Privacy Policy — ceri123

This Privacy Policy ("Policy") describes how ceri123 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting services accessible at https://ceri123.cam, collects, processes, stores, uses, and protects the personal data of individuals ("Users", "you", "your") who access or use our Services.

This Policy applies to all personal data collected through the ceri123 website, any associated mobile applications, and all related services, communications, and interactions between ceri123 and its Users — including players from Malaysia, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere.

By registering an account, making a deposit, or otherwise using the ceri123 platform, you confirm that you have read and understood this Privacy Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must refrain from using our Services.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, contact details, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, ceri123 is the Data Controller.
• "Data Processor" means any third party that processes personal data on behalf of ceri123 under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process mandated by our international gaming license and internal anti-money laundering compliance framework.
• "Cookies" means small text files placed on a User's device by the ceri123 platform for the purposes of session management, preference storage, analytics, and fraud prevention.
• "Services" means all products, features, games, and functionality accessible through the ceri123 platform, including casino games, sports betting, live dealer tables, promotions, and customer support.

ceri123 collects personal data in the following categories:

ceri123 collects personal data through the following methods:

• Direct submission: Information you voluntarily provide during account registration, KYC document upload, deposit or withdrawal requests, support interactions, or promotional participation.
• Automated technologies: Data collected automatically when you access the platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes IP addresses, session data, and behavioral data generated by your use of the platform.
• Third-party sources: In limited circumstances, ceri123 may receive data about you from third-party identity verification providers (for KYC), payment processing networks (including FPX and DuitNow infrastructure), fraud detection services, and analytics providers — all of whom operate under data processing agreements with ceri123.
• Publicly available sources: Where permitted by applicable law, ceri123 may supplement your profile with data from publicly available sources for fraud prevention and regulatory compliance purposes.

ceri123 processes your personal data for the following specific purposes:

1. Account Registration and Management: To create, verify, and maintain your ceri123 account, including authenticating your identity at login and processing account closure requests.
2. KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our international gaming license requirements and anti-money laundering obligations.
3. Payment Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, BTC, ETH, and USDT TRC20; and to process withdrawal requests to your registered payment methods.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other abusive behavior on the platform.
5. Regulatory Compliance: To fulfill obligations imposed by our international gaming licensing authority, including record-keeping, transaction reporting, and responding to lawful requests from competent authorities.
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email.
7. Responsible Gambling: To administer responsible gambling tools including deposit limits, loss limits, session reminders, and self-exclusion programs, and to monitor for indicators of problem gambling behavior.
8. Platform Improvement: To analyze usage patterns, conduct A/B testing, and optimize platform performance, game loading speeds, and user interface design.
9. Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates to users who have opted in to marketing communications. You may withdraw consent at any time by contacting support or adjusting your account preferences.

ceri123 processes your personal data on the following legal bases, in accordance with applicable international data protection frameworks:

• Contractual Necessity: Processing required to fulfill our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML reporting, and our international gaming license conditions.
• Legitimate Interests: Processing carried out in furtherance of ceri123's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and responsible gambling oversight — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — including marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ceri123 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Service Providers: ceri123 engages trusted third-party service providers who process data on our behalf under data processing agreements. These include identity verification providers, payment processing networks (such as FPX infrastructure), cloud hosting providers, fraud detection services, and customer support platform operators.
• Game Providers: Where required for the delivery of specific games, technical session data may be shared with game software providers. These providers are contractually prohibited from using this data for any purpose other than the technical delivery of game services.
• Regulatory Authorities: ceri123 may be required to disclose personal data to our licensing authority, or in response to a lawful request from a competent authority, court order, or applicable regulatory requirement.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all assets of ceri123, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• With Your Consent: Where you have explicitly consented to a specific data sharing arrangement, we may share your data accordingly.

ceri123 operates as an international online gaming platform. Your personal data may be transferred to, stored in, and processed in countries outside Malaysia, including the jurisdiction in which our international gaming license is held and the locations of our cloud infrastructure providers.

Where personal data is transferred internationally, ceri123 ensures that appropriate safeguards are in place to protect the data, including contractual data protection clauses equivalent in standard to internationally recognized data protection frameworks. All third-party recipients are required to maintain confidentiality and implement appropriate technical and organizational security measures.

By using the ceri123 platform, you consent to the international transfer of your personal data as described in this section.

ceri123 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

• Account Data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with our AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless subject to an ongoing dispute or regulatory investigation.
• Technical and Log Data: Retained for twelve (12) months in standard operational logs, and up to five (5) years in security and fraud investigation archives.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ceri123's data disposal procedures.

ceri123 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) on the platform. Cookies are classified into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Store your preferences such as language selection and display settings to improve your experience across sessions.
• Analytics Cookies: Collect anonymized data about how users interact with the platform — which pages are visited most, where users click, and session duration. This data is used to improve platform performance and navigation.
• Security and Fraud Prevention Cookies: Used to detect suspicious activity, unusual login patterns, and potential bot behavior that may indicate fraudulent use of the platform.

You may manage non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the ceri123 platform. Strictly necessary cookies are not subject to user preference controls as they are required for basic platform operation.

Subject to applicable law and certain exceptions where our legal obligations require us to retain data, you have the following rights with respect to your personal data held by ceri123: