Cuci100 Privacy Policy – Data Protection Malaysian Users

Cuci100 is an online casino gaming platform operating under a valid license and trusted by hundreds of thousands of users across Malaysia. We understand that your privacy is of the utmost importance, and we take this responsibility very seriously.

This Privacy Policy applies to all users who access or use the cuci100 platform via our website, mobile app, or any other digital channel we operate. This policy transparently describes:

• Types of personal data we collect from you
• How and why we collect that data
• How your data is used, stored, and protected
• Which parties may receive your data and under what circumstances
• Your rights regarding your personal data
• How you can contact us about privacy

We encourage you to read this Privacy Policy carefully. If you disagree with any part of this policy, please stop using the cuci100 platform and contact us for assistance with closing your account.

We collect various types of personal data depending on how you interact with the cuci100 platform. Generally, the data we collect falls into the following categories:

Cuci100 collects your personal data through various channels, both directly and indirectly:

• Account Registration: When you register a new account at cuci100, you provide us directly with basic information such as your name, email, phone number, and date of birth.
• KYC Process: To meet legal compliance requirements, we collect identity verification and address documents during the Know Your Customer (KYC) process.
• Financial Transactions: Every time you make a deposit or withdrawal, the relevant payment information is collected and securely recorded in our system.
• Platform Usage: Our system automatically records technical data such as your IP address, device type, browser, and activity history while you use the platform.
• Communications: When you contact our customer support team via live chat, email, or phone, those conversations may be recorded for quality and training purposes.
• Cookies and Tracking Technologies: The cuci100 platform uses cookies, pixels, and other tracking technologies to record your preferences and enhance your user experience.

All data collection is carried out lawfully, fairly, and transparently in accordance with data protection principles applicable in Malaysia.

Cuci100 uses your personal data for the following purposes, each supported by a valid legal basis:

• Account Management: Creating, verifying, and managing your account, including secure login and password recovery.
• Transaction Processing: Processing deposits, withdrawals, and other financial transactions accurately and promptly.
• Legal Compliance: Fulfilling compliance obligations including KYC, anti-money laundering (AML), fraud prevention, and reporting to relevant authorities.
• Platform Security: Detecting, investigating, and preventing fraud, account abuse, and cybersecurity threats.
• Service Improvement: Analysing usage patterns to improve platform performance, enhance the user interface, and develop new features.
• Service Communications: Sending important notifications related to your account, transactions, and service updates.
• Marketing (with consent): Sending promotional offers, updates on new games, and exclusive bonuses — only to users who have consented to receive marketing communications.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate support.

Cuci100 does not sell or transfer your personal data to third parties for commercial purposes. However, there are certain situations where we may need to share your data with trusted parties:

• Payment Providers: Transaction information required is shared with payment providers such as FPX, Touch 'n Go eWallet, GrabPay, and Boost to process your deposits and withdrawals.
• IT Service Providers: Our cloud computing, hosting, and technical infrastructure service providers may access your data within the scope of the services they provide, subject to strict confidentiality agreements.
• Game Providers: Limited game data is shared with third-party game content providers to ensure a smooth gaming experience for you.
• Regulatory & Law Enforcement Bodies: cuci100 will disclose required data to lawful authorities when mandated by law, court order, or official investigation.
• AML/KYC Partners: Third-party identity verification and AML screening services are used to ensure legal compliance.

All third parties that receive your data are bound by data processing agreements that require them to protect your information in line with cuci100's privacy policy and applicable legal requirements.

Cuci100 implements a wide range of comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by the same high-grade encryption protocols used by leading banks.
• Two-Factor Authentication (2FA): Users are encouraged and able to enable two-factor authentication for an additional layer of security when logging in.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any suspicious activity or intrusion attempts.
• Internal Access Controls: Access to user data within the cuci100 organization is restricted on a need-to-know basis, with comprehensive audit logs maintained for every access made.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent cybersecurity firms to identify and address system vulnerabilities.
• Secure Data Backup: User data is regularly backed up to a separate secure location to ensure service continuity under any circumstances.

While we take all reasonable steps to protect your data, no security system in the world can be guaranteed 100% safe. You also play an important role by keeping your account password confidential and not sharing it with anyone.

Cuci100 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. Cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform to improve performance and usability.
• Functional Cookies: Storing your preferences such as language, display settings, and login details for ease of use.
• Analytics Cookies: Used to analyze traffic and usage patterns in aggregate for the purpose of continuous platform improvement.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the cuci100 platform. For more information on managing cookies, refer to your web browser's help section.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and related regulations, you have the following rights regarding your personal data held by cuci100:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information on how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data without undue delay.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
• Right to Data Portability: You have the right to receive the personal data you provided to us in a machine-readable format and transfer it to another data controller.

To exercise any of the above rights, please contact the cuci100 privacy team via email at [email protected]. We will respond to your request within 30 business days.

Cuci100 retains your personal data only for as long as necessary to fulfill the original purpose of collection or to comply with legal obligations. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration that your account remains active and in use.
• Post-Account Closure Data: Core account and transaction records are retained for a minimum of 7 years after account closure to comply with AML and financial regulatory requirements.
• KYC Documents: Retained for 5 to 7 years after the end of the business relationship, or longer if required by law.
• Communication Logs: Customer support communication records are retained for 3 years for quality assurance and dispute resolution purposes.
• Technical & Log Data: System logs and technical data are retained for 12 months for security and troubleshooting purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.

When data is no longer required, cuci100 will securely delete or destroy it using approved methods to ensure it cannot be recovered by unauthorized parties.

Cuci100 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies we adopt.

When we make material changes to this Privacy Policy, we will notify you via:

• A prominent notice on the cuci100 platform homepage
• Notification email to your registered email address
• In-account notice upon your next login

The latest version of the Privacy Policy will always be available on this page with a clear "Updated" date. Your continued use of the cuci100 platform following any amendments constitutes your acceptance of the updated Privacy Policy.

We recommend that you check this page periodically to ensure you are always informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci100 handles your personal data, please contact us through the following channels:

If you believe that cuci100 has not complied with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (PDPD) or the relevant regulatory authority.