Privacy Policy ceri123 — Member Personal Data Protection

Ceri123 is an online entertainment platform that operates with full commitment to the security and privacy of its members' data. We understand that your personal information is valuable, and the trust you place in us to safeguard it is a responsibility we take seriously.

This Privacy Policy is designed to provide full transparency regarding ceri123's data management practices. It outlines the types of information we collect, the purposes for which it is used, how we protect it, and your rights as a member with respect to your own personal data.

The ceri123 platform fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We also draw on international data protection standards such as the GDPR to ensure a level of protection that goes beyond local legal requirements. This reflects our commitment to being a platform that is not only entertaining, but fully trustworthy for all Malaysian members.

To provide a secure, personalised, and high-quality service, ceri123 collects several categories of information from its members. Below is a detailed breakdown of the types of data we collect and the purpose of each:

We never collect information that is not required for the stated purposes. If you do not provide the necessary information during the registration or KYC verification process, ceri123 may be unable to provide you with full services, including the ability to withdraw funds.

Every piece of data collected by ceri123 has a clear and limited purpose. We do not use your data for undisclosed purposes without first obtaining your consent. The following are the primary purposes for which your personal data is used:

• Account Management: Creating, maintaining, and managing your member account, including secure login processes and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions quickly and securely.
• Legal Compliance: Meeting KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements as mandated by applicable regulations.
• Customer Support: Providing accurate and effective assistance when you contact the ceri123 support team.
• Platform Security: Detecting and preventing fraud, hacking, account abuse, and other suspicious activities.
• Promotional Communications: Sending information about promotions, bonuses, and exclusive offers — only to members who have given their consent.
• Service Improvement: Analysing usage patterns to improve user experience, resolve technical issues, and develop new features.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.

All data processing is carried out on a valid legal basis — whether your consent, contractual necessity, ceri123's legitimate interests, or a legal obligation. We will not use your data for automated decision-making that has a serious impact on you without human intervention.

Ceri123 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. We only share information in limited and specific circumstances as follows:

• Payment Service Providers: Approved payment partners such as e-wallet processors and banks to facilitate your deposits and withdrawals.
• Game Software Providers: Licensed game companies that provide game content on the ceri123 platform, solely as required for the technical operation of the games.
• Identity Verification Services: Third parties used to verify member identities as part of the mandatory KYC process.
• Relevant Authorities: Government agencies, law enforcement bodies, or courts when required under applicable Malaysian law.
• Audit Services: Independent audit firms that verify the operational and financial integrity of ceri123, subject to strict confidentiality agreements.

Protecting your personal data is ceri123's highest priority. We continuously invest in advanced security infrastructure and adopt a multi-layered approach to data protection. Key security measures we implement include:

• 256-bit SSL/TLS Encryption for all communications between servers and user devices.
• Encrypted database with strict role-based access controls.
• Two-factor authentication (2FA) available and encouraged for all member accounts.
• 24/7 security monitoring by a dedicated cybersecurity team.
• Regular penetration testing by an independent security firm to identify and close vulnerabilities.
• Automatic data backup on secure servers across separate physical locations for service continuity.
• Incident response protocol robust enough to address any security breach swiftly and effectively.

While ceri123 implements comprehensive security measures, no system is truly 100% impenetrable. We encourage you to play your part in keeping your account secure by using a strong and unique password and never sharing your login credentials with anyone.

Ceri123 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. Cannot be disabled.
• Performance Cookies: Collecting data on how users interact with the platform to help us improve functionality and performance.
• Functional Cookies: Saving your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand platform usage patterns on an aggregated, anonymised basis for continuous improvement.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect platform functionality and your experience as a ceri123 member.

As a ceri123 member and under the provisions of Malaysia's PDPA, you have the following rights regarding your personal data held by us:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations to retain specific records.
• Right to Restriction of Processing: You may request that we restrict how we use your data under certain circumstances as defined by law.
• Right to Object: You have the right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the ceri123 customer support team via live chat on the platform or through our support email. Requests will be processed within 14 business days and we may need to verify your identity before processing any request.

Ceri123 does not retain your personal data longer than is necessary for the stated purposes or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration that your account remains active with ceri123.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Records: Retained for 5 years after account closure, as required by AML regulations.
• Technical Logs: Retained for 90 days for security and technical troubleshooting purposes.
• Support Correspondence: Retained for 2 years after case resolution.

Upon expiry of the defined retention period, your personal data will be securely deleted or anonymised using methods that prevent re-identification. The deletion process is carried out automatically through our data management system.

Ceri123 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Each new version will state a clear effective date at the top of this document.

When significant changes are made to this Privacy Policy, ceri123 will notify members via:

• In-platform notification during your next login session.
• Notification email sent to your registered email address.
• A clear notice displayed on the platform's home page for a minimum period of 30 days.

Your continued use of the ceri123 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with any changes, you may choose to close your account by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ceri123 handles your personal data, our team is ready to assist you at any time.

You may contact the ceri123 Data Protection Officer via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the ceri123 platform.
• Support Email: [email protected] (response within 1–2 business days).
• Support Page: Access our full help centre through the support section in your account.

We are committed to handling all privacy-related enquiries with full professionalism and transparency. Our goal is to provide a satisfactory response within 14 business days for every enquiry received.