Privacy Policy – 100cuc Online Casino Malaysia

1. Introduction

This Privacy Policy ("Policy") describes how 100cuc ("we", "us", "our") collects, processes, uses, stores, and protects personal data belonging to users ("you", "your") of the website located at https://100cuc.co and all associated services (collectively, the "Platform"). 100cuc is committed to handling your personal data responsibly and in accordance with applicable data protection principles.

By registering an account, accessing, or using the 100cuc Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, which collectively govern your use of the Platform.

2. Personal Data We Collect

100cuc collects the following categories of personal data in connection with your use of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., Malaysian NRIC or passport number) collected during account registration and Know Your Customer (KYC) verification procedures.
• Contact Data: Email address, mobile phone number, and residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru).
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost, DuitNow, GrabPay, Maybank2u, FPX identifiers), transaction amounts, deposit and withdrawal history, and account balance information. 100cuc does not store full payment account credentials; all payment processing is handled by certified third-party payment processors.
• Account Data: Username, encrypted password hash, account preferences, bonus and promotional history, and gaming activity logs including bet history, win/loss records, and session durations.
• Technical Data: IP address, browser type and version, operating system, device identifiers, referring URLs, and access timestamps.
• Communications Data: Records of communications between you and 100cuc support, including live chat transcripts and email correspondence.
• Verification Documents: Copies of identity documents, proof of address, and source of funds documentation submitted during KYC or enhanced due diligence procedures.

3. How We Collect Your Data

100cuc collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies.
• Third Parties: Identity and fraud verification data received from KYC service providers, payment processors, and, where required for AML compliance, from financial intelligence or regulatory authorities.

4. How We Use Your Personal Data

100cuc processes your personal data for the following purposes:

• Account Administration: Creating, maintaining, and securing your 100cuc account; processing login authentication; and managing account preferences.
• Service Delivery: Enabling access to games, processing deposits and withdrawals in MYR, crediting winnings, and applying bonuses and promotions.
• KYC & AML Compliance: Verifying your identity, age (21+ requirement), and source of funds to comply with anti-money laundering obligations and responsible gaming policies.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, multi-accounting, and security threats.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Legal Obligations: Complying with applicable laws, regulations, court orders, and regulatory requests from competent authorities.
• Platform Improvement: Analysing usage patterns and technical performance data to improve the 100cuc Platform, user experience, and service offerings.
• Marketing Communications: Sending promotional offers and platform updates to users who have opted in to marketing communications. You may withdraw consent to marketing at any time via your account settings or by contacting support.

5. Legal Basis for Processing

100cuc processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 100cuc (i.e., delivery of the Platform services you have registered for).
• Legal Obligation: Processing required to comply with AML, KYC, responsible gaming, and other applicable legal and regulatory obligations.
• Legitimate Interests: Processing carried out to pursue legitimate business interests including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, including for marketing communications and optional data analytics. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third-Party Disclosure

100cuc does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared in the following limited circumstances:

• Payment Processors: Your payment reference data is shared with certified payment service providers (including Touch n Go eWallet, Boost, DuitNow, GrabPay, and FPX operators) solely to process your financial transactions.
• KYC & Verification Providers: Identity and document data is shared with accredited third-party KYC verification services to fulfil identity and age verification requirements.
• Game Providers: Aggregated, pseudonymised gaming activity data may be shared with integrated game studios and providers for technical performance and game integrity purposes.
• Legal & Regulatory Authorities: Personal data will be disclosed to regulatory bodies, law enforcement agencies, or courts where required by law, court order, or applicable gaming regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of the 100cuc business, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

All third-party service providers engaged by 100cuc are contractually required to process your personal data solely for the purposes specified and in accordance with applicable data protection standards.

7. Data Retention

100cuc retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including:

• Account data is retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC and identity verification documents are retained for a minimum period prescribed by applicable anti-money laundering regulations from the date of collection.
• Financial transaction records are retained for a minimum of seven (7) years for audit and regulatory compliance purposes.
• Support communications are retained for three (3) years from the date of the last interaction.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8. Security Measures

100cuc implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 100cuc Platform — the same encryption standard used by Malaysian banking institutions.
• Encrypted storage of sensitive account data, including password hashing using modern cryptographic algorithms.
• Access controls restricting internal access to personal data on a strict need-to-know basis.
• Automated intrusion detection and anomalous login monitoring systems.
• Regular security audits and penetration testing conducted by independent third-party specialists.

While 100cuc takes all reasonable precautions, no internet transmission or storage system can be guaranteed completely secure. You are responsible for maintaining the confidentiality of your login credentials.

9. Cookies & Tracking Technologies

The 100cuc Platform uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, and collect Platform analytics. Categories of cookies used include:

• Essential Cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled without disrupting core Platform functionality.
• Analytical Cookies: Used to collect aggregated data about how users interact with the 100cuc Platform, enabling us to identify performance issues and improve user experience.
• Preference Cookies: Store your language, display, and notification preferences to personalise your experience across sessions.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some Platform features.

10. Your Data Rights

Subject to applicable law and where 100cuc acts as the data controller, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data 100cuc holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact 100cuc via live chat or email (see Section 13). We will respond to verified requests within a reasonable timeframe in accordance with applicable law. Note that certain rights may be limited where processing is required for legal compliance or legitimate fraud prevention purposes.

11. Children's Privacy

The 100cuc Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If 100cuc becomes aware that personal data has been collected from a person under 21 without parental consent or in violation of our age restriction policies, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and have reason to believe your child has accessed the Platform or provided personal data, please contact us immediately via live chat or email.

12. Amendments to This Policy

100cuc reserves the right to update or modify this Privacy Policy at any time. Where amendments are material, we will provide reasonable notice via the Platform or to your registered email address prior to the changes taking effect. The current version of this Policy will always be available at https://100cuc.co/privacy-policy. Your continued use of the Platform following any amendment constitutes your acceptance of the updated Policy.

13. Contact Us

For data protection enquiries, requests to exercise your rights, or questions about this Privacy Policy, please contact the 100cuc data protection team through the following channels:

• 24/7 Live Chat: Available directly on the 100cuc Platform
• Email: [email protected]

We aim to acknowledge all data-related requests within 2 business days and to resolve substantive requests within the timeframe required by applicable data protection law. For urgent account security matters, live chat is the fastest route to resolution.