51cg Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

1

Personal Information We Collect

51cg collects your personal information in several ways — directly when you provide it to us during registration or platform use, and automatically through standard tracking technologies as you browse our platform. Below is a detailed overview of the types of data we collect:

Information You Provide Directly:

• Identity information: full name, date of birth, identity card number (for KYC verification purposes when required), gender
• Contact information: email address, mobile number, residential address in Malaysia
• Account information: username, password (stored as a human-unreadable hash), language preference, notification preferences
• Financial information: details of your chosen payment method (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, FPX) – note: 51cg does not store full card numbers or banking passwords under any circumstances
• Support communications: records of live chat conversations, emails, and any feedback you send to 51cg

Automatically Collected Information:

• Technical data: IP address, device type, operating system, web browser type, screen resolution
• Usage data: games played, session duration, login frequency, betting history (for security and responsible gambling purposes)
• General location data: country and city based on IP address – 51cg does not track your personal GPS location
• Cookie and session data: information stored in your browser to ensure a smoother and more secure login experience

2

How We Use Your Personal Information

51cg uses collected personal information solely for legitimate purposes that are necessary to operate our platform. We do not use your data for any purpose unrelated to providing online casino services to Malaysian players. The following are the specific purposes for which data is used:

• Account management: Creating and managing your player account, processing registrations, and verifying your identity to meet KYC compliance requirements
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, as well as handling your winnings withdrawals securely and promptly
• Platform security: Detect and prevent fraud, money laundering, account abuse, and any other unlawful activity that could compromise the safety of players or the platform 51cg
• Customer support: Providing accurate and relevant assistance whenever you contact our support team 51cg, including resolving queries, complaints, or technical issues
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance, as well as ensuring that responsible gambling self-exclusion tools function correctly
• Service communications: Sending important notifications about your account, platform updates, changes to our terms, and relevant security information
• Marketing (with your consent): Sending information about promotions, bonuses, and new games at 51cg – only to players who have consented to receive marketing communications
• Platform improvements: Analysing usage data in aggregate and anonymised form to understand how players interact with the platform and to make meaningful improvements

3

Data Sharing with Third Parties

51cg does not sell, rent, or trade players' personal data to any third party for that third party's marketing or commercial purposes. However, in the course of operating our platform, there are limited situations where we may need to share data with certain parties:

• Payment service providers: To process your deposits and withdrawals, transaction details must be shared with the relevant payment service providers, such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX processors. This sharing is limited to the minimum necessary, and these service providers are bound by strict confidentiality agreements with 51cg
• Game providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, and Play'n GO may require your unique account identifier (not your personally identifiable information) to run their games within the 51cg
• Identity verification services: For KYC verification purposes, 51cg uses recognised third-party services to verify identity documents. These services are subject to strict data protection standards
• Legal authorities: 51cg may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by law or a valid court order. We do not make such disclosures voluntarily except where required by law
• Professional advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations may need to access certain data in the context of the services they provide to 51cg

4

Data Security Measures at 51cg

Protecting players' personal data 51cg is a responsibility we take extremely seriously. We have invested in comprehensive security infrastructure to keep your data protected from unauthorised access, loss, destruction, or accidental disclosure.

Technical security measures we employ:

• 256-bit SSL Encryption: All communication between your browser and our servers 51cg is encrypted using the latest TLS protocol, rendering any transmitted data unreadable to unauthorised parties attempting to intercept it
• Data encryption at rest: Sensitive data such as passwords and payment details are stored in encrypted form – passwords are hashed using a one-way algorithm, meaning that even staff 51cg cannot read your password
• Role-based access control: Access to player data within internal systems 51cg is restricted to staff who require that access to perform their job duties, with all access logged and monitored
• 24/7 security monitoring: An intrusion detection system and anomaly monitoring operate around the clock to identify and respond to any security threats promptly
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts as an additional security layer that protects your account even if your password is compromised
• Regular security audits: Independent security assessments are conducted regularly by appointed cybersecurity experts to identify and address any vulnerabilities before they can be exploited

Even with all these measures in place, no system can guarantee absolute 100% security. We therefore encourage players to play their part in keeping their accounts safe by not sharing passwords, using strong and unique passwords, and reporting any suspicious account activity to our support team 51cg immediately.

5

Cookies, Tracking Pixels & Similar Technologies

51cg uses cookies and similar tracking technologies to enhance your experience on our platform. Understanding how these technologies work helps you make more informed decisions about your privacy.

Types of cookies we use:

• Essential cookies (required): These cookies are essential for the platform 51cg functions correctly. It manages your login session, ensures transaction security, and remembers your language preference. Without these cookies, the platform will not function and you will be unable to log in or play
• Performance and analytics cookies: This cookie collects information about how players use the platform 51cg – which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is used in aggregated and anonymised form to improve the platform
• Functional cookies: These cookies allow the platform to remember your preferences — such as your chosen game settings or selected language — so you don't have to reconfigure them each time you visit
• Security cookies: Used to detect suspicious login attempts, identify new devices accessing your account, and prevent cybersecurity attacks

6

Your Privacy Rights as a 51cg Player

As a player who entrusts your personal data to 51cg, you have clear rights regarding that information. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact our privacy team at [email protected] by clearly stating your request. 51cg committed to responding to privacy rights requests within 7 working days. In more complex cases requiring in-depth investigation, we will notify you within that timeframe of the additional time needed and the reasons for it.

7

Data Retention Period

51cg retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or for the duration required by applicable laws and regulations.

• Active account data: Retained for as long as your account remains active at 51cg and for a reasonable period following account closure to fulfil legal obligations and resolve any outstanding claims
• Financial transaction records: Retained for the minimum period required under applicable financial and anti-money laundering laws — typically no less than 5 to 7 years from the date of the transaction
• Support communication logs: Customer support conversation records are retained for 2 years to enable us to deliver consistent service and resolve any disputes that may arise
• KYC verification data: Identity documents submitted for KYC purposes are retained for the period mandated by international anti-money laundering standards
• Marketing data: If you withdraw your consent to receive marketing communications, we will stop using your data for that purpose within a reasonable timeframe and will retain a record of your withdrawal of consent

Once the retention period has expired and there is no legal basis to continue storing your data, it will be securely deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

8

Children's Privacy & Protection of Minors

Platform 51cg is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian who believes your child has registered an account at 51cg, please contact us immediately at [email protected] so that we may take the appropriate action.

9

Amendments to This Privacy Policy

51cg reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or developments in security technology.

When we make significant changes to this Privacy Policy, we will notify you through:

• Clear in-platform notifications 51cg when you log in
• Email to your registered email address
• Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the 51cg after an amendment takes effect signifies your acceptance of the latest version of this Privacy Policy. If you do not agree with any amendment, you have the right to discontinue use of the platform and close your account.

10

Contact Us for Privacy Enquiries

We deeply value the trust you place in us and are committed to addressing every privacy-related enquiry with professionalism and transparency. If you have any questions, concerns, or wish to exercise any of the privacy rights outlined in this document, please contact us:

When contacting us regarding a privacy matter, please include the following information to help us process your request more efficiently: your account username 51cg you, the type of request (data access, correction, deletion, etc.), and a brief description of your request or concern. We will never ask for your password or full financial details through any communication channel – please be cautious of anyone claiming to represent 51cg and request such sensitive information.