100cuci xyz Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

1 Scope & Application of This Policy

This Privacy Policy describes the personal data collection, use, disclosure, and protection practices of 100cuci xyz (referred to as "we", "the platform", or "100cuci xyz") in relation to all services offered through our website and online platform.

This policy applies to all individuals who interact with 100cuci xyz, including but not limited to: website visitors who have not yet registered, prospective members during the registration process, registered members actively using the platform, and former members whose accounts have been closed.

By accessing or using the 100cuci xyz platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this policy, please discontinue your use of our platform.

2 Data We Collect

100cuci xyz collects personal data through two primary means: directly from you when you provide it, and automatically through your use of our platform.

Data you provide directly:

• Registration Information: Full name, email address, mobile number, date of birth, chosen password
• KYC Verification Information: Copy of MyKad (front and back) or passport, proof of current address (Tenaga Nasional, Syabas, or Indah Water bill, or a bank statement dated within the last 3 months)
• Financial Information: Account name, phone number linked to Touch 'n Go or GrabPay, bank account number for FPX transfers, transaction verification screenshots
• Communications with Us: The content of any enquiries, complaints, or feedback submitted via LiveChat, WhatsApp, or email

Automatically collected data:

• Platform Activity Logs: Gaming history, total wagers, game outcomes, session duration, games accessed
• Technical Data: IP address, internet browser type and version, device operating system, device identifier, screen resolution, time zone
• Navigation Data: Pages visited, time spent on each page, in-platform navigation paths, referral source
• Cookie Data: Information collected via cookies and similar tracking technologies — see Section 9 for details

3 How We Use Your Data

100cuci xyz uses collected personal data solely for legitimate purposes related to platform operations and member services. Specific purposes include:

• Account Management: Creating and maintaining your member account, processing registrations, verifying identity, and enabling access to the platform
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawal of winnings in MYR
• Legal Compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements, as well as other reporting obligations prescribed by Malaysian law
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, bonus abuse, and activities that violate our Terms & Conditions
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members
• Service Improvement: Analysing usage patterns to improve the interface, technical performance, and game library based on the actual preferences of Malaysian players
• Service Communications: Sending important account notices, changes to terms, promotions (if you have opted in), and security updates
• VIP Rewards Programme: Calculating and managing VIP tiers, cashback, and rewards based on members' gaming activity

4 Legal Basis for Data Processing

Under Malaysia's PDPA 2010, all personal data processing must have a lawful basis. 100cuci xyz processes members' personal data on the following grounds:

• Consent: For basic registration data collection and optional marketing communications — you provide express consent during the registration process and may withdraw it at any time
• Contract Performance: For processing financial transactions, managing your account, and delivering the services you have requested — without this data, we are unable to provide 100cuci xyz's services to you
• Legitimate Interests: For platform security, fraud detection, and service improvement purposes — our legitimate interests are always balanced against your privacy rights and do not override them.
• Legal Obligation: For compliance with KYC, AML, and statutory reporting requirements mandated under Malaysian law — we are legally obligated to process this data

5 Data Sharing with Third Parties

100cuci xyz does not sell, rent, or share members' personal data with any third party for their own marketing purposes. Data may only be shared in the following limited circumstances:

• Payment Processors: Payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX member banks — only the minimum data required to complete a transaction is shared, and all processors are bound by their own strict privacy policies.
• Game Software Providers: Companies such as Pragmatic Play, Evolution Gaming, and PG Soft receive only the minimum technical data necessary to operate games within our platform — no unnecessary personal or financial information is shared
• Legal Authorities: Royal Malaysia Police, courts, or relevant regulatory bodies when required by a valid court order, warrant, or other legal obligation
• Professional Advisors: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations, in cases requiring specialist advice
• Business Merger or Acquisition: If 100cuci xyz undergoes a merger, acquisition, or asset sale, member personal data may be transferred as part of the transaction — you will be notified in advance and your rights will continue to be protected

In all cases of data sharing, 100cuci xyz ensures that only the minimum necessary data is shared and that all recipients are bound by data protection obligations equivalent to our own standards.

6 International Data Transfers

Some game software providers and technical infrastructure used by 100cuci xyz may operate outside Malaysia. Where this is the case, the necessary data may be transferred to servers located beyond Malaysian borders.

100cuci xyz ensures that all international data transfers are carried out with adequate safeguards in place:

• Only the minimum technical data required for game functionality is transferred to international software providers.
• All data transfers are carried out through encrypted channels
• Data recipients outside Malaysia are required to comply with data protection standards equivalent to or stricter than Malaysia's PDPA 2010.
• Members' financial and identity verification data is stored on servers located in the Asia Pacific region with comparable legal protections

7 Data Retention Period

100cuci xyz adheres to the principle of data minimisation — we retain personal data only for as long as necessary for the stated purpose or as required by law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and up to 7 years after account closure for financial and legal compliance purposes
• Financial Transaction Records: Retained for 7 years from the transaction date, as required by Malaysian tax laws and financial regulations
• KYC Documents: Retained for the duration of the active account plus 7 years — required for compliance with Malaysia's AML obligations
• Platform Activity Logs: Retained for 2 years for fraud detection and dispute resolution purposes
• Support Communication Records: Retained for 3 years from the date of last interaction
• Session Cookie Data: Expires automatically when the browser session is closed; functional cookies persist for up to 12 months

Once the retention period expires, data will be securely deleted or anonymised so that individuals can no longer be identified from the remaining data.

8 Data Security

100cuci xyz implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted is protected by TLS 1.3 protocol and AES-256 encryption. Member passwords are stored as one-way hashes and can never be read by anyone — including 100cuci xyz staff
• Access Controls: Access to members' personal data is restricted to staff with a legitimate business need, based on the principle of least privilege.
• Continuous Monitoring: An intrusion detection system (IDS) and security monitoring operate 24/7 to promptly identify suspicious activity
• Regular Security Audits: Vulnerability assessments and penetration testing are conducted periodically by independent parties to identify and address security weaknesses.
• Staff Training: All staff who handle personal data undergo regular data protection and information security training
• Incident Response Plan: 100cuci xyz maintains a documented security incident response procedure to ensure any data breach is addressed promptly and effectively

9 Cookie Policy

100cuci xyz uses cookies and similar tracking technologies to enhance the platform experience, maintain session security, and understand how members interact with our platform.

Types of cookies we use:

• Strictly Necessary Cookies: Required for core platform functionality — login, session security, and language preference memory. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remembers your personal preferences and settings, such as display theme, preferred bet size, and favourite game selections. Stored for up to 12 months.
• Analytics Cookies: Collects aggregated, anonymised usage data to help us understand which parts of the platform are most popular and which need improvement. This data does not identify you personally.
• Security Cookies: Detecting suspicious login activity, unauthorised access attempts, and unusual usage patterns to keep your account secure.

Types of cookies we use:

You can control and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the 100cuci xyz platform. Third-party advertising cookies and cross-site tracking cookies are not used by 100cuci xyz.

10 Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and the privacy principles practised by 100cuci xyz, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our Privacy Officer by email at privacy@100cucixyz.best with the subject line [PRIVACY RIGHTS REQUEST] along with your account username and the details of your request. We will process your request within 30 business days. No fee is charged for reasonable requests.

11 Children's Privacy

The 100cuci xyz platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

100cuci xyz's registration process includes age verification steps designed to prevent underage individuals from opening an account. Should we discover that personal data has been collected from anyone under 18 without appropriate verification, we will take immediate steps to delete that data and close the account in question.

If you believe your underage child has registered or is using the 100cuci xyz platform, please contact us immediately at privacy@100cucixyz.best so that we can take appropriate action.

12 Privacy Policy Amendments

100cuci xyz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or relevant technological developments. The date of the most recent update is always displayed at the top of this page.

For material amendments that affect how we use your data, we will provide notice via your registered email or a prominent in-platform notification at least 14 days before the amendment takes effect. For minor amendments that do not fundamentally alter the basis of our data processing, the updated Privacy Policy will be published on this page without separate notice.

Continued use of the 100cuci xyz platform after an amendment's effective date constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the rights set out in Section 10.

13 Contact Our Privacy Officer

100cuci xyz has appointed a Data Privacy Officer responsible for ensuring compliance with Malaysia's PDPA 2010 and for handling all privacy-related enquiries, requests, and complaints. For any matters relating to this Privacy Policy or the handling of your personal data, please contact:

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which operates under the Ministry of Communications and Digital Malaysia.