Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 100cui ("100cui", "we", "us", "our"), the operator of the online gaming platform at 100cui.net, collects, uses, discloses, stores, and protects personal data relating to users ("Player", "you") of the 100cui platform and related services.

100cui is committed to handling your personal data responsibly and in accordance with applicable data protection legislation and the requirements of the international gaming authority under which 100cui operates. By registering an account with 100cui or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the 100cui Terms and Conditions, which are accessible at /terms-conditions. Where there is a conflict between the two documents on data matters, this Policy takes precedence.

2. Personal Data We Collect

100cui collects personal data in the following categories, depending on how you interact with the platform:

100cui does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for regulatory identity verification purposes and with your explicit consent.

3. How We Use Your Personal Data

100cui uses the personal data we collect for the following purposes:

• Account creation and management — to register, maintain, and administer your 100cui player account, including identity verification and age confirmation (21+ requirement).
• Transaction processing — to process your deposits via Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB FPX, Public Bank FPX, and USDT TRC20, and to facilitate MYR withdrawals to your designated payment method.
• Platform delivery and personalisation — to deliver the 100cui gaming services you use, remember your preferences, and optimise platform performance on your device.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other conduct prohibited under the 100cui Terms and Conditions.
• Regulatory compliance — to meet the Know Your Customer (KYC), Anti-Money Laundering (AML), and reporting obligations imposed on 100cui by applicable international gaming authority requirements.
• Customer support — to respond to your queries, complaints, and responsible gaming requests in a timely and effective manner.
• Marketing and promotions — to send you information about 100cui bonuses, promotions, and new game releases, where you have consented to receive such communications. You may opt out at any time through your account settings.
• Responsible gaming — to monitor gameplay patterns and, where warranted, proactively contact players or apply account restrictions in accordance with our responsible gaming obligations.
• Analytics and improvement — to understand how players use the 100cui platform and to continuously improve game selection, payment flows, and the overall user experience.

4. Legal Basis for Processing

100cui processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing required to perform the contract between 100cui and you as a registered player, including account management and payment processing.
• Legal obligation — processing required to comply with applicable laws and regulatory obligations, including KYC and AML requirements imposed by the international gaming authority under which 100cui is licensed.
• Legitimate interests — processing for fraud prevention, security, platform analytics, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for direct marketing communications, where your prior consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

100cui does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and on a need-to-know basis:

• Payment processors and e-wallet providers — Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processing partners, for the purpose of facilitating your deposits and withdrawals.
• Game software providers — third-party studios that supply games to the 100cui platform. These providers may receive anonymised session data for game performance and integrity purposes.
• Identity verification and fraud prevention services — third-party KYC and AML screening providers engaged by 100cui to fulfil its regulatory obligations.
• Regulatory and law enforcement authorities — where 100cui is legally required to disclose information to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction.
• IT and infrastructure providers — cloud hosting, database management, and cybersecurity service providers engaged by 100cui under binding data processing agreements.
• Corporate successors — in the event of a merger, acquisition, or sale of all or part of 100cui's business, your data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third parties with whom 100cui shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

6. Data Retention

100cui retains your personal data for as long as your account remains active and for such additional periods as are required by applicable regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications are retained for three (3) years from the date of the communication.
• Marketing consent records are retained for the duration of the consent and for three (3) years following withdrawal of consent, as evidence of compliance.
• Technical and usage data is retained in identifiable form for no longer than twelve (12) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, 100cui will securely delete or anonymise your personal data.

7. Cookies & Tracking Technologies

The 100cui platform uses cookies and similar tracking technologies to improve platform performance and your experience as a player. The following types of cookies are used:

• Essential cookies — required for the platform to function. These include session authentication cookies that keep you logged in to your 100cui account during a session. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game lobby filters to personalise your 100cui experience across sessions.
• Analytics cookies — collect anonymised data about how players navigate and use the 100cui platform, enabling us to identify areas for improvement.
• Security cookies — support fraud detection and login security features including device recognition and brute-force protection.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect the functionality of the 100cui platform and may prevent you from accessing certain features or maintaining a login session.

8. Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by 100cui:

• Right of access — you may request a copy of the personal data 100cui holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing — you may request that 100cui limit the processing of your data in certain circumstances.
• Right to data portability — you may request a machine-readable copy of the personal data you provided to 100cui, where processing is based on consent or contract.
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your 100cui account settings.

To exercise any of these rights, please contact 100cui support. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

9. Data Security

100cui implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 100cui's servers.
• Encrypted storage of sensitive data fields at rest.
• Role-based access controls ensuring that only authorised personnel access personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the 100cui platform infrastructure.
• Multi-factor authentication requirements for internal system access.
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

While 100cui takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 100cui account credentials and for notifying us promptly of any suspected unauthorised access.

10. Children & Minors

The 100cui platform is strictly intended for individuals aged 21 years and above. 100cui does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If 100cui becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, such data will be deleted immediately and the associated account will be closed. If you have reason to believe that a minor has registered at 100cui, please contact our support team immediately.

11. Cross-Border Data Transfers

100cui's platform infrastructure and game providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, 100cui ensures that such transfers are subject to appropriate safeguards, including:

• Data processing agreements with receiving entities that impose data protection standards consistent with this Policy.
• Transfer only to jurisdictions that provide an adequate level of data protection as recognised by applicable standards.
• Use of standard contractual clauses or equivalent contractual mechanisms where required.

12. Policy Updates

100cui may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The updated Policy will be published at /privacy-policy with a revised effective date.

Where a material change is made to this Policy that affects how we process your personal data, 100cui will notify registered players via the contact details associated with their 100cui account prior to the change taking effect. Continued use of the 100cui platform following notification of a material change constitutes acceptance of the revised Policy.

13. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or the way in which 100cui handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the 100cui platform
• Email: [email protected] (plain text only — not a clickable link)

100cui will acknowledge data-related requests within 24 hours and aims to provide a substantive response within thirty (30) calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline and the reason for the delay.