Cmd398 | Privacy Policy

1 Introduction and Scope of This Privacy Policy

This Privacy Policy explains in detail how CMD398 ("we", "Platform") collects, processes, stores, and protects your personal information when you use the website, mobile app, and all services associated with the CMD398 platform.

As a trusted online betting platform in Malaysia, cmd398 takes data protection seriously. We comply with relevant data protection requirements and are committed to ensuring your personal information is handled in the most responsible and secure manner.

This policy applies to all individuals who register as CMD398 members, visit our website, or interact with any of our services via desktop, smartphone, or tablet. By using the CMD398 platform, you agree to the terms set out in this Privacy Policy.

2 Types of Information We Collect

CMD398 only collects information that is genuinely necessary to deliver services that are safe, efficient, and responsible. The following are the main categories of data we collect:

We do not collect sensitive data such as health information, political views, or religious beliefs. All data collection is carried out directly from you or through the platform's automated systems while you use our services.

3 How We Use Your Data

Every piece of information you provide to cmd398 is used only for legitimate and transparent purposes. We never use your data for anything unrelated to delivering our platform services. Below are the primary purposes for which your data is used:

• Identity verification and KYC — Ensures every member is a real individual aged 18 and above, in line with the platform's compliance requirements
• Transaction processing — Processes fund deposits and withdrawals quickly, accurately, and securely through your preferred payment method
• Account security — Identifies and prevents unauthorized access, fraud, and suspicious activity that could compromise your account
• Customer support — Enables the cmd398 support team to assist you in resolving any issues or inquiries more effectively
• Service improvement — Analyzes aggregated usage patterns to improve platform quality, speed, and user experience
• Legal compliance — Fulfils the reporting and record-keeping obligations required by the relevant authorities
• Platform communication — Sends important account-related notifications, relevant promotions, and security updates

4 Encryption and Security Measures

CMD398 continuously invests in high-grade security infrastructure to ensure your personal and financial data remains protected at all times. Our security systems encompass multiple complementary layers of protection.

• 256-bit SSL Encryption — All data transmitted between your device and cmd398 servers is encrypted using 256-bit SSL technology, the same standard used by leading banking institutions in Malaysia
• Data encryption at rest — Personal data stored in our databases is also encrypted to ensure it remains secure even in the event of an unexpected security breach
• Two-factor authentication (2FA) — We offer 2FA as an additional security layer that you can enable to protect your account from unauthorized access
• Real-time monitoring — Our threat detection system operates 24/7 to identify suspicious activity and respond immediately
• Regular security audits — cmd398 infrastructure undergoes independent security audits on a regular basis to ensure there are no vulnerabilities in our data protection systems
• Internal access control — Access to members' personal data among cmd398 staff is strictly limited and tightly controlled on a need-to-know basis only

5 Data Sharing with Third Parties

CMD398 upholds the principle that your personal data belongs to you. We do not sell, rent, or disclose your personal information to third parties for marketing, advertising, or any commercial purpose without your consent.

However, there are limited situations where sharing data with certain parties is necessary to ensure the platform operates safely and in compliance with the law:

• Payment processors — Required transaction information is shared with licensed payment service providers to enable deposits and withdrawals to be processed securely
• Game service providers — Required game session data is shared with licensed game software providers to ensure a smooth and fair gaming experience
• Legal authorities — We will disclose information to law enforcement agencies or regulatory bodies only when required by a court order or valid legal obligation
• Identity verification services — Minimum necessary data is shared with licensed KYC service providers for identity document verification purposes

All third parties working with cmd398 are bound by strict data confidentiality agreements and are required to meet the same or higher data protection standards that we uphold.

6 Cookies, Tracking and Related Technologies

CMD398 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns in aggregate. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — Required for core platform functions such as login verification, session management, and security; cannot be disabled without affecting essential functionality
• Performance cookies — Collects information on how you use the platform (pages visited, time spent, errors encountered) to help us improve our services
• Functional cookies — Remembers your preferences such as language, display settings, and login details to deliver a more personalized experience
• Security cookies — Used to detect suspicious access patterns and protect your account from unauthorized login attempts

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and experience of using the CMD398 platform.

7 Your Rights as a CMD398 Member

CMD398 fully respects your rights regarding personal data. As a member of our platform, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, please contact the cmd398 customer support team via 24/7 live chat or email. We will process your request within 30 business days of receipt.

8 Data Retention and Deletion Policy

CMD398 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Our retention policy is as follows:

• Active account data — Retained for the duration your account is active and for a reasonable period after account closure
• Financial transaction records — Retained for a minimum of seven (7) years in line with financial and accounting legal requirements
• Security logs — Retained for 12 to 24 months for security incident investigation purposes if required
• KYC records — Retained for the period required by the relevant compliance obligations, typically no less than five (5) years
• Support communication data — Retained for 24 months after case resolution for quality assurance and training purposes

When your data is no longer needed and there is no legal obligation preventing its deletion, CMD398 will securely delete or anonymise that data using industry-recognised methods.

9 Changes to This Privacy Policy

CMD398 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or improvements in how we protect your data. Every change made is intended to provide better protection for our members.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this page
• Displaying a clear notice on the platform's home page for a reasonable period
• Sending email notifications to registered members for significant changes

Your continued use of the cmd398 platform after any amendments take effect will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account in accordance with the established procedure.

10 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how cmd398 handles your personal data, our team is ready to help. We take every privacy-related enquiry seriously and will respond within a reasonable timeframe.

For formal complaints relating to data protection, you may contact our data protection officer directly through our support channels. We are committed to resolving every complaint within 30 business days of receipt.