cuci22 Privacy Policy

1. Introduction

1.1 cuci22 is committed to protecting the personal data of all Players and visitors to the Platform. This Policy has been prepared in alignment with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices applicable to licensed online gaming operators.

1.2 This Policy applies to all personal data collected by cuci22 in connection with your registration and use of the cuci22 Platform, including data collected when you create an account, make a deposit, place a wager, contact customer support, or interact with the cuci22 website in any other way.

1.3 Please read this Policy carefully. If you do not agree with the practices described herein, you should not register for or use the cuci22 Platform. If you have questions about this Policy, you may contact cuci22's data team using the contact details set out in Section 13.

2. Personal Data We Collect

cuci22 collects the following categories of personal data:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (to verify age eligibility — 21+ required);
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor);
• Email address;
• Malaysian mobile phone number.

2.2 Verification Documents

• Copy of Malaysian MyKad, passport, or other government-issued identification document;
• Proof of residential address (e.g., utility bill or bank statement issued within the past 3 months);
• Proof of payment method ownership where required for withdrawal processing.

2.3 Financial Data

• Details of payment methods used (e.g., Touch n Go eWallet account identifier, Boost account, bank account name associated with Maybank / CIMB / Public Bank FPX, Visa/Mastercard card type — cuci22 does not store full card numbers);
• Transaction history including deposit amounts, withdrawal requests, and their processing status;
• Account balance information.

2.4 Gaming and Behavioural Data

• Betting history, wagering patterns, game preferences, and session duration;
• Responsible gaming tool settings such as deposit limits and self-exclusion status;
• Promotional activity and bonus claim history.

2.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session logs including login timestamps and platform navigation activity.

3. How We Collect Your Data

3.1 Directly from you: cuci22 collects personal data that you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or completing any other form or interaction on the Platform.

3.2 Automatically: When you access the cuci22 Platform, we automatically collect certain technical data including your IP address, browser type, operating system, referring URLs, pages visited, and session timestamps. This data is collected using cookies, web beacons, and similar tracking technologies as described in Section 7.

3.3 From third parties: cuci22 may receive personal data about you from third-party identity verification providers engaged to assist with KYC compliance, payment processors facilitating MYR transactions, fraud detection services, and responsible gaming databases (such as self-exclusion registries).

4. How We Use Your Personal Data

cuci22 uses the personal data it collects for the following purposes:

• Account management: To create and maintain your cuci22 account, verify your identity, and enable you to access platform features;
• Age and identity verification: To verify that you are 21 years of age or older and that your identity information is accurate, as required by our licensing obligations;
• Payment processing: To process deposits and withdrawals in Malaysian Ringgit via your chosen payment method and to maintain accurate financial records;
• Platform operation and improvement: To deliver games, resolve technical issues, analyse usage patterns, and improve the cuci22 Platform's performance and features;
• Regulatory compliance: To fulfil our obligations under applicable gaming licences, anti-money laundering (AML) requirements, and counter-terrorism financing (CTF) regulations;
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to operate responsible gaming tools including deposit limits and self-exclusion;
• Customer support: To respond to your queries and resolve issues related to your cuci22 account;
• Marketing and promotions: Where you have consented, to send you information about cuci22 promotions, bonuses, and platform updates. You may withdraw marketing consent at any time.

5. Legal Basis for Processing

5.1 cuci22 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between cuci22 and you as a registered Player, including account management, payment processing, and game delivery;
• Legal obligation: Processing is required to comply with applicable gaming licence conditions, AML/CTF regulations, and other legal requirements binding on cuci22;
• Legitimate interests: cuci22 has a legitimate interest in processing data for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests;
• Consent: Where cuci22 processes your data for direct marketing purposes, it does so on the basis of your consent, which you may withdraw at any time.

6. Sharing Your Personal Data

6.1 cuci22 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described below:

• Payment processors and financial institutions: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, Visa, Mastercard, and other approved Malaysian payment channels;
• Identity verification and KYC providers: Third-party services engaged to assist cuci22 in verifying your identity and age as required by our licensing obligations;
• Gaming software and platform providers: Game studios and platform technology providers who supply the games and infrastructure powering the cuci22 Platform. These providers process data only to the extent necessary to deliver their services;
• Fraud prevention and security services: Providers of fraud detection and cybersecurity services who assist in protecting the integrity of the cuci22 Platform and its Players;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory obligation, cuci22 may be required to disclose your personal data to relevant authorities;
• Self-exclusion registries: Where you have registered a self-exclusion, relevant data may be shared with industry self-exclusion schemes to give effect to your exclusion request.

6.2 All third parties with whom cuci22 shares personal data are subject to appropriate data processing agreements and are required to process your data only in accordance with cuci22's instructions and applicable data protection law.

7. Cookies and Tracking Technologies

7.1 cuci22 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver, operate, and improve the cuci22 experience.

7.2 cuci22 uses the following types of cookies:

• Essential cookies: Required for the Platform to function. These cannot be disabled without affecting your ability to use cuci22;
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations;
• Analytics cookies: Used to collect aggregated information about how Players use the Platform, helping us identify and fix issues and improve user experience;
• Security cookies: Used to detect and prevent fraudulent activity and to maintain session security.

7.3 You may configure your browser to refuse or delete cookies. However, disabling essential cookies may prevent certain features of the cuci22 Platform from functioning correctly. cuci22 does not use cookies to display third-party advertising.

8. Data Retention

8.1 cuci22 retains your personal data for as long as your account remains active and for a period thereafter as required to comply with applicable legal, regulatory, and licensing obligations. In most cases, gaming transaction records and KYC documentation are retained for a minimum of five (5) years following account closure, as required by applicable AML/CTF regulations.

8.2 Where data is no longer required for its original purpose and there is no legal obligation requiring its continued retention, cuci22 will securely delete or anonymise it in accordance with our internal data retention schedule.

9. Data Security

9.1 cuci22 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmission between your device and the cuci22 Platform;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis;
• Regular security assessments and vulnerability testing of the cuci22 platform infrastructure;
• Two-factor authentication (2FA) available for all Player accounts.

9.2 While cuci22 takes all reasonable steps to protect your data, no method of data transmission or storage is entirely secure. cuci22 cannot guarantee absolute security and is not liable for unauthorised access that results from circumstances beyond our reasonable control.

9.3 In the event of a personal data breach that is likely to result in a high risk to your rights, cuci22 will notify affected Players without undue delay in accordance with applicable data protection requirements.

10. Your Rights

10.1 Subject to applicable data protection law, you have the following rights in relation to your personal data held by cuci22:

• Right of access: You may request a copy of the personal data cuci22 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. You may update certain account information directly from your cuci22 account settings;
• Right to erasure: In certain circumstances, you may request that cuci22 delete your personal data. Note that this right is subject to our legal retention obligations — we may be required to retain certain data even after account closure;
• Right to restrict processing: In certain circumstances, you may request that cuci22 restrict processing of your personal data;
• Right to withdraw consent: Where cuci22 processes your data on the basis of consent (e.g., for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.2 To exercise any of the rights above, please contact the cuci22 data team using the contact details set out in Section 13. cuci22 will respond to all data subject requests within a reasonable timeframe and no later than as required by applicable law.

11. Children and Minors

11.1 The cuci22 Platform is strictly intended for persons aged 21 years and above. cuci22 does not knowingly collect personal data from persons under the age of 21. If cuci22 discovers or has reason to believe that an account has been registered by a person under 21, the account will be immediately suspended and any personal data collected will be deleted or handled in accordance with applicable law and our licensing obligations.

11.2 If you have reason to believe that a minor has registered on the cuci22 Platform, please contact us immediately using the contact details in Section 13.

12. Changes to This Privacy Policy

12.1 cuci22 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, cuci22 will notify registered Players via the email address associated with their account and/or via a notice posted on the cuci22 website prior to the changes taking effect.

12.2 The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how cuci22 protects your personal data. Your continued use of the Platform following notification of any update constitutes your acceptance of the revised Policy.

13. Contact Us

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or cuci22's handling of your personal data, please contact our support team. Our team is available 24 hours a day, 7 days a week, to assist Malaysian players.