100cuci Privacy Policy

This Privacy Policy ("Policy") is issued by 100cuci ("100cuci", "we", "us", "our") and applies to all personal data collected through the 100cuci website at 100cuci.vu, the account registration process, deposits and withdrawals, customer support interactions, and any other service offered under the 100cuci brand.

By creating a 100cuci account or using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the 100cuci Terms & Conditions, which govern your overall use of the platform.

100cuci recognises and respects the privacy rights of all users, including those accessing the platform from Malaysia. We are committed to handling personal data responsibly, retaining it only for as long as necessary, and not selling it to third parties for their own marketing purposes.

100cuci collects personal data through multiple touchpoints across the platform lifecycle. The categories of data collected, and the context in which each is collected, are set out below.

100cuci does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related disclosures are voluntarily provided in the context of responsible gaming self-exclusion requests, in which case such data is handled with heightened confidentiality controls.

100cuci uses personal data collected from users for the following purposes:

• Account management: Creating, maintaining, and securing your 100cuci account, including authentication, password recovery, and session management.
• Payment processing: Verifying deposit and withdrawal requests, matching account holder identity to payment method names, and facilitating transactions via Touch 'n Go eWallet, Boost, DuitNow, FPX, and local bank channels.
• Identity verification (KYC): Confirming age eligibility (minimum 21 years), verifying identity documents, and meeting obligations under anti-money laundering and counter-financing of terrorism requirements.
• Fraud and abuse prevention: Detecting multi-accounting, bonus abuse, bot activity, and other prohibited conduct described in the Terms & Conditions.
• Customer support: Responding to inquiries, resolving disputes, and maintaining a record of communications for quality assurance.
• Platform improvement: Analysing anonymised usage patterns to improve platform performance, game selection, and user experience.
• Responsible gaming: Monitoring account activity for indicators of problem gaming behaviour and administering deposit limits, cooling-off periods, and self-exclusion requests.
• Legal compliance: Fulfilling obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Sending promotional information and bonus notifications to users who have opted in to receive such communications. Users may opt out at any time via account settings or by contacting support.

100cuci will not use your personal data for purposes other than those described above without first obtaining your explicit consent, or unless required to do so by law.

100cuci processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between 100cuci and the user (e.g., account creation, payment processing, game access).
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for 100cuci's legitimate business interests, such as fraud detection, security monitoring, and platform improvement, where those interests are not overridden by the user's privacy rights.
• Consent: Processing based on explicit user consent, such as marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

100cuci does not sell or rent personal data to unaffiliated third parties. Personal data may be shared with the following categories of recipients solely to the extent necessary to operate the platform and fulfil legal obligations:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and Malaysian banking institutions involved in processing deposits and withdrawals. These providers receive only the data necessary to complete the transaction and are bound by their own regulatory obligations.
• Identity verification providers: Third-party KYC services used to verify government-issued identification and confirm age eligibility.
• Game software providers: Licensed game studios whose content is integrated into the 100cuci platform. These providers may receive session and account identifiers required to operate the game environment but do not receive financial or identity documentation.
• Regulatory and law enforcement authorities: Where 100cuci is required by law, court order, or regulatory directive to disclose user data, such disclosure will be made in the minimum scope required to satisfy the obligation.
• Professional advisers: Legal, audit, and compliance advisers operating under confidentiality obligations.

100cuci uses cookies and similar tracking technologies to operate the platform, maintain user sessions, and collect anonymised usage analytics. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for platform functionality including login session management, security tokens, and language preferences. These cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users interact with the platform — pages visited, time spent, navigation paths — to improve the user experience. Data collected under this category is aggregated and not linked to individual identity.
• Functional cookies: Used to remember user preferences such as display settings and previously entered information to reduce repetitive data entry.

Users may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair platform functionality, including the ability to maintain a logged-in session. 100cuci does not use third-party advertising cookies or cross-site tracking technologies.

100cuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum post-closure period as required by applicable anti-money laundering regulations (typically five years from account closure).
• Transaction records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping obligations.
• KYC and identity documentation: Retained for the duration of the account relationship and for five years post-closure, or longer where required by law.
• Support communications: Retained for up to three years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained in anonymised or aggregated form for up to two years for platform analytics purposes.

When personal data is no longer required, 100cuci will securely delete or anonymise it in accordance with its internal data disposal procedures.

100cuci implements technical and organisational security measures appropriate to the nature of the data held and the risks involved. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between users and the 100cuci platform;
• Encryption of sensitive data at rest, including identity documents and financial account identifiers;
• Access controls restricting staff access to personal data on a need-to-know basis;
• Two-factor authentication requirements for account access on new or unrecognised devices;
• Regular security assessments of platform infrastructure and third-party integrations;
• Incident response procedures for the detection and notification of data security breaches.

No data transmission over the internet or electronic storage method is completely secure. While 100cuci takes all reasonable measures to protect your personal data, we cannot guarantee absolute security. Users are equally responsible for maintaining the confidentiality of their account credentials and for using the platform on secure, private devices.

Subject to applicable law and any regulatory retention obligations, 100cuci users have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data 100cuci holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where 100cuci no longer has a legal basis for retaining it. Note that this right is subject to overriding legal obligations (e.g., AML retention requirements).
• Right to object: You may object to processing based on legitimate interests, including direct marketing. All marketing communications include an unsubscribe mechanism.
• Right to data portability: Where processing is based on consent or contract, you may request a machine-readable copy of your data.
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances, such as during a dispute about data accuracy.

To exercise any of the above rights, please contact 100cuci support via the live chat on the platform or write to [email protected]. Requests will be acknowledged within 5 business days and responded to within 30 days. Requests may require identity verification before processing.

The 100cuci platform is strictly restricted to persons aged 21 and above. 100cuci does not knowingly collect personal data from persons under 21 years of age. If 100cuci becomes aware that a registered account belongs to a person under the minimum age, the account will be suspended immediately, personal data retained only to the extent required to satisfy legal obligations, and access permanently revoked.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the 100cuci platform, please contact support immediately at [email protected] with the relevant account details. 100cuci will investigate and take appropriate action without delay.

The 100cuci website does not contain links to external third-party websites for marketing or affiliate purposes. Where links to third-party services appear (for example, links to payment provider support pages), those services are governed by their own privacy policies. 100cuci is not responsible for the privacy practices of third-party services and encourages users to review the privacy policies of any external services they access independently.

100cuci reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform functionality. When material changes are made, 100cuci will update the "Last Updated" date at the top of this page and, where the changes are significant, may provide additional notification through the platform or by direct communication to registered users.

Your continued use of the 100cuci platform following the publication of an updated Privacy Policy constitutes acceptance of the changes. Users who do not agree with any amended terms should discontinue use of the platform and contact support to request account closure.

For all privacy-related enquiries, data access requests, or concerns about how 100cuci handles your personal data, please contact us through the following channel:

Enquiries submitted via live chat on the platform will be routed to our data handling team. Written requests submitted by email will receive an acknowledgement within 5 business days. For responsible gaming concerns, including self-exclusion requests, please visit the Responsible Gaming page.