C1000 Privacy Policy – Personal Data Protection for Malaysian Players

Welcome to the Privacy Policy page c1000. We understand that your trust in us depends not only on the quality of our games and the speed of withdrawals, but also on your confidence that the personal information you provide is carefully protected and used responsibly.

This Privacy Policy describes the data collection, use, storage, and protection practices of c1000 when you use our platform on c1000.my or any related services. This document applies to all registered players and website visitors throughout Malaysia.

By registering an account or using the services of c1000, you hereby agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please contact us at [email protected] before continuing to use the platform, or discontinue your use of our platform.

c1000 collects various types of personal data necessary to deliver our online casino platform services. Below are the categories of data we collect and the purposes for which they are collected:

In certain circumstances required by anti-money laundering (AML) laws or enhanced KYC requirements, c1000 may need to collect more sensitive data, such as copies of official identification documents. Such data is protected with additional security layers and can only be accessed by specially trained and authorised staff for that specific purpose alone.

c1000 collects your personal data through several different methods. It is important that you understand these data collection channels so you can make informed decisions about the information you share with us:

• During Registration: Full name, email address, phone number, date of birth and password provided when completing the account registration form c1000.
• During KYC Verification: MyKad copy, facial verification selfie and any other supporting documents requested during the identity verification process.
• During Transactions: Payment information you provide when making deposits or withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX Maybank2u/CIMB Clicks.
• When Contacting Support: Information you share during live chat sessions or via email with our support team c1000.

• Technical Data: IP address, device type, operating system version, and browser type and version are collected automatically when you access the platform c1000.
• Game Session Data: All gaming activity — including game types, bet amounts, outcomes and session duration — is automatically recorded by the system c1000.
• Cookies and Similar Technologies: Information collected via cookies, pixels and similar tracking technologies while you browse our platform (see Section 7 for more details).

The data we collect is used solely for legitimate purposes that are necessary for the operation of the platform c1000 and the best possible delivery of services to you. The following are the specific purposes for which your data is used:

• Creating, managing, and maintaining your account c1000 you.
• Verifying your identity at login to protect the security of your account.
• Processing deposits and withdrawals via your preferred Malaysian payment method.
• Providing a game and transaction history that you can review at any time.

• Detecting and preventing any unauthorised access to your account.
• Identifying suspicious activity patterns that may indicate fraud or money laundering.
• Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) legal requirements.
• Conducting regular security audits to ensure platform integrity.

• Sends important account-related notifications such as deposit confirmations, withdrawal updates and password change alerts.
• Responding to enquiries and complaints submitted to the support team c1000.
• Sending you information about bonuses, promotions and platform updates relevant to your account (with the option to unsubscribe).

Your usage data and gaming history play an important role in our responsible gambling programme c1000. We analyse gaming patterns to identify early signs of problem gambling and, where necessary, may proactively reach out to offer appropriate support and resources. The use of data for this purpose is always in your best interests as our player.

Aggregated and anonymised usage data helps the c1000 understand how players interact with our platform, enabling us to continuously make meaningful improvements to the interface, performance and game content.

c1000 does not sell your personal data to any party. We only share data where necessary, under strictly limited circumstances and with robust safeguards in place. The circumstances under which your data may be shared are:

We work with carefully selected third parties to provide the technical services required for platform operations c1000. This includes:

• Payment Processing Providers: Malaysian payment platforms such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and the FPX network to securely process your financial transactions.
• KYC Solution Provider: A certified identity verification company that assists us in verifying player documents and identities.
• Cloud Infrastructure Provider: A premium-grade data storage company providing secure server infrastructure for our platform.
• Game Providers: A game developer providing slots and Live Casino games on the platform c1000.

All third-party service providers working with c1000 are required to sign a strict data protection agreement and are permitted to use your data solely for the specified purposes.

c1000 may be required to disclose your personal data to government authorities or regulatory bodies where mandated to do so by Malaysian law, court order, or directive from a regulatory body with jurisdiction over our operations. In such circumstances, we will disclose only the minimum data necessary to fulfil the relevant legal obligation.

c1000 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times against unauthorised access, disclosure, alteration, or destruction. The key security measures we implement are:

• 256-bit SSL/TLS Encryption: All communications between your device and the c1000 encrypted using 256-bit SSL/TLS protocol — the same standard adopted by Malaysia's leading banking institutions.
• AES-256 Data Encryption: Personal data stored in our databases is encrypted using the AES-256 algorithm, which is considered unbreakable with current technology.
• Two-Factor Authentication (2FA): SMS-based OTP system for all login activity and sensitive financial transactions.
• Firewall and Intrusion Detection System: A multi-layered security infrastructure that monitors and blocks any unauthorised access attempts in real time.
• Regular Penetration Testing: Security audits and penetration testing conducted by independent security experts to identify and address any system vulnerabilities.

• Access to players' personal data is restricted to authorised staff only c1000 who have a legitimate need to access it in order to carry out their responsibilities.
• All staff who handle personal data undergo comprehensive data protection training and are bound by confidentiality agreements.
• A role-based access control system ensures that each staff member can only access data relevant to their job responsibilities.

Although c1000 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident affecting your personal data, we are committed to notifying you within 72 hours of the incident being detected, in line with industry best practices. The notice will include details of the nature of the incident, the data affected, and the steps we have taken to address it.

Platform c1000 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform performance. The types of cookies used are as follows:

These cookies are essential for the basic operation of the platform c1000 and cannot be disabled. These include login session cookies, CSRF security tokens to protect against cross-site attacks, and basic preference cookies. Without these cookies, the platform will not function properly.

These cookies allow c1000 remembers your preferences such as language, display settings and game preferences. This enhances your experience without requiring you to reconfigure your settings every time you log in.

Analytics cookies help c1000 understands how players interact with our platform — the most frequently visited pages, the most popular games, and general navigation flows. This data is collected in aggregate and is not linked to any individual's identity. We use this information to make continuous improvements to the platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform c1000. Popular browsers such as Chrome and Safari provide detailed guides on how to manage cookies in their privacy settings.

As a player c1000 and data subjects under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data we hold about you. Below are those rights and how to exercise them:

You have the right to request and receive a copy of all personal data that c1000 hold about you. Data access requests will be processed within 14 working days. Requests can be submitted via email to [email protected], along with your account details for identity verification.

If you find that any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic identity data such as your name and date of birth can be updated through your account settings or by contacting our customer support team.

Under certain circumstances, you have the right to request the deletion of your personal data from c1000. Please note that certain data may need to be retained for a period required by AML laws and accounting requirements — in such cases, we will inform you why full deletion cannot be carried out at that time.

For data processing that relies on your consent — such as receiving promotional emails and marketing communications — you may withdraw your consent at any time. Withdrawing consent for marketing communications will not affect your receipt of important account-related notifications.

c1000 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Our data retention policy is as follows:

• Active Account Data: Retained for the duration of your active membership at c1000 and for 7 years following account closure, in accordance with Malaysia's AML legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date as required by Malaysian financial and accounting regulations.
• Game Session Records: Retained for a minimum of 5 years for audit purposes, dispute resolution and gaming integrity monitoring.
• Support Communication Logs: Retained for 3 years for reference and service quality improvement.
• Cookie Data: Depending on the type of cookie — session cookies expire when you close your browser, while persistent cookies can last up to 2 years or until you delete them.

Upon expiry of the applicable retention period, c1000 will securely delete or anonymise your personal data in accordance with certified data deletion procedures. Anonymised data may be retained for longer periods for aggregate analytics purposes.

Platform c1000 is intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe that a child under your care has registered an account on c1000 without your consent, please contact us immediately at [email protected].

Upon confirmation that data has been collected from minors without valid parental or guardian consent, c1000 will take the following steps immediately: close the account in question, refund any deposits made, void all winnings, and permanently delete all data collected in relation to that account from our systems.

c1000 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or enhancements to our security measures. The "Last Updated" date at the top of this document will always indicate the date of the most current version.

For significant amendments that affect how we use your personal data, c1000 will send an email notice to your registered address at least 14 days before any amendment takes effect, giving you sufficient time to review the changes. For minor amendments such as spelling corrections or clarifications that do not alter the substance of the policy, a notification may not be sent.

Continued use of the platform c1000 after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns or complaints regarding this Privacy Policy or how c1000 handles your personal data, we strongly encourage you to reach out to us directly. Our data protection team is ready to assist you.

• Privacy Email: [email protected] (with the subject line "Data Privacy Enquiry")
• Live Chat: Available 24/7 directly from the c1000.my platform
• Response Time: Privacy-related enquiries will be responded to within 5 business days

If you are not satisfied with the response you receive from c1000 regarding your privacy complaint, you have the right to report the matter to the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia, which enforces the Personal Data Protection Act 2010.