100cuxi Privacy Policy

1.About This Privacy Policy

This Privacy Policy sets out the basis on which 100cuxi collects, processes, stores, and shares personal data obtained from individuals who register accounts on, visit, or interact with the 100cuxi platform at https://100cuxi.co. It applies to all registered players, prospective players, and visitors to the platform regardless of the device or method of access used.

100cuxi is committed to protecting the privacy and personal data of all individuals who engage with the platform. This Policy is intended to be clear, transparent, and genuinely useful to Malaysian players seeking to understand how their information is handled. It has been drafted in accessible English rather than opaque legal language wherever possible, while maintaining the legal precision required of a binding data protection statement.

This Policy should be read alongside the 100cuxi Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. This Privacy Policy was last updated and came into effect on 1 January 2026.

2.Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the operating entity of the 100cuxi platform. The platform is accessible at https://100cuxi.co and operates under internationally recognised gaming authority standards.

All data protection enquiries, access requests, correction requests, and complaints should be directed to the 100cuxi data protection contact at [email protected]. 100cuxi will acknowledge receipt of all formal data protection requests within five business days and will respond substantively within 30 days, extendable by a further 60 days where the complexity or volume of requests so requires, with notice of any extension provided to the requesting individual.

3.Personal Data We Collect

3.1 Registration and Account Data

When you create a 100cuxi account, we collect the following categories of personal data:

• Full legal name as it appears on your identity document;
• Date of birth (for age verification — 100cuxi is a 21+ platform);
• Residential address, including postcode and state within Malaysia or, where applicable, international address;
• Email address;
• Mobile telephone number;
• Username chosen by you during registration.

3.2 Identity Verification (KYC) Data

Before processing your first withdrawal, 100cuxi is required to complete Know Your Customer identity verification. For this purpose, we may collect:

• Copy of government-issued identity document (Malaysian MyKad, passport, or equivalent);
• Proof of address (recent utility bill, bank statement, or official correspondence not older than three months);
• Source-of-funds documentation where required by internal compliance thresholds or regulatory obligations.

3.3 Financial Data

To process deposits and withdrawals, 100cuxi collects and records: payment method details (Touch n Go eWallet account reference, Boost eWallet account reference, bank account name and last four digits, or FPX transaction references); transaction amounts, dates, and types; and currency (MYR). Full payment credentials are processed by our authorised payment service providers and are not stored on 100cuxi servers in unencrypted form.

3.4 Activity and Gaming Data

100cuxi records all platform activity associated with your account, including: games played and Wagers placed; win and loss records; bonus claims and wagering progress; session start and end times; and responsible gaming tool configurations and elections.

3.5 Technical and Device Data

When you access the 100cuxi platform, we automatically collect certain technical data, including: IP address; device type and operating system; browser type and version; session duration and pages visited; and referring URL if you arrived via a link from another website.

4.How We Collect Your Data

100cuxi collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC verification, customer support communications, or any other direct interaction with the platform or 100cuxi staff;
• Automated collection: Technical and device data collected automatically when you access or use the 100cuxi platform, including via cookies and similar tracking technologies described in Section 7;
• Third-party sources: Where permitted by law and necessary for fraud prevention or KYC compliance, 100cuxi may supplement the data you provide with data obtained from identity verification service providers, credit reference agencies, or publicly available sources.

5.Purposes and Legal Basis for Processing

100cuxi processes your personal data for the following purposes, each grounded in an appropriate legal basis:

• Account creation and management — Necessary for the performance of the contract between you and 100cuxi;
• Processing deposits and withdrawals — Necessary for the performance of the contract and compliance with financial services obligations;
• Age verification and KYC compliance — Necessary for compliance with legal obligations applicable to 100cuxi as a gaming operator;
• Anti-money laundering and fraud prevention — Necessary for compliance with legal obligations and for the legitimate interests of 100cuxi and the integrity of the platform;
• Responsible gaming monitoring and enforcement — Necessary for compliance with gaming authority standards and for the protection of the vital interests of players;
• Customer support and dispute resolution — Necessary for the performance of the contract and the legitimate interests of 100cuxi in maintaining a lawful and fair platform;
• Platform security and fraud detection — Necessary for the legitimate interests of 100cuxi in protecting the platform and its players from fraud, abuse, and unauthorised access;
• Direct marketing communications — Based on your consent, where you have opted in to receive marketing communications from 100cuxi. You may withdraw this consent at any time;
• Platform improvement and analytics — Based on the legitimate interests of 100cuxi in improving and optimising the platform experience for Malaysian players, subject always to your rights and interests.

6.Sharing Your Personal Data

100cuxi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients for the purposes described in this Policy:

• Payment service providers: Touch n Go, Boost, and our banking and FPX processing partners, for the purpose of processing deposits and withdrawals in MYR;
• Identity verification providers: Third-party KYC and age verification service providers engaged to assist in compliance with gaming authority and AML requirements;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the 100cuxi platform;
• Regulatory authorities: Applicable gaming regulatory authorities, financial intelligence units, and law enforcement agencies where disclosure is required by law or a valid legal process;
• Professional advisers: Lawyers, accountants, and auditors engaged by 100cuxi, subject to confidentiality obligations;
• Responsible gaming organisations: In limited circumstances, where a Player has elected self-exclusion or where 100cuxi has concerns about a Player's gaming behaviour, relevant data may be shared with recognised responsible gaming registries or authorities.

All third-party recipients are required to process your personal data only for the specified purpose, in accordance with 100cuxi's instructions, and subject to contractual data protection obligations at least as stringent as those imposed on 100cuxi by applicable law.

7.Cookies and Tracking Technologies

The 100cuxi platform uses cookies and similar tracking technologies to operate essential platform functions and to analyse platform performance. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security tokens, and responsible gaming tool state. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences such as language settings and game lobby filters to personalise your experience on return visits;
• Analytics cookies: Collect anonymised data about how players use the 100cuxi platform, which pages are visited most frequently, and where errors occur, to inform platform development and improvement.

100cuxi does not use third-party advertising cookies or permit third-party advertising networks to place cookies on the platform. You may configure your browser to block or delete cookies, though doing so may impair certain platform functions. By continuing to use the 100cuxi platform with cookies enabled in your browser, you consent to the use of cookies as described in this section.

8.Data Security

100cuxi implements and maintains technical and organisational security measures appropriate to the nature and volume of personal data processed on the platform. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and 100cuxi servers;
• Encryption of sensitive data fields at rest within the 100cuxi database infrastructure;
• Bcrypt password hashing — passwords are never stored in recoverable plain text;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits by independent cybersecurity professionals;
• Real-time intrusion detection and automated alerting for anomalous access patterns;
• Mandatory security training for all 100cuxi staff with access to personal data.

Notwithstanding these measures, no internet-based system is absolutely impenetrable. 100cuxi will notify affected players and relevant authorities promptly in the event of a personal data breach, in accordance with applicable law.

9.Data Retention

100cuxi retains personal data for the minimum period necessary for the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following indicative retention periods apply:

• Account and registration data: For the duration of the account relationship and for five years following account closure, to meet AML and regulatory obligations;
• KYC and identity documents: For a minimum of five years following account closure, as required by anti-money laundering regulations;
• Financial transaction records: For a minimum of five years following the date of each transaction;
• Activity and gaming records: For five years following account closure, for dispute resolution and regulatory purposes;
• Marketing consent records: Until consent is withdrawn, and for one year following withdrawal to evidence compliance;
• Technical and device data: For 12 months from collection, unless retained longer for specific fraud investigation or legal proceedings.

Where personal data is no longer required and no legal obligation requires its retention, 100cuxi will securely delete or irreversibly anonymise that data.

10.Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 100cuxi:

• Right of access: You may request a copy of the personal data 100cuxi holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 100cuxi's legal retention obligations;
• Right to restriction of processing: You may request that processing of your personal data be restricted in certain circumstances;
• Right to data portability: You may request a machine-readable copy of personal data you have provided to 100cuxi, where processing is based on your consent or a contract;
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact 100cuxi at [email protected]. We will respond within the timelines stated in Section 2. Exercising these rights will not result in any detriment to your account or service, except where the exercise of a right necessarily affects 100cuxi's ability to provide a service (for example, deletion of the data required to operate your account).

11.Children and Minors

If you believe that a person under 21 has created an account on 100cuxi or has submitted personal data to the platform, please notify us immediately at [email protected] and we will take prompt action. Age verification is a mandatory step in the 100cuxi KYC process and is applied to all accounts before first withdrawal.

12.Marketing Communications

100cuxi may, with your explicit consent, send you marketing communications regarding promotions, bonuses, new game launches, and platform updates. You may opt in to marketing communications during registration or at any time through your account settings panel.

You may withdraw your consent to receive marketing communications at any time by: updating your communication preferences in your account settings; or contacting 100cuxi at [email protected] with a request to be removed from marketing lists. Withdrawal of marketing consent does not affect your account status or access to the 100cuxi platform.

100cuxi does not share your contact details with third-party marketers. All marketing communications sent by 100cuxi will be clearly identified as originating from 100cuxi and will contain a clear unsubscribe mechanism.

13.International Data Transfers

The 100cuxi platform and its data infrastructure are operated with data security and player privacy as foundational requirements. Where personal data is transferred to or accessed from jurisdictions outside Malaysia — for example, in connection with cloud infrastructure providers or identity verification services — such transfers are effected pursuant to appropriate safeguards, including contractual clauses ensuring that the recipient provides a level of data protection equivalent to that required under this Policy.

100cuxi will not transfer your personal data to any jurisdiction that does not provide adequate protections without your explicit consent or without the specific safeguards described above being in place.

14.Amendments to This Policy

100cuxi reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or platform operations. Material amendments will be communicated to registered players via the email address on file at least 14 days before the amended Policy takes effect. The revised Policy will be published on the 100cuxi platform with an updated Effective Date.

Continued use of the 100cuxi platform following the effective date of an amended Policy constitutes your acceptance of the amended terms. If you do not accept an amendment, you may close your account in accordance with the account closure procedure described in the 100cuxi Terms & Conditions.

15.Contact and Complaints

For any queries, access requests, or complaints relating to this Privacy Policy or 100cuxi's handling of your personal data, please contact us:

• Email: [email protected]
• Response time: Acknowledgement within five business days; substantive response within 30 days.
• Availability: 24/7, 365 days a year.

If you are not satisfied with 100cuxi's response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. 100cuxi will cooperate fully with any investigation conducted by a supervisory authority.

This Privacy Policy was last updated and came into effect on 1 January 2026.