100cuco Privacy Policy

1.Who We Are

This Privacy Policy is issued by 100cuco ("we", "us", "our", "the Platform"), the operator of the online gaming and sports betting platform accessible at https://100cuco.org. 100cuco is the data controller responsible for the personal data you provide when registering for and using the platform's Services.

For the purposes of this Policy, "Services" refers collectively to the 100cuco website, the Sportsbook, the Casino section, the Slots section, the account management portal, and all related digital products accessible through the platform. "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual.

This Policy should be read alongside the 100cuco Terms & Conditions, which govern the contractual relationship between you and 100cuco. In the event of any conflict between this Policy and the Terms & Conditions in respect of a data matter, this Policy shall prevail.

2.Personal Data We Collect

100cuco collects personal data through several channels — directly from you during registration and account operation, automatically through your use of the platform, and from third parties where permitted. The categories of data we collect include:

• Identity data: full legal name, date of birth, gender, and identification document details (Malaysian IC or passport number and image) collected during registration and KYC verification.
• Contact data: email address and any other contact information you provide when communicating with the support team.
• Financial data: payment method identifiers (e.g., Touch n Go eWallet account reference, FPX transaction identifiers, Boost account reference, Maybank or CIMB account details used for withdrawals). Full bank account numbers are masked in storage; 100cuco does not hold full card numbers.
• Transaction data: records of all deposits, withdrawals, bets placed, and winnings received through the platform.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and login history.
• Usage data: information about how you navigate and use the platform, including game history and session duration.
• Communications data: records of correspondence between you and the 100cuco support team, including live chat transcripts and email exchanges.

3.How We Use Your Personal Data

100cuco uses your personal data for the following purposes:

• To create and manage your account, including processing your registration and maintaining your account profile.
• To verify your identity in accordance with KYC obligations and to confirm that you meet the 21+ age requirement for using the platform.
• To process deposits and withdrawals and to maintain accurate records of your transaction history.
• To comply with anti-money laundering (AML) obligations, including monitoring transactions for suspicious activity and reporting to relevant authorities as required by law.
• To provide customer support and to respond to queries and complaints.
• To enforce the 100cuco Terms & Conditions, including investigating and acting on suspected breaches.
• To detect and prevent fraud, account compromise, and other harmful activities on the platform.
• To operate and improve the platform's functionality, security, and user experience based on aggregated usage analytics.
• To administer responsible gaming tools and to apply any account restrictions or self-exclusion arrangements that you have requested or that the platform has imposed.
• To send service communications relevant to your account, such as security alerts, withdrawal confirmations, and updates to these policies.

100cuco does not use your personal data for automated profiling or scoring that produces legal effects concerning you without human review. We do not use your data for targeted advertising on third-party platforms.

4.Legal Basis for Processing

100cuco processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between you and 100cuco, including account management, transaction processing, and service delivery.
• Legal obligation: processing required to comply with applicable law, including KYC, AML reporting, and age verification obligations under international gaming authority requirements.
• Legitimate interests: processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your rights and interests.
• Consent: where you have provided specific consent for a particular processing activity. You may withdraw consent at any time, though withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

5.Data Sharing & Disclosure

100cuco does not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: third parties engaged to provide operational services on our behalf, including identity verification providers, payment processors, and cloud hosting providers. These parties are bound by contractual data processing obligations and may not use your data for their own independent purposes.
• Game providers: where necessary for the operation of live casino and RNG games accessed through the platform, limited technical session data may be shared with our licensed game studio partners (including Evolution Gaming and Pragmatic Play). These providers operate under their own international gaming authority licences and data protection frameworks.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or regulatory obligation — including AML reporting requirements — 100cuco will disclose personal data to the relevant authority without prior notice to you where legally required or permitted.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of the 100cuco business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.International Data Transfers

100cuco's primary data infrastructure is maintained in secure data centres. Some of our third-party service providers — including game studios and cloud infrastructure providers — may process data in jurisdictions outside Malaysia. Where such transfers occur, 100cuco takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses consistent with recognised international frameworks.

By using the 100cuco platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, subject to the safeguards described above.

7.Data Retention

100cuco retains your personal data for as long as your account is active and for such additional period as is required by applicable law and regulatory obligation. In practice, this means:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for up to three (3) years from the date of the last interaction.
• Technical and usage data used for analytics is retained in aggregated, anonymised form indefinitely for platform improvement purposes.

Where retention beyond these periods is required by a specific regulatory obligation or legal proceeding, 100cuco will retain the relevant data for the duration of that obligation or proceeding.

8.Cookies & Tracking Technologies

100cuco uses cookies and similar tracking technologies for the following limited purposes:

• Session management cookies: essential cookies that maintain your logged-in state across page navigations during an active session. These are deleted when you log out or your session expires.
• Security cookies: used to identify and prevent fraudulent login attempts and to bind your session to your registered device fingerprint.
• Performance analytics cookies: used to collect aggregated, anonymised data about how users navigate the platform. This data is used internally to identify and resolve performance issues and to improve platform usability.

100cuco does not use advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with third-party advertising networks. You may configure your browser to block or delete cookies; however, disabling essential session cookies will prevent you from logging in to the platform.

9.Security Measures

100cuco implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 100cuco platform.
• Encryption of sensitive personal data fields (including IC numbers and payment identifiers) in storage.
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Login anomaly detection that flags and investigates unusual access patterns, including logins from unrecognised devices or unexpected geographic locations.
• Regular internal security reviews of data handling procedures and access controls.

While 100cuco takes reasonable steps to secure your personal data, no system is completely immune to security incidents. In the event of a data breach that is likely to result in a high risk to your rights and interests, 100cuco will notify affected users without undue delay in accordance with applicable requirements.

10.Your Data Rights

Subject to applicable law and 100cuco's legitimate regulatory obligations, you have the following rights in respect of your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of rectification: to request correction of inaccurate or incomplete personal data.
• Right of erasure: to request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your personal data in a structured, machine-readable format.
• Right to object: to object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent: to withdraw any consent previously given for a specific processing activity.

To exercise any of the above rights, please contact the 100cuco support team as described in Section 13. We will respond to all verifiable requests within a reasonable timeframe and in accordance with applicable requirements. Identity verification will be required before any data access or deletion request is fulfilled.

11.Children's Privacy

The 100cuco platform is strictly intended for individuals aged 21 and above. 100cuco does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered on the platform, please contact us immediately via the support channel described in Section 13.

12.Changes to This Privacy Policy

100cuco reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated to registered account holders by email notification and by updating the "Last updated" date at the top of this page. Your continued use of the platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this page periodically to stay informed about how 100cuco handles your personal data.

13.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 100cuco holds about you, please contact our support team through the following channels:

We aim to respond to all data-related enquiries within five (5) business days. For requests involving data export or deletion, please allow up to fourteen (14) days following identity verification for the request to be fully processed.