Privacy Policy

📄

Section 1 Introduction

This Privacy Policy ("Policy") describes how 100cici ("Company", "Platform", "we", "us", "our") collects, processes, stores, discloses, and protects personal data provided by or collected from users ("User", "Player", "you") in connection with your use of the 100cici website at https://100cici.cam and all associated services.

100cici is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised privacy standards. We collect only the data that is necessary, we use it only for stated purposes, and we do not sell it to third parties.

This Policy applies to all users of the Platform globally, with particular relevance to players based in Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country. Malaysian players benefit from specific protections provided under the PDPA, which 100cici respects and upholds.

📖

Section 2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

📊

Section 3 Personal Data We Collect

100cici collects Personal Data in the following categories, depending on how you interact with the Platform:

🔍

Section 4 How We Collect Your Data

100cici collects Personal Data through the following channels:

• Direct submission: Information you actively provide during account registration, KYC verification, payment processing, support enquiries, or promotional form completion.
• Automated collection: Data collected automatically when you interact with the Platform, including via cookies, server logs, and analytics tools that record device, session, and navigation information.
• Payment providers: Transaction confirmation data received from authorised payment partners including DuitNow, FPX, e-wallet providers (Touch 'n Go, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong).
• Identity verification services: Data received from third-party KYC verification providers engaged to authenticate identity documents submitted during account verification.
• Fraud prevention partners: Risk signals and device fingerprint data from specialised anti-fraud technology partners used to detect suspicious activity and protect account integrity.
• Publicly available sources: In limited circumstances, information available from public registries or databases for compliance, due diligence, or sanctions-screening purposes.

⚙️

Section 5 Data Processing & Use

100cici processes your Personal Data for the following specific purposes:

⚖️

Section 6 Legal Basis for Processing

100cici processes your Personal Data on one or more of the following legal bases, consistent with applicable data protection legislation:

• Contractual necessity: Processing required to perform the Agreement between you and 100cici — including account creation, game delivery, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification, tax reporting, and responses to regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for purposes that are in 100cici's legitimate business interests and do not override your fundamental rights — including fraud prevention, platform security, and service improvement, provided such interests are proportionate and not outweighed by your interests or rights.
• Consent: Where we process data for purposes not covered by the above bases — such as sending optional marketing communications — we will seek your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

🤝

Section 7 Data Sharing & Disclosure

100cici does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited and controlled circumstances:

• Payment processing partners: Data shared with authorised payment gateways (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processors) solely for the purpose of processing your transactions.
• KYC and identity verification providers: Identity documents and verification data shared with certified third-party KYC service providers engaged for age and identity verification. These providers are contractually bound to strict data confidentiality obligations.
• Fraud prevention and security vendors: Technical risk signals shared with anti-fraud technology providers for the purpose of detecting suspicious activity, protecting your account, and maintaining platform integrity.
• Regulatory and law enforcement bodies: Where required by applicable Malaysian law, a court order, or a lawful request from a government authority or law enforcement agency, we may disclose Personal Data. We will notify you where legally permissible.
• Professional advisors: Data disclosed to lawyers, auditors, or insurers in the course of obtaining professional services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 100cici's assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

🍪

Section 8 Cookies & Tracking Technologies

100cici uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit our website. They help us remember your preferences, keep you securely logged in, analyse platform usage, and deliver relevant content.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication cookies and security tokens. You cannot opt out of these without impacting platform functionality.
• Functional Cookies: Store your language preferences, display settings, and session configuration to improve your experience across visits.
• Analytics Cookies: Collect anonymised information about how visitors interact with the Platform — such as pages visited, session duration, and navigation paths — to help us improve performance. Data is aggregated and does not identify individual users.
• Security Cookies: Support fraud detection and account protection features by identifying unusual access patterns or device configurations.

You may control cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some Platform features. For full cookie management options, refer to the help documentation of your browser.

🗂️

Section 9 Data Retention

100cici retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal, regulatory, and operational obligations. The following general retention guidelines apply:

• Active Account data: Retained for the duration of your Account and for a minimum period of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction records: Retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
• Customer support records: Retained for three (3) years from the date of resolution, unless the matter involves a pending dispute or legal proceeding.
• Technical and device logs: Retained for up to twelve (12) months for security and fraud prevention purposes, then anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with a specific individual.

🔒

Section 10 Data Security

100cici implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmissions between your device and the Platform are encrypted using 256-bit SSL/TLS protocols. Personal Data stored in our systems is encrypted at rest using industry-standard algorithms.
• Access controls: Personal Data is accessible only to authorised 100cici personnel who require it to perform their specific role. Access is governed by role-based permissions and logged for audit purposes.
• Two-Factor Authentication (2FA): Available to all users and required for sensitive account operations to prevent unauthorised account access.
• Regular security assessments: Our systems undergo periodic vulnerability assessments and penetration testing conducted by qualified security professionals.
• Incident response procedures: We maintain documented data breach response protocols. In the event of a breach affecting your personal data, we will notify affected users and, where required, the relevant regulatory authority, within the timeframe prescribed by applicable law.

🧑‍⚖️

Section 11 Your Data Rights

Subject to applicable law and certain limitations where overriding legal obligations apply, you have the following rights with respect to your Personal Data held by 100cici:

To exercise any of the above rights, please contact our support team at [email protected] (displayed as plain text — not a clickable link). We will respond to all legitimate requests within 30 days. For complex or multiple requests, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

🔞

Section 12 Children's Privacy

The 100cici Platform is strictly intended for users aged 21 years and above. We do not knowingly collect, process, or store Personal Data from any individual under the age of 21.

If we become aware that Personal Data has been collected from a user below the minimum age threshold, we will take immediate steps to delete that data and close the associated Account. Any winnings accumulated by an underage user will be permanently forfeited.

🌐

Section 13 International Data Transfers

In certain circumstances, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. This may occur when we engage payment processors, KYC verification providers, cloud infrastructure services, or anti-fraud technology partners whose servers are located in other countries.

Where such transfers occur, 100cici ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to that provided under Malaysian data protection principles. These safeguards include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions with recognised adequate levels of data protection.

You may request information about the specific safeguards in place for international transfers of your data by contacting our support team.

📝

Section 14 Amendments to This Policy

100cici reserves the right to revise this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes of processing, or your rights — will be communicated to registered users via email notification or a prominent notice on the Platform at least 14 days prior to the changes taking effect.

Minor or clarificatory changes may be made without advance notice, with the updated Policy published on this page and the effective date revised accordingly. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the changes.

If you do not agree with a material change to this Policy, you should contact us to close your Account before the revised Policy's effective date.

📬

Section 15 Contact Us

For any privacy-related queries, requests to exercise your data rights, or concerns about how 100cici handles your Personal Data, please contact us through the following channel:

For questions about our Terms & Conditions or our Responsible Gambling practices, please visit the respective pages or contact support directly.

This Privacy Policy was last reviewed and updated on 1 January 2026. 100cici is committed to keeping this Policy current and reflective of our actual data practices. All rights not expressly granted in this Policy are reserved by 100cici.