Privacy Policy RM100 Cuci – Our Commitment to Protecting Malaysian Players' Personal Data

This Privacy Policy is published by rm100 cuci ("we", "Platform") and applies to all users and registered members of the rm100cuci.com platform. This document outlines our privacy practices regarding the collection, processing, storage, and protection of your personal data as a user of our platform in Malaysia.

Rm100 cuci operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. We believe you have the right to know exactly what data we collect, why it is collected, who can access it, and how you can control it.

By using the rm100 cuci platform — whether to play slots, Live Casino baccarat, blackjack, Sports Betting, or any other service we offer — you agree to the terms of this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account and request deletion of your data.

Rm100 cuci collects various types of personal data to ensure the platform operates safely, fairly, and in compliance with all applicable legal requirements. The data we collect can be grouped into the following categories:

Rm100 cuci not collect data that is not necessary for platform operations. We do not request sensitive information such as your banking passwords, full credit card numbers, or digital wallet PINs — all transactions are processed through secure third-party payment gateways including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks.

Every piece of data rm100 cuci collects is used solely for specific, legitimate purposes. We do not process your data for anything unrelated to delivering our services to you. Those purposes are as follows:

• Account management — to create, verify, and maintain your rm100 cuci account securely.
• Transaction processing — processing deposits and withdrawals via TNG eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other methods of your choice.
• Gaming service provision — granting you access to all available games including slots, Live Casino, Baccarat, Blackjack, Sports Betting, jackpots, and more.
• Security and fraud prevention — detecting and preventing fraudulent activity, money laundering, or violations of the Terms of Service.
• Legal compliance — to fulfil legal obligations including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Customer support — assisting you whenever you reach out to the rm100 cuci support team via live chat or email.
• Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance.
• Platform Improvements — analysing usage data in aggregate (without identifying individuals) to improve the user experience.
• Service communications — sending important information about your account, policy changes, or security issues via email or in-platform notifications.

Rm100 cuci does not use your data to send unsolicited marketing communications. If you opted in to receive promotions and offers via email during registration, you may withdraw that consent at any time through your account settings or by contacting our support team.

Rm100 cuci does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the normal course of platform operations, there are situations where data may be shared with the following parties on a strict and limited basis:

• Gaming software providers — Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and other providers may receive technical data required to operate games within our platform. All such providers are bound by strict confidentiality agreements.
• Payment processors — payment gateways TNG eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX receive only the minimum transaction data required to process your deposits and withdrawals.
• Technical service providers — cloud service providers, cybersecurity firms, and technical infrastructure providers that help us operate the platform securely. All such providers are bound by strict data processing agreements.
• Legal authorities — rm100 cuci will disclose data to Malaysian authorities (such as the PDRM, MACC, or relevant regulatory bodies) when required by law or a valid court order.
• Identity verification — authorised third-party KYC services may be used to verify your identity in accordance with Malaysian legal requirements.

Rm100 cuci continually invests in security infrastructure to ensure your personal and financial data is protected to the highest standard. Below are the key technical and organisational measures we have in place:

• 256-bit SSL/TLS Encryption — all data transmitted between your browser and rm100 cuci servers is encrypted using industry-standard 256-bit SSL/TLS protocols. No data is transmitted in plain text.
• Encryption of data at rest — sensitive data stored in our databases is encrypted using strong encryption algorithms, safeguarding your data even in the event of unauthorised access to our infrastructure.
• Strict access controls — rm100 cuci staff only have access to the data required for their specific job roles. The principle of least privilege is enforced at every level.
• Regular security audits — security assessments and penetration testing are carried out periodically by independent third parties to identify and address potential vulnerabilities.
• 24/7 Monitoring — an intrusion detection and anomaly monitoring system operates around the clock to detect and respond to any security threats swiftly.
• Two-factor authentication (2FA) — members are encouraged to enable two-factor authentication for an additional layer of security on their account.
• Fund segregation — player funds are held entirely separate from rm100 cuci's operational funds to protect your financial security.

While we take every reasonable precaution, no security system is completely impenetrable. Should a security incident occur that affects your data, rm100 cuci will notify you within a reasonable timeframe in accordance with applicable legal requirements, and will take appropriate remedial action.

Rm100 cuci uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser when you visit our website. Below are the types of cookies we use:

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect core platform functionality, including your ability to log in to your rm100 cuci account. We recommend keeping essential cookies enabled for a smooth gaming experience.

Rm100 cuci retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law.

• Active account data — retained for the duration your account remains active and for the legally prescribed period following account closure.
• Financial transaction data — retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• Support communication logs — retained for 2 years from the date of your last interaction.
• Technical data and system logs — retained for 90 days for security and debugging purposes.
• KYC data (identity verification) — retained for a minimum of 5 years in accordance with Malaysian AML requirements.

Rm100 cuci's servers operate on certified cloud infrastructure. Where data needs to be transferred or processed outside Malaysia — for example, by global gaming software providers — such transfers are carried out under appropriate data protection mechanisms that are no less stringent than the protections afforded by Malaysia's PDPA.

Once data is no longer required beyond the retention periods above, rm100 cuci will destroy it securely using industry-recognised data deletion procedures to ensure it cannot be recovered.

As an rm100 cuci user in Malaysia, you have the following rights regarding your personal data held by us, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of Access — you have the right to request a copy of the personal data we hold about you.
• Right to Rectification — you have the right to request the correction of any data that is inaccurate or out of date.
• Right to Erasure — you may request the deletion of your personal data, subject to any applicable legal retention obligations.
• Right to Object to Processing — you may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent — you may withdraw consent for certain types of data processing (such as marketing communications) without affecting the validity of processing carried out prior to withdrawal.
• Right to Data Portability — under certain circumstances, you may request your data in a machine-readable format.
• Right to Complain — you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated.

To exercise any of the rights above, please contact the rm100 cuci privacy team at support@rm100cuci.com by stating your request clearly. We will respond within 21 working days of receiving a complete request. In complex cases, this period may be extended to up to 60 days, with prior notice to you.

Rm100 cuci takes child protection extremely seriously. Our platform is strictly limited to individuals aged 18 and above only. We do not knowingly collect or process personal data from any individual under the age of 18.

An age verification process is carried out for every new account registration. Should rm100 cuci discover that data has been inadvertently collected from an underage individual, we will:

• Closing the account with immediate effect.
• Delete all personal data associated with that individual.
• Returning any remaining account balance to the rightful owner where this can be verified.
• Taking preventive measures to avoid similar incidents in the future.

Parents and guardians who discover that an underage child has registered for or used the rm100 cuci platform are urged to contact us immediately at support@rm100cuci.com. We encourage the use of parental control software on devices shared with children.

Rm100 cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any amendments will be published on this page, with the updated date clearly displayed at the top of the document.

For material amendments that affect how we use or protect your data, rm100 cuci will:

• Sending a notice to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the platform's homepage for a reasonable period.
• For significant changes that require re-consent, we will request your explicit consent before proceeding.

Continued use of the rm100 cuci platform after the effective date of any amendments constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion before the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the rm100 cuci privacy team through the following channels:

• Privacy Email: support@rm100cuci.com — include "Privacy Request" in the subject line
• Live Chat: Available on the rm100 cuci platform, operating 24/7 every day
• Response time: Under 5 minutes via live chat; 24 hours via email for general enquiries; 21 working days for formal data requests

Our privacy support team consists of Malay-speaking staff who understand the context and needs of Malaysian users. We are committed to handling all privacy enquiries with seriousness and transparency.

If you are not satisfied with our response to your privacy request, you have the right to lodge a complaint directly with Malaysia's Department of Personal Data Protection (JPDP) through their official channels.