🔒 Official CM8Huat Document

CM8Huat Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

At cm8huat, your privacy is more than a legal obligation — it is a core value we hold firmly. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and what your rights are as a cm8huat member in relation to your personal data.

Updated: 1 January 2026

Six Core Data Protection Principles of CM8Huat

How cm8huat protects your personal information — a quick overview before you read the full policy

Full 256-Bit SSL Encryption

All data transmitted between your device and cm8huat's servers is protected by 256-bit SSL encryption — the same level of security used by leading banking institutions in Malaysia. This means your personal information and financial transactions cannot be intercepted or read by any unauthorised party.

Full Compliance with Malaysia's PDPA 2010

CM8Huat operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means the collection, processing and storage of your personal data is carried out within the applicable Malaysian legal framework, with your rights as a data subject fully respected.

Data Not Sold to Third Parties

CM8Huat has never and will never sell, rent or commercialise members' personal data to any third party for marketing or commercial purposes. Your information is used solely for platform operations, identity verification and legally mandated compliance in Malaysia.

Privacy Controls Are in Your Hands

Cm8huat members have full control over their personal data. You can review, amend or request deletion of your data at any time through your account settings or by contacting the cm8huat support team. Data access requests are processed within 14 business days.

Secure & Limited Data Storage

Your personal data is retained only for as long as necessary for operational and legal compliance purposes. cm8huat's data storage servers are protected by multi-layered access control systems, 24-hour monitoring and encrypted backups stored in secure locations.

Opt-Out from Marketing Communications

You have the right to opt out of any cm8huat marketing and promotional communications at any time. Simply update your communication preferences in your account settings or contact support@cm8huat.net and your request will be processed within 3 business days, no questions asked.

Why This Policy Matters

By registering for or using the cm8huat platform, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use cm8huat's services. For any data privacy enquiries, contact us at support@cm8huat.net.

1. Introduction and Scope of Privacy Policy

CM8Huat values the privacy of every member who uses our platform. This Privacy Policy outlines our practices for collecting, using, disclosing and protecting your personal information when you use the cm8huat online casino platform at cm8huat.net.

This policy applies to all registered cm8huat members, prospective members browsing our platform and all interactions conducted via the cm8huat website, mobile interface or any official communication channel including email and live chat.

CM8Huat complies with Malaysia's Personal Data Protection Act (PDPA) 2010 and all regulations issued thereunder. As a data controller, cm8huat is responsible for ensuring that personal data under our control is processed lawfully, fairly and transparently in line with the applicable PDPA principles.

CM8Huat's Privacy Commitment

We do not collect data beyond what is necessary. We do not sell your data. We do not share your data except in the circumstances set out in this Policy. This is not merely a legal obligation — it reflects the values we uphold as a platform that respects the trust of Malaysian players.

2. Types of Personal Data We Collect

CM8Huat only collects data that is necessary to operate the platform, fulfil legal obligations, and deliver the best experience to our members. Below are the categories of data we collect:

2.1 Data You Provide Directly

  • Registration Information: Full name, Malaysian phone number, email address and password;
  • Identity Verification (KYC) Information: Malaysian identity card number (MyKad), identity card image, facial photograph and bank statements when required;
  • Financial Information: Bank account number, bank name, e-wallet number (Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost) for processing deposits and withdrawals in RM;
  • Communications: Records of live chat conversations, emails and any written communications with the cm8huat support team.

2.2 Data Collected Automatically

  • Technical Data: IP address, web browser type, operating system, screen resolution and device information;
  • Usage Data: Pages visited, session duration, games played, total bets placed, game results and access times;
  • Transaction Data: Complete history of deposits, withdrawals, bets and winnings;
  • Cookie Data: Session cookies, preference cookies, and analytics cookies to enhance the user experience.

Data Category Example Primary Purpose
Identity Name, MyKad, date of birth Account verification, KYC, fraud prevention
Contact Phone number, email Account communications, security OTP, support
Financial Bank account, e-wallet, transaction records Deposits, withdrawals, anti-money laundering
Technical IP, device, browser Account security, fraud detection
Usage Gaming activity, sessions Platform improvement, responsible gaming

3. How We Use Your Personal Data

CM8Huat uses collected personal data for the following legally permissible purposes:

3.1 Account and Platform Management

Your data is used to create and manage your cm8huat account, process deposits and withdrawals in MYR, verify your identity, grant access to all games and services on the platform, and ensure a smooth, personalised gaming experience.

3.2 Security and Fraud Prevention

CM8Huat uses technical data and usage patterns to detect and prevent unauthorised access, fraud, money laundering and system abuse. This includes continuous account activity monitoring, detection of logins from new locations and review of suspicious transactions.

3.3 Legal Compliance

Certain data is retained and used to meet legal compliance obligations under Malaysia's PDPA 2010, anti-money laundering (AML) regulations and any directives from the relevant Malaysian authorities. CM8Huat may be required to disclose certain data to authorities in response to valid legal requests.

3.4 Service Improvement

Usage data and member feedback help the cm8huat development team improve the platform interface, enhance game performance, introduce new features and ensure the platform is optimised for Malaysian players across a wide range of mobile devices.

3.5 Service Communications & Marketing

CM8Huat may use your contact information to send important account notifications (such as transaction confirmations, security alerts and policy updates) as well as information on cm8huat promotions and bonuses. You may opt out of marketing communications at any time through your account settings.

3.6 Responsible Gaming

Gaming pattern data is used to monitor members' playing habits for responsible gaming purposes. If the cm8huat system detects patterns that may indicate a risk of problem gambling — such as a sudden increase in bet amounts or unusually long gaming sessions — our team may proactively reach out to the member concerned to offer support and available self-control tools.

4. Data Sharing and Disclosure

CM8Huat does not sell, rent or commercialise members' personal data to third parties. However, in certain limited and lawful circumstances, data may be shared with the following parties:

4.1 Trusted Third-Party Service Providers

CM8Huat works with a select group of service providers that support our platform operations — including game software providers, payment processors for Malaysian e-wallets (Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost) and FPX, as well as cloud service providers. All third-party providers are bound by strict confidentiality agreements and may only use shared data for the specific purposes authorised by cm8huat.

4.2 Malaysian Authorities

CM8Huat may disclose personal data to Malaysian authorities including the police, MACC, Bank Negara Malaysia or the courts where required by law or a valid court order. In such cases, cm8huat will endeavour to notify the affected member (where permitted) prior to disclosure.

4.3 Business Transfer

In the event of a merger, acquisition, or sale of cm8huat assets, members' personal data may be transferred as part of that transaction. Members will be notified via email or an in-platform notification before their data becomes subject to a different Privacy Policy.

Our Guarantee

CM8Huat does not share your personal information with advertising companies, data brokers or any party for third-party marketing purposes. Your data remains within the cm8huat ecosystem and is used solely for the purposes stated in this Privacy Policy.

5. Our Data Security Measures

CM8Huat invests heavily in security infrastructure to protect our members' personal data. The security measures we have in place include:

5.1 Technical Security

  • 256-bit SSL Encryption for all data in transit between your browser and cm8huat's servers;
  • Encryption of data at rest for all sensitive information stored in cm8huat's database;
  • Two-Factor Authentication (2FA) via SMS OTP for logins and financial transactions;
  • Intrusion detection system (IDS) which monitors any suspicious activity across the network 24/7;
  • Multi-layered firewall protecting the cm8huat server infrastructure;
  • Regular security audits by independent parties to identify and address any vulnerabilities.

5.2 Access Controls

Access to members' personal data within cm8huat's internal systems is restricted to staff who require it to carry out their duties — on a strictly need-to-know basis. All staff with access to sensitive data undergo background checks and data protection training before access is granted.

5.3 Incident Response

While cm8huat takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against attacks. In the event of a data breach affecting members' personal information, cm8huat is committed to:

  • Notifying affected members within 72 hours of a breach being detected;
  • Reporting incidents to the Personal Data Protection Commissioner of Malaysia in accordance with PDPA requirements;
  • Taking immediate steps to contain the breach and prevent further damage;
  • Providing guidance to affected members on protective steps they can take.

6. Cookies and Tracking Technologies

CM8Huat uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the cm8huat website.

6.1 Types of Cookies Used

  • Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your login session and gaming session while browsing the cm8huat platform;
  • Preference Cookies: Saving your preferences such as language (Bahasa Melayu), display layout and other settings to ensure a consistent experience each time you visit;
  • Security Cookies: To help verify your identity and prevent unauthorised use of your cm8huat account;
  • Analytics Cookies: Collects information on how you use the cm8huat platform to help us improve our services — this data is gathered in aggregate form and without individual identification.

6.2 Cookie Management

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the cm8huat platform — particularly session cookies required for login and gameplay. Analytical cookies can be disabled without affecting core platform use.

7. Your Rights as a CM8Huat Member

Under Malaysia's PDPA 2010, you have rights over your personal data. CM8Huat fully respects these rights and provides mechanisms for you to exercise them:

Right to Access Data

You have the right to request a copy of all personal data cm8huat holds about you. Data access requests will be processed within 14 business days of your identity being verified. Data will be provided in a readable format.

Right to Data Correction

If any personal data we hold is inaccurate or incomplete, you have the right to request a correction. Basic profile information can be updated directly in your cm8huat account settings. For corrections to KYC documents, please contact our support team.

Right to Data Erasure

You may request the deletion of your personal data when your account is closed. However, cm8huat may be required to retain certain data for periods mandated by Malaysian law (for example, financial transaction records for AML purposes). Any data excluded from deletion will be clearly stated.

Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on cm8huat's legitimate interests in certain circumstances, provided you supply compelling grounds for the objection.

Right to Data Portability

In certain circumstances, you have the right to receive the personal data you provided to cm8huat in a structured, machine-readable format, and to transfer that data to another data controller. Contact us at support@cm8huat.net for more information.

How to Exercise Your Rights

To exercise any of the rights above, contact cm8huat's Data Privacy Officer by email at support@cm8huat.net with the subject line "PDPA Data Rights Request". Please include your full name and cm8huat account number. All requests will be processed within 14 business days and you will receive confirmation via email.

8. Data Retention Period

CM8Huat retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under applicable Malaysian law.

Data Type Retention Period Storage Basis
Active Account Data For as long as the account is active + 2 years Operational requirements
Financial Transaction Records 7 years from the transaction date AML & PDPA Obligations
KYC Documents 5 years after account closure Legal compliance
Support Communication Logs 3 years from the date of interaction Service requirements
Technical Log Data 90 days Security & troubleshooting
Analytical Cookie Data 12 months Platform improvement

Once the applicable retention period has ended, personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. The deletion process uses methods that ensure the data cannot be recovered.

9. Protection of Children's Data

The cm8huat platform is intended for adults aged 18 and above only. CM8Huat does not knowingly collect personal data from individuals under the age of 18.

All prospective members are required to confirm they are 18 years of age or older during the registration process. Should cm8huat discover that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe we may have collected information from or about a minor, please contact us immediately at support@cm8huat.net so we can take appropriate action without delay.

10. Changes to This Privacy Policy

CM8Huat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements or any other legitimate reason.

When significant changes are made to this Privacy Policy, cm8huat will:

  • Updating the "Last Updated" date at the top of this page;
  • Displaying clear notifications within the cm8huat platform to inform members of any changes;
  • For highly significant changes that affect fundamental privacy rights, cm8huat will send a direct notification to members' registered email addresses.

Your continued use of the cm8huat platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact the CM8Huat Data Privacy Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how cm8huat handles your personal data, please contact our Data Privacy Officer:

Official Email
support@cm8huat.net
Subject: "Privacy Policy Enquiry"
CM8Huat Live Chat
Available 24 hours a day, 7 days a week
Response time < 2 minutes
Operating Location
Malaysia
Response Time
Within 14 business days
for formal PDPA requests

If you are not satisfied with cm8huat's response to your privacy concerns, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through their official channels. CM8Huat is committed to cooperating fully with any investigation conducted by the relevant authorities.

Your Privacy, Our Priority

At cm8huat, we understand that trust is our most valuable asset. Every member who entrusts their personal data to us does so with the confidence that we will handle it responsibly. We will never take that trust for granted — this is cm8huat's commitment to every Malaysian player who joins us.

Your Data Is Safe, Your Game Is Fun

Many Malaysian players hesitate to register on an online casino platform due to concerns about privacy and data security. Those concerns are valid — which is why cm8huat goes beyond the minimum legal requirements when it comes to protecting our members' data.

With 256-bit SSL encryption, two-factor authentication, full compliance with Malaysia's PDPA 2010 and a strict no-data-selling policy, cm8huat ensures that your decision to play on our platform is a safe one — not just in terms of gameplay, but also in protecting your personal information.

If you still have questions about how we handle your data before deciding to register, cm8huat's Malay-speaking support team is ready to answer every question via 24/7 live chat or by email at support@cm8huat.net.

Register Safely, Enjoy CM8Huat Bonuses

Your data is protected, our platform is secure — and you're entitled to an exclusive welcome bonus package when you sign up today.

  • Welcome Bonus up to RM 888
  • Automatic daily casino cashback 10%
  • Weekly Sports Betting rebate 5%
  • Special promotions for Malaysian festive occasions throughout the year
  • VIP Programme with exclusive benefits and privacy
View All Promotions

FAQ – CM8Huat Privacy Policy

The most frequently asked questions from members about privacy and data protection at cm8huat

Absolutely not. CM8Huat does not sell, rent or commercialise members' personal data to any third party for advertising or marketing purposes. Your data is used solely for cm8huat platform operations — including account management, processing financial transactions in MYR, security, compliance with Malaysian law and service improvement. The third-party service providers we work with (such as payment processors for Touch 'n Go, DuitNow and GrabPay) are bound by strict confidentiality agreements and may only use data for purposes authorised by cm8huat.

You can submit a data access request by emailing support@cm8huat.net with the subject line "PDPA Data Access Request". Include your full name, cm8huat account number and sufficient details to verify your identity. cm8huat's data privacy team will first verify your identity before preparing the requested data — an important security step to ensure your data is not released to the wrong party. Valid requests will be processed within 14 business days and the data will be sent to you in a readable format. No charge applies to the first data access request within any 12-month period.

When you close your cm8huat account, most of your personal data will be deleted within a reasonable period. However, there are categories of data that cm8huat is required by Malaysian law to retain even after account closure — in particular, financial transaction records which must be kept for 7 years to comply with anti-money laundering (AML) legislation. KYC documents are retained for 5 years following account closure. Data excluded from immediate deletion will not be used for any marketing purpose, and access to such data is strictly limited to relevant compliance personnel only. You may request a full list of data retained after account closure by emailing our privacy team.

Yes, your identity documents are stored at the highest security level at cm8huat. MyKad images and other KYC documents you submit to cm8huat are encrypted in transit using 256-bit SSL and stored in an encrypted database separate from regular operational data. Access to KYC documents is strictly limited — only compliance and identity verification staff authorised by cm8huat management may access them, and every access is recorded in an audit log. These documents are used solely for identity verification and compliance with Malaysian law, and are never shared with external parties except where required by a valid legal directive.

Yes, you can opt out of marketing communications from cm8huat at any time. There are two ways to do this. First, click the "Unsubscribe" link found at the bottom of any promotional email you receive from cm8huat. Second, log in to your cm8huat account, go to Account Settings and update your communication preferences under the Notifications and Marketing section. Requests to opt out of marketing communications will be processed within 3 business days. Please note that opting out of marketing communications will not stop important account-related notifications such as transaction confirmations, security alerts and policy updates — these are service communications required to keep your account secure.
🔒

Play with Peace of Mind at CM8Huat – Your Data is Protected

Your personal data security is cm8huat's priority — not merely a legal obligation. With 256-bit SSL protection, compliance with Malaysia's PDPA 2010, and our commitment to never selling your data, you can play with complete peace of mind. Register today and enjoy a Welcome Bonus of up to RM 888 with Malaysia's trusted online casino platform.

Gambling involves risk. Play responsibly. Restricted to players aged 18 and above.

Bahasa Melayu