Cuci888 Privacy Policy – Member Data Security in Malaysia

1Introduction & Scope of Privacy Policy

Cuci888 ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy is designed to give you a clear and transparent understanding of how your personal data is managed — from the moment you browse our website to every transaction you make.

This policy applies to all users of the cuci888 platform — whether you are simply browsing the website without registering, or an active member who regularly uses our gaming services. It covers all channels we operate, including the official website, mobile app, and any associated integrated platforms.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your data is processed lawfully, fairly, and transparently at all times. If you have any questions about the content of this policy, our team is ready to assist through the available support channels.

2Types of Information We Collect

Cuci888 collects your personal information through several means depending on how you interact with our platform. The main categories of data we collect are as follows:

Information You Provide Directly:

• Full name as stated on your identification card (MyKad).
• Date of birth and ID card number for age verification.
• Active Malaysian email address and mobile number.
• Current residential address.
• Bank account details and account numbers for deposit and withdrawal purposes.
• Copies of identification documents (MyKad, bank statements) during the KYC process.

Automatically Collected Information:

• IP address and estimated geographic location.
• Device type, operating system, and web browser version used.
• Pages visited, session duration, and navigation patterns within the platform.
• Gaming activity logs including bets, wins, and transaction history.
• Cookie data and device identifiers to enhance the user experience.

3How We Use Your Information

Every piece of data we collect has a specific and legitimate purpose. cuci888 does not use your data for any purpose unrelated to platform operations or legal compliance requirements. The primary purposes for which your data is used are as follows:

You may withdraw consent to receive marketing communications at any time by updating your notification settings in your account or by contacting the cuci888 support team.

4Data Sharing with Third Parties

Cuci888 does not sell, rent, or transfer your personal data to third parties for independent marketing purposes. However, in the course of operating the platform, we may share your data with certain parties in the following limited situations:

• Payment Providers: Transaction information is shared with payment processors such as FPX, e-Wallet providers, and banks to facilitate deposits and withdrawals.
• Game Providers: Minimum required game data is shared with third-party game platform providers integrated within the cuci888 ecosystem.
• Regulatory Authorities: cuci888 will disclose required information to legal or regulatory authorities when mandated to do so under Malaysian law.
• IT Service Providers: Our technical infrastructure providers who have signed strict data confidentiality agreements.

All third parties with whom we share data are required to comply with data protection standards equivalent to or exceeding those set by Malaysia's PDPA. cuci888 is not responsible for the privacy practices of third parties that use data beyond the agreed scope.

5Cookies, Tracking & Similar Technologies

Cuci888 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and deliver more relevant content to you. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform operations such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform so we can improve its functionality and interface.
• Functional Cookies: Saving your preferences such as language, display settings, and login information you have permitted us to remember.
• Analytics Cookies: Collecting anonymous statistical data on platform traffic for cuci888's internal improvement purposes.

You can manage or block cookies through your web browser settings. Please note, however, that blocking essential cookies may affect certain features of the cuci888 platform, such as the ability to log in smoothly.

6Data Security Measures

Protecting your personal data is a responsibility we take extremely seriously. cuci888 implements multiple layers of technical and organisational security to prevent unauthorised access, data loss, or data breaches:

• Data in Transit Encryption: All communication between the platform and your browser is protected by TLS 1.3 protocol with AES-256 encryption.
• Stored Data Encryption: Sensitive information such as bank details and KYC documents are stored in encrypted format on protected servers.
• Internal Access Controls: Only staff with specific authorization may access sensitive member data, and every access is recorded in an audit log.
• 24/7 Monitoring: Our systems are continuously monitored to detect and respond to any suspicious activity or intrusion attempts.
• Regular Penetration Testing: The cuci888 platform undergoes regular independent security testing to identify and address any technical vulnerabilities.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security on their account.

7Your Rights as a Data Subject

Under Malaysia's PDPA and the cuci888 privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the cuci888 privacy team via email at [email protected]. We will process your request within 14 business days.

8Data Retention Period

Cuci888 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. General data retention guidelines are as follows:

• Active account data: Retained for as long as your account is active and in use.
• Data after account closure: Transaction records and KYC information are retained for a minimum of 7 years in compliance with Malaysia's anti-money laundering (AML) legal requirements.
• Customer support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and analytics data: Retained for 13 months from the date of collection.
• Marketing data: Retained until you withdraw consent or request deletion.

Once the retention period has expired or a valid deletion request has been received and processed, your data will be permanently deleted or anonymised from our systems.

9Changes to This Privacy Policy

Cuci888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Whenever we make significant changes, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a notice on the website or sending email notifications to registered members if the changes are material.
• Retaining older versions of the privacy policy for your reference upon request.

Your continued use of the cuci888 platform after changes are published will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed of the latest updates.

10Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci888 handles your personal data, you may reach us through the following channels:

• Privacy Email: [email protected]
• Live Chat Support: Available 24/7 via the chat icon at the corner of the cuci888 platform.
• General Support Email: [email protected]

Our privacy team will review and respond to every enquiry within 14 business days. For more complex complaints requiring in-depth investigation, we will keep you informed of the investigation's progress within the same timeframe.

If you are not satisfied with our response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia (PDPC) through the official channels designated by the Ministry of Communications and Digital Malaysia.