1. Introduction and Scope of This Policy
This Privacy Policy is published by 100cucislot ("we", "Platform") and applies to all individuals who use the 100cucislot website, our official mobile app, and any related services we offer to players in Malaysia.
We take your privacy seriously. This document is written in plain, easy-to-understand language so you know exactly what happens with your information — not buried in confusing legal jargon. If anything is unclear, our support team is ready to help.
This policy describes the types of data we collect, why we need it, how we protect it, who we share it with (if anyone), and your rights as the owner of that data.
2. Information We Collect
2.1 Information You Provide Directly
When you register an account or use our services, we collect the following information:
- Identity Information: Full name, date of birth, national identification number (MyKad) or passport.
- Contact Information: Email address, mobile number, and residential address.
- Financial Information: Bank account details, e-wallet numbers (Touch 'n Go, GrabPay, Boost) for deposit and withdrawal processing.
- KYC Documents: A copy of your MyKad, passport, or driving licence is required for identity verification before your first withdrawal.
- Communication Preferences: Whether you wish to receive promotions and updates via email or in-app notifications.
2.2 Information Collected Automatically
While you use our platform, our systems automatically record certain technical information needed to ensure the platform operates correctly and securely:
- Device Data: Device type, operating system, screen resolution and unique device identifier.
- Network Data: IP address, general geographic location (country and city), internet connection type.
- Session Data: Login and logout times, game session duration, pages visited.
- Game Data: Betting history, wins, losses, and game preferences for support and fraud detection purposes.
- Cookies: Small data files stored on your device to enhance your user experience and remember your preferences.
3. Purpose of Data Collection and Use
We only collect data that is strictly necessary and use it solely for legitimate purposes. Below is a summary table of how we use your data:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Account Management | Name, email, phone number | Contract / Consent |
| Payment Processing | Bank details, e-wallets | Contract / Legal Requirement |
| Identity Verification (KYC) | MyKad, passport, selfie photo | Legal Requirement |
| Fraud Prevention | IP, device data, transaction history | Legitimate Interest |
| Customer Support | Conversation history, account details | Contract / Legitimate Interest |
| Marketing Communications | Email, phone number | Consent (revocable) |
| Platform Improvements | Usage data, session logs | Legitimate Interest |
| Regulatory Compliance | All related data | Legal Requirement |
4. Data Sharing with Third Parties
100cucislot does not sell your personal data. However, in certain situations, we may need to share your information with the following parties to keep the platform running smoothly:
4.1 Payment Service Providers
To process your deposits and withdrawals, we share the necessary financial information with licensed and registered payment gateway providers. All such providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.
4.2 Game Providers
100cucislot works with a range of trusted international game providers. Basic game data required to operate the games may be shared, but your full personal details are never disclosed to these providers.
4.3 Regulatory Bodies and Law Enforcement Agencies
We are legally required to disclose certain information to the relevant authorities upon receiving official requests that comply with legal requirements. This includes financial crime investigations, money laundering cases or court orders.
4.4 Technical Partners
Some platform functions are supported by technical service providers such as cloud services, analytics tools, and fraud detection systems. All such partners are bound by strict data processing agreements and only process data within the permitted scope.
5. Data Storage and Retention Period
Your personal data is stored on secure servers protected by multiple layers of physical and digital security. We retain your data only for as long as necessary for the stated purposes or as required by law.
In general, data retention periods are as follows:
- Active Account Data: For as long as your account is active and for the required period following account closure.
- Financial Transaction Records: Minimum 7 years after the transaction, as required by Malaysian financial law.
- KYC Documents: Minimum 5 years after the business relationship ends.
- Security Logs: 12 months to support security incident investigations if they arise.
- Marketing Data: Until you withdraw consent or request deletion.
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.
6. Data Security
We implement a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Key measures we have in place include:
- Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
- Data encryption at rest for all sensitive information.
- Role-based access control (RBAC) — only staff who require data for their specific duties are granted access.
- Two-factor authentication (2FA) is mandatory for all staff accessing data management systems.
- Regular security audits conducted by independent parties to identify and patch vulnerabilities.
- A comprehensive incident response plan in the event of a data breach.
7. Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:
Right to Access
You may request a copy of the personal data we hold about you at any time.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request that we correct it.
Right to Erasure
You may request deletion of your personal data, subject to any legal obligations binding on us.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another platform.
Withdraw Consent
For consent-based processing such as marketing emails, you may withdraw your consent at any time.
To exercise any of the above rights, you may submit a request through your account panel or contact our support team via live chat. We will process your request within 30 business days.
8. Cross-Border Data Transfers
In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia, such as in Asia-Pacific or European countries. When this occurs, we ensure such transfers are protected by appropriate safeguards, including standard data transfer agreements and security assessments of the receiving party.
We only transfer data to countries or entities that provide a level of data protection equal to or greater than what Malaysian law requires.
9. Children's Privacy
The 100cucislot platform is strictly limited to individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we discover that data has been collected from an underage individual, we will take immediate steps to delete that data and close the account in question.
If you become aware that someone under the age of 18 has registered an account using your information or false details, please contact us immediately.
10. Fraud Detection and Prevention
To protect all members and the integrity of our platform, 100cucislot employs a sophisticated fraud detection system. It analyses usage patterns, device data, and transaction activity to identify suspicious behaviour.
Data processing for fraud prevention purposes is based on our legitimate interests and legal obligations to prevent financial crime. This includes compliance with anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any significant changes will be communicated to you via email or in-app notification before they take effect.
We encourage you to review this page periodically. The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised.
12. How to Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please reach out to us through the following channels:
- Live Chat: Available 24/7 directly within the 100cucislot platform or app.
- Support Email: [email protected] (response within 24 business hours).
- FAQ: Visit page FAQ us for instant answers to common questions.
Our Data Protection Officer is available to handle more complex privacy issues and ensure your rights are fully protected.