Privacy Policy – 100cic

1. Introduction

100cic ("the Company", "we", "us", "our") operates the online gaming platform accessible at 100cic.com and through the 100cic mobile application. We take the privacy of our players seriously. This Privacy Policy ("Policy") sets out in clear terms what personal information we collect from you, why we collect it, how we use it, and the choices you have in relation to it.

By registering an account on or otherwise using the 100cic platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the platform and contact us to request account closure.

This Policy applies to all personal data processed by 100cic in connection with the provision of its services to players in Malaysia and other jurisdictions where the platform operates. It should be read alongside the 100cic Terms and Conditions.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for a 100cic account, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data. This includes:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (e.g. MyKad, passport number).
• Contact data: Email address, mobile phone number, and residential address (including postcode and state, e.g. Kuala Lumpur, Selangor, Penang, Johor).
• Financial data: Payment method details required to process deposits and withdrawals, including bank account identifiers, e-wallet credentials (Touch 'n Go eWallet, Boost), and DuitNow references. We do not store full card numbers or CVV codes.
• Verification documents: Copies of identity documents and proof of address submitted during Know Your Customer (KYC) verification.
• Support communications: Records of chat conversations, emails, and other communications between you and the 100cic support team.

2.2 Data Collected Automatically

When you access and use the 100cic platform, certain data is collected automatically by our systems. This includes:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, betting history, session duration, login timestamps, and navigation paths within the platform.
• Location data: General geolocation derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission through the mobile app.
• Cookie data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

3. How We Use Your Personal Data

100cic uses the personal data we collect for the following purposes:

• Account management: To create, verify, maintain, and administer your 100cic account, including processing your registration and conducting KYC verification.
• Service delivery: To provide access to the games, sports betting markets, and other features of the 100cic platform.
• Payment processing: To process deposits from and withdrawals to your registered payment methods in Malaysian Ringgit (MYR).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited conduct.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and to apply deposit limits, session controls, and self-exclusion measures.
• Legal compliance: To meet our obligations under applicable anti-money laundering regulations, responsible gaming requirements, and other legal obligations.
• Customer support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Platform improvement: To analyse aggregated usage data to improve the performance, design, and content of the 100cic platform.
• Marketing communications: To send you promotional offers and platform updates where you have consented to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

100cic processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered player, including account administration and payment processing.
• Legal obligation: Processing required to comply with anti-money laundering laws, responsible gaming regulations, tax reporting obligations, and other applicable legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics that do not override your fundamental rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

100cic does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors: Third-party payment service providers (including e-wallet operators and Malaysian banking institutions) engaged to process your deposits and withdrawals.
• Game providers: Licensed game software providers who supply the games available on the 100cic platform may receive aggregated or session-level data for game performance and compliance purposes.
• Identity verification services: Third-party KYC and anti-fraud service providers engaged to verify your identity and screen for sanctions and prohibited conduct.
• Regulatory authorities: Government agencies, gaming regulators, and law enforcement bodies where disclosure is required by law or regulatory obligation.
• IT service providers: Hosting, infrastructure, and security service providers engaged under confidentiality obligations to support the operation of the 100cic platform.

All third parties with whom 100cic shares personal data are required to process that data in accordance with applicable data protection standards and our instructions. We do not permit third parties to use your data for their own independent marketing or commercial purposes.

6. Cookies and Tracking Technologies

100cic uses cookies and similar technologies to operate and improve the platform. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function correctly. These include session management and authentication cookies. They cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymised data about how players use the platform, enabling us to identify and fix performance issues.
• Functionality cookies: Used to remember your preferences (such as language and display settings) between sessions.
• Analytics cookies: Used to analyse aggregate traffic patterns and player behaviour on the platform. Data collected is anonymised and used solely for internal improvement purposes.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the 100cic platform.

7. Data Retention

100cic retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our regulatory obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• KYC verification documents are retained for the duration of the account relationship and for a minimum of five (5) years thereafter.
• Support communications are retained for a minimum of two (2) years.
• Marketing consent records are retained for the duration of your account and for a period of two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

8. Data Security

100cic implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the 100cic platform.
• Encryption at rest for sensitive personal data stored on 100cic servers.
• Role-based access controls limiting staff access to personal data on a strictly need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management programmes.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

While we apply rigorous security standards, no system is completely immune to risk. In the event of a data breach that poses a risk to your rights and freedoms, 100cic will notify you and the relevant regulatory authority in accordance with applicable requirements.

9. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by 100cic:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of personal data you have provided to us in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of the above rights, please contact the 100cic Data Protection team via the 24/7 live chat or by email at [email protected]. We will respond to all verified requests within thirty (30) days.

10. Children's Privacy

The 100cic platform is strictly intended for adults aged 21 and above. 21+ We do not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately close the account and delete all associated personal data, subject to any legal retention obligations. If you have reason to believe that a minor has registered on the 100cic platform, please contact our support team immediately.

11. International Data Transfers

100cic may transfer your personal data to servers or processors located outside Malaysia in connection with the operation of the platform. Where such transfers occur, 100cic ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian and international data protection law. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate protection.

12. Changes to This Privacy Policy

100cic reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the 100cic platform prior to the changes taking effect. We encourage you to review this Policy periodically. The "Last updated" date at the top of this document indicates when the most recent revision was made.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 100cic handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 via the 100cic platform.
• WhatsApp: Available 24/7 — contact details provided after account registration.
• Email: [email protected] (plain text only — not a clickable link). Formal data protection queries are responded to within two (2) business days.