Rujukan Laman

How cmc88 Protects Your Personal Data

At cmc88, we take how we handle your personal data seriously — from the moment you open an account to every transaction you make using Touch 'n Go…

Data EncryptionAccount SecurityYour RightsMalaysian Law AppliesContact Us Anytime
cmc88 How cmc88 Protects Your Personal Data
HUBUNGI PASUKAN KAMI

Reach Our Data Privacy Team

If you have a question about how your data is handled, want to request a copy of what we hold, or need to flag a concern…

Live Chat Start a live chat directly from your cmc88 account dashboard.
Email Support Send a detailed privacy request to our support email.
Help Centre Our help centre contains step-by-step articles on submitting a data request, updating your personal…
KESELAMATAN DAN KAWALAN DATA

How We Safeguard Your Account Data

Protecting the data attached to your cmc88 account is an ongoing operational commitment, not a one-time setup.

Encryption in Transit and at Rest

All data exchanged between your device and our servers is encrypted using TLS. Stored account data — including payment method identifiers for Touch 'n Go and GrabPay — is encrypted at rest so it cannot be read if a server is ever accessed without authorisation.

Cookie Policy

We use session cookies to keep you logged in and preference cookies to remember your language and lobby layout. Analytics cookies help us understand how features are used. You can adjust non-essential cookie settings from your account preferences at any time.

Account Access Controls

Your account is protected by a password you set and, where enabled, two-factor authentication. We log every login attempt and flag unusual access patterns — such as a new device or location — so you are notified before any change is actioned.

Data Retention Schedule

We keep your account data for as long as your account is active and for the period required by Malaysian financial and regulatory obligations after closure. Once the retention period expires, data is securely deleted or anonymised from our systems.

Your Right to Access and Correct

You have the right to request a copy of the personal data we hold about you, correct anything inaccurate, and ask us to delete data we no longer need to hold. Submit any of these requests through live chat or our support email and we will action it within 14 working days.

Third-Party Processors

We share data only with processors necessary to run the platform — payment rails including Boost and FPX, identity verification providers where required by law, and our cloud hosting partner. Each processor is bound by a data processing agreement aligned to Malaysian data protection requirements.

Privacy Policy Questions Answered

Below are the questions we hear most often about how cmc88 handles personal data. If your question is not covered here, reach out through live chat or email and our privacy team will respond directly.

We collect your name, email address, phone number, date of birth, and the payment identifiers you link to your account — such as your Touch 'n Go or GrabPay details. We also log device data, IP addresses and session activity to secure your account.

We share data only with processors needed to operate the platform, such as payment providers including Boost dan FPX, and identity verification services where local law requires it. We do not sell your personal data. Every processor is contractually bound to protect it.

Your data is retained for as long as your account is active. After closure, we keep it for the period mandated by Malaysian financial regulations. Once that retention period ends, your data is securely deleted or anonymised so it can no longer be linked back to you.

Send a data access request via live chat or our support email, using your registered email address so we can verify your identity. We will compile and send you a copy of your personal data within 14 working days of confirming your identity.

Yes. You can request deletion of data we are not legally required to retain. Submit the request through live chat or email. We will confirm what can be deleted immediately and what must be held to meet Malaysian regulatory obligations before completing the deletion.

We use cookies to maintain your login session, remember your lobby preferences, and analyse platform usage. Non-essential analytics cookies can be turned off in your account preferences. Essential session cookies are required for the platform to function and cannot be disabled while you are logged in.

Contact our privacy team immediately through live chat so we can review your account activity, secure your login, and investigate. We take data breach reports seriously and will notify you of any confirmed incident affecting your personal data as required under applicable Malaysian law.