Privacy Policy cici100 – Personal Data Protection for Malaysia Players

1 Introduction and Scope of Privacy Policy

This Privacy Policy explains how cici100 ("we", "Platform") collects, processes, stores, and protects your personal data as a user of our online entertainment platform. This document applies to all individuals who register, log in, or use any services provided through the cici100.pro website and the cici100 mobile app.

We take the responsibility of protecting personal data seriously. Every decision regarding how we handle your data is made with your interests and security as a user at the forefront. This policy is written in clear, plain language so you know exactly what happens with your information.

By registering or using the cici100 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

2 Types of Personal Data Collected

Cici100 collects personal data across several categories depending on how you interact with the platform. Below is the information collected and the purpose behind each:

3 How We Use Your Data

The personal data you provide to cici100 is used for legitimate, disclosed purposes. Below is a detailed breakdown of how we use each category of data:

• Account Management: Creating, verifying and managing your account, including the login process, account security and account-related communications.
• Transaction Processing: Processing deposits and withdrawals securely and accurately, including verifying payment details and communicating with payment providers.
• KYC Verification: Meeting compliance requirements by verifying player identity before approving withdrawals, in line with anti-money laundering standards.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, money laundering and other security breaches using technical data and activity patterns.
• Customer Support: Providing relevant and effective assistance based on your account history and communications with the cici100 support team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate support tools to players who may need assistance.
• Service Communications: Sending important account notifications, security updates, terms changes and relevant promotional information (with your consent).

Cici100 does not use your data to make automated decisions that could have a material impact on you without human review. Any decision affecting your account involves appropriate human assessment.

4 Third-Party Data Sharing and Disclosure

Cici100 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, in the course of legitimate platform operations, data may be shared with the following parties within strict boundaries:

• Payment Providers: Information required to process transactions is shared with authorised payment providers such as banks, e-wallet operators and payment processors. This sharing is limited to the minimum necessary to complete the transaction.
• Technology Service Providers: Technical infrastructure providers such as server hosting and cybersecurity services may have limited access to data in the context of delivering their services. All such parties are bound by strict data processing agreements.
• Regulatory & Law Enforcement Bodies: cici100 will disclose personal data to the relevant authorities when required by court order, applicable law, or a valid official investigation. Such disclosures will be communicated to you wherever possible, unless prohibited by law.
• Identity Verification Providers: During the KYC process, identity documents may be verified using accredited third-party verification services. These services are held to security standards equivalent to or exceeding those of cici100.

5 Data Security Measures

Cici100 continuously invests in security infrastructure to protect your personal data from unauthorised access, loss, alteration, or disclosure. The technical and organisational security measures we implement include:

• Data Encryption in Transit: All communications between your browser or app and cici100 servers are encrypted using TLS 1.3 with regularly renewed 256-bit SSL certificates.
• Data Encryption at Rest: Sensitive data such as passwords (hashed using the bcrypt algorithm), bank account numbers, and verification documents are stored in encrypted format in our databases.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, unauthorised login attempts, and traffic anomalies that may indicate security threats.
• Two-Factor Authentication (2FA): 2FA is available and encouraged for all accounts. This adds an extra layer of security to protect your account even if your password is compromised.
• Regular Security Audits: cici100 conducts regular internal security audits and vulnerability assessments, as well as independent penetration testing, to identify and address potential weaknesses.
• Staff Training: All cici100 staff with access to player data undergo regular data protection training and are bound by strict confidentiality agreements.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a security breach affecting your data, we will notify you in a timely manner in accordance with our incident response procedures.

6 Your Rights as a Data Owner

As the owner of your personal data, cici100 recognises and respects the following rights that you may exercise at any time:

To exercise any of the above rights, contact the cici100 support team via Live Chat or support email. We will process your request within a reasonable timeframe and notify you of the action taken.

7 Use of Cookies and Tracking Technologies

Cici100 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions properly, and analyse usage patterns in aggregate. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login sessions, form security, and language preferences. These cookies cannot be disabled without significantly affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited frequently, response times and errors encountered — to help us improve technical performance.
• Functional Cookies: Remembering your preferences such as display language, layout settings and game preferences to deliver a more personalised experience on future visits.
• Session Cookies: Automatically deleted when you close your web browser. Used to maintain a secure login session while you are using the platform.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality or performance of the cici100 platform. cici100 does not use third-party cookies for advertising purposes.

8 Data Retention Period

Cici100 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal and regulatory obligations. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and updated regularly to ensure accuracy.
• Financial Transaction Records: Retained for a minimum of seven years from the transaction date to meet financial audit and legal compliance requirements.
• KYC Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, for anti-money laundering compliance purposes.
• Communication Logs: Customer support communication records are retained for three years for service quality and dispute resolution purposes.
• Technical Data: Access logs and technical security data are retained for 12 months and then deleted or anonymised.

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be linked to you personally.

9 Child Data Protection

Cici100 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account. Age verification is carried out during registration and throughout the KYC process to minimise the risk of underage sign-ups.

10 Changes to Privacy Policy

Cici100 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our operational practices, technology, legal requirements, or other relevant factors. We are committed to informing you of any material changes.

Notices of changes will be sent to the email registered to your account and prominently displayed on the platform at least seven days before the changes take effect. The "Updated" date at the top of this document always reflects the date of the most recent changes made.

Continued use of the cici100 platform after Privacy Policy changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you:

• Live Chat: The fastest method — available 24/7 via the Live Chat icon on the cici100 platform
• Email: [email protected] — for privacy enquiries requiring a formal written response
• FAQ: Reference FAQ page us for quick answers to common privacy questions

For formal requests related to personal data rights (access, correction, deletion), please clearly state the type of request and include appropriate identity verification so we can process it accurately and securely.