cium918 Privacy Policy

01 Introduction

cium918 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users of the cium918.club website and associated services ("the Platform"). This Privacy Policy describes the categories of personal data we collect from players and visitors, the purposes for which we process that data, the legal bases upon which we rely, the parties with whom we share data, and the rights available to you as a data subject.

This Privacy Policy applies to all personal data collected by cium918 through the Platform, including data provided during account registration, identity verification, gameplay, financial transactions, customer support interactions, and use of marketing communications. By accessing or using the cium918 Platform, you acknowledge that you have read and understood this Privacy Policy.

We encourage you to read this document in full. If you have questions about any provision, please contact us using the details provided in Section 14 before continuing to use the Platform.

02 Data Controller

For the purposes of applicable data protection legislation, cium918 is the data controller responsible for the personal data collected through the cium918.club Platform. As data controller, cium918 determines the purposes and means of processing personal data and is accountable for ensuring that such processing complies with applicable data protection laws and international gaming authority data handling requirements.

Where cium918 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or hosting services), such parties act as data processors under written contractual agreements that impose equivalent data protection obligations.

03 Data We Collect

cium918 collects personal data through several channels. The categories of data collected, and the contexts in which they are collected, are set out below.

3.1 Registration & Account Data

When you create a cium918 account, we collect the information you provide, including:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Residential address (including city and postcode, e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru);
• Email address;
• Mobile phone number (Malaysian number required for SMS OTP);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

As part of our regulatory compliance obligations, cium918 may request and collect:

• Copies of government-issued identity documents (e.g., Malaysian National Identity Card, passport);
• Proof of address documents (e.g., utility bills, bank statements dated within 3 months);
• Selfie or facial verification images where required by our KYC provider.

3.3 Financial & Transaction Data

• Payment method details (e.g., bank account references, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow);
• Deposit and withdrawal transaction records;
• MYR balance history;
• Bonus and promotion usage records.

3.4 Gaming & Wagering Data

• Game session history, bet records, and wagering outcomes;
• Responsible gaming settings (deposit limits, self-exclusion status, session time configurations).

3.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, session duration, and click-path data;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.6 Communications Data

• Records of your interactions with cium918 Support via live chat, email, and any other channel;
• Feedback, complaints, and survey responses.

04 How We Use Your Data

cium918 processes your personal data for the following purposes:

05 Legal Basis for Processing

cium918 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between cium918 and the Player — including account management, payment processing, and game service delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws, including AML/CFT legislation, KYC requirements, age verification obligations, and gaming authority regulatory requirements, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out on the basis of cium918's legitimate interests, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

06 Data Sharing & Disclosure

cium918 does not sell, rent, or trade your personal data to unaffiliated third parties for their marketing purposes. We may share your personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment service providers: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted payment methods. These providers receive only the data necessary to execute the specific transaction.
• KYC and identity verification providers: To fulfil age verification (21+) and AML/KYC obligations. All KYC providers are contractually bound to process identity data solely for verification purposes.
• Game content providers and platform technology providers: Game studios and platform infrastructure providers may receive anonymised or pseudonymised session data for technical service delivery and fairness auditing purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or the instructions of a competent gaming or financial regulatory authority, cium918 may disclose personal data without prior notice to you.
• Professional advisers: Lawyers, auditors, and consultants who are bound by professional duties of confidentiality.

All third-party data processors engaged by cium918 are subject to written data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with cium918's documented instructions.

07 Cookies & Tracking Technologies

The cium918 Platform uses cookies and similar tracking technologies to deliver and improve its services. Cookies are small text files placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security functions. These cannot be disabled without preventing core Platform functionality.
• Functional cookies: Remember your preferences, such as language settings, responsible gaming limit configurations, and display preferences, to personalise your Platform experience.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform (pages visited, session duration, device type) to help cium918 improve platform performance and user experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content about cium918 products. You may withdraw consent to marketing cookies at any time via your browser settings or the Platform's cookie preference centre.

You may configure your browser to reject all or certain categories of cookies; however, disabling strictly necessary cookies will impair your ability to use the cium918 Platform. Persistent marketing and analytics cookies are subject to your prior consent.

08 Data Retention

cium918 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the account relationship, and for a minimum of five (5) years following account closure, in accordance with AML/CFT regulatory requirements applicable to gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, or longer if required by applicable tax or financial regulation.
• Gaming and wagering records: Retained for a minimum of three (3) years from the date of the gaming session, or longer where required for dispute resolution or regulatory audit purposes.
• Communications and support records: Retained for a minimum of two (2) years from the date of each interaction, or longer where the communication relates to a dispute, complaint, or regulatory inquiry.
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal of consent, to demonstrate compliance.
• Technical and usage data: Retained in anonymised or aggregated form for analytical purposes indefinitely; in identifiable form for no longer than twelve (12) months.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with cium918's data disposal procedures.

09 Data Security

cium918 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption of all data transmitted between your device and the cium918 Platform;
• Industry-standard cryptographic hashing for stored account passwords — plaintext passwords are never stored;
• Two-factor authentication (2FA) available on all Player accounts;
• Access controls ensuring that cium918 staff access personal data on a need-to-know basis only;
• Regular security audits, vulnerability assessments, and penetration testing;
• Incident response procedures that include regulatory notification obligations where a data breach meets the applicable reporting threshold.

Whilst cium918 takes all reasonable precautions to protect your personal data, no internet transmission or digital storage system is entirely impenetrable. You are responsible for keeping your account credentials confidential and for notifying cium918 promptly of any suspected unauthorised access.

10 Your Rights

Subject to applicable data protection law and regulatory retention obligations, you have the following rights in respect of your personal data held by cium918:

• Right of access: You may request a copy of the personal data cium918 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update most account information directly in your cium918 account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cium918's legal and regulatory retention obligations.
• Right to restriction of processing: You may request that cium918 restrict processing of your personal data in certain circumstances, such as while a rectification request is assessed.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that cium918 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take effect within 7 business days.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact cium918 via the methods set out in Section 14. cium918 will respond to verified data subject requests within thirty (30) days. Complex or multiple requests may require an extension of up to a further sixty (60) days, with notification provided within the initial thirty-day period.

11 Children's Privacy

The cium918 Platform is strictly intended for individuals aged 21 years and above. cium918 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the account registration process. If cium918 discovers that personal data has been collected from an individual under 21, such data will be deleted immediately, the account will be closed, and any funds held will be dealt with in accordance with our Terms and Conditions and applicable regulatory requirements.

If you have reason to believe that cium918 has inadvertently collected personal data from a person under 21, please contact us immediately at the details provided in Section 14.

12 Third-Party Links

The cium918 Platform may contain links to third-party websites or services (for example, game studio promotional pages or payment provider portals). This Privacy Policy applies only to the cium918 Platform. cium918 is not responsible for the privacy practices of third-party websites and recommends that you review the applicable privacy notice of any third-party site you visit via a link from the Platform.

13 Amendments to this Policy

cium918 reserves the right to amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. Where material changes are made, cium918 will provide reasonable prior notice to registered Players via email or on-site notification. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed of how cium918 protects your data.

14 Contact Us

For all privacy-related enquiries, data subject access requests, or complaints regarding cium918's data handling practices, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the cium918 Platform

cium918 acknowledges all privacy enquiries within two (2) business days and aims to resolve data subject requests within the statutory timeframes set out in Section 10. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.