Cmd368 takes the protection of every Malaysian member's personal data seriously. This Privacy Policy transparently explains how we collect, store, use, and protect your information throughout your use of our online betting platform.
All data is transmitted via high-grade SSL encryption.
Your information is never sold or shared for third-party marketing purposes.
You have the right to access, amend, or delete your personal data at any time.
Cmd368 is fully compliant with Malaysia's Personal Data Protection Act 2010.
We implement best-practice technical and organisational measures to safeguard the security of your personal data
All cmd368 member data is stored on secure servers protected with AES-256 encryption. Database access is strictly limited to authorised personnel only, with comprehensive audit logs maintained for every access event.
Your payment information via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX is never stored directly within cmd368's systems. We use licensed third-party payment processors that comply with the latest PCI-DSS standards.
Cmd368 will not sell, rent, or share your personal data with any third party for marketing or commercial purposes without first obtaining your explicit and informed consent.
Cmd368's Privacy Policy is designed and regularly updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010. We respect every Malaysian's right to control their own personal information.
You have full control over marketing communications from cmd368. You may unsubscribe from promotional emails, SMS notifications, or push notifications at any time through your account settings, with no penalties or hassle.
Cmd368 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal requirements. Once it is no longer needed, your data will be securely deleted in accordance with our established procedures.
Cmd368 ("we", "the Platform", or "cmd368") is a licensed online betting platform committed to protecting the privacy of all our members and users. This Privacy Policy applies to all services provided by cmd368 through our official website, mobile applications, and all digital platforms we operate.
This Privacy Policy transparently explains how cmd368 collects, processes, stores, uses, discloses, and protects your personal data. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations in force.
The information in this policy is accurate as of the date it was last updated. We encourage you to review this Privacy Policy periodically, as it may be updated from time to time to reflect changes in our practices or new legal requirements.
Cmd368 collects various types of personal data depending on the services you use and your interactions with our platform. The following are the main categories of data we collect:
| Data Category | Example Information | Requirement |
|---|---|---|
| Identity Information | Full name, date of birth, IC / passport number | Mandatory – identity verification |
| Contact Information | Email address, Malaysian mobile number | Required – account communications |
| Financial Information | Payment methods (Touch 'n Go, GrabPay, DuitNow, FPX), RM transaction history | Mandatory – deposit & withdrawal processing |
| Gaming Activity Data | Betting history, games played, wins and losses | Required – platform operations |
| Technical Data | IP address, device type, web browser, operating system, cookie data | Automatic – system security |
| Location Data | Country/region location based on IP address | Automatic – regulatory compliance |
| Communications | Live chat records, support emails, complaints submitted | Optional – customer support |
Cmd368 does not collect sensitive information such as biometric data, medical records, or religious information unless specifically required by applicable law. We collect only the data genuinely necessary to provide the services you request.
Cmd368 collects your personal data through several key channels, as follows:
Cmd368 uses the personal data we collect for legitimate and specific purposes only, as outlined below. We will not process your data for any purpose not listed here without notifying you in advance:
Cmd368 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited situations and for legitimate purposes, we may share your data with the following categories of parties:
All third parties with whom we share data are required to uphold data protection standards equivalent to our own and are permitted to use that data only for purposes agreed upon in writing with cmd368.
Cmd368 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures we employ include:
The cmd368 website uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and maintain the security of your session. The types of cookies we use are as follows:
You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the cmd368 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by cmd368:
To exercise any of the rights above, please contact cmd368's data protection team by email at privacy@cmd368-khelo.com. We will process your request within 30 calendar days. In complex cases, this period may be extended to up to 60 days, with prior notification to you.
Please note that these rights are subject to certain legal exceptions. For example, we may be unable to delete your data if its retention is required to fulfil a legal obligation or to defend against legal claims.
Cmd368 services are exclusively available to individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.
Should we discover that personal data of a child has been collected inadvertently, we will take immediate steps to delete that data from our systems and close the account in question. Parents or guardians who believe their child has registered an account with cmd368 are required to contact us promptly through the available support channels.
In the course of operating the cmd368 platform, your personal data may be transferred to and processed in countries outside Malaysia where our servers or third-party service providers are based. Such transfers are carried out only when:
Cmd368 ensures all international data transfers comply with Malaysia's PDPA requirements and applicable data protection agreements. We do not transfer your data to countries that lack adequate data protection standards without appropriate contractual safeguards in place.
Cmd368 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. General data retention guidelines are as follows:
| Data Type | Retention Period | Basis |
|---|---|---|
| Active Account Data | Throughout the active account period | Ongoing service operations |
| Financial Transaction Records (MYR) | 7 years after the transaction | Tax compliance & AML |
| KYC Verification Data | 5 years after account closure | Regulatory requirements |
| Support Communication Logs | 3 years | Dispute resolution |
| Technical Data & System Logs | 12 months | Security & troubleshooting |
| Marketing Data (with consent) | Until consent is withdrawn | Promotional communications |
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with you. The deletion process follows established technical procedures to ensure data is irrecoverable.
Cmd368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or technological developments. The "Updated" date at the top of this document will always reflect the date on which the latest amendment took effect.
When material changes are made to this Privacy Policy, cmd368 will notify you through one or more of the following methods:
Your continued use of the cmd368 platform after any amendment takes effect will be deemed acceptance of the revised Privacy Policy. If you do not agree with the amendments, you have the right to close your account and discontinue use of the platform.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how cmd368 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:
We are committed to addressing all privacy-related enquiries seriously and will respond within 5 business days. For formal complaints requiring in-depth investigation, we aim to resolve them within 30 calendar days.
If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory authority under PDPA 2010.