Privacy Policy CDM368 —
Our Commitment to Protecting Your Data

1 Introduction

CDM368 ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy clearly explains how we collect, process, store and protect your personal data when you register and use the CDM368 platform.

This policy applies to all users of cdm368.vin, the CDM368 mobile app, and all related services we offer. By registering an account or using any CDM368 service, you consent to the processing of your personal data as described in this Privacy Policy.

2 Information We Collect

CDM368 collects only the information necessary for platform operations, identity verification and legal compliance. The information we collect falls into two main categories:

Information You Provide Directly:

• Full name as per identity card
• Identity card number (MyKad) or passport
• Date of birth for age verification
• Current residential address
• Active mobile phone number
• Personal email address
• Bank account or digital wallet details for deposit and withdrawal purposes
• Identity verification (KYC) documents such as ID card photos and selfies

Information Collected Automatically:

• Your device's IP address and network information
• Web browser type and operating system used
• Game activity logs and transaction history within the platform
• App usage data including login and logout times
• General location information based on IP address (not precise GPS location)
• Cookie and session data during visits to the CDM368 platform

Data Type and Purpose Table:

3 How We Use Your Data

All information collected by cdm368 is used for legitimate, transparent purposes directly related to the platform's operations and members' needs. The following are the primary purposes for which your personal data is used:

• Process account registration and verify member identity through the KYC process
• Enables secure access to member accounts via two-factor authentication
• Process deposit and withdrawal transactions accurately and promptly
• Provide effective and responsive customer support
• Send important notifications related to accounts, transactions and selected promotions
• Detect and prevent fraud, money laundering and suspicious activities
• Meet applicable legal and regulatory compliance obligations
• Improve user experience based on analysis of platform usage patterns
• Conduct internal research to enhance the quality of cdm368 services

4 Sharing Information with Third Parties

CDM368 does not share members' personal data with third parties except in limited situations outlined below. In all such cases, we ensure the receiving party adheres to equivalent or higher data protection standards:

• Payment Providers: Required transaction information is shared with trusted payment processors such as DuitNow, FPX and digital wallet providers to facilitate financial transaction processing
• Identity Verification Providers: KYC data is shared with licensed identity verification partners to meet regulatory compliance requirements
• Statutory Authorities: CDM368 will disclose required information to regulatory authorities or law enforcement when mandated by Malaysian law
• IT Service Providers: Technical service providers and cloud computing vendors that support our platform operations may access data within the limited scope defined in confidentiality agreements

All third parties working with cdm368 are bound by strict confidentiality and data protection agreements. They are not permitted to use cdm368 member data for any purpose other than those specified in those agreements.

5 Cookies and Tracking Technologies

CDM368 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you browse the CDM368 website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, gaming sessions and security. These cookies cannot be disabled without affecting platform functionality
• Performance Cookies: Collect information on how you use the platform to help us improve service speed and stability
• Functional Cookies: Save your preferences and settings such as preferred language and display theme so you do not need to reconfigure them each time you log in
• Analytics Cookies: Helps us understand aggregated and anonymised platform usage patterns for continuous improvement purposes

6 Data Security and Protection Measures

CDM368 invests seriously in security infrastructure to ensure your personal data is protected at all times. Key security measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Database-level data encryption using AES-256 standard
• Multi-layered firewall and intrusion detection system (IDS) operating 24/7
• Security vulnerability scanning conducted periodically by independent security experts
• Role-based access control (RBAC) to ensure staff only access the data they need
• Two-factor authentication (2FA) for access to internal systems and member accounts
• A comprehensive incident response plan to ensure any data breaches are addressed promptly
• Regular internal and external security audits conducted periodically

While cdm368 takes all reasonable steps to protect your data, no system can guarantee absolute security. Members are also responsible for maintaining the security of their passwords and login credentials.

7 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by cdm368:

To exercise any of the above rights, please contact the cdm368 support team via live chat or email. We will process your request within 14 business days.

8 Data Retention Period and Deletion

CDM368 does not retain your personal data longer than necessary for the original purpose of collection or as required by Malaysian law. Our data retention policy is as follows:

• Active account data is retained for the duration of your membership at CDM368
• Following account closure, identity information and financial records are retained for 7 years to fulfil legal and regulatory obligations.
• Transaction logs and game records are retained for 24 months from the date of transaction
• Cookie and session data expire automatically after 12 months or when you clear your browser cache
• Marketing and communication data you have consented to is retained until you withdraw that consent

9 Children's Privacy and Age Protection

The cdm368 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we discover that data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information and terminate the account in question. Parents or guardians who find that their child has registered on cdm368 should contact our support team immediately.

10 Amendments to This Privacy Policy

CDM368 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data collection practices, new legal requirements, or service improvements. Members will be notified of any material changes through:

• Clear notice on the cdm368 platform homepage
• Email notifications to all registered members
• Update the "Last Updated" date at the top of this Privacy Policy page

Continued use of the cdm368 platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of the revised terms. If you do not agree with the amendments, please contact us to close your account.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cdm368 handles your personal data, please contact us through the following channels:

• Live Chat on the cdm368 platform — available 24 hours a day, 7 days a week
• Privacy Email: [email protected]
• General Support Email: [email protected]

Our team will address privacy-related enquiries within 14 business days of receipt. For more urgent matters, we recommend using the live chat channel for a faster response.

For more information about your rights under the PDPA 2010, you may also contact the Department of Personal Data Protection Malaysia directly. To read the full terms of use of our platform, please refer to Terms and Conditions CDM368.