Your Data Protection

Cuci Privacy Policy – Our Commitment to
Protecting the Personal Data of Malaysia Members

At cuci, your privacy is more than a legal requirement — it is a responsibility we take to heart. This document clearly explains how we collect, use, store, and protect your personal information.

Updated: January 2026 Applicable to all Malaysia members PDPA Compliance

Six Core Principles cuci Data Protection

Every decision regarding data handling at cuci is made based on these six core principles — to ensure your information remains safe and respected at all times.

Minimum Collection, Clear Purpose

Cuci only collects data that is strictly necessary for platform operations. We do not collect information that is not directly relevant to the services you use.

Advanced-Level Data Encryption

All sensitive data is stored in encrypted form using AES-256 standards. Data in transit is protected by SSL/TLS 1.3 — no information travels in plain form.

Full Control in Your Hands

You have the right to access, correct, transfer, or request deletion of your personal data at any time via your cuci account settings or by contacting our team.

No Data Sales to Third Parties

Cuci does not sell, rent or share your personal information with third parties for marketing purposes. Your data belongs to you — not to us as a business commodity.

Defined Retention Periods

Data is retained only for as long as necessary for its original purpose of collection or as required by law. Data that is no longer needed is securely deleted.

Transparency in Every Change

Whenever the cuci Privacy Policy is updated, members will be notified via in-platform notifications and email — not merely by changing the date at the top of the document without notice.

This Privacy Policy explains how cuci handles your personal data. By using the cuci platform, you agree to the practices described in this document.

1Introduction

Cuci ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, store, share and protect your personal data when you use the cuci online wagering platform via cuci.onl or the cuci mobile app.

This document is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. If you do not agree with any aspect of this Privacy Policy, please do not use the cuci platform.

2Data We Collect

Cuci collects several categories of personal data depending on how you interact with our platform:

Data Category Example Information Collection Method
Identification Information Full name, identification card number, date of birth Registration & KYC
Contact Information Phone number, email address Account Registration
Financial Data Bank account details, transaction records Deposits & withdrawals
Usage Data Login history, betting history, games played Platform Usage
Technical Data IP address, browser type, operating system Automatically upon access
Communication Data Live chat recordings, support emails Support interactions

Cuci does not collect sensitive financial information such as full credit card numbers directly — card transactions are processed by third-party payment processors compliant with PCI-DSS standards.

3How We Use Your Data

Data collected by cuci is used for the following purposes:

  • Account Management — creates, verifies and maintains your member account.
  • KYC and AML Compliance — fulfils identity verification requirements and anti-money laundering prevention measures.
  • Transaction Processing — processes your deposits, withdrawals and account financial history.
  • Service Delivery — provides access to games, Sports Betting and other platform functions.
  • Platform Security — detects and prevents fraud, unauthorised access and malicious use.
  • Service Communications — sends important notifications about your account, security and platform updates.
  • Platform Improvements — analyses usage patterns to improve the overall user experience.
  • Marketing Communications — sends promotional information and offers — only if you have given your consent.
You may withdraw consent for marketing communications at any time through the notification settings in your cuci account or by contacting our support team.

4Legal Basis for Data Processing

Every data processing activity by cuci is carried out on the basis of one or more valid legal grounds:

  • Contract Execution — processing required to provide the services you requested when registering an account.
  • Legal Obligations — compliance with KYC, AML and financial regulatory requirements as stipulated by Malaysia law.
  • Legitimate Interests — fraud detection, platform security and usage analytics for service improvement.
  • Consent — marketing communications and use of data for purposes that require your explicit consent.

5Data Sharing with Third Parties

Cuci does not sell your personal data. However, we share data with specific parties under limited and controlled circumstances:

  • Technical Service Providers — cloud service providers, CDN providers and infrastructure partners that help us operate the platform. All partners are bound by strict data protection agreements.
  • Payment Processors — financial institutions and payment processors required to process deposits and withdrawals in MYR.
  • Game Providers — slot and casino game providers receive the minimum technical data required to enable games to function within the cuci platform.
  • Authorities — cuci may disclose data to law enforcement authorities or regulatory bodies when required by law or court order.
All third parties that receive cuci member data are bound by legally enforceable confidentiality and data protection agreements. cuci only shares data that is strictly necessary for the stated purpose.

6Cross-Border Data Transfers

In some cases, your personal data may be processed or stored outside Malaysia — for example, when we use global cloud infrastructure or engage with international service providers.

When such data transfers occur, cuci ensures that protection equivalent to Malaysia's standards is maintained through the following mechanisms:

  • Internationally recognised standard data protection agreements.
  • Selecting partners that comply with recognised data protection standards (such as ISO 27001).
  • Use of end-to-end encryption for all data in transit across borders.

7Data Security

Cuci implements a comprehensive range of technical and organisational security measures to protect your personal data:

  • Data Encryption at Rest — all sensitive data in the cuci database is stored in encrypted format using AES-256.
  • Data Encryption in Transit — communications between your device and cuci servers are protected by SSL/TLS 1.3.
  • Internal access controls — only cuci staff with a legitimate work requirement are granted access to member personal data, based on the principle of least privilege.
  • 24/7 Security Monitoring — cuci systems continuously monitor for suspicious activity and automated alerts are triggered when anomalous patterns are detected.
  • Regular security audits — penetration testing and independent security audits are conducted periodically by independent external firms.
  • Incident Management — clear security incident response procedures are in place to ensure any data breach is managed swiftly and effectively.
In the event of a data breach that materially affects your personal information, cuci will notify you within a reasonable timeframe once the incident has been confirmed and initial containment measures have been taken.

8Data Retention Period

Cuci retains your personal data only for as long as necessary for its original collection purpose or as required by law:

  • Active account data — retained for as long as your account is active and for a defined period after account closure to meet legal requirements.
  • Financial Transaction Records — retained for a minimum of seven (7) years in line with Malaysia tax and financial legal requirements.
  • KYC Records — retained for a minimum of five (5) years after the business relationship ends in line with AML requirements.
  • Technical Logs — retained for a maximum of twelve (12) months for security and technical investigation purposes.
  • Support Communication Recordings — retained for three (3) years for quality control and dispute resolution purposes.

Once the retention period expires, data is securely deleted or anonymised using methods that ensure it can no longer be linked back to you.

9Your Rights as a Data Subject

As a cuci member residing in Malaysia, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly in your account settings.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data — subject to legal retention obligations that may require us to retain certain data.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

To submit any data rights request, contact the cuci privacy team via live chat on the platform or through the available support channels. All requests will require identity verification before being processed.

10Cookies & Tracking Technologies

The cuci Platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies used:

  • Essential Cookies — required for core platform functions such as login, session verification and security. These cookies cannot be disabled.
  • Performance Cookies — collects information on how pages are used to help us improve the platform. All data is collected anonymously.
  • Functional Cookies — allows the platform to remember your preferences such as language choice and display settings.
  • Analytics Cookies — helps us understand general navigation patterns within the platform for continuous improvement.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the cuci platform.

11Children's Privacy

The cuci Platform is strictly prohibited for individuals under 18 years of age. cuci does not intentionally collect personal data from children or minors below the stipulated age.

If we discover that personal data of a minor has been collected, we will take the following steps immediately:

  • Closing the account immediately.
  • Permanently deleting all data associated with the account.
  • Processing eligible refunds in accordance with established procedures.

If you have reason to believe that a minor has registered a cuci account, please notify our support team immediately.

12Privacy Policy Amendments

Cuci reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or technological advancements.

Any material changes will be communicated to members via:

  • In-platform notifications on cuci to all logged-in members.
  • Email notification to your registered email address within a reasonable period before changes take effect.
  • Update the "Updated" date displayed at the top of this document.

Your continued use of the cuci Platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amendments, please discontinue use of the platform and contact us to close your account.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or cuci's handling of your personal data, please contact us through the following channels:

  • Live Chat Platform — the fastest way to get a response, available 24/7 in Bahasa Melayu via the cuci app or website.
  • Email — support@cuci.onl (do not make this a clickable link — it is for display purposes only)
The cuci privacy team endeavours to respond to all written enquiries within five (5) business days. Requests involving data rights may take up to 21 business days depending on the complexity of the request.

Your Data Is Safe with cuci

By understanding the cuci Privacy Policy, you can be confident your data is managed responsibly. Register and enjoy a platform that genuinely puts your information security first.

18+ only. Play responsibly.

Bahasa Melayu