Cuci2u Privacy Policy – How We Protect Your Personal Data

1. Personal Information We Collect

Cuci2u collects member personal information in several ways — directly from you during registration, automatically during platform use, and in certain cases from trusted third-party sources. Below is a breakdown of the information collected by category.

Cuci2u does not collect sensitive personal data such as medical information, religious beliefs, political views or biometric data unless specifically required by legal compliance obligations. All data collection is carried out on the basis of genuine and proportionate necessity.

2. How We Use Your Personal Information

Personal information collected by cuci2u is used solely for the purposes stated below. We do not use your data for any purpose beyond what is reasonably necessary to operate this platform.

• Account Management: Creating and managing your cuci2u account, processing registration, verifying identity and keeping your account secure from unauthorised access.
• Transaction Processing: Processing all deposits and withdrawals through your chosen Malaysian payment method — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX via Maybank2u, CIMB Clicks and other Malaysian banks.
• Legal Compliance & Fraud Prevention: Meeting industry compliance obligations including anti-money laundering (AML), age verification and monitoring of suspicious activity that may involve fraud or platform abuse.
• Customer Support: Resolving enquiries, complaints and disputes submitted to the cuci2u support team efficiently and accurately.
• Platform Improvements: Analysing usage patterns on an aggregate (not individual) basis to understand user needs and make ongoing improvements to the cuci2u platform.
• Important Communications: Sending account-related notifications such as deposit confirmations, successful withdrawal alerts, security updates, changes to terms and conditions, and promotional information if you have opted in to receive them.
• Responsible Gaming: Monitoring gameplay activity patterns to identify members who may need support related to responsible gaming, in line with cuci2u's commitment to protecting members at risk of problem gambling.

3. Data Sharing with Third Parties

Cuci2u maintains a strictly limited policy on sharing members' personal data with third parties. In short — we do not sell, rent or share your data for any other party's commercial purposes. That said, there are a limited number of situations where data sharing is necessary and permitted.

• Payment Processors: Information required to process transactions is shared with recognised payment processors — namely Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX Malaysia's member banks. Such sharing is kept to a minimum and limited strictly to data necessary to complete the transaction. All these payment processors adhere to stringent financial security standards.
• Game Providers: Game session information is shared with third-party game providers (such as Live Casino and slots providers) as required to run the games. This sharing is limited to data necessary for game functionality and does not include full identity information.
• Legal Requirements: cuci2u may disclose personal data where required by law, court order or direction from an authority with valid legal jurisdiction. In such circumstances, cuci2u will notify the member concerned (where permitted by law) prior to disclosure.
• Technical Service Providers: Technical infrastructure providers (such as cloud hosting and cybersecurity services) that support cuci2u's operations may have limited access to data within the scope of their technical duties. All such providers are bound by strict confidentiality agreements.

4. Data Security & Protection

Cuci2u continually invests in its data security infrastructure to ensure members' personal information is always protected against unauthorised access, loss, alteration or disclosure. Below are the key security measures we have in place.

• 256-bit SSL Encryption: All communications between your device and cuci2u's servers are protected by 256-bit Secure Socket Layer (SSL) encryption. This means that data transmitted — including login credentials, transaction details and personal information — cannot be read by any party that may intercept the communication.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all cuci2u accounts and is strongly recommended. 2FA adds an extra layer of security by requiring OTP verification sent to your registered phone number each time you log in from a new device.
• 24-Hour Security Monitoring: cuci2u's security team continuously monitors the platform for suspicious activity, unauthorised access attempts and any anomalies that could indicate hacking or fraud.
• Internal Access Controls: Access to members' personal data within cuci2u's systems is restricted to staff with a legitimate need relevant to their job function. All access is logged and periodically audited.
• Regular Security Testing: cuci2u conducts regular penetration testing and security audits to identify and remediate any system vulnerabilities before they can be exploited.
• Incident Management: cuci2u has a clear incident response procedure in place. Should a data breach involving members' personal information occur, we are committed to notifying affected members within a reasonable timeframe and taking appropriate remedial action.

5. Cookies & Tracking Technologies

Cuci2u uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how the platform is used in aggregate. Below is an explanation of the types of cookies we use.

You can manage your cookie preferences through your web browser settings at any time. However, disabling mandatory cookies may affect the core functionality of the cuci2u platform, including the ability to log in and maintain a secure session. Analytics and marketing cookies can be disabled without affecting your account's core functions.

6. Your Rights as a cuci2u Member

As a registered cuci2u member, you have certain rights regarding your personal data. cuci2u is committed to respecting and facilitating the exercise of these rights in a practical manner and within a reasonable timeframe.

To exercise any of the above rights, please contact the cuci2u support team via in-platform live chat or email us at support@cuci2u.click stating the right you wish to exercise and your account details. All requests will be acknowledged within 48 hours and processed within 14 working days.

7. Data Retention Period

Cuci2u retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable legal and regulatory obligations. Below is a general guide to data retention periods by category.

• Active Account Data: For as long as your cuci2u account remains active, core personal data (name, phone number, email) will be retained to allow you to access your account and use the platform's services.
• Financial Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of seven (7) years from the date of the transaction, in line with standard industry financial compliance and anti-money laundering (AML) requirements.
• Game History Records: Game logs and history are retained for two (2) years for dispute resolution, security audits and platform improvement purposes.
• Support Communication Records: Correspondence records with the cuci2u support team are retained for three (3) years to provide ongoing context in the event of follow-up issues.
• Identity Verification Data: Identity verification documents (where requested) are retained for five (5) years following account closure, in accordance with applicable legal requirements.
• Closed Account Data: After an account is closed at a member's request, data with no legal retention obligations will be deleted or anonymised within 90 days from the date the account closure is confirmed.

8. Contact Us Regarding Privacy

Cuci2u takes every privacy and data protection query, concern and request seriously. If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of your rights as a member, here is the best way to reach us.

• Live Chat Platform: The fastest way to get help — open the cuci2u platform, click the support icon and start a live chat session. Our team is available 24 hours a day in Bahasa Melayu.
• Support Email: For privacy enquiries requiring more detailed clarification, or to submit a written data rights request, contact us at support@cuci2u.click with the subject line "Privacy Enquiry" or "Data Rights Request".
• Response Time: All privacy enquiries will receive an acknowledgement within 48 hours. Cases requiring investigation or further processing will be resolved within 14 business days from the date of acknowledgement.
• Changes to the Privacy Policy: cuci2u will notify members via platform notifications and email should any significant changes be made to this Privacy Policy. The date of the most recent update is always shown at the top of this document. Continued use of the platform after changes take effect will be considered acceptance of the updated terms.