Ceri388 Privacy Policy – Protection of Members' Personal Data in Malaysia

Ceri388 collects your personal information for legitimate, clearly stated purposes. We only collect what is genuinely necessary to provide you with a high-quality service as a member of our platform. No excessive data is collected beyond what is required for the stated purposes.

There are two main categories of information we collect from you:

• Information you provide directly: This includes your full name, Malaysian phone number, email address, account password, and any additional information you provide during registration or profile updates. For identity verification (KYC) purposes when required, we may request a copy of your MyKad or passport, bank account or e-wallet information, and proof of residential address.
• Automatically collected information: When you use the ceri388 platform, our systems automatically record certain technical information, including your device's IP address, the type and version of browser used, your device's operating system, the pages you visit within ceri388, the time and duration of your sessions, game interaction and betting data, and cookie information as further described in the cookies section below.

The information we collect is used responsibly for legitimate purposes that are necessary for the operation of the ceri388 platform. We do not use your data for purposes unrelated to the services we offer without first obtaining your consent.

The primary purposes for which ceri388 uses your data are as follows:

• Account management: Creating and managing your ceri388 account, verifying your identity at login, processing password reset requests, and maintaining the security of your account.
• Transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), manages withdrawals to your Malaysian e-wallet or bank account, and maintains complete and accurate financial transaction records.
• Gaming service delivery: Recording betting and game history, calculating and crediting winnings, managing bonus balances, and ensuring a fair and transparent gaming experience across the ceri388 platform.
• Service communications: Sending you transaction confirmations, account activity notifications, important security alerts and relevant policy or terms updates via email or message.
• Customer support: Enables ceri388's 24/7 support team to understand the context of your issue and provide accurate, effective assistance in the shortest time possible.
• Legal compliance: Meeting compliance obligations including Anti-Money Laundering (AML) requirements, verifying age eligibility, and processing any requests from authorised authorities in accordance with applicable Malaysian law.
• Platform improvements: Analysing usage patterns on an aggregated, anonymised basis to understand how members interact with ceri388 platform features and identify opportunities to improve the user experience.
• Marketing (with consent): Sends you information about ceri388 promotions, bonuses, and special offers via email or platform notifications — but only if you have given consent to receive such marketing communications. You may withdraw this consent at any time.

Ceri388 does not sell, rent, trade, or disclose your personal data to third parties for their own marketing or commercial purposes. This is a commitment we uphold firmly. That said, there are limited situations where data sharing is necessary for platform operations and service delivery.

• Platform service providers: ceri388 works with carefully selected third parties to support platform operations — including live dealer and slots casino game software providers, payment processors for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, secure server infrastructure providers, and customer support service providers. Each of these partners is bound by strict confidentiality agreements and may only use your data for the purposes specified in their service agreements with ceri388.
• Legal requirements: ceri388 may be required to disclose your personal data to authorised authorities where mandated by Malaysian law, court order, or in emergency situations involving public safety. In such cases, we will disclose only the minimum information necessary and will notify you where permitted by law.
• ceri388 rights protection: In the rare event that legal action is required to protect the rights, property, or safety of ceri388, its members, or the public from fraud or unlawful activity, relevant information may be shared with the appropriate parties.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is an absolute priority for ceri388. We continuously invest in the latest security technologies and procedures to maintain the highest standards of data protection.

• 256-bit SSL encryption: All data transmitted between your browser and ceri388's servers is encrypted using 256-bit Secure Socket Layer (SSL) — the same encryption standard used by major Malaysian banking institutions such as Maybank and CIMB. This ensures that your information cannot be intercepted or read by unauthorised parties during transmission.
• Secure storage: Data stored on ceri388 servers is protected by a layered access control system, regularly updated firewalls, an intrusion detection system (IDS), and periodically encrypted data backups. Physical access to data centres is strictly restricted and controlled.
• Two-factor authentication: ceri388 offers two-factor authentication (2FA) as an added layer of security for your account. We encourage all members to enable this feature to protect their accounts from unauthorised access, even in the event that your password is compromised.
• 24/7 Monitoring: ceri388's cybersecurity team monitors platform activity around the clock, 24 hours a day, 7 days a week. An automated anomaly detection system identifies and flags suspicious activity patterns, enabling swift action to protect member accounts.
• Regular security testing: ceri388 conducts regular penetration testing and security audits carried out by independent security experts to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee 100% safety in a digital environment. You also play an important role in securing your account — by using a strong password, not sharing your login credentials, and promptly notifying ceri388 if you suspect any unauthorised access to your account.

Ceri388 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website. They allow the platform to remember your preferences, maintain your login session, and deliver a smoother, more personalised experience.

• Essential cookies (required): Required for the core operation of the ceri388 platform — including maintaining your login session, securing transactions, and remembering your language preference. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies (optional): Collects information on how ceri388 platform pages are used — for example, which pages are visited most frequently and what error messages are encountered. This data is used in aggregate and anonymised form to improve platform performance.
• Functional cookies (optional): Allows the platform to remember your preferences — such as display settings, preferred currency, and game configurations — to deliver a more personalised experience every time you use ceri388.
• Security cookies: Helps identify and prevent fraudulent activity, and ensures your financial transactions are processed securely.

You can manage your cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the ceri388 platform and prevent you from accessing certain features. For optional cookies, you may choose to disable them without affecting the platform's core functionality.

Ceri388 retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Retention periods are also governed by applicable legal and regulatory obligations. We do not keep data longer than is necessary.

• Active account data: Retained for as long as your ceri388 account remains active. You may request account closure at any time, after which your personal data will be deleted or anonymised in accordance with established procedures, subject to applicable legal exceptions.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and AML (Anti-Money Laundering) compliance. This retention period is mandated by law and is not at ceri388's discretion.
• Support communication records: Retained for 3 years to allow for the resolution of any disputes that may arise and to help the ceri388 support team provide you with better service.
• Security log data: Retained for 12 months for fraud detection and security analysis purposes. This data is used to identify suspicious activity patterns and protect all members on the platform.

Once the specified retention period expires, your personal data will be securely deleted or destroyed in accordance with standard data disposal procedures.

As a ceri388 member, you have certain rights regarding your personal data. ceri388 fully respects these rights and provides straightforward mechanisms for you to exercise them. Knowing your rights is the first step to managing your privacy effectively.

• Right to access: You have the right to know what personal data we hold about you and how it is used. You may request a copy of your personal information held by ceri388 at any time by emailing support@ceri388.click.
• Right to rectification: If any personal information held by ceri388 is inaccurate or incomplete, you have the right to request that it be corrected. You can update much of your profile information directly through your ceri388 account settings.
• Right to erasure: In certain circumstances, you have the right to request that your personal data be deleted. However, this right is subject to ceri388's legal obligations to retain certain records — for example, financial transaction records required under Malaysian law.
• Right to object to processing: You have the right to object to the use of your personal data for direct marketing purposes. Once you raise an objection, ceri388 will cease using your data for that purpose immediately.
• Right to withdraw consent: Where data processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the validity of any processing that took place prior to the withdrawal.
• Right to data portability: You have the right to receive the personal data you have provided to ceri388 in a commonly used, machine-readable format, so that you may transfer it to another party if you wish.

To exercise any of the above rights, please contact the ceri388 support team by email at support@ceri388.click or via in-platform live chat. We will process your request within 30 business days.

Ceri388 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform developments. It is important that you review this page periodically to stay informed about how we handle your personal information.

For material amendments — changes that significantly affect how we collect, use, or disclose your data — ceri388 will notify you via your registered email or through a prominent in-platform notification at least 7 days before the changes take effect. Your continued use of the ceri388 platform after the effective date of such changes will be considered your acceptance of the updated policy.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. The current version is: January 2026.