Updated: 1 July 2026

Privacy Policy CM2 Asia – Malaysian Player Personal Data Protection

CM2 Asia takes the privacy and security of your personal data seriously. This document clearly explains what information we collect, how it is used, and your rights as a Malaysian player under the Personal Data Protection Act (PDPA) Malaysia.

🔒 CM2 Asia's Privacy Commitment to Malaysian Players

Six key ways CM2 Asia protects your personal data and privacy every day

256-Bit SSL Encryption at All Times

All data transmitted between your device and CM2 Asia's servers is encrypted using 256-bit SSL — the same highest-grade encryption standard used by Malaysia's leading banks. No third party can intercept or read your information while it is in transit.

256-bit SSL
Full Malaysia PDPA Compliance

The CM2 Asia Privacy Policy is designed to be fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Every aspect of how we collect, process, and store your data is carried out in accordance with applicable Malaysian legal requirements.

PDPA 2010 Compliance
No Sale of Data to Third Parties

CM2 Asia does not sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. Your data belongs to you — it is not a commodity we trade for profit.

No Data Sales
Full Control in Your Hands

You may access, update, correct, or request deletion of your personal data in your CM2 Asia account at any time. Data management requests are handled by our dedicated team within the timeframes stipulated by the PDPA.

Player Rights Guaranteed
Secure and Controlled Data Storage

Your personal data is stored on servers protected by multiple layers of physical and digital security. Access to player data within the CM2 Asia system is restricted solely to authorised personnel who require it to carry out their duties.

Multi-Layered Security
Immediate Notification in the Event of an Incident

In the event of any security incident involving your personal data, CM2 Asia is committed to notifying you within the timeframe prescribed by Malaysia's PDPA and taking immediate action to contain any impact.

Immediate Notification

This Privacy Policy ("Policy") describes the personal data collection, use, storage, and protection practices carried out by CM2 Asia ("we", "us", "Platform"). By using the platform CM2 Asia, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our platform.

CM2 Asia's Privacy Commitment: We take the privacy of every player seriously. All practices described in this document comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For privacy enquiries, contact us at support@cm2asia.best.


1 Introduction & Scope of This Policy

This Privacy Policy applies to all users who register, browse, or use the CM2 Asia across any device — including laptops, smartphones, and tablets. This document explains what data we collect, why we collect it, how we protect it, who may receive it, and your rights as a data subject under Malaysian law.

CM2 Asia acts as the data controller for all personal information collected through this platform. We take this responsibility seriously and uphold strict internal standards to ensure your data is always handled in a responsible, transparent, and secure manner.

This policy should be read together with Terms & Conditions CM2 Asia, which forms part of the overall agreement between you and our platform. Together, these two documents constitute the legal framework governing your relationship with CM2 Asia.


2 Personal Data We Collect

2.1 Information You Provide Directly

When you register and use the platform CM2 Asia, we collect the following information that you actively provide:

  • Full name as per identity card
  • An active Malaysian phone number
  • Email address (if provided)
  • Date of birth (for age verification — players must be 18 and above)
  • Bank account or e-wallet details used for deposits and withdrawals (account number, account holder name)
  • A copy of your identification document when required for identity verification

2.2 Information Collected Automatically

In addition to information you provide directly, CM2 Asia also automatically collects technical data when you use the platform:

  • Your device's IP address
  • Device type, operating system, and web browser used
  • The date, time, and duration of each platform session
  • Pages and games visited within the platform
  • Game performance data – bets placed, games played, wins and losses
  • Deposit and withdrawal data including transaction method, amount, and date
  • Cookies data and similar tracking technologies (as described in Section 5)

2.3 Financial Transaction Information

To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks, CM2 Asia work with licensed payment processors. The financial data we retain is limited to what is necessary for processing transactions and meeting legal obligations – full account numbers and card details are handled directly by PCI-DSS compliant payment processors, not by our servers CM2 Asia.

Important Note: CM2 Asia does not store your PIN, e-wallet password, or online banking password. These sensitive details are handled directly by recognised payment providers and are protected under their own security standards.


3 How We Use Your Personal Data

CM2 Asia uses the personal data collected for the following purposes, all of which are lawful under Malaysia's PDPA:

Purpose of Use Legal Basis Details
Account Management Contract Performance Creating, maintaining, and securing your CM2 Asia account
Transaction Processing Contract Performance Processing deposits and withdrawals via eWallet and FPX Malaysia
Identity Verification Legal Obligations Verifying that players are 18 years of age or older and confirming identity
Fraud Prevention Legitimate Interests Detecting and preventing fraud and money laundering
Customer Support Contract Performance Responding to enquiries and resolving issues related to your account
Platform Improvements Legitimate Interests Analysing usage patterns to improve the user experience
Marketing Communications Consent Sending promotions and the latest offers (with your consent only)
Legal Compliance Legal Obligations Complying with legal requirements and orders from Malaysian authorities

CM2 Asia will not use your personal data for any purpose other than those stated in the table above without first obtaining your additional consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.


4 Sharing Information with Third Parties

4.1 Core Principle — We Do Not Sell Your Data

CM2 Asia does not sell, rent, or disclose your personal data to any third party for their own marketing or commercial purposes. This is our unconditional commitment to all players.

4.2 Third Parties That May Receive Your Data

In the course of operating the platform, CM2 Asia may share your data on a limited basis with the following categories of parties, only when necessary and for specific purposes:

  • Payment Processors – Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks that process your deposit and withdrawal transactions. Data shared is the minimum required to complete each transaction.
  • Game Providers – game development companies that supply slots, Live Casino, roulette, and other games within our platform. They may receive game session data that cannot be used to personally identify you.
  • Technical Service Providers — companies that provide IT infrastructure, cybersecurity, data analytics, and technical support services for the CM2 Asia platform. All such providers are bound by strict confidentiality agreements.
  • Malaysian Authorities — government agencies, law enforcement bodies, or courts that issue valid orders requiring data disclosure. CM2 Asia will comply with such orders in accordance with proper legal procedures.

4.3 Cross-Border Data Transfers

Should your personal data need to be transferred outside Malaysia – for example, to servers located in other countries within our service provider network – CM2 Asia will ensure that any such transfers are carried out with protections equivalent to or greater than those provided under Malaysian law. This includes data processing agreements that meet international standards.


5 Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. CM2 Asia uses cookies and similar technologies to ensure the platform operates correctly and to deliver a better experience for you.

5.2 Types of Cookies We Use

  • Essential Cookies — required for core platform functions such as login, session security, and navigation. These cannot be disabled, as the platform will not function without them.
  • Performance Cookies — collects anonymous data on how you use the platform (pages visited, time spent) to help us improve the user experience.
  • Functional Cookies – remembers your preferences such as language and display settings to provide a more personalised experience.
  • Session Cookies — temporary cookies that are automatically deleted when you close your web browser. Used to maintain your login status during an active session.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain features of the platform CM2 Asia.


6 Data Security Measures

CM2 Asia implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

  • 256-bit SSL encryption for all data transmitted between your device and our servers
  • Encryption of sensitive data stored in databases using industry-recognised cryptographic algorithms
  • Role-based access control – only authorised staff can access player data, and only to the extent required for their duties
  • Two-factor authentication (2FA) for internal administrative accounts
  • Continuous security monitoring and regular access log audits
  • Regular security testing and vulnerability assessments conducted by independent third parties
  • Data security training for all CM2 Asia staff who handle player data

Important Reminder: While CM2 Asia takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role by using a strong password, enabling 2FA on your account, and not sharing your login details with anyone.


7 Your Rights Under Malaysia's PDPA

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by CM2 Asia:


8 Data Retention Period

CM2 Asia retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable Malaysian law. General data retention guidelines are as follows:

  • Active Account Data – retained for the duration your CM2 Asia account remains active
  • Closed Account Data – retained for a minimum of 5 years after account closure for legal compliance and audit purposes
  • Financial Transaction Records – retained for a minimum of 7 years in accordance with Malaysian tax and financial regulatory requirements
  • Communication Logs – customer support logs are retained for 2 years from the date of interaction
  • Cookies Data – session cookies are deleted when the browser is closed; persistent cookies follow a set expiry period, typically between 30 days and 1 year

Once the retention period has ended and there is no legal obligation to retain the data further, CM2 Asia will delete or anonymise that data in a secure and irreversible manner.


9 Children's Privacy

Platform CM2 Asia is intended for individuals aged 18 and above. We do not knowingly collect or store personal data from anyone under the age of 18. If you believe that an underage individual has registered an account on CM2 Asia, please contact our support team immediately at support@cm2asia.best. We will take prompt action to close the account and delete all associated data.

Parents and guardians are encouraged to monitor their children's online activities and use the parental control tools available on their devices and networks to prevent minors from accessing gambling websites.


10 Amendments to the Privacy Policy

CM2 Asia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or platform improvements. You will be notified of any material changes via an in-platform notice or through your registered phone number.

The date this document was last updated is always shown at the top of this page. We recommend checking back periodically to stay informed about how CM2 Asia protect your privacy. Continued use of the platform after any amendments constitutes acceptance of the updated terms.


11 How to Contact Us About Privacy

For any enquiries, requests, or complaints relating to this Privacy Policy or the handling of your personal data by CM2 Asia, you may contact us via:

  • Email: support@cm2asia.best (please mark the email subject as "Data Privacy Request")
  • Live Chat: via the CM2 Asia platform – response in under 1 minute
  • FAQ Page: visit Frequently Asked Questions for an immediate response

Our data management team will respond to requests related to PDPA privacy rights within 21 business days of receipt, as required under Malaysian law.


This version of the document takes effect from 1 July 2026. For any questions regarding this Privacy Policy, please contact us at support@cm2asia.best.

⚖️ Your Rights as a CM2 Asia Player Under the PDPA

Malaysia's PDPA grants you the following rights over your personal data held by CM2 Asia

Right of Access

You have the right to request a copy of all personal data CM2 Asia holds about you. Requests will be processed within 21 business days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request an immediate correction. Updates can be made through your account settings or by contacting support.

Right to Erasure

You may request the deletion of your personal data when there is no longer a legitimate basis for retaining it, subject to any applicable legal obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide any reason.

Right to Restrict Processing

In certain circumstances, you may request CM2 Asia to temporarily restrict the processing of your data while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format so that it can be transferred to another service provider should you wish to do so.

To exercise any of the rights above, contact the CM2 Asia privacy team at support@cm2asia.best with the subject line "PDPA Rights Request".

❓ Frequently Asked Questions – CM2 Asia Privacy Policy

Frequently asked questions about privacy and data protection at CM2 Asia

No, absolutely not. CM2 Asia does not sell, rent, or disclose your personal data to any third party for their own marketing or commercial purposes. This is our unconditional commitment. Your data may be shared with technical service providers that help us operate the platform – such as payment processors Touch 'n Go, GrabPay, or Malaysian banks – but solely for the purpose of processing your transactions, and all such providers are bound by strict confidentiality agreements with CM2 Asia. We also fully comply with the Personal Data Protection Act 2010 (PDPA) Malaysia across all data management activities.

To request deletion of your personal data, send an email to support@cm2asia.best with the subject line "PDPA Data Deletion Request", along with your full name and registered phone number for identity verification purposes. Our privacy team will assess your request within 21 business days. Please note that full deletion may not be possible for data that CM2 Asia is legally required to retain under Malaysian law — for example, financial transaction records that must be kept for 7 years under tax legislation. In such cases, we will inform you which data can be deleted and which must be retained, along with the reasons.

When you close your CM2 Asia account, we will immediately stop processing your data for account management and marketing purposes. However, CM2 Asia is required under Malaysian law to retain certain records for a minimum period — financial transaction records for 7 years and basic account data for 5 years — for audit, tax compliance, and other legal requirements. Once the mandatory retention period expires, all your data will be securely deleted or anonymised. You will receive a closure confirmation via your registered phone number.

Yes, your financial transactions on CM2 Asia are protected by multiple layers of security. All communications between the CM2 Asia platform and payment providers such as Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and Malaysian banks via FPX are encrypted with 256-bit SSL. Importantly, CM2 Asia does not store sensitive information such as your e-wallet PIN or online banking password – these details are handled directly by the respective payment providers, all of which comply with the international PCI-DSS security standard. CM2 Asia retains only transaction records (amount, date, method) as required for account records and legal compliance.

You can opt out of marketing communications from CM2 Asia at any time through any of these simple methods: (1) Log in to your CM2 Asia account, go to "Account Settings", and uncheck the marketing communications preference; (2) Click the "Unsubscribe" link found at the bottom of any marketing email we send you; (3) Contact the CM2 Asia support team via live chat or email at support@cm2asia.best and request to be removed from our marketing list. Your request will be processed within 5 business days. Please note that even after unsubscribing from marketing, you may still receive important transactional communications related to your account, such as deposit confirmations or security notices.

Secure & Trusted Platform

Play on CM2 Asia with Confidence – Your Data is Always Protected

Now you know how CM2 Asia protects your privacy. Register a free account today, claim a Welcome Bonus of up to RM 500, and enjoy over 200 top games in a safe, fair, and transparent environment.

* Age 18 and above only. Subject to Terms & Conditions. Play responsibly.

Bahasa Melayu