Privacy Policy — 100cucu Online Casino Malaysia

100cucu ("we", "us", "our", "the Platform") operates the online casino and sports betting service accessible at https://100cucu.cam. We are committed to safeguarding the personal data of all users, members, and visitors who interact with our Platform. This Privacy Policy ("Policy") sets out the legal basis on which we process your personal data, the purposes for which that data is used, and the rights you hold in relation to your information.

This Policy applies to all personal data collected by 100cucu in connection with your use of the Platform, including data submitted during account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, and general Platform browsing. It also applies to data collected through our email communications and any other channel through which you interact with 100cucu.

This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy. By creating an account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

100cucu collects the following categories of personal data in the course of operating the Platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Malaysian MyKad number or passport number
• Nationality and country of residence
• Username and encrypted password

3.2 Contact Data

• Email address
• Malaysian mobile phone number
• Correspondence address (city and state, e.g., Kuala Lumpur, Penang, Johor Bahru)

3.3 Financial & Transaction Data

• Bank account details (Maybank, CIMB, Public Bank, Hong Leong Bank, or other Malaysian banks registered with the member)
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay account references)
• DuitNow proxy IDs (mobile number or MyKad IC)
• FPX transaction reference numbers
• Cryptocurrency wallet addresses (USDT TRC20)
• Deposit and withdrawal amounts, dates, and processing times
• Betting history, game activity, and wagering records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation patterns
• Cookie identifiers and tracking pixels

3.5 KYC Verification Documents

• Copies of government-issued identification (Malaysian MyKad, passport)
• Proof of address documentation
• Proof of payment method ownership
• Selfie or liveness verification images (where required)

3.6 Communications Data

• Live chat transcripts and email correspondence with our support team
• Complaint records and support ticket history
• Feedback and survey responses where voluntarily provided

100cucu collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automatically: Technical data collected passively as you browse and interact with the Platform, including through cookies, server logs, and analytics tools.
• From payment providers: Transaction confirmation data received from FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network confirmations. This data is limited to what is necessary to verify payment processing and is handled in accordance with the respective payment provider's terms.
• From identity verification services: During KYC verification, 100cucu may use third-party identity verification processors. These processors return a verification result to 100cucu; document images are handled in accordance with this Policy and the processor's own data protection obligations.
• From fraud prevention services: Data from anti-fraud and anti-money-laundering screening systems may be combined with member data to assess risk profiles in accordance with our regulatory obligations.

100cucu processes personal data on the following legal bases:

100cucu uses the personal data we collect for the following purposes:

• Account administration: Creating and maintaining your member account, processing login authentication, and managing account settings.
• Identity and age verification: Confirming that all members meet the minimum age requirement of 21 years through KYC documentation review.
• Payment processing: Facilitating deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20; processing withdrawal requests to verified payment methods.
• Betting and gaming services: Recording and settling bets, awarding bonus funds, processing VIP tier upgrades, and maintaining accurate game and wagering records.
• Regulatory compliance: Fulfilling AML screening obligations, responding to lawful requests from regulatory authorities, and maintaining transaction records as required by applicable law.
• Fraud and security: Detecting and preventing fraudulent transactions, multiple account creation, bonus abuse, money laundering, and unauthorised access to member accounts.
• Responsible gambling: Monitoring gaming patterns to identify potential problem gambling indicators and enforcing self-exclusion and deposit limit tools where activated.
• Customer support: Responding to queries, resolving disputes, processing complaints, and maintaining support ticket records.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal approvals, security alerts) and, where you have consented, promotional communications about relevant offers and bonuses.
• Platform improvement: Analysing aggregated usage data to improve Platform performance, user experience, game availability, and payment processing efficiency.

100cucu does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: FPX gateway operators, DuitNow participants, e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network processors — solely to execute and verify payment transactions.
• Identity verification processors: Third-party KYC service providers who verify the authenticity of documents and confirm member identity on our behalf, under strict data processing agreements.
• Fraud prevention and AML services: Screening platforms used to detect money laundering, terrorist financing, and fraudulent activity, as required under applicable gaming and financial regulations.
• IT infrastructure providers: Hosting, cloud, and platform infrastructure providers who process data on 100cucu's behalf under contractual data protection obligations.
• Regulatory and law enforcement authorities: When required by law, court order, or regulatory directive, 100cucu may disclose personal data to the relevant authorities. We will, where legally permitted, notify affected members of such disclosures.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

100cucu retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your membership plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following the date of verification or account closure, whichever is later, in accordance with applicable gaming regulatory requirements.
• Transaction and betting records: Retained for a minimum of 5 years following the date of each transaction or bet settlement.
• Customer support records: Retained for 3 years following the resolution of the relevant support interaction or dispute.
• Marketing consent records: Retained for the duration of your membership or until consent is withdrawn, plus 1 year.
• Technical and usage logs: Typically retained for 12 months unless required longer for security or fraud investigations.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

100cucu implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the Platform — the same standard used by Maybank2u and CIMB Clicks.
• Encrypted data storage for sensitive fields including passwords (hashed with a secure algorithm), payment details, and KYC documents.
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate operational need.
• Multi-factor authentication for internal systems handling member data.
• Regular penetration testing and vulnerability scanning conducted by third-party security specialists.
• Incident response procedures including notification protocols in the event of a personal data breach affecting member rights and freedoms.

While 100cucu takes all reasonable steps to protect your data, no method of transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

100cucu uses cookies and similar tracking technologies to operate the Platform, maintain login sessions, and improve user experience. The following categories of cookies may be used:

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies that maintain your logged-in state. These cookies cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect aggregated, anonymised data about how visitors interact with the Platform, enabling us to identify usability issues and optimise performance.
• Functional cookies: Remember your preferences such as language settings, display options, and game category selections to personalise your experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core Platform, but may affect personalisation features. Essential and security cookies are required for the Platform to operate and cannot be disabled.

Subject to applicable data protection law, you hold the following rights in relation to the personal data that 100cucu holds about you. To exercise any of these rights, please contact our Data Protection team at the contact details provided in Section 15.

The 100cucu Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your minor child has provided personal data to 100cucu, please contact us immediately using the details in Section 15 so that we can investigate and take appropriate action.

In the course of operating the Platform, personal data may be transferred to and processed in countries other than Malaysia. This may include transfers to server infrastructure, identity verification processors, or fraud screening services located in other jurisdictions.

Where such transfers occur, 100cucu ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections offered under applicable Malaysian data protection law. These safeguards may include contractual data protection clauses with the receiving party, adequacy determinations, or other recognised transfer mechanisms.

By using the Platform, you acknowledge that your data may be transferred internationally as described in this section, subject to the safeguards described above.

100cucu reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered members by email to the address on file and/or by a prominent notice on the Platform prior to the change taking effect.

The date of the most recent revision is indicated at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with an amendment, you may close your account in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact 100cucu through the following channels. All privacy-related enquiries are handled by our designated Data Protection team.