Privacy Policy ceri388 – Malaysian Member Data Protection

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by ceri388, an online sports betting and entertainment platform operating at the website ceri388.best. This document explains in detail how ceri388 collects, processes, uses, stores, and protects your personal information when you register an account, use our services, or interact with the ceri388 platform in any capacity.

By registering an account or using any ceri388 service, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use the ceri388 platform.

Ceri388 is committed to complying with all applicable data protection laws and regulations in Malaysia, including the Personal Data Protection Act 2010 (PDPA). We recognise that your personal information is a valuable and sensitive asset, and we take full responsibility for ensuring it is protected to the best of our ability.

2Information We Collect

Ceri388 only collects information necessary to operate our platform safely and effectively. We do not collect excessive or irrelevant data beyond the scope of the services we provide. The categories of information we collect are as follows:

Ceri388 collects this information through two main methods: directly, when you complete a registration form or use our services, and automatically, through technologies such as cookies and server log systems when you browse our platform. We never purchase or acquire data lists from third parties for the purpose of marketing to you.

3How We Use Your Data

Ceri388 uses the personal information we collect solely for legitimate purposes directly related to delivering our platform services. We do not use your data in ways you would not expect or that conflict with your interests. Specific uses are as follows:

• Account Management: Creating and maintaining your ceri388 account, processing registrations, verifying identity, and managing secure logins.
• Service Provision: Enables you to use every feature on the ceri388 platform — from Sports Betting and slots to virtual sports and Live Casino — smoothly and securely.
• Transaction Processing: Processing all deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX; as well as withdrawals to accounts registered in your name.
• Service Communications: Sending you important account notifications, transaction confirmations, security alerts, and relevant policy updates.
• Customer Support: Handling enquiries, complaints, and support requests submitted to ceri388's Malay-language support team.
• Legal Compliance: To meet AML (Anti-Money Laundering), KYC (Know Your Customer), and all other applicable legal reporting obligations.
• Platform Security: Identifying and preventing fraud, hacking, account abuse, and activities that violate ceri388's Terms & Conditions.
• Responsible Gaming: Monitoring activity patterns to identify early signs of problem gambling and offering appropriate support to members who may need it.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to understand how members use ceri388 and drive continuous improvements to the user experience.

Should ceri388 wish to use your data for any new purpose beyond what is stated above — for example, broader direct marketing — we will obtain your consent before doing so.

4Disclosure to Third Parties

Ceri388 does not sell members' personal data to any party. However, there are limited situations where we need to share certain information with selected, trusted third parties in order to deliver our services to you. Such disclosure occurs only under the following circumstances:

• Payment Service Providers: To process your deposits and withdrawals via methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks. These providers receive only the information required to process the relevant transaction.
• Game Software Providers: Slot, Live Casino, and virtual sports game providers partnering with ceri388 may receive the minimum information necessary to operate your gaming session.
• Technology Service Providers: Companies providing server infrastructure, transactional email services, and analytics tools used by ceri388 are bound by strict confidentiality agreements.
• Legal Authorities: ceri388 may be required to disclose information to government authorities or law enforcement when mandated by law, court order, or a valid regulatory directive.
• Fraud Prevention: In cases involving suspected fraud or criminal activity, ceri388 may share information with the relevant authorities or fraud prevention bodies.

All third parties that receive ceri388 member data are required to protect that information to a level of security equal to or greater than ceri388's own standards, and may only use it for the specified purpose.

5Data Security

Ceri388 continuously invests in the latest security technologies and procedures to ensure your personal data is protected as thoroughly as possible against unauthorised access, alteration, disclosure, or destruction. The key security measures we have in place are as follows:

• 256-bit SSL Encryption: All communications between your device and ceri388's servers are encrypted using 256-bit TLS/SSL protocols. This means every piece of information you transmit — including login credentials and transaction details — cannot be read by third parties, even if the data is intercepted.
• Two-Factor Authentication (2FA): ceri388 provides and encourages the use of 2FA on all accounts. This feature adds an extra layer of security by requiring verification through your second device each time you log in.
• 24/7 Security Monitoring: ceri388's automated monitoring system operates around the clock to detect suspicious activity, abnormal login attempts, and unusual transaction patterns.
• Internal Access Controls: Access to members' personal data among ceri388's internal staff is restricted on a need-to-know basis. Only staff with a legitimate operational requirement are permitted to access member data.
• Regular Security Audits: ceri388 conducts regular security audits and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Incident Response Procedure: ceri388 has a documented incident response procedure to address any data security breaches promptly and effectively, including notifying affected members where required.

While ceri388 takes all reasonable steps to protect your data, no security system in the world can guarantee 100% protection against every threat. You also play an important role in keeping your account secure — by using a strong password, not sharing your login details with anyone, and reporting any suspicious activity to the ceri388 support team promptly.

6Data Retention & Deletion

Ceri388 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for the duration required by applicable laws and regulations. Our data retention principles are as follows:

• Active Account Period: For as long as your ceri388 account remains active, we retain all relevant personal data and transaction records to ensure uninterrupted service and legal compliance.
• After Account Closure: Upon account closure, ceri388 will retain certain information — primarily financial and transaction records — for the minimum period required under anti-money laundering (AML) laws and applicable financial regulations. This period is typically between 5 and 7 years.
• Early Data Deletion: Information that is no longer required for any legitimate purpose will be deleted or anonymised as soon as it is no longer needed, regardless of whether the account remains active.
• Deletion Requests: You have the right to request the deletion of your personal data. ceri388 will process such requests within a reasonable timeframe, subject to our legal obligations to retain certain records for a minimum prescribed period.

7Cookies & Tracking Technologies

Ceri388 uses cookies and similar tracking technologies to enhance your experience on our platform and for internal analytics purposes. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the core functionality of the ceri388 platform. Without them, the platform will not operate properly. This includes session authentication cookies and security cookies. These cookies cannot be disabled.
• Preference Cookies: These cookies allow ceri388 to remember your preferences — such as display language, odds settings, and favourite sports — to improve your overall experience.
• Analytics Cookies: These cookies help us understand how members interact with the ceri388 platform — which pages are visited most frequently, common navigation paths, and where members encounter difficulties. This information is used in aggregate to improve the platform.
• Performance Cookies: These cookies monitor the technical performance of the ceri388 platform to ensure fast load times and a smooth experience, particularly during peak periods such as highly anticipated Malaysia Super League or EPL football matches.

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the ceri388 platform. Essential cookies in particular cannot be disabled without impairing your ability to use the platform.

8Your Rights as a ceri388 User

Ceri388 recognises and respects the rights granted to you as an individual with regard to your personal data. In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you hold the following rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. ceri388 will provide this information within a reasonable timeframe at no charge.
• Right to Rectification: If you find that the personal data we hold is inaccurate or outdated, you have the right to request a correction. You may also update basic account information yourself through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances, subject to our legal record-retention obligations.
• Right to Object to Processing: In certain circumstances, you have the right to object to the processing of your personal data, particularly where it is used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to Complain: If you believe that ceri388 has processed your personal data in a manner that breaches applicable law, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

To exercise any of the rights above, please contact ceri388's data protection team by email at support@ceri388.best stating the right you wish to exercise and the details of your request. We will respond within 30 business days of receiving a complete request.

9Children's Data

The ceri388 platform is strictly for adults aged 18 and above. ceri388 does not knowingly collect, process, or store any personal information relating to children or individuals under the age of 18.

Should ceri388 discover or become aware that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to delete that information from our records, close the associated account, and block any further access to the platform.

If you are a parent or guardian and believe your child under the age of 18 has registered an account with ceri388 or provided us with personal information, please contact the ceri388 support team immediately so we can take appropriate action without delay.

10Amendments to the Privacy Policy

Ceri388 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or improvements to our services. We are committed to keeping you informed of any significant changes.

When we make material changes to this Privacy Policy — meaning changes that significantly affect your privacy rights or how we use your data — we will notify you via the email registered to your ceri388 account or through a prominent notice on our platform, at least 7 days before the changes take effect.

For minor changes such as language clarifications or typographical corrections, we may update this Privacy Policy without prior notice. The "Updated" date shown at the top of this page will always reflect the date the document was last modified. We recommend checking this page periodically.

Continued use of the ceri388 platform after any amendment takes effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.

11Contact Us

If you have any enquiries, concerns, or requests relating to ceri388's Privacy Policy or how we handle your personal data, our team is ready to assist you through the following channels:

• Privacy Email: support@ceri388.best – dedicated to privacy and data protection enquiries. We aim to respond within 24–48 hours on business days.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the ceri388 platform. Best suited for immediate and general enquiries.
• WhatsApp: ceri388's official WhatsApp number is available in the Support section of the platform for more personalised communication.

All privacy-related enquiries are handled in strict confidence by a team trained in data handling and privacy protection. We strive to provide clear, helpful, and informative responses that are easy for all our Malaysian members to understand.