Cm2 slot Privacy Policy – Malaysia Member Data Protection

At cm2 slot, we believe your privacy is a fundamental right, not merely a legal obligation. This Privacy Policy transparently explains how we collect, use, store and protect your personal information when you use our online entertainment and betting platform.

Effective Date: 1 January 2026
Last updated: 1 June 2026

A summary of cm2 slot's data protection commitments to every Malaysia member

256-bit SSL

All data is encrypted to international banking standards

No Data Sales

Your personal data is never sold to any third party

Transaction Privacy

All financial transactions are kept strictly confidential

Full Control

You may request access to, correction of or deletion of your data

Breach Notification

You will be notified in the event of any data breach

24/7 Support

Contact us anytime with questions about your privacy

How CM2 Slot Protects Your Privacy

Six layers of data protection we have in place to keep every Malaysian member's personal information safe at all times

End-to-End Data Encryption

All communications between your device and cm2 slot's servers are protected using TLS 1.3 encryption with a 256-bit SSL certificate — the same standard used by Malaysia's leading banks such as Maybank and CIMB. This means every piece of information you transmit, including login credentials and payment details via Touch 'n Go or GrabPay, is encrypted before it leaves your device.

Secure Data Storage

CM2 Slot members' personal data is stored on servers protected by multi-layered access controls. Only authorised staff — and only for necessary operational purposes — have access to member data. All database access is logged and automatically monitored to detect any unusual activity.

Multi-Layer Identity Verification

Two-factor authentication (2FA) is available for all cm2 slot accounts, and we strongly encourage every member to enable it. With 2FA, even if someone knows your password, they still cannot log in without the verification code sent to your registered phone number — providing a highly effective additional layer of security.

Regular Security Audits

CM2 Slot conducts regular internal and external security audits. External audits are carried out by independent cybersecurity firms that test our systems against known vulnerabilities and the latest threats. All audit findings are addressed promptly and systems are updated to ensure ongoing data protection.

Incident Response Plan

Cm2 slot has a comprehensive incident response plan in the event of any security breach. In such cases, we are committed to notifying affected members within 72 hours, taking immediate remedial action, and reporting to the relevant authorities where required by law.

Data Deletion Upon Request

You have the right to request deletion of your personal data from CM2 Slot's systems when you choose to close your account. Deletion requests will be processed within 30 days. Certain data may be retained for longer if required by anti-money laundering laws or other legal obligations, and you will be informed accordingly.

1

Introduction

CM2 Slot ("we", "the Platform") is fully committed to protecting the privacy and personal data of every member who uses our online entertainment platform at cm2slot.xyz. This Privacy Policy explains how we collect, use, disclose, transfer and store your information when you register, log in or use any CM2 Slot service — whether that's slots, Live Casino, Sports Betting on the Malaysia Super League or EPL, poker, badminton or e-sports.

This Policy is drawn up in accordance with sound data protection principles and is intended to give you a clear, comprehensive understanding of how your personal information is handled. By registering for or using the CM2 Slot platform, you agree to the collection and use of information as described in this Privacy Policy.

Important Note: This Privacy Policy should be read together with Terms & Conditions and the Responsible Gaming us. Together, these three documents form the complete agreement between you and CM2 Slot.
2

Personal Data We Collect

Cm2 slot only collects personal data that is necessary for legitimate operational purposes as stated in this policy. Below are the categories of data we collect and the reasons for collecting them:

Data Category Sample Information Purpose of Collection
Identity Information Full name, date of birth, identity card number Account registration, KYC verification, legal compliance
Contact Information Email address, phone number, full residential address Account communications, promotional notifications, transaction confirmations
Financial Data Payment methods (TNG, GrabPay, DuitNow), transaction records Deposit & withdrawal processing, AML compliance
Usage Data Games played, bets placed, time spent active on the platform Platform improvement, fraud detection, responsible gaming
Technical Data IP address, device type, browser version, operating system Account security, technical diagnostics, fraud detection
Cookie Data User preferences, login sessions, usage analytics Improved user experience, platform analytics

We do not collect unnecessary information and will never ask for sensitive data such as your banking password or card PIN. cm2 slot also does not store full credit card details — all financial transactions are handled by licensed third-party payment processors that comply with PCI DSS security standards.

3

How We Use Your Personal Data

CM2 Slot uses collected personal data solely for legitimate and relevant purposes. We do not use your data for anything you would not reasonably expect, or for purposes unrelated to the services you use. The primary purposes for data use include:

  • Account Operations: Creating and managing your cm2 slot account, processing logins securely, and handling your customer support requests.
  • Financial Transaction Processing: We process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals of your winnings to your preferred e-wallet — quickly and securely.
  • Identity Verification (KYC): We verify your identity to meet anti-money laundering (AML) compliance requirements and to protect you from unauthorised use of your account.
  • Platform Security: Detecting and preventing fraud, multi-accounting, money laundering and any activity that violates our Terms & Conditions.
  • Service Improvement: We analyse usage patterns to improve platform performance, introduce new features and deliver a better experience for all Malaysian members.
  • Marketing Communications: Sending promotions, bonus offers and the latest updates about cm2 slot via email or notifications — only where you have consented to receive such communications.
  • Responsible Gaming: We monitor gameplay patterns to identify signs of unhealthy gaming behaviour and offer assistance through the responsible gaming tools available on our platform.
  • Legal Compliance: Meeting the reporting and record-keeping obligations required by applicable laws and regulations.
4

Data Sharing with Third Parties

CM2 Slot does not sell, rent or trade members' personal data to any third party for commercial purposes. However, there are limited situations where we need to share certain data with carefully selected third parties, namely:

  • Payment Processors: Required transaction information is shared with payment service providers such as FPX processors and e-wallet gateways to facilitate deposits and withdrawals. All payment processors we work with comply with strict PCI DSS security standards.
  • Technology Service Providers: Companies that provide the technical infrastructure, cloud services, and analytics tools we use to operate the cm2 slot platform. All such providers are bound by data protection agreements that prohibit them from using your data for any other purpose.
  • Game Providers: The minimum technical data required to connect your gaming session is shared with third-party game providers when you play their games on the CM2 Slot platform.
  • Legal Requirements: In cases where we are required by court order, law or directive from a competent authority to disclose certain data. In such situations, we will notify you in advance where permitted by law.
Our Commitment: We have never shared, and will never share, your personal data with advertising companies, data brokers, or any party not directly involved in the operation of the cm2 slot platform.
5

Cookies & Tracking Technologies

CM2 Slot uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining your login session and remembering your account preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: We collect anonymised data on how users interact with our platform — which pages are visited most often, time spent in each section, and any errors encountered. This data is used to improve the CM2 Slot platform.
  • Functional Cookies: Remembering your preferences such as selected language, display theme and notification settings to deliver a more personalised experience.
  • Session Cookies: Temporary cookies that are deleted when you close your browser. Used to maintain session continuity while you are playing on cm2 slot.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the full functionality of the cm2 slot platform, including the ability to stay logged in or save your preferences.

6

Data Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, disclosure, alteration or destruction. Key security measures we have in place include:

  • Data in transit is encrypted using the TLS 1.3 protocol with 256-bit SSL certificates for all communications between your device and CM2 Slot's servers.
  • Stored data is encrypted using AES-256 for all sensitive information in our database.
  • Role-based access control (RBAC) ensures that only authorised staff can access members' personal data, and only for legitimate purposes.
  • Round-the-clock security monitoring using automated intrusion detection systems that alert our security team to any suspicious activity.
  • Regular penetration testing by independent third parties to identify and patch security vulnerabilities before they can be exploited.
  • Data security training for all cm2 slot staff with access to user systems and data.

While we take comprehensive security measures, no system can guarantee absolute security. We encourage you to also take responsibility for protecting your account by using a strong password, enabling 2FA and never sharing your login details with anyone.

7

Your Rights Regarding Personal Data

As a CM2 Slot member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 days.
Right to Rectification
If any data we hold about you is inaccurate or incomplete, you may request that we correct it.
Right to Erasure
You may request the deletion of your personal data upon account closure, subject to any legal requirements that may necessitate data retention.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time by contacting us.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another service if required.
Right to Restriction
Under certain circumstances, you may ask us to restrict how we process your data while an issue is being resolved.
To exercise any of the above rights, contact us at support@cm2slot.xyz by stating your request clearly. We will verify your identity and process the request within the stipulated timeframe.
8

Child Data Protection

CM2 Slot is an entertainment platform exclusively for individuals aged 18 years of age and above. We do not knowingly collect personal data from individuals under the age of 18. Our platform employs multiple mechanisms to verify user age at the point of registration.

If we discover that someone under the age of 18 has provided us with personal data, we will take immediate steps to delete that data and close the account in question. If you believe your child or a minor has registered on cm2 slot, please contact us immediately at support@cm2slot.xyz so we can take the appropriate action.

We also encourage parents and guardians to monitor their children's online activity and make use of parental control tools available on their devices and browsers to prevent access to online betting platforms.

9

Cross-Border Data Transfers

In operating the cm2 slot platform, your personal data may be stored or processed on servers located outside Malaysia. This occurs when we use cloud infrastructure services or international technology providers to run platform operations.

In all cases of cross-border data transfers, cm2 slot ensures that:

  • The destination country or territory provides adequate data protection, or
  • Appropriate contractual agreements have been put in place with data recipients to ensure a level of protection equivalent to that which applies in Malaysia, or
  • Other valid data transfer mechanisms are used in accordance with applicable data protection laws.

Financial data related to transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, and CIMB Clicks is handled in strict accordance with Malaysian payment processing regulations.

10

Data Retention Period

Cm2 slot retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Our data retention guidelines are as follows:

  • Active Account Data: Retained for as long as your account is active, plus the period required after account closure to process any outstanding claims or inquiries.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering legislation and financial reporting requirements.
  • Customer Support Communication Logs: Retained for 3 years for reference and service quality improvement purposes.
  • Cookie Data: Session cookies are deleted when the browser is closed. Persistent cookies have a set expiry period, typically between 30 days and 1 year depending on the cookie type.
  • Closed Account Data: Basic identity information is retained for 5–7 years after account closure for legal compliance purposes, after which the data is securely deleted.

When data is no longer needed and there is no legal requirement to retain it, we will securely delete or anonymise it using methods that ensure it cannot be recovered.

11

Privacy Policy Amendments

Cm2 slot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements or other operational reasons. Any material amendments will be communicated to you through:

  • An in-platform notification on CM2 Slot the next time you log in.
  • Sent to your registered email address at least 7 days before the changes take effect.
  • An update to this page with a new "Last Updated" date.

Continued use of the cm2 slot platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

We encourage you to review this page regularly to stay informed about how we protect your personal information.

12

Contact Us for Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the cm2 slot Data Privacy Officer through the following channels:

  • Email: support@cm2slot.xyz — please mark your email subject line with "Privacy Enquiry" for faster processing.
  • Live Chat: Available 24/7 on the cm2 slot platform — select the "Privacy & Data" category when starting a chat session.
  • WhatsApp: Contact the cm2 slot support number available on the platform for urgent enquiries.

We are committed to responding to all privacy-related enquiries within 48 business hours. Formal requests relating to data rights (access, correction, deletion) will be processed within 30 calendar days from the date a complete request is received.

CM2 Slot's support team is Malaysian-speaking and available to assist you 24 hours a day, 7 days a week. We take every privacy-related inquiry seriously and will ensure you receive a satisfactory response within the stipulated timeframe.

Why Data Privacy Matters at CM2 Slot — A Perspective for Malaysian Users

Every time you log in to cm2 slot to play slots, bet on a Liga Super Malaysia match or enjoy a live baccarat table, you are entrusting us with valuable personal information. We take that trust very seriously — which is why privacy protection is not just a small chapter in a corporate document, but part of cm2 slot's operational DNA from day one.

Malaysian users today are increasingly aware of how important data privacy is in the digital world. Whether you're using Touch 'n Go eWallet to deposit at CM2 Slot or entering your identification details for the KYC process, you have every right to know exactly what happens to that information. Our Privacy Policy is designed to give you clear, straightforward answers to those questions — no fine print, no runaround.

One privacy aspect that users of online entertainment platforms often overlook relates to financial transaction data. When you deposit RM50 via GrabPay or withdraw RM200 in winnings to your DuitNow account, cm2 slot retains a record of those transactions. This is not to monitor your financial habits — it is an anti-money laundering legal requirement that all legitimately operating financial platforms must comply with. We do, however, ensure these records are protected with strong encryption and are only accessible to staff with a legitimate operational need.

One thing we want to be especially clear about is platform usage data — what games you play, how long you play, and how much you wager. cm2 slot collects this data not to sell it to advertisers or data brokers, but for two important purposes: first, to personally improve your platform experience, and second, to support responsible gaming. If our systems detect playing patterns that may indicate signs of unhealthy gambling behaviour, we will proactively reach out to offer assistance and the support tools available to you.

Cookies are a topic that often raises concerns among Malaysian internet users. We want to be clear that the cookies used by cm2 slot serve legitimate technical purposes — they are not used to spy on your activity on other websites or track you across the internet. Our session cookies, for example, are what keep you logged in throughout your gaming session without requiring you to re-enter your password every few minutes. Without them, your experience on the platform would be significantly more inconvenient.

Regarding data sharing with third-party game providers, this is something you should understand when playing slots or Live Casino games at CM2 Slot. When you launch a game from an external provider, a minimum amount of technical information is required to open your gaming session — this includes your session ID and the relevant account balance. We do not share your full name, identification number or financial details with game providers. All game providers we have selected for the CM2 Slot platform have undergone rigorous security assessments by our team.

The right to request data deletion is something we take seriously at cm2 slot. When you choose to close your account and submit a deletion request, we will process it with care. However, as outlined in this policy, certain data is legally required to be retained — particularly financial transaction records for anti-money laundering purposes. In such cases, we will clearly inform you of what data will be kept, for how long, and why it cannot be deleted at that time.

Finally, we want to make clear that privacy protection is an ongoing commitment, not a one-time achievement. CM2 Slot continuously monitors the latest developments in data protection practices, cybersecurity threats and regulatory changes to ensure our Privacy Policy remains relevant and effective. When we make changes, we will notify you in advance — because you have the right to know. Your trust is CM2 Slot's most valuable asset, and we do not take it lightly.

FAQ — cm2 slot Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at CM2 Slot

Not at all. CM2 Slot does not sell, rent or share members' personal data with advertising companies, data brokers or any third party for marketing purposes. Your data is only shared with service providers directly involved in operating our platform — such as payment processors handling your Touch 'n Go or GrabPay transactions — and only the data strictly necessary is shared. All such third parties are bound by strict data protection agreements that prohibit them from using your data for any other purpose.

You may request a copy of the personal data we hold about you by contacting the CM2 Slot support team via email at support@cm2slot.xyz with the subject line "Data Access Request". We will first verify your identity to ensure only you can access that information. Requests will be processed within 30 calendar days of receiving a complete request. Data will be provided in a readable format, and we will explain the purpose of each category of data we hold about you.

When you close your cm2 slot account, we will initiate the deletion of your data in accordance with our retention policy. Most of your profile data will be deleted or anonymised within 90 days of account closure. However, financial transaction records must be retained for 7 years in line with anti-money laundering legal requirements. These records are kept in a secure format and cannot be accessed by any party without a court order. You will receive an email confirmation detailing which data has been deleted and which data is being retained, along with the applicable retention period.

cm2 slot has a comprehensive incident response plan to handle any data breach that may occur. Should a breach affect your personal data, we are committed to notifying you within 72 hours of becoming aware of the incident. The notification will include details on the type of data affected, the likely scope of impact, the steps we have taken to address the situation, and actions you can take to protect yourself. We will also report significant incidents to the relevant authorities where required by law. The security and trust of our members remains cm2 slot's number one priority.

Play Safe at cm2 slot

Your privacy is protected with 256-bit SSL encryption. Register for free today and enjoy over 500 games — slots, live casino, Liga Super Sports Betting, poker and e-sports with complete peace of mind!

18+ Only  ·  Play Responsibly  ·  Responsible Gaming

Bahasa Melayu