Cs2skin Privacy Policy – Personal Data Protection for Malaysian Members

Cs2skin is an online betting platform operating to serve players in Malaysia. As part of our platform operations, cs2skin needs to collect and process certain personal data from members. This Privacy Policy transparently explains our data handling practices.

This policy applies to all personal data collected through the cs2skin.biz platform, including during the registration process, use of services, financial transactions, and interactions with our customer support team. It also covers data collected automatically, such as server log data and browser cookies.

This cs2skin Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles.

Cs2skin collects two main categories of data: information you provide directly, and data collected automatically as you use the platform.

Data You Provide Directly:

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, screen resolution, device type (mobile, tablet, desktop).
• Usage Data: Pages visited, session duration, clicks, and interactions within the cs2skin platform.
• Transaction Data: Deposit history, withdrawals, bets, winnings, and losses – retained for account records and compliance requirements.
• Approximate Location Data: State or region in Malaysia based on IP address – to ensure services are appropriate to your location.

Cs2skin uses members' personal data only for legitimate and necessary purposes. Each use of data has a clear justification:

• Account Management: Creating and maintaining your cs2skin account, including identity verification, password management, and security settings.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as managing withdrawals to your Malaysian bank account or e-wallet.
• Service Delivery: Providing access to all cs2skin games – slots, Live Casino, Sports Betting, jackpot, roulette, and e-sports.
• Platform Security: Detecting and preventing fraud, money laundering, multi-accounting, and other harmful activities that could compromise the platform or other members.
• Customer Support: Resolving queries, complaints, and technical support requests submitted to the cs2skin support team.
• Legal Compliance: Meeting Malaysian legal requirements including PDPA 2010, KYC, and AML (Anti-Money Laundering) obligations.
• Marketing (With Consent): Sends information about promotions, bonuses, and cs2skin platform updates – only to members who have consented to receive marketing communications.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve the cs2skin user experience.

Cs2skin does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, there are limited situations where cs2skin needs to share data with specific parties to keep the platform operational:

• Payment Service Providers: Payment gateways processing DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX transactions require basic transaction data to process payments. All these providers comply with PCI-DSS standards and Malaysia's PDPA.
• Game Providers: Slot and casino providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive only the minimum session data required to run games. No personal identity data is shared with game providers.
• Identity Verification Services: For KYC processing, cs2skin uses recognised third-party document verification services that comply with Malaysia's PDPA.
• Legal Authorities: cs2skin will disclose personal data to Malaysian authorities where required by law, court order, or a valid official investigation.
• Compliance Auditors: Independent auditors engaged to verify cs2skin's licence compliance may access data on a limited basis under strict confidentiality agreements.

All third parties who receive cs2skin member data are bound by data protection agreements that require them to handle such data to a standard equal to or higher than this Privacy Policy.

Cs2skin invests seriously in security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your browser and cs2skin's servers are encrypted using TLS 1.3 with a 256-bit SSL cipher suite — the highest standard currently available.
• Stored Data Encryption: Sensitive data stored in the cs2skin database is encrypted at rest using AES-256.
• Strict Access Control: Only authorised cs2skin staff with a legitimate business need may access members' personal data. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): cs2skin encourages members to enable 2FA for an additional layer of security on their accounts.
• 24/7 Security Monitoring: An automated threat monitoring system operates around the clock to detect any suspicious activity that could compromise member data.
• Regular Penetration Testing: cs2skin conducts regular penetration testing by independent security experts to identify and patch system vulnerabilities.

Cs2skin uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following types of cookies are used:

• Essential Cookies: Required for the cs2skin platform to function — including login session management, account security, and language preferences. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Collects data on how members use the cs2skin platform (most visited pages, time spent) to help us improve the user experience. This data is aggregated and does not identify individuals.
• Functional Cookies: Saving your preferences such as preferred currency (MYR), language, and display settings so you do not have to reconfigure them each time you log in to cs2skin.
• Analytics Cookies: cs2skin uses internal analytics tools to understand platform usage trends. This data is not shared with any third-party analytics platforms.

You can manage or block cookies through your browser settings; however, please note that blocking essential cookies may affect the functionality of the cs2skin platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Cs2skin retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law:

• Active Accounts: Personal data is retained for the duration that your cs2skin account remains active. This allows us to provide uninterrupted service and meet our compliance obligations.
• Financial Transaction Records: In accordance with Malaysian legal requirements relating to AML and tax compliance, transaction records are retained for seven (7) years from the date of the transaction.
• KYC Records: Identity verification documents are retained for five (5) years from account closure or from the date of the most recent document update.
• Communication Logs: Interaction records with cs2skin's customer support are retained for two (2) years for reference and service quality improvement purposes.
• Inactive Accounts: Account data that has been inactive for more than three (3) years will be anonymised — personal identifiers are deleted, and only aggregated, non-identifiable statistics are retained.

Once the retention period expires or you request data deletion, cs2skin will securely delete or anonymise your data in a manner that prevents it from being recovered or re-linked to you.

As a cs2skin member and data subject under Malaysia's PDPA, you have the following rights with respect to your personal data:

The cs2skin platform is strictly for adults aged 18 and above. cs2skin does not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their underage child has registered on cs2skin should contact us immediately at support@cs2skin.biz.

Cs2skin reserves the right to amend this Privacy Policy from time to time to reflect changes in law, industry practices, or our service operations. When material changes are made, we will:

• Notifying members via their registered email and in-platform notifications at least seven (7) days before changes take effect.
• Updating the "Last Updated" date at the top of this document.
• Archiving copies of previous versions of the Privacy Policy, which members may request if needed.

Continued use of the cs2skin platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data.

Cs2skin complies with Malaysia's Personal Data Protection Act 2010 (Act 709) in all aspects of personal data collection and processing. This means:

• General Principles: Personal data is only processed for purposes that are lawful, relevant, and not excessive.
• Security Principle: Practical security measures are in place to protect data from unauthorised access, processing, loss, and destruction.
• Retention Principle: Data is not retained for longer than necessary for the stated purposes.
• Integrity Principle: Reasonable steps are taken to ensure that personal data is accurate, complete, not misleading, and up to date.
• Access Principles: Data subjects are given access to their own data and may request corrections if the data is inaccurate.

As a PDPA-compliant data processor, cs2skin has appointed an internal privacy officer responsible for ensuring ongoing compliance with Malaysia's data protection legal requirements.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cs2skin, please contact us through the following channels:

• Privacy Email: support@cs2skin.biz – please mark the email subject as "Privacy Enquiry" for faster processing
• Live Chat: Available 24/7 on the cs2skin platform – request to speak with the privacy team
• Response Time: General privacy enquiries are answered within 24 hours; formal data rights requests within 30 days
• Language: All communications can be conducted in Bahasa Melayu

If you are not satisfied with cs2skin's response to your privacy query, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia (JPDP), which enforces the PDPA 2010.