Privacy Policy 100uci – Malaysia Player Personal Data Protection

1. Introduction

100uci ("we", "Platform") is committed to protecting the privacy of every user who uses our services. This Privacy Policy explains the types of information we collect, why we need it, how it is used, and the steps we take to safeguard it.

This document applies to all users of the 100uci platform, including website visitors, registered members, and those using our mobile app. By continuing to use any of our services, you confirm that you have read and understood this Privacy Policy.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. If you have any questions about how we handle your data, Section 10 of this document provides our contact information.

2. Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe, fair and quality service. Below are the types of data we collect, organised by category:

Data You Provide Directly

• Full name, date of birth and gender collected during account registration.
• Email address and phone number for communication and account security purposes.
• Current residential address for identity verification (KYC) purposes.
• A copy of your identity document (MyKad or passport) to fulfil KYC requirements.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Information you provide when contacting our customer support team.

Automatically Collected Data

• Your IP address, device type, operating system, and browser version.
• Game session data including login times, games played, and transaction records.
• Cookie data and similar tracking technologies to improve the user experience.
• Platform activity logs for security and fraud detection purposes.

Data Category	Purpose of Collection	Retention Period
Identity Information	Account registration & KYC	Throughout active account + 7 years
Financial Information	Deposit & withdrawal processing	Throughout active account + 7 years
Session & Game Data	Security & fraud detection	2 years from the date of record
Technical Data (IP, Device)	Platform security & analytics	12 rolling months
Communication Records	Customer Support & References	3 years from the date of interaction

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose beyond the scope stated here without obtaining your consent first.

• Account Management: Creates, verifies and maintains your account, including required KYC processes.
• Transaction Processing: Processes deposits, withdrawals and all financial transactions securely and accurately.
• Platform Security: Detects and prevents fraudulent activity, money laundering and unauthorised access.
• Service Communications: Sends important notices related to your account, transactions and policy changes.
• Platform Improvement: Analyses usage patterns to improve the gaming experience and user interface.
• Legal Compliance: Fulfils reporting obligations to relevant authorities under Malaysian law.
• Marketing (with consent): Sends promotional offers and platform updates if you have opted in to receive them.

4. Data Sharing With Third Parties

100uci does not sell or trade your personal data. However, there are limited situations where we need to share certain information with trusted third parties to enable our services to operate properly:

Payment Service Providers

Required financial information is shared with approved payment gateway providers to process your deposits and withdrawals. All our payment providers are bound by strict confidentiality agreements and PCI-DSS security standards.

Identity Verification Providers

Your KYC documents may be processed through a licensed third-party identity verification system to ensure the accuracy and validity of the information you provide. These providers use your data solely for verification purposes.

Legal Authorities

We will disclose the required information to government authorities or law enforcement bodies if mandated by a court order, warrant or applicable Malaysian legislation. We will notify you of any such disclosure unless prohibited by law.

5. Cookies and Tracking Technologies

100uci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session management. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform to help us improve the user experience.
• Functional Cookies: Remembers your preferences such as language, display currency and interface settings.
• Security Cookies: Helps identify suspicious activity and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform.

6. Data Security Measures

We continuously invest in security infrastructure to ensure your personal data is always protected at the highest level. Below are the key security layers we employ:

• 256-bit SSL/TLS encryption for all data transfers between you and our servers.
• Encryption at rest for all personal records in our database.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• 24/7 security monitoring by our cybersecurity team.
• Independent security audits conducted periodically by accredited third-party firms.
• Strict access control policy – only authorised personnel may access personal data.
• Mandatory security training for all staff who handle user data.

In the event of a data security breach affecting your personal information, we are committed to notifying you within 72 hours of confirming the incident, in line with international best practices.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, you may submit a request via our 24/7 live chat or by emailing our privacy team. We will process your request within 14 business days. For complex requests, we may require up to 30 days and will keep you updated on the progress.

Please note that certain rights may be limited in specific situations, for example when data must be retained to fulfil legal obligations or to defend valid legal claims.

8. Data Retention and Deletion

100uci retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Our data retention schedule is as set out in the table in Section 2.

After your account is closed, we will retain the necessary records for the period required by anti-money laundering laws (AMLA) and relevant financial regulations, typically seven (7) years. After this period, your data will be securely deleted from all our systems.

If you request account deletion, we will initiate the account closure and data removal process in full compliance with all applicable legal requirements. You will receive a confirmation once the process is complete.

9. Changes to This Privacy Policy

100uci reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements. We will notify you of any material changes through:

• A clear notice on our platform's home page at least 14 days before changes take effect.
• Email notification to the address registered to your account.
• In-app notifications via our mobile app if you use that service.

The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. We encourage you to review this policy periodically. Continued use of the platform after changes take effect will be considered acceptance of the amended policy.

10. Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how 100uci handles your personal data, our Data Protection Officer team is ready to assist you:

You may also lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated and we have not resolved the matter to your satisfaction.