🔒 cm2 Official Documents

Privacy Policy cm2 – Personal Data Protection for Malaysian Players

Cm2 is fully committed to protecting the privacy and personal data of all users on our platform. This document clearly outlines what data we collect, how it is used, and your rights as a cm2 user in Malaysia.

Updated: 1 January 2026
cm2's Privacy Commitment
256-bit SSL Encryption for All Data
Compliant with Malaysia PDPA 2010
No Data Sales to Third Parties
Full User Control Over Your Data
Data Request Response Within 30 Days
cm2 DATA PROTECTION

6 Ways cm2 Protects Your Personal Information

The cm2 Privacy Policy is more than just a document — it is a genuine commitment we uphold every day to protect the data of Malaysian players.

256-bit SSL Encryption

All data transmitted between your device and cm2's servers is protected with 256-bit SSL encryption — the same level of protection used by Malaysia's leading online banking platforms such as Maybank2u and CIMB Clicks.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, 24/7 monitoring, and encrypted backups. cm2 does not directly store credit card or banking information — all transactions are processed through approved gateways.

Malaysia PDPA Compliance

Cm2 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means the collection, processing, and storage of your data adheres to all applicable data protection legal requirements in Malaysia.

Full Control by You

You have the full right to access, correct, and request the deletion of your personal data held by cm2. You may also withdraw your consent to data processing at any time by contacting our support team.

No Data Sales

Cm2 has never and will never sell, rent, or transfer your personal data to any third party for marketing purposes. Your data is only shared under very limited circumstances, as clearly set out in this policy.

Data Breach Notification

In the event of any security incident involving your personal data, cm2 is committed to notifying you within a reasonable timeframe in accordance with Malaysia PDPA requirements, and will take immediate steps to contain and remediate the situation.

1

Introduction & Scope of This Policy

This Privacy Policy is published by cm2, an online betting platform operating at https://cm2-jit.com. This document explains in detail how cm2 collects, uses, stores, discloses, and protects your personal information when you use our platform, products, and services.

Cm2 takes user privacy very seriously. We understand that the trust of Malaysian players is the foundation of everything we do, and that trust begins with transparent and responsible data management. Every decision we make regarding your data is guided by the principle of "minimum necessity" — we only collect data that is genuinely required to deliver a quality service to you.

This Privacy Policy applies to all cm2 users, including:

  • Website visitors who have not registered
  • Registered members using the cm2 platform
  • Individuals who contact cm2 customer support
  • Cm2 mobile app users

By using the cm2 platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and agree to the data processing practices described herein. If you do not agree, please discontinue use of the cm2 platform.

Governing Law: cm2's Privacy Policy is governed by the Personal Data Protection Act (PDPA) Malaysia 2010 and all regulations issued under it. cm2 fully complies with all applicable data protection legal requirements in Malaysia.


2

Personal Data We Collect

Cm2 collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and the purposes it serves:

A. Data You Provide Directly

Data Category Example Purpose of Collection
Registration Information Username, password, Malaysian phone number Creating and verifying your cm2 account
Personal Identification Information Full name, Malaysian identity card number, date of birth Identity verification (KYC) and legal compliance
Contact Information Email address, WhatsApp number Service communications, security notifications
Financial Information E-wallet account numbers (TNG, GrabPay, DuitNow), bank name Processing deposits and withdrawals in MYR
Verification Documents MyKad copy, Malaysian bank statements, utility bills KYC verification and anti-money laundering

B. Data Collected Automatically

When you use the cm2 platform, our systems automatically record certain technical information required for the platform to operate securely and smoothly:

  • IP address and network information
  • Device type, operating system, and web browser
  • Login history and session activity
  • Gaming and betting activity data (for service and audit purposes)
  • Cookies and similar tracking technologies
  • Platform performance data and error reports

C. Data From Authorised Third Parties

In certain circumstances, cm2 may receive your personal data from authorised third parties, including:

  • Identity verification service providers for KYC purposes
  • Malaysian payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX) for transaction verification
  • Recognised fraud prevention agencies

Data Minimisation Principle: cm2 only collects data that is strictly necessary to provide services to you. We do not collect sensitive data such as health information, political views, or religious beliefs.


3

How cm2 Uses Your Data

Cm2 uses collected personal data solely for legitimate, clearly stated purposes. We will not use your data for any purpose beyond those described below without first obtaining your renewed consent.

Primary Purposes of Data Use:

  • Service Delivery: Creating and managing your cm2 account, processing deposits and withdrawals in MYR via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and enabling access to all cm2 games.
  • Identity Verification (KYC): Verifying your identity to meet the anti-money laundering (AML) and Know Your Customer (KYC) legal requirements prescribed under Malaysian law.
  • Platform Security: Detecting and preventing fraud, collusion, multiple account usage, unauthorised access, and other suspicious activities that could compromise the integrity of the cm2 platform.
  • Service Communications: Sending important account-related notifications, transaction confirmations, security updates, and changes to cm2's policies or terms.
  • Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the interface, performance, and overall user experience of the cm2 platform.
  • Legal Compliance: To fulfil the legal and regulatory obligations applicable to cm2's operations in Malaysia, including record retention as required by law.
  • Customer Support: Enables the cm2 Malay-speaking support team to effectively resolve your enquiries, complaints, and technical issues.

Marketing Communications: cm2 may send you promotions, bonus offers, and new product information via email or in-app notifications. You can opt out of these marketing communications at any time by using the "unsubscribe" link in any email or by contacting cm2 support. Please note that opting out of marketing does not affect essential service communications related to your account.

Legal Basis: cm2's processing of your personal data is based on: (1) the execution of the service contract between you and cm2, (2) compliance with legal obligations, (3) cm2's legitimate interest in operating a safe and lawful platform, and (4) your consent where applicable.


4

Disclosure of Data to Third Parties

Cm2 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. This is a commitment we hold firmly. However, in the course of operating the platform, cm2 may share your data with a limited category of third parties under the following circumstances:

Trusted Service Providers

Cm2 works with third-party service providers who assist us in operating the platform. These include:

  • Malaysian payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX) — for processing your financial transactions
  • Identity verification service providers — for KYC purposes
  • Cloud service and data hosting providers — for secure data storage
  • Game software providers — game data required to operate live casino, poker, and e-sports games
  • Email and communications service providers — for the delivery of service notifications

All third-party service providers are required to adhere to strict security and privacy standards that are equivalent to or exceed Malaysia PDPA requirements, and are prohibited from using your data for any purpose other than the services they provide to cm2.

Legal Obligations

Cm2 may be required to disclose your personal data to the relevant Malaysian authorities when mandated by law, court order, or valid legal process. This includes:

  • Malaysian law enforcement agencies
  • Malaysian tax authority (LHDN)
  • Relevant regulatory bodies
  • Courts and competent judicial bodies

In such cases, cm2 will endeavour to notify you of the data disclosure request where permitted by law to do so.

International Data Transfers: Some of our service providers may operate outside Malaysia. In such cases, cm2 ensures that all cross-border data transfers are safeguarded by appropriate data protection agreements that comply with Malaysia's PDPA requirements.


5

Data Retention Period

Cm2 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following is a general guide to cm2's data retention periods:

  • Active Account Data: Retained for as long as your cm2 account remains active. Data is continuously updated based on your latest activity.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements, even after account closure.
  • KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, in accordance with Malaysia's AML legal requirements.
  • Support Communication Logs: Retained for two (2) years for quality control and dispute resolution purposes.
  • Security & Technical Logs: Retained for ninety (90) to three hundred and sixty-five (365) days depending on the type of data.
  • Marketing Data: Retained until you withdraw your consent or contact cm2 to have the data deleted.

Once the relevant retention period has expired, cm2 will securely delete or anonymise your personal data using recognised methods, ensuring it cannot be recovered or re-identified.


6

Your Rights as a cm2 User

Under Malaysia PDPA 2010 and cm2's Privacy Policy, you have the following rights regarding your personal data. cm2 is committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to obtain a copy of the personal data cm2 holds about you. cm2 will fulfil this request within 30 days of receiving your application.

2
Right to Rectification

You have the right to request corrections to any personal data that is inaccurate or incomplete. Corrections will be carried out within a reasonable timeframe, and you will be notified once done.

3
Right to Withdraw Consent

You may withdraw your consent to data processing at any time. Withdrawing consent may affect cm2's ability to provide certain services to you.

4
Right to Opt Out of Marketing

You may opt out of marketing communications at any time without affecting important service communications related to your cm2 account.

5
Inquiry & Complaint Rights

You have the right to enquire about how cm2 handles your data and to submit a complaint if you are dissatisfied with our privacy practices.

6
Right to Restrict Processing

Under certain circumstances, you may request that cm2 restrict the processing of your data while a dispute is being resolved or a review is in progress.

To exercise any of the above rights, please contact the cm2 Data Privacy Officer by email at support@cm2-jit.com, clearly stating the right you wish to exercise and your account information. cm2 may require identity verification before processing your request to ensure the security of your data.


7

Cookies & Tracking Technologies

The cm2 platform uses cookies and similar tracking technologies to enhance user experience and platform security. Cookies are small text files stored on your device when you visit the cm2 website.

Types of Cookies Used by cm2:

  • Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and basic navigation. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Gathering information on how users interact with the cm2 platform — such as the most frequently visited pages and error messages encountered — to help cm2 improve platform performance.
  • Functional Cookies: Allows the platform to remember your preferences — such as your preferred language, display settings, and login information — to deliver a more personalised experience.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure secure access to your cm2 account.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the cm2 platform or your user experience. cm2 does not use third-party cookies for third-party marketing purposes.

Cookie Notice: cm2 cookies do not contain any information that can be used to directly identify you. Cookie data is stored securely and used solely for platform operational and security purposes.


8

Data Security & Protection Measures

Cm2 continually invests in robust security infrastructure to protect your personal data. The technical and organisational security measures we implement include:

  • Data Encryption in Transit: All communications between your browser and cm2's servers are encrypted using 256-bit TLS/SSL, ensuring your data cannot be intercepted in transit.
  • Encryption of Data at Rest: Sensitive data stored on cm2 servers is encrypted using recognised industry standards.
  • Strict Access Controls: Only cm2 staff who require access to specific data to perform their duties are permitted to access it. All access is logged and monitored.
  • Two-Factor Authentication (2FA): cm2 provides 2FA options for user accounts and uses it internally for all administrator access to systems containing user data.
  • 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect anomalies, intrusion attempts, and suspicious activity.
  • Regular Security Testing: cm2 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities.
  • Staff Training: All cm2 staff who handle personal data receive comprehensive privacy and security training.

While cm2 takes all reasonable steps to protect your data, no system can guarantee 100% security. You also play an important role in keeping your account safe — please use a strong and unique password, enable 2FA, and never share your login credentials with anyone.


9

Contact Us & Policy Amendments

If you have any questions or concerns, or wish to exercise any of your privacy rights, please contact cm2's Data Privacy Officer via:

  • Email: support@cm2-jit.com (please use "Data Privacy Request" as the email subject)
  • Live Chat: Available within the cm2 platform, 24/7 in Bahasa Malaysia
  • WhatsApp: Contact the cm2 support team for urgent matters relating to data privacy

Cm2 is committed to responding to all privacy-related inquiries within 30 days of receipt. For complex cases requiring further investigation, we will keep you informed of any expected delays and the progress of the review.

Privacy Policy Amendments

Cm2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. For material amendments — meaning changes that significantly affect how we process your data — cm2 will provide clear notice at least 14 days before the changes take effect, via in-platform notifications or your registered email.

The "Updated" date at the top of this document will always reflect the date of the latest version of this Privacy Policy. We encourage you to review this page periodically to stay informed about how cm2 protects your personal information.

Effective Date: This Privacy Policy takes effect on 1 January 2026. Continued use of the cm2 platform after any changes are published will be considered acceptance of the updated terms.

Cm2's Privacy Commitment to Malaysian Players

Cm2 never sells your personal data to third parties. All financial transactions via Touch 'n Go, DuitNow, GrabPay, FPX, and other Malaysian payment methods are protected with 256-bit SSL encryption. You have full control over your data — to exercise your rights or make an enquiry, reach us at support@cm2-jit.com. For more information on the platform's terms of use, please read Terms & Conditions us. For responsible gaming tools, visit the Responsible Gaming us.

FREQUENTLY ASKED QUESTIONS

FAQs – cm2 Privacy Policy

Clear answers to the most frequently asked questions about data privacy on the cm2 platform.

cm2 does not sell or share your personal data with third parties for their marketing purposes. Your data is only shared under three strictly limited circumstances: (1) with service providers that help us operate the platform, such as payment gateways Touch 'n Go, DuitNow, and FPX, (2) when required by Malaysian law or court order, and (3) with your explicit consent. All service providers are bound by strict confidentiality agreements and are not permitted to use your data for any purpose beyond what is specified.

To request a copy of your personal data held by cm2, send an email to support@cm2-jit.com with the subject line "Personal Data Access Request". Please include your username or the email address registered to your cm2 account. cm2 may require additional identity verification before processing your request to ensure data security. We will fulfill valid requests within 30 days from the date identity verification is completed. Data will be provided in a readable format.

When you close your cm2 account, we will deactivate it and begin the data deletion process. However, certain data will be retained for a specified period in accordance with Malaysian legal requirements — for example, financial transaction records must be kept for at least seven (7) years under anti-money laundering laws. Data that is no longer legally required will be deleted or anonymised within a reasonable period after account closure. You may contact cm2 support for more information on the specific data that will be retained and the applicable retention periods.

No. cm2 does not directly store your credit card details or sensitive banking information. When you make a deposit or withdrawal via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), the transaction is processed directly by the respective payment gateway, which complies with PCI-DSS security standards. cm2 only receives confirmation of whether a transaction was successful or failed — not your full financial details. This means that even in the event of a security incident on cm2's end, your sensitive financial information remains protected.

You can opt out of promotional emails from cm2 in two simple ways: (1) click the "Unsubscribe" link found at the bottom of any marketing email we send, or (2) contact cm2 support via live chat or email at support@cm2-jit.com and request to be removed from the marketing list. Requests will be processed within 5 business days. Please note that opting out of marketing emails does not affect important transactional emails such as deposit confirmations, withdrawal notifications, or account security alerts related to your cm2 account.
JOIN cm2 WITH CONFIDENCE

Your Data Is Safe. Your Experience, Guaranteed.

Cm2 protects your privacy with 256-bit SSL encryption and full compliance with Malaysia's PDPA. Register today and enjoy Malaysia's best betting experience with complete peace of mind.

Data Protection
256-bit SSL
|
Compliance
Malaysia PDPA
|
Minimum Deposit
RM 10
|
BM Support
24/7
Bahasa Melayu