Cuci33 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by cuci33 ("we", "platform") and applies to all individuals ("Members", "you") who register for, use, or access the services provided through the cuci33 platform at the website cuci33.best and any related channels operated under the cuci33 brand.

Cuci33 takes your privacy very seriously. We are committed to protecting and respecting the privacy of all our members in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and international best-practice standards in data protection. This Policy clearly and transparently explains what we do with your personal information, why we need it, and how it is protected.

We encourage you to read this Policy carefully and to reach out if any part is unclear or if you have concerns about how cuci33 handles your personal data. Our support team is available to assist you via live chat, 24/7.

Cuci33 collects the personal data necessary to deliver our services safely, efficiently, and in compliance with legal requirements. We only collect data that is genuinely relevant and not excessive for the stated purposes. The following are the categories of data we collect:

2.1 Account Registration Information

When you register a cuci33 account, we collect your full name as it appears on your official Malaysian documents (MyKad or passport), an active Malaysian mobile number for OTP verification, a valid email address, and the password you set (stored in encrypted form — we never store passwords in plain text).

2.2 Identity Verification Information

To meet anti-money laundering legal requirements and to protect all cuci33 members from fraud, we may request a digital copy of your identification document — typically your Malaysian MyKad number or passport — for identity verification purposes. These documents are stored securely and accessed only by authorised staff strictly for legal compliance purposes.

2.3 Financial Information

To facilitate deposit and withdrawal processing, cuci33 stores your Malaysian bank account details (bank name, account number) for the purpose of paying out winnings. We do not store your full credit or debit card details — all transactions via e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed through certified, secure third-party payment gateways.

2.4 Platform Usage Data

Cuci33 automatically records your platform activity data, including game and betting history, deposit and withdrawal transaction records, login session times and duration, games accessed, and your account setting preferences. This data is used to maintain your account records, deliver better customer support, and meet legal reporting requirements.

2.5 Technical Data

Each time you access cuci33, our systems automatically record your device's IP address, web browser type and version, device operating system, screen resolution, and other relevant technical data. This data is used for security purposes, detection of unauthorised access attempts, platform optimisation, and overall technical performance analysis of cuci33.

Cuci33 uses collected personal data solely for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your consent. The primary purposes for which data is used are as follows:

• Account Management: Creating and maintaining your cuci33 account, processing registration, verifying your identity and managing your account settings.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as securely and accurately processing winnings withdrawals to your Malaysian bank account.
• Customer Support: Providing relevant and accurate assistance when you reach out to the cuci33 support team via live chat or WhatsApp in Bahasa Melayu.
• Platform Security: Detecting and preventing fraud, money laundering, duplicate account use, and any activity that violates cuci33's Terms & Conditions.
• Legal Compliance: Meeting statutory reporting obligations, complying with directives from relevant Malaysian authorities, and carrying out checks required by law.
• Service Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the performance, design, and user experience of the cuci33 platform.
• Communications: Sending you important account notifications, security updates, or changes to cuci33's terms of service via SMS or email.

Cuci33 processes your personal data on valid legal grounds as provided under the Personal Data Protection Act 2010 (PDPA) Malaysia. These grounds include:

4.1 Consent

For certain categories of data, we process your data on the basis of consent given at the time of cuci33 account registration or when you expressly agree to this Privacy Policy. You have the right to withdraw that consent at any time, though doing so may affect our ability to continue providing services to you.

4.2 Contract Performance

Certain data processing is necessary to fulfil the service contract between you and cuci33 — including processing deposits, withdrawals and managing your account. Without this processing, cuci33 cannot deliver its services to you.

4.3 Legal Obligations

Some data processing is mandatory to meet cuci33's legal obligations, including compliance with anti-money laundering (AML) requirements and reporting to the relevant Malaysian authorities where required by law.

Cuci33 does not sell, rent or trade members' personal data to any third party for marketing or other commercial purposes. However, in the limited circumstances outlined below, we may need to share your data with certain parties:

5.1 Trusted Service Providers

Cuci33 works with carefully selected third-party service providers to support our platform operations — including payment gateway providers for processing deposits and withdrawals, Live Casino providers such as Evolution Gaming and Pragmatic Play Live, and technical infrastructure service providers. All such providers are contractually bound to protect your data to a standard no less than cuci33's own, and they are permitted to use your data only for specific, defined purposes.

5.2 Legal Requirements

Cuci33 may be required to disclose members' personal data to Malaysian authorities or other legal bodies when mandated by law, court order, or a directive from a competent authority. In such cases, we will disclose only the minimum information necessary and will notify you of the disclosure to the extent permitted by law.

5.3 Business Transfers

In the event of any merger, acquisition, or transfer of cuci33's assets, member personal data may be transferred as part of the business assets. In such circumstances, we will ensure that the receiving party is contractually bound to data protection obligations no less stringent than those set out in this Privacy Policy, and we will notify you before any transfer takes place.

Protecting your personal data from unauthorised access, misuse, loss or destruction is cuci33's highest priority. We continually invest in the latest security infrastructure and procedures to ensure your data remains safe at all times.

6.1 Technical Security Measures

All data transmitted between your device and cuci33's servers is protected by 256-bit Transport Layer Security (TLS) encryption. Member passwords are stored in an irreversible hashed format using strong cryptographic hashing algorithms. cuci33's servers are safeguarded by multiple layers of firewalls, intrusion detection systems and 24/7 security monitoring. All financial transactions via Touch 'n Go, GrabPay, DuitNow or FPX are processed through secure, encrypted channels.

6.2 Organisational Security Measures

Access to cuci33 members' personal data is restricted to staff with a legitimate business need, based on the principle of least privilege. All cuci33 personnel with access to personal data undergo regular data protection training and are bound by strict confidentiality agreements. Internal security audits are conducted on a regular basis to ensure compliance with established security procedures.

6.3 Incident Response

In the event of a data security breach that may affect cuci33 members' personal data, we have established incident response procedures in place. We will take immediate steps to contain the breach and will notify affected members within a reasonable timeframe, along with information on the actions taken and what you can do to protect yourself.

Cuci33 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable law. The following are the general retention period guidelines we follow:

• Active Account Data: For as long as your cuci33 account remains active, and for a reasonable period following account closure to allow for the resolution of any disputes that may arise.
• Financial Transaction Records: At least seven (7) years from the date of the transaction, in line with Malaysia's accounting and anti-money laundering legal requirements.
• Identity Verification Records: For the duration required by applicable compliance laws, which is generally a minimum of five (5) years.
• Technical Logs: Typically retained for 90 days for technical troubleshooting and security purposes, unless a longer period is required by specific investigative needs.
• Marketing Data (where applicable): Until you withdraw your consent to receive communications from cuci33, or until you request the deletion of that data.

Once the relevant retention period has elapsed, cuci33 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or re-identified.

As a cuci33 member and as a data subject under applicable data protection law, you hold important rights regarding your personal data, all of which we fully respect:

Cuci33 uses cookies and similar tracking technologies to enhance the user experience on our platform, ensure technical functions operate correctly, and understand how members interact with our platform for the purpose of continuous improvement.

9.1 Types of Cookies We Use

• Essential Cookies: Cookies required for the basic functionality of the cuci33 platform — such as maintaining your login session and enabling smooth navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Cookies that allow cuci33 to remember your preferences — such as language, display settings, and game preferences — to deliver a more personalised experience.
• Analytics Cookies: cuci33 uses aggregated analytics data (with no individual identification) to understand platform usage patterns and make data-driven improvements.
• Security Cookies: Cookies that help cuci33 detect and prevent suspicious login attempts, fraud, and any security threats to member accounts.

9.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note, however, that disabling certain cookies — especially essential ones — may affect the functionality or usability of the cuci33 platform.

Cuci33 services are not intended for individuals under the age of 18. cuci33 does not knowingly collect or process personal data from minors. All prospective members are required to confirm that they are at least 18 years of age during the registration process.

If we determine that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that information and close the associated account. If you believe that a minor has registered an account on cuci33 using false information, please contact us immediately at support@cuci33.best so that we can take the appropriate action.

Cuci33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, changes in applicable data protection laws, or changes in cuci33 platform services and features. Any material amendments to this Policy will be communicated to you through one of the following means:

• A clear notice will be displayed on the cuci33 platform's homepage or login page before any amendments take effect.
• Notification via email to the address registered to your cuci33 account, or via SMS to your Malaysian mobile number.
• An in-platform notification pop-up on cuci33 the next time you log in after an amendment is published.

It is your responsibility to review this Privacy Policy periodically. The "Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the cuci33 platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns or requests regarding this Privacy Policy or how cuci33 handles your personal data, we encourage you to reach out to us directly. Our privacy team is committed to addressing all enquiries seriously and in a timely manner.

You may contact cuci33 through the following channels:

• Email: support@cuci33.best — for detailed privacy inquiries or requests relating to your data rights.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the cuci33 platform — for general inquiries and immediate assistance in Bahasa Melayu.
• WhatsApp: Available for communications relating to your privacy and account security at cuci33.

Cuci33 values the trust you place in us by using this platform. Protecting your privacy and keeping your data secure is a commitment we never take lightly. Thank you for being a trusted cuci33 member.