100cuvi Privacy Policy

1.Introduction and Scope

100cuvi ("we", "us", "our", or "the platform") is committed to protecting the privacy and security of personal information provided by individuals who register an account, visit the website, deposit funds, place wagers, communicate with our support team, or otherwise interact with 100cuvi services. This Privacy Policy sets out the categories of personal data collected, the purposes and lawful bases for processing, the conditions under which data may be shared, the retention periods applied, and the rights available to data subjects.

This policy applies to all personal data processed in connection with the 100cuvi platform and covers visitors and registered players regardless of their location within Malaysia or internationally. It should be read together with the 100cuvi Terms & Conditions, which form the principal agreement governing platform use.

Where third-party products, payment processors, identity verification services, or game studios are accessed through the platform, their own privacy practices may apply in addition to this policy. 100cuvi is not responsible for the privacy practices of independent third parties whose terms govern their own data activities.

2.Definitions

"Personal data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data. "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, and destruction. "Data subject" means the individual whose personal data is being processed — in the context of this policy, the registered player or website visitor. "Controller" means 100cuvi, which determines the purposes and means of processing personal data. "Processor" means a third party that processes personal data on behalf of 100cuvi under a contractual arrangement.

3.Data We Collect

100cuvi collects personal data across several categories depending on the nature of the interaction:

Full legal name, date of birth, gender, residential address, city of residence (for example, Kuala Lumpur, Petaling Jaya, Penang, Shah Alam, Johor Bahru), nationality, MyKad or passport number, email address, and mobile telephone number provided when creating an account.

Copies of government-issued identification documents, selfie photographs, proof of address documents, bank or e-wallet statements, and source-of-funds evidence requested as part of Know Your Customer, anti-money laundering, or responsible gambling review processes.

Deposit amounts, withdrawal requests, transaction timestamps, payment method identifiers (such as masked card numbers, FPX bank code, e-wallet account identifier for Touch 'n Go eWallet, Boost, GrabPay, or DuitNow QR), transaction reference numbers, and running account balances.

Wager records, game session logs, sports markets selected (for example, Liga Super Malaysia, EPL, or UFC events), live casino rounds, slot spins, win and loss outcomes, bonus participation, and responsible gambling tool settings.

IP address, device type, operating system version, browser type, screen resolution, geolocation indicators derived from IP, session duration, page interaction data, and error or crash logs generated by your device when accessing 100cuvi.

Messages, live chat transcripts, emails, and support tickets submitted to the 100cuvi customer service team, together with the date, time, and content of those communications.

4.How We Use Your Personal Data

100cuvi uses personal data for the following purposes:

5.Legal Basis for Processing

100cuvi processes personal data on one or more of the following lawful grounds:

• Contractual necessity: processing required to fulfil the player agreement, including account creation, payment execution, wager settlement, and withdrawal processing.
• Legal obligation: processing necessary to comply with applicable anti-money laundering, counter-terrorism financing, data protection, and regulatory requirements.
• Legitimate interests: processing conducted for fraud prevention, security monitoring, responsible gambling safeguards, and platform improvement, where those interests are not overridden by the data subject's rights.
• Consent: processing for direct marketing communications and non-essential cookies where the player has provided explicit, freely given, and withdrawable consent.

6.Cookies and Tracking Technologies

100cuvi uses cookies and similar tracking technologies to support platform functionality, remember user preferences, maintain authenticated sessions, and collect anonymised analytics data. Cookies placed by 100cuvi include:

• Strictly necessary cookies: essential for login sessions, account authentication, and security operations. These cannot be disabled without affecting platform functionality.
• Functional cookies: store non-identifying preferences such as display settings, language selection, and odds format to improve the user experience.
• Analytics cookies: collect aggregated data about pages visited, session duration, and navigation paths to support platform improvements. Data is processed in anonymised or pseudonymised form.
• Marketing cookies: used only where the player has provided consent, to track engagement with promotional content. Consent may be withdrawn at any time.

Browser settings can be configured to block or delete cookies; however, disabling strictly necessary cookies may prevent access to authenticated areas of the platform. Most modern browsers include a cookie management tool in their privacy or settings section.

7.Sharing and Disclosure of Personal Data

100cuvi does not sell personal data. Data may be disclosed to the following categories of recipients under defined conditions:

• Payment service providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), bank partners (Maybank, CIMB, Public Bank, Hong Leong Bank), card networks, DuitNow, FPX administrators, and cryptocurrency processing services, for the purpose of executing deposits and withdrawals.
• Identity verification and KYC providers: third-party services engaged to conduct identity checks, age verification, document authentication, and source-of-funds screening.
• Game and data suppliers: licensed international game studios and sports data providers whose products are accessible through the 100cuvi platform, where technically necessary.
• IT and infrastructure providers: cloud hosting, cybersecurity, platform monitoring, and analytics service providers operating under contractual data processing agreements with 100cuvi.
• Legal and regulatory authorities: government bodies, law enforcement agencies, courts, or regulators where disclosure is required by applicable law, court order, or regulatory directive.
• Professional advisers: legal counsel, auditors, and compliance consultants where disclosure is necessary for advice, dispute resolution, or regulatory review, under professional confidentiality obligations.

Where personal data is shared with a third party acting as a data processor, 100cuvi requires those parties to implement appropriate technical and organisational safeguards consistent with applicable data protection standards.

8.International Data Transfers

Where personal data is processed by or transferred to a party located outside Malaysia, 100cuvi takes steps to ensure that appropriate safeguards are in place. These may include contractual arrangements, standard data protection clauses, or reliance on an adequacy determination where the destination jurisdiction provides a comparable level of data protection.

Players who wish to obtain further information about the specific safeguards applied to international transfers of their personal data may contact 100cuvi through the details provided in clause 15.

9.Data Security

100cuvi maintains a layered approach to data security designed to protect personal information against unauthorised access, disclosure, alteration, and destruction. Measures in place include:

• 256-bit TLS/SSL encryption for all data transmitted between user devices and 100cuvi servers.
• Two-factor authentication available on all registered accounts to prevent unauthorised login.
• PCI-DSS compliant payment handling ensuring that full card or banking credentials are not stored on 100cuvi-operated systems.
• Role-based access controls restricting internal access to personal data on a need-to-know basis.
• Continuous security monitoring, intrusion detection, and vulnerability assessment processes.
• Regular internal reviews of data handling procedures and supplier compliance assessments.

No system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own credentials and should notify 100cuvi immediately if they suspect unauthorised access to their account.

10.Retention Periods

Personal data is retained for the period necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory, or dispute resolution requirements. The following indicative retention periods apply:

• Account and identity data: retained for the duration of the active account relationship and for a minimum of five years following account closure, in accordance with applicable anti-money laundering and record-keeping obligations.
• Transaction and wager records: retained for a minimum of five years from the date of the transaction or betting event for audit, compliance, and dispute resolution purposes.
• KYC and verification documents: retained for the period required by applicable regulatory standards, which may extend to six years or longer following the end of the account relationship.
• Customer support communications: retained for up to three years following the resolution of the relevant matter, unless a longer period is required by a legal obligation or ongoing dispute.
• Marketing consent records: retained for the period during which consent is active and for a reasonable period following withdrawal to demonstrate compliance.
• Analytics data: aggregated and anonymised analytics data may be retained indefinitely as it cannot be used to identify individual data subjects.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised using recognised data destruction practices.

11.User Rights

Subject to applicable law and the conditions set out in this policy, registered players and visitors whose personal data is processed by 100cuvi may exercise the following rights:

• Right of access: to request confirmation of whether personal data is held and to receive a copy of that data together with supplementary information about how it is processed.
• Right to rectification: to request correction of inaccurate or incomplete personal data without undue delay.
• Right to erasure: to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful, subject to legal retention obligations.
• Right to restrict processing: to request that 100cuvi limit processing of personal data in defined circumstances, such as while an accuracy dispute is under review.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability: to receive personal data provided to 100cuvi in a structured, commonly used, and machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: to withdraw consent for processing activities that rely on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests to exercise any of the above rights should be submitted to 100cuvi using the contact details in clause 15. 100cuvi will respond within a reasonable period and may require identity verification before fulfilling a request. Rights may be limited where they conflict with a legal obligation, an active investigation, or another player's rights.

12.Children and Underage Access

100cuvi services are strictly restricted to individuals aged 21 and above. 100cuvi does not knowingly collect, process, or retain personal data relating to persons under the age of 21. Where it is identified or reasonably suspected that an account has been created by or for an underage individual, the account will be suspended pending investigation, and any associated funds will be handled in accordance with applicable legal and regulatory requirements.

If a parent, guardian, or other responsible adult becomes aware that a minor has provided personal data to 100cuvi, they should contact the support team immediately. 100cuvi will take prompt steps to investigate and, where confirmed, delete the data concerned.

13.Marketing Communications

Where a player has provided explicit consent, 100cuvi may send direct marketing communications by email, SMS, or in-platform notification regarding promotions, bonuses, product updates, sports event highlights (such as Liga Super Malaysia fixtures, EPL match previews, or UFC event notices), and platform features.

Consent for marketing is separate from the agreement to these Terms and Privacy Policy. Players may withdraw marketing consent at any time by contacting 100cuvi support. Withdrawal of consent does not affect the lawfulness of marketing sent before that withdrawal. Certain account-related communications — such as transaction confirmations, security alerts, and responsible gambling notifications — are not marketing communications and will be sent regardless of marketing preferences where they relate to account or regulatory obligations.

14.Policy Amendments

100cuvi reserves the right to update this Privacy Policy to reflect changes in applicable law, regulatory requirements, platform operations, data processing practices, or payment infrastructure. Material changes will be communicated through a prominent notice on the 100cuvi website, noting the updated effective date. Where required by applicable law, 100cuvi will seek renewed consent before implementing material changes that affect the basis on which personal data was originally collected.

Continued access to or use of 100cuvi following the effective date of a revised policy constitutes acceptance of the updated terms. Players who do not accept the revised policy should discontinue use and request account closure before the effective date.

15.Contact Us

Questions, concerns, subject access requests, consent withdrawal requests, or any other data-related enquiry should be addressed to the 100cuvi data team. Contact details are provided below as plain text for your reference:

Email: [email protected]

Please include your registered account username, the nature of your request, and any relevant dates or transaction references to assist the review. 100cuvi will acknowledge receipt and provide a substantive response within a reasonable period. Where a request is complex, involves third-party coordination, or requires regulatory input, additional time may be needed; the player will be informed of any such delay.

If you are dissatisfied with the handling of a privacy-related matter, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.