CMD398 is fully committed to protecting the privacy and data security of every member. Learn how we manage your information with complete trust and transparency.
CMD398 ("we", "Platform", "cmd398") values the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, store, protect, and disclose your personal data when you use the cmd398 platform — whether via website, mobile app, or any other digital channel provided by cmd398.
This policy applies to all cmd398 platform users, including website visitors, prospective members in the registration process, active registered members, and former members whose accounts have been closed. By using any part of the cmd398 platform, you agree that your personal data will be processed in accordance with the terms set out in this document.
Our Commitment: CMD398 has never sold and will never sell members' personal data to any third party for commercial purposes. Your data is collected solely to operate our services and improve your experience on our platform.
This Privacy Policy should be read together with CMD398's Terms and Conditions and our Responsible Gaming Policy. These documents together form a comprehensive user protection framework on the cmd398 platform.
CMD398 collects several categories of information depending on the nature of your interaction with our platform. This information falls into two main categories: information you provide directly and information collected automatically.
| Data Category | Example Information |
|---|---|
| Identity Information | Full name, identification card number (MyKad/passport), date of birth, gender |
| Contact Information | Email address, phone number, residential address |
| Account Information | Username, password (stored in encrypted form), security questions |
| Financial Information | Bank account number, e-wallet information, transaction history |
| KYC Documents | MyKad/passport copy, proof of residence, bank statement for verification |
When you use the cmd398 platform, our system automatically records the following technical information for security and service improvement purposes:
Note: The location information we collect is only an estimate based on IP address and does not record your device's GPS location. CMD398 does not access your device's camera, microphone, or other sensors.
Every piece of personal data collected by CMD398 has a clear and legitimate purpose. We do not use your data for purposes outside the scope stated below without obtaining your consent first.
CMD398 only processes your personal data on the following legally recognised bases:
CMD398 does not share members' personal data with third parties except in the following limited and legitimate situations:
We share necessary information with third-party service providers that assist us in operating the platform — including payment gateway providers, identity verification service providers, and cloud computing infrastructure. All such providers are bound by strict confidentiality agreements and are only permitted to use data for purposes specified by cmd398.
CMD398 will disclose member information to authorities when required by law, court order, or legitimate criminal investigation. This includes disclosure to law enforcement agencies in cases of fraud, money laundering, or other financial crimes.
In the event of any merger, acquisition, or sale of cmd398 assets, user data may be transferred as part of that transaction. You will be notified in advance via email and an in-platform notice before any data is transferred and before it becomes subject to a different privacy policy.
Notice: CMD398 never sells, rents, or trades members' personal data to advertisers, marketing companies, or any third party for their own commercial purposes.
Protecting members' personal data is among cmd398's highest priorities. We continuously invest in the latest security infrastructure to ensure your information remains safe from unauthorized access, data breaches, or misuse.
Incident Reporting: In the event of any security incident affecting your data, cmd398 will notify you within 72 hours of the incident being detected and confirmed.
CMD398 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. The following are our data retention guidelines:
| Data Type | Retention Period |
|---|---|
| Active account information | Throughout active account + 5 years after closure |
| Financial transaction records | 7 years (tax & AML legal requirements) |
| KYC Documents | 5 years after account closure |
| Security & audit logs | 2 years from record date |
| Customer support data | 3 years from date of last interaction |
| Cookie & session data | 90 days or until logout |
Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it can no longer be linked to your identity.
As a cmd398 platform user, you have certain rights regarding your personal data. CMD398 fully respects and facilitates the exercise of these rights. Requests relating to the rights below may be submitted to the cmd398 support team.
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete data in your account.
Request deletion of your data when it is no longer needed, subject to legal obligations.
Object to the processing of your data for direct marketing purposes.
Receive your data in a structured, machine-readable format.
Restrict the processing of your data while a complaint investigation is in progress.
We will process all requests relating to the above rights within 30 business days. For more complex requests, this period may be extended up to 60 days with prior notice to you.
CMD398 uses cookies and similar tracking technologies to enhance platform functionality and security. Cookies are small data files stored on your device when you visit the cmd398 website.
You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the cmd398 platform, including your ability to stay logged in and access certain features.
CMD398 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. Any material changes will be communicated to members via their registered email and a prominent notice on the platform at least 14 days before the changes take effect.
The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy currently in effect. Continued use of the cmd398 platform after the effective date of any changes constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests regarding this Privacy Policy or how CMD398 handles your personal data, please contact us through the following channels:
The cmd398 Data Protection Officer (DPO) team will address all privacy-related inquiries within 5 business days.
Six layers of protection working simultaneously to safeguard the personal information of every cmd398 member.
All data transmitted between your device and cmd398 servers is protected with 256-bit SSL encryption. No one can intercept or read your information in transit, including login credentials and financial transactions.
The cmd398 KYC process uses industry-recognised document verification technology. Your documents are processed and stored in an isolated environment with strict access controls, ensuring only authorised personnel can review them.
Enable 2FA on your cmd398 account for robust added protection. Even if your password is compromised, hackers still cannot access your account without the verification code sent directly to your phone.
The cmd398 automated threat detection system monitors all platform activity around the clock. Any unusual pattern – such as login attempts from unfamiliar locations or suspicious transactions – will trigger an immediate alert.
Cmd398 member deposit funds are kept separate from the company's operational funds. Likewise, sensitive member data is stored in an environment isolated from general systems, minimising the risk of accidental data exposure.
The cmd398 security infrastructure is reviewed regularly by independent third-party security auditors. These audits ensure our protection standards continuously keep pace with the latest cyber threats and industry best practices.
With a transparent Privacy Policy and industry-grade security infrastructure, you can enjoy every game on cmd398 with full confidence. Your data is safe, your funds are protected.