You may request early deletion of data that is not subject to legal retention requirements by contacting customer support cm2 slot.

As a registered player cm2 slot, you have seven key rights in relation to your personal data. We fully respect and support the exercise of these rights:

CM2 Slot uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience.

8.1 Types of Cookies Used

• Essential cookies: Required for core platform functions such as maintaining your login session and language preferences. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance cookies: Collecting anonymous information about how you use the platform to help us identify areas for improvement – for example, page load times and technical errors.
• Functional cookies: Stores your preferences such as your chosen language and display settings to personalise your experience at CM2 Slot.
• Gaming session cookies: Used to ensure your gaming session data is properly preserved during an active session — essential for preventing progress loss due to connection interruptions.

8.2 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality of the platform cm2 slot. Instructions for managing cookies in popular browsers such as Chrome and Safari are available in each browser's settings menu. The CM2 Slot platform does not use third-party cookies for targeted advertising.

Cm2 slot strictly prohibits use of the platform by anyone under the age of 18. We do not knowingly collect or process personal data from minors. Should we discover that personal data of an underage individual has been collected without proper age verification, we will delete that data immediately and close the associated account.

If you are a parent or guardian who believes your child has accessed or registered an account at cm2 slot without your knowledge, please contact us immediately at support@cm2slot.best. We will take prompt action to address the situation, including account closure and the return of any associated funds. We also recommend installing parental control software on shared home devices to prevent unauthorized access.

CM2 Slot reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. We are committed to notifying you of any material changes.

When significant changes are made, we will notify active players via email and/or a prominent notice within the platform cm2 slot at least 14 days before the changes take effect. For minor updates that do not affect your fundamental rights, we will update this page with the latest revision date.

Continued use of the CM2 Slot platform after the effective date of any changes will be considered your acceptance of the revised Privacy Policy. If you do not agree with any changes, you may close your account before they take effect by contacting our customer support.

If you have any questions, concerns, or requests regarding your privacy and personal data protection at cm2 slot, our team is ready to assist you through multiple channels:

• Privacy Email: support@cm2slot.best – for official requests related to privacy rights, data access requests, or privacy complaints.
• Live Chat: Available 24/7 within the platform – for general privacy enquiries that require an immediate response.
• WhatsApp / Telegram VIP: Available via the support button in your account – for VIP Platinum members and above who require more personalised assistance.

All privacy-related communications are handled in Bahasa Melayu by staff trained in data protection matters. We are committed to responding to all privacy-related requests within 30 days of receipt, and within 72 hours for urgent security complaints.