Privacy Policy CMD398 — Your Data, Our Responsibility

CMD398 collects several categories of personal information to enable us to provide you with a secure, efficient, and personalised service. This collection occurs in two main ways — information you provide directly to us, and information collected automatically when you use our platform.

Information you provide directly:

• Registration Information — Full name, date of birth, national identity card number (MyKad), email address, mobile phone number, and your chosen password.
• KYC Information — Copies of identity documents (front and back of MyKad), verification selfie, bank statement, or latest proof of address.
• Financial Information — Bank account number, account holder name, digital wallet details (TnG, GrabPay, Boost), and cryptocurrency wallet address where applicable.
• Communications — Messages, complaints, feedback, and any communications you send to the cmd398 support team.

Information collected automatically:

• Technical Data — IP address, browser type, operating system, screen resolution, and app version.
• Usage Data — Pages visited, games played, session duration, login frequency, and wagering patterns.
• Device Data — Unique device identifier, smartphone model, and mobile network information.

All information we collect is used for clear and legitimate purposes. cmd398 does not use your data for any purpose beyond the scope stated below:

You can withdraw consent to receive promotional communications at any time by contacting the CMD398 support team or through your account settings.

CMD398 takes your privacy seriously and does not share your personal information arbitrarily. Information sharing only occurs in limited situations and for legitimate purposes:

• Payment Service Providers — Required financial information is shared with approved payment providers (FPX, TnG, GrabPay, Boost) solely for processing your deposit and withdrawal transactions.
• Game Software Providers — A small amount of technical data is shared with licensed game providers to enable you to access games within the cmd398 platform.
• Competent Authorities — cmd398 will disclose information to the relevant authorities when required by applicable Malaysian law or when a valid court order is in place.
• Fraud Prevention — In cases suspected of involving fraud or money laundering, relevant information may be shared with the competent authorities for investigation purposes.

All third parties working with cmd398 are required to comply with strict confidentiality agreements and may only use shared data for the specified purposes.

CMD398 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser that help us recognise you on return visits.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies — Collects information about how you use the platform (pages visited, time spent) to help us improve the overall user experience.
• Functional Cookies — Stores your preferences such as game selections, display settings, and preferred language to deliver a more personalised experience.
• Analytics Cookies — Helps us understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage cookie settings through your browser preferences. Disabling certain cookies may affect some features of the CMD398 platform. The CMD398 mobile app uses device identifiers in place of cookies to deliver a similar experience.

CMD398 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law. The following are general guidelines for our data retention periods:

• Active Account Data — Retained for the duration your account is active on cmd398 and for a reasonable period after account closure.
• Financial Transaction Records — Retained for a minimum of seven years in accordance with applicable accounting and anti-money laundering legal requirements.
• KYC Documents — Retained for a minimum of five years from the date of submission or until account closure, whichever is longer, in line with regulatory compliance requirements.
• Communication Logs — Customer support interaction records are retained for two years for reference and complaint resolution.
• Technical Data & Logs — System logs and technical usage data are retained for 90 days for security and debugging purposes.

When data is no longer needed, CMD398 will securely delete or anonymise it using standard, irreversible deletion methods.

As a cmd398 player, you have important rights regarding your personal data. cmd398 fully respects and facilitates the exercise of these rights:

CMD398 takes child protection extremely seriously. Our platform is exclusively for users aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

Protection measures we have implemented include:

• Age verification during registration via date of birth and identification documents.
• KYC verification requiring valid proof of age before any financial transaction is processed.
• Continuous monitoring to identify suspicious usage patterns that may indicate access by underage individuals.

CMD398 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When material amendments are made, we will notify you via:

• Notices displayed on the cmd398 website homepage.
• Email to the address registered to your account.
• In-app notifications within the cmd398 mobile app.

The "Updated" date at the top of this page indicates the date of the latest revision. Continued use of the cmd398 platform after the revision's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, the cmd398 team is always ready to assist you.

We are committed to responding to all privacy-related enquiries within 48 working hours. For cases requiring further investigation, we will provide you with regular progress updates until the matter is fully resolved.