Privacy Policy 100krm — Our Commitment to Protecting Your Information

100krm is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you interact with the 100krm website and services.

This Policy applies to all information collected through the official 100krm website, mobile app, customer support, and any direct or indirect interaction with our platform. It is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations handle individuals' personal data in the country.

We take our responsibilities as a data controller seriously and ensure that all 100krm staff who handle members' personal data are trained and bound by strict confidentiality obligations. Any third party we engage to process data on our behalf is also subject to binding data protection agreements.

100krm collects various categories of information depending on how you interact with our platform. Below is a summary of the types of data we process:

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not collect excessive information that is irrelevant to our platform operations or legal obligations.

Every piece of information we collect has a clear and legitimate purpose. 100krm uses your personal data for the following purposes:

• Account Management: Create, verify, and manage your member account, including required KYC processes.
• Transaction Processing: Process deposits, withdrawals, and all other financial transactions securely and efficiently.
• Platform Security: Detect, investigate, and prevent fraudulent activity, money laundering, and other security threats.
• Customer Support: Handle your inquiries, complaints, and support requests more effectively.
• Service Improvement: Analyze usage patterns to improve platform features and the overall member experience.
• Service Communications: Send important account-related information, policy updates, and security notifications.
• Legal Compliance: Meet reporting and compliance obligations to the relevant authorities in Malaysia.
• Promotions & Offers: Send relevant promotional information and offers based on your preferences, subject to your communication settings.

100krm does not sell, rent, or disclose your personal data to third parties without your consent, except in the circumstances set out below:

• Service Providers: Companies we appoint to assist with platform operations, such as payment providers, customer support platforms, and identity verification services. All such parties are bound by strict confidentiality agreements.
• Legal Requirement: Government authorities, law enforcement bodies, or courts when we are legally required to do so.
• Rights Protection: When disclosure is necessary to protect the rights, property, or safety of 100krm, our members, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset transfer, where the acquirer will be bound by this Privacy Policy.

We will not share your information with third-party advertisers for targeted advertising purposes without your explicit consent. Any data sharing not described above requires your prior written consent.

The 100krm platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for the platform to function properly, including login session and security cookies. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform — pages visited, time spent, and any errors encountered — to help us improve our services.
• Functional Cookies: Save your preferences such as language, display settings, and other choices so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Help us understand overall usage patterns to make better decisions regarding platform development.

You can manage cookie settings through your internet browser. Please note that disabling certain cookies may affect the functionality and user experience of the 100krm platform.

Protecting your personal data from unauthorized access, loss, misuse, or alteration is a top priority at 100krm. We implement comprehensive technical and organizational security measures to this end.

The technical security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Stored data encryption using AES-256 standards.
• Multi-layered firewall and 24/7 active intrusion detection & prevention system (IDS/IPS).
• Two-factor authentication (2FA) for access to internal systems containing sensitive data.
• Regular security audits conducted by independent cybersecurity experts.
• Real-time account activity monitoring to detect suspicious behavior.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to also take precautions such as using a strong, unique password and never sharing your login credentials with anyone.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by 100krm:

100krm retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account is active and for a defined period after account closure for audit and compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian financial and tax legal requirements.
• KYC Records: Retained for the period specified by applicable anti-money laundering (AML) regulations.
• Communication Logs: Retained for three (3) years for dispute resolution and service quality control purposes.
• Technical Data & Logs: Retained for 12 months for security and fraud detection purposes.

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with established procedures, unless a legal or regulatory obligation requires longer retention.

The 100krm platform may contain links or integrations with third-party services such as payment providers and e-wallet platforms. Please note that this Privacy Policy applies solely to the 100krm platform.

When you click a link to a third-party website or service, you will be subject to that third party's privacy policy, which may differ from ours. 100krm is not responsible for the privacy practices of any third-party website or service.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 100krm handles your personal data, please contact our data protection team.

We are committed to addressing every enquiry seriously and providing a satisfactory response in a timely manner. For more complex issues relating to data rights, please clearly state the type of request and include the required identity verification information.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant enforcement body under PDPA 2010.