Privacy Policy cuci 100 — Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") describes how cuci 100 ("we", "platform") collects, uses, discloses, stores and protects the personal data you provide or that we collect automatically when you use the cuci 100 platform.

This Policy applies to all cuci 100 platform users regardless of how they access it — whether via a web browser on a desktop, Android or iPhone, or any other device. It covers all your interactions with cuci 100, including account registration, deposits via Touch 'n Go eWallet or DuitNow, gaming activity, and communications with our support team.

Cuci 100 acts as the data controller under PDPA 2010 for any personal data you provide to us. This means we are responsible for ensuring your data is processed lawfully, fairly, and transparently — always for clearly defined and limited purposes.

Cuci 100 collects various categories of personal data depending on how you interact with the platform. The table below summarises the key data categories we collect:

Cuci 100 collects your personal data through three main channels:

3.1 Data You Provide Directly

This includes information you provide directly when:

• Registering a new account with cuci 100
• Completing your account profile
• Making deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX Maybank2u/CIMB Clicks
• Submitting a withdrawal request
• Contacting the cuci 100 support team via live chat or email
• Completing feedback forms or satisfaction surveys

3.2 Automatically Collected Data

When you use the cuci 100 platform, our systems automatically record certain technical information to ensure the platform operates correctly and securely. This includes your IP address, browser type and version, device operating system, pages visited, session time and duration, and information relating to your betting activity.

3.3 Data from Authorised Third Parties

In limited circumstances, cuci 100 may receive data from trusted third-party partners such as identity verification providers for KYC processes, payment service providers, and fraud prevention agencies.

Cuci 100 processes your personal data solely for legitimate, clearly defined and necessary purposes. Below is a full list of the purposes for which your data is used:

• Account Management: Creating, managing and keeping your cuci 100 account active and secure
• Identity Verification (KYC): Verifying that you meet the applicable age and regional eligibility requirements
• Payment Processing: Processing your deposits and withdrawals via local Malaysian payment methods
• Gaming Service Provision: Enabling you to access and play the games offered by cuci 100
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse
• Legal Compliance: Meeting compliance obligations, including AML and KYC reporting requirements to the relevant authorities
• Customer Support: Providing technical assistance and Bahasa Malaysia customer support to members
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking appropriate preventive action
• Platform Improvements: Analysing usage data (in aggregate and non-identifiable form) to improve the cuci 100 user experience

Cuci 100 does not sell your personal data to any third party. However, there are limited circumstances in which we are required to share data with certain parties in order to operate the platform lawfully and securely:

• Payment Service Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX providers (Maybank, CIMB) receive the transaction details required to process your payments. All these providers are bound by their own privacy policies and security standards.
• Identity Verification Provider: During the KYC process, cuci 100 may share the minimum necessary information with authorised verification parties to confirm your identity.
• Malaysian Authorities: cuci 100 will disclose data to the Royal Malaysia Police, Bank Negara Malaysia, or other relevant authorities when required to do so by law or a valid court order.
• Game Providers: Minimum technical information may be shared with licensed game providers such as Pragmatic Play and Evolution Gaming to resolve game disputes or address technical issues.

Cuci 100 continually invests in industry-grade security infrastructure to ensure all members' personal data is protected to the highest standard. Below are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and cuci 100 servers is encrypted using the latest TLS 1.3 protocol — the same technology used by Malaysia's leading banks.
• Data Encryption at Rest: Data stored in the cuci 100 database is also encrypted to guard against unauthorised access even in the event of a physical breach.
• Multi-Layered Access Control: Only cuci 100 staff with a legitimate business need who have undergone background checks may access members' personal data. All access is automatically audited.
• 24/7 Monitoring: Our cybersecurity monitoring system operates around the clock to detect and respond to any threats or anomalies in real time.
• Regular Penetration Testing: cuci 100 conducts regular penetration testing through independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Secure Data Backup: Data is backed up regularly to different server locations to ensure resilience and service availability in the event of an emergency.

While cuci 100 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

Cuci 100 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable Malaysian law. Standard retention periods are as follows:

Once the retention period expires, data will be securely deleted or permanently anonymised using methods that ensure it can no longer be linked back to you.

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by cuci 100:

To exercise any of the above rights, please contact the cuci 100 Data Protection Officer by email at privacy@cuci100.biz including your full name, account number, and details of the right you wish to exercise. We will verify your request and respond within 21 business days.

Cuci 100 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. Below is a summary of the types of cookies we use:

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect core functionality of the cuci 100 platform, including the ability to log in.

Cuci 100 is fully committed to protecting the privacy and well-being of minors. Our platform is intended for users aged 18 years of age and above only without exception.

Cuci 100 does not knowingly collect or process personal data from any individual under the age of 18. Should we become aware that a minor's personal data has been collected without parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

Cuci 100 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian legislation, industry practices, or developments to our platform. All material amendments will be communicated to you via:

• A prominent notice on the cuci 100 platform homepage at least 14 days before the changes take effect
• Email notifications to all registered members with an active email address
• An in-account notice when you log in after an amendment has been made

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the cuci 100 platform after any amendments take effect will be considered your acceptance of the revised policy.

To access previous versions of the cuci 100 Privacy Policy, please contact us at privacy@cuci100.biz. We maintain an archive of all prior versions for three years.

If you have any questions, concerns, or complaints about how cuci 100 handles your personal data, we encourage you to reach out to us directly. We are committed to providing a clear and satisfactory response within a reasonable timeframe.