Privacy Policy CMD368 – Player Data Protection and Privacy in Malaysia

1 Privacy Policy Introduction and Scope

Cmd368 values the privacy of every player who uses our platform. This Privacy Policy explains in detail how we collect, use, disclose, store, and protect your personal data when you register for and use cmd368 services.

This document applies to all users of the cmd368 platform, including website visitors, registered members, and any party that interacts with our services. By registering an account or continuing to use the cmd368 platform, you agree to the terms of this Privacy Policy.

2 Types of Personal Data We Collect

Cmd368 collects information necessary to provide a safe, regulated, and responsible service. The following are the categories of data we collect:

We only collect data that is strictly necessary to operate the platform securely and comply with relevant legal requirements. Data that is no longer needed will be deleted or anonymized in accordance with our data management procedures.

3 How We Use Your Data

The personal data you provide to cmd368 is used solely for legitimate purposes necessary to operate the platform. The following are the primary purposes:

• Identity verification and KYC — ensuring compliance with legal requirements and preventing fraudulent activity and money laundering.
• Financial transaction processing — processing deposits, withdrawals, and any payments related to your account.
• Account maintenance and security — protecting your account from unauthorised access and detecting suspicious activity.
• Customer support — providing effective assistance when you contact the cmd368 support team.
• Platform improvement — analysing usage data to improve the overall user experience and platform performance.
• Service communications — sending important account-related notifications, promotions you have opted in to receive, and policy updates.
• Legal compliance — fulfilling reporting obligations to relevant regulatory bodies and authorities as required by law.

4 Data Sharing with Third Parties

Cmd368 does not sell or disclose your personal data to third parties for marketing purposes. However, in certain circumstances, we may need to share information with the following parties:

• Payment service providers — financial institutions and payment processors required to process your deposits and withdrawals.
• Identity verification service providers — third-party KYC companies that assist us in verifying player identity in accordance with compliance requirements.
• Competent authorities — when required by court order, law, or direction from a legitimate regulatory authority.
• Technical service providers — companies providing infrastructure, cloud hosting, and cybersecurity services bound by strict confidentiality agreements.

All third parties we work with have undergone security assessments and are bound by data protection agreements that prevent them from using your information for any purpose other than what has been agreed.

5 Data Security and Protection Measures

Cmd368 takes the security of our players' data seriously. We employ multiple layers of technical and organisational security measures to ensure your data remains protected at all times:

• 256-bit SSL encryption for all data communications between your browser and our servers.
• At-rest encryption for all sensitive data stored in our databases.
• Intrusion detection system (IDS) and continuous 24/7 security monitoring.
• Role-based access controls — only staff who require access to specific data to carry out their duties are granted permission.
• Regular security audits by independent parties to identify and address any vulnerabilities.
• A comprehensive data incident response plan to address any data breach promptly.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. In the event of any data breach affecting you, we will notify you within the timeframe prescribed by legal requirements.

6 Data Retention Period

Cmd368 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable laws and compliance obligations:

• Active account data — retained for the duration your account is active and up to five years after account closure for compliance purposes.
• Financial transaction records — retained for a minimum of seven years in accordance with financial and AML legal requirements.
• Customer support communication log — retained for three years for reference and dispute resolution purposes.
• KYC Data — retained for the period specified by the relevant regulatory compliance requirements.

Upon expiry of the retention period, data will be securely deleted or anonymised using procedures that ensure the data can no longer be linked to you as an individual.

7 Cookies and Tracking Technologies

Cmd368 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login and navigation. These cookies cannot be disabled.
• Performance Cookies — collecting analytical data on how you use the platform to help us improve the user experience.
• Functional Cookies — saving your preferences such as language and display settings for a more personalised experience.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the cmd368 platform.

8 Your Rights Over Personal Data

As a cmd368 player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the cmd368 customer support team via live chat or our support email. We will process your request within 30 business days of receipt.

9 Cross-Border Data Transfer

In the course of operating the cmd368 platform, your data may be processed or stored on servers located outside your country. Whenever such data transfers occur, we ensure that:

• The recipient country or organisation provides an adequate level of data protection.
• Appropriate data transfer agreements are in place with all parties involved.
• Appropriate technical and organisational protection measures are applied at all times.

10 Children's Privacy Protection

The cmd368 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that a child's personal data has been collected inadvertently, we will immediately take steps to delete that information and close the associated account. If you are aware that a child has registered an account on our platform, please notify our support team immediately.

11 Changes to This Privacy Policy

Cmd368 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Significant changes will be communicated to you via email notification or through a prominent notice on the platform.

The date of the latest update will always be displayed at the top of this document. We encourage you to review this page periodically so you are always informed of how we protect your privacy. Continued use of the platform after amendments take effect constitutes your acceptance of the latest version of the Privacy Policy.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the cmd368 customer support team through any of the following channels:

• Live Chat — available 24/7 on the cmd368 platform, staffed by Malay-speaking support personnel.
• Support Email — [email protected] for written enquiries requiring documentation.

We are committed to responding to all privacy-related inquiries within 72 working hours. For issues requiring in-depth investigation, we will provide regular updates until the matter is fully resolved.