Cemara123 Privacy Policy – How We Protect Your Personal Data

1 Privacy Policy Introduction & Scope

Cemara123 cares about the privacy of every user on our platform. This Privacy Policy is written in plain language so you know exactly what happens with your personal data — not in confusing legal jargon.

This policy applies to all information we collect through the cemara123.pro website, mobile apps, email communications, customer support systems, and any other interactions between you and the cemara123 platform.

Cemara123 acts as the data controller in respect of the personal information you provide to us. This means we are responsible for deciding how and why your data is processed, and we are fully accountable for ensuring that processing is carried out lawfully and securely.

2 Personal Data We Collect

We only collect data that is genuinely necessary to provide you with the cemara123 platform services. The following are the categories of data collected:

2.1 Registration Information

When you register a cemara123 account, we collect your full name, email address, Malaysia phone number, date of birth, and encrypted password. This information is required to create and manage your account.

2.2 Identity Verification Information (KYC)

To comply with anti-money laundering legal requirements and verify age eligibility, we collect copies of identity documents (MyKad or passport) and in some cases proof of current address. KYC documents are stored with the highest level of security and access is restricted to authorised personnel only.

2.3 Financial Data

To process deposits and withdrawals, we store the bank account or e-wallet details you register with us. However, we do not store full credit or debit card numbers — card transactions are processed directly through a PCI-DSS compliant payment gateway.

2.4 Platform Usage Data

We collect information about how you use the platform, including game history, betting records, transaction history, session duration, and games accessed. This data is used to provide services, detect fraud, and monitor gaming behaviour for responsible gaming purposes.

2.5 Technical & Device Data

We automatically collect your IP address, browser or app type, device operating system, screen resolution, session cookies, and access log data. This information is used for security, fraud detection, and platform improvement.

3 How We Use Your Personal Data

Every piece of data we collect is used for a specific and lawful purpose. We do not use your data for any other purpose without notifying you in advance.

• Setting up and managing your account — including registration, login, identity verification, and account settings management
• Processing financial transactions — deposits, withdrawals, bonus payments, and balance adjustments
• Verifying eligibility and ensuring legal compliance — age verification, KYC, and AML (Anti-Money Laundering) requirements
• Providing customer support — resolving enquiries, complaints, and technical issues
• Security & Fraud Prevention — detecting suspicious activity, protecting accounts, and monitoring for misuse
• Improving the platform — analysing usage patterns to improve the interface, performance, and new features
• Marketing Communications — sending promotional information and exclusive offers (only if you have consented)
• Responsible gaming — monitoring gameplay patterns to identify support needs and enforce user-set limits

4 Legal Basis for Data Processing

Cemara123 processes your personal data based on one or more valid legal grounds under Malaysia's PDPA:

• Contract performance — processing required to provide the platform services you registered for
• Legal Obligations — processing required to comply with Malaysia's laws such as KYC and AML requirements
• Legitimate Interests — processing for security, fraud prevention, and service improvement purposes that do not override your fundamental rights
• Consent — for marketing communications and optional cookie usage, we require your explicit consent, which can be withdrawn at any time

5 Data Sharing with Third Parties

Cemara123 does not sell your personal data to any third party. However, in the course of conducting legitimate business, we share limited data with the following categories of third parties:

5.1 Service Providers

We share necessary data with service providers that help operate our platform — such as payment gateway providers, server hosting companies, gaming software providers, and customer support platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

5.2 Regulatory Bodies & Authorities

We may share data with regulatory authorities, law enforcement, or courts when required by Malaysian law or a valid court order. In such situations, we will notify you if the law permits us to do so.

5.3 Fraud Prevention

To protect the platform and all users, we may share limited information with industry fraud prevention services or with other platforms in cases where serious harmful activity is detected.

6 Data Security Measures

Protecting your personal data is a top priority in every technical decision we make. Here are the security layers we have in place:

• Encryption in transit — all communications between your device and cemara123 servers are secured by TLS 1.3 (256-bit SSL)
• Encryption of stored data — sensitive data such as KYC documents and financial details are stored in encrypted form within secure server infrastructure
• Internal Access Controls — access to user data among cemara123 staff is restricted on a need-to-know basis
• Two-factor authentication — all staff accounts with access to data systems are protected by mandatory 2FA
• 24/7 Monitoring — intrusion detection systems and anomaly monitoring run at all times
• Regular penetration testing — independent security testing is conducted periodically by certified cybersecurity firms
• Incident response procedures — we have clear protocols for responding to any data breach, including user notification within the timeframe required by law

7 Cookies & Tracking Technologies

The cemara123 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns.

7.1 Types of Cookies We Use

• Essential Cookies — required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional Cookies — saving your preferences such as language, display mode, and other settings to deliver a more personalised experience.
• Analytics Cookies — collecting anonymised information about how users interact with the platform to help us improve it.

7.2 Managing Cookie Preferences

You can manage and delete cookies through your browser or app settings. However, disabling essential cookies may affect overall platform functionality. Analytics and functional cookies can be disabled without impacting your ability to play.

8 International Data Transfers

In the course of platform operations, some of your data may be processed or stored on servers located outside Malaysia — for example, for hosting services or international game provider systems.

When data is transferred outside Malaysia, we ensure a level of protection equivalent to or higher than what Malaysian law requires. This is achieved through contractual data protection clauses, compliance with recognised data protection standards, or the necessity of fulfilling contractual obligations between you and cemara123.

9 Data Retention Period

Cemara123 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active account data — retained for as long as your account is active and for the required period after account closure to meet legal obligations
• Financial transaction records — retained for a minimum of 7 years in line with Malaysia's financial and tax legal requirements
• KYC Documents — retained for the period mandated by Malaysia's AML laws, typically no less than 5 years after the business relationship ends
• Technical & Security Logs — retained for between 90 days and 2 years depending on the log type
• Customer Support Communications — retained for 3 years for reference and service improvement purposes

Once the retention period has ended, data is securely deleted or anonymised so it can no longer be linked to any individual.

10 User Rights Regarding Personal Data

Under Malaysia's PDPA, you have the following rights regarding the personal data we hold about you:

11 Children's Privacy

The cemara123 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children or minors.

If we discover that personal data belonging to an underage individual has been collected without our knowledge, that data will be deleted immediately and the relevant account will be closed. If you believe a minor has registered an account on our platform, please contact us right away.

12 How to Contact Us for Privacy Matters

If you have any questions, concerns, or wish to exercise your privacy rights, there are several ways to reach the cemara123 privacy team:

This Privacy Policy was last updated on 1 January 2026. Any material changes will be communicated to registered users via email or in-platform notice at least 14 days before taking effect. Continued use of the cemara123 platform after changes take effect constitutes acceptance of the updated policy.