100cici Privacy Policy

1. Introduction

100cici ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the 100cici platform at 100cici.org, including its mobile applications and associated services (collectively, the "Platform"). This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, how we store and protect it, and the rights available to you in relation to that information.

By registering for a 100cici account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the 100cici Terms & Conditions, which govern your use of the Platform.

If you are a Malaysian resident, this Policy is also informed by the Personal Data Protection Act 2010 (PDPA) of Malaysia, which sets out the obligations of data processors and the rights of data subjects in Malaysia.

2. Personal Data We Collect

100cici collects the following categories of personal data in the course of providing our services:

• Registration Data: Full legal name, date of birth, Malaysian mobile number, email address, preferred username, and account password (stored in hashed form).
• Identity Verification (KYC) Data: Copies of Malaysian IC (MyKad), passport, or other government-issued identification documents, together with selfie photographs where required for identity matching.
• Financial Data: Payment method details including Touch n Go eWallet account reference, Boost account reference, GrabPay account, bank account name and number (for withdrawals), and cryptocurrency wallet addresses (for USDT TRC20 transactions). Full card numbers are not stored by 100cici.
• Transaction Data: Records of all deposits, withdrawals, bets placed, bonuses claimed, and winnings received on the 100cici platform.
• Usage Data: IP address, device type, operating system, browser type, session duration, pages visited, game history, and other behavioural data generated through use of the Platform.
• Communications Data: Records of live chat conversations, support ticket content, and any other correspondence submitted to 100cici through the Platform.
• Responsible Gaming Data: Self-reported information provided when using responsible gaming tools, including deposit limits, self-exclusion requests, and reality check preferences.

We collect personal data directly from you when you register, deposit, or contact support; automatically through your use of the Platform via cookies and analytics tools; and from third-party payment processors and identity verification service providers where applicable.

3. How We Use Your Personal Data

100cici processes personal data for the following purposes:

• Account creation and management: To register your 100cici account, verify your identity, maintain your account, and process login authentication.
• Service delivery: To facilitate sports betting, casino gaming, slot play, and all other products available through the 100cici platform.
• Financial processing: To process deposits, withdrawals, and wallet transactions in Malaysian Ringgit (MYR) through your chosen payment methods.
• Regulatory compliance: To fulfil KYC, anti-money laundering (AML), and other obligations imposed by our international gaming authority licensing requirements and applicable law.
• Responsible gaming: To monitor account activity for signs of problem gambling, to apply responsible gaming tools you have enabled, and to enforce the 100cici 21+ age restriction.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance, security, and features of the 100cici platform.
• Customer support: To respond to enquiries, resolve disputes, and provide technical assistance.
• Promotions and communications: To notify you of relevant promotions, platform updates, and account activity where you have not opted out of such communications.
• Fraud prevention and security: To detect and prevent fraud, unauthorised access, and other harmful or illegal activity on the Platform.

4. Legal Basis for Processing

100cici processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 100cici, including account registration, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements applicable under our gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookie categories, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing of Personal Data

100cici does not sell, rent, or trade your personal information. We share personal data only in the following limited circumstances:

• Payment processors: We share financial data with payment service providers including Touch n Go eWallet, Boost, GrabPay, and Malaysian bank partners, solely for the purpose of processing deposits and withdrawals.
• Identity verification providers: KYC documents are shared with accredited third-party identity verification services for the purpose of fulfilling regulatory compliance requirements.
• Game software providers: Gameplay data is shared with our licensed game software partners (e.g., Pragmatic Play, PG Soft, Evolution Gaming) to the extent necessary to deliver their games through the 100cici platform.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory authorities, or gaming oversight bodies where required by law or court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of 100cici, its Members, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction, subject to the same privacy protections as described in this Policy.

All third-party service providers who process personal data on 100cici's behalf are required to implement appropriate technical and organisational security measures and to process data only on 100cici's documented instructions.

6. Data Security

100cici implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data transmitted between your browser or app and 100cici servers is encrypted using TLS 1.3.
• Account passwords are stored using bcrypt one-way hashing — 100cici staff cannot access your password in plain text.
• Access to production systems containing personal data is restricted to authorised 100cici personnel on a need-to-know basis, with access logs maintained and audited.
• Payment card data is processed via PCI-DSS compliant payment processors — 100cici does not store full payment card numbers on its own infrastructure.
• Two-factor authentication (2FA) is available to all 100cici Members and is strongly recommended to protect account access.
• Security vulnerability assessments and penetration testing are conducted periodically by accredited third-party security specialists.

Notwithstanding the above, no data transmission over the internet or electronic storage is entirely secure. While 100cici takes every reasonable precaution, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your 100cici login credentials.

7. Cookies and Tracking Technologies

100cici uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your language preferences, and preventing cross-site request forgery (CSRF). These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how Members interact with the Platform — which pages are visited, how long sessions last, and where users navigate from. This data is aggregated and anonymised.
• Functional cookies: Store your preferences such as game lobby view settings and responsible gaming tool configurations to improve your experience on return visits.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some Platform features. 100cici does not use third-party advertising or retargeting cookies.

8. Data Retention

100cici retains personal data for the following periods:

• Active account data: Retained for the duration of your account registration plus a minimum of five (5) years following account closure, as required under our gaming licensing obligations and applicable anti-money laundering regulations.
• KYC documents: Retained for a minimum of five (5) years following the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the last communication, or longer where a dispute remains unresolved.
• Usage and analytics data: Aggregated or anonymised data may be retained indefinitely for internal analytics purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 100cici's data disposal procedures.

9. Your Data Protection Rights

Subject to applicable law, including the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data held by 100cici:

• Right of access: You may request a copy of the personal data 100cici holds about you.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 100cici support team via live chat from within your account. 100cici will respond to all valid requests within thirty (30) calendar days. Identity verification may be required before processing certain requests.

10. Children's Privacy

The 100cici platform is intended exclusively for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If 100cici becomes aware that personal data has been submitted by an individual under 21 without appropriate parental or guardian consent, such data will be deleted promptly and the associated account will be permanently closed.

If you believe that a minor has registered a 100cici account, please notify us immediately via live chat support so that appropriate action can be taken.

11. Third-Party Links

The 100cici platform does not contain links to external third-party websites. In the event that third-party content is referenced within the Platform, 100cici is not responsible for the privacy practices or data handling of any such third parties. You are advised to review the privacy policies of any third-party services you interact with independently of the 100cici platform.

12. International Data Transfers

As an internationally licensed gaming operator, 100cici may transfer personal data to servers or service providers located outside of Malaysia. Where such transfers occur, 100cici ensures that appropriate safeguards are in place — such as contractual data protection clauses or the use of service providers operating under recognised international data protection frameworks — to maintain a standard of protection substantially equivalent to that provided under Malaysian law.

13. Changes to This Privacy Policy

100cici reserves the right to update or amend this Privacy Policy at any time. Material changes will be notified to registered Members via the mobile number or contact details associated with their account, or through a prominent notice on the Platform, no less than seven (7) days prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 100cici, please contact our support team via the live chat function available after 100cici login. Our support team is available 24 hours a day, 7 days a week, and will escalate data protection queries to the appropriate team within one (1) business day.

You may also write to us at: support@100cici.org — noting that this email address is provided for correspondence only and is not a clickable link.