Cuci66 Privacy Policy – Malaysia Member Data Protection

Cuci66 is an online gaming platform dedicated to providing a safe and responsible digital entertainment experience for members in Malaysia. We understand that your trust depends on how we handle the personal information you share with us.

This Privacy Policy applies to all individuals who register as cuci66 members, visit our website without registering, use the cuci66 mobile app, or contact our support team through any of the provided communication channels.

By using the cuci66 platform, you agree that we may collect and process your personal information as described in this policy. If you disagree with any part of this policy, please contact us before continuing to use the platform.

Cuci66 only collects data that is strictly necessary to provide safe, responsible, and high-quality services. Below are the categories of data we collect and the purposes for collection:

For the process KYC (Know Your Customer), you will be required to upload a photo or scanned copy of your identity card, proof of current address (not older than 3 months), and in certain cases, a selfie holding your identity card. All documents are stored in encrypted format and are only accessible by authorised personnel.

Every piece of data we collect has a clear and lawful purpose. Here is how cuci66 uses your personal information:

1. Identity Verification & KYC: Verifying that you meet the minimum age requirement and are eligible to use cuci66's services in accordance with applicable regulations.
2. Financial Transaction Processing: Processing deposits, withdrawals, bonus payments, and all financial activities securely and accurately.
3. Account Maintenance: Managing your member account, game records, transaction history, and personal configurations within the platform.
4. Fraud Prevention & AML: Detecting, investigating, and preventing fraud, money laundering, and other illegal activities that may occur through the platform.
5. Customer Support: Providing technical assistance, resolving disputes, and responding to your enquiries effectively.
6. Analytics and Improvement: Analysing platform usage patterns to improve the overall gaming experience, technical performance, and system security.
7. Marketing Communications: Sending information about promotions, bonuses, and platform updates — only to members who have given consent to receive such communications.
8. Legal Compliance: Fulfilling legal obligations, complying with regulatory authority directives, and maintaining records required by applicable regulations.

Cuci66's data security infrastructure is designed to withstand the latest cyber threats while complying with international data protection standards. The key security measures we implement are as follows:

• Encryption in transit: All data is transmitted using TLS 1.3 with SSL certificates verified by recognized third parties.
• Encryption at rest: Sensitive data stored in the database is protected with AES-256 encryption.
• Internal access controls: Only authorised staff with a legitimate business need may access member data, and every access is automatically logged.
• Security auditing: Penetration testing is conducted by an independent third party at least once a year.
• Continuous monitoring: The Security Information and Event Management (SIEM) system monitors platform activity 24 hours a day, 7 days a week.

Data Retention Period: Active account data is retained for the duration of active membership. Once an account is closed, transaction records and KYC data are kept for a minimum of 7 years to meet Malaysia's AML and tax legal requirements. Data that is no longer needed is securely deleted using a multi-pass overwrite method.

Cuci66 does not share members' personal data with external parties except in the limited situations described below. In all cases, data sharing is subject to strict confidentiality agreements and covers only the minimum data required:

• Payment Service Providers: Authorized payment processors such as FPX, Touch 'n Go eWallet, GrabPay, and Boost receive transaction data necessary to process your deposits and withdrawals.
• KYC Providers: Recognized third-party identity verification companies may receive your identification data for automated verification during the KYC process.
• Game Providers: Game studios and game software providers partnering with cuci66 may receive non-personally identifiable session IDs for game operation purposes.
• Legal Authorities: Cuci66 will disclose data when required by a court, law enforcement agency, or regulatory body with valid jurisdiction.
• Business Transfer: If cuci66 undergoes a merger or acquisition, member data will be transferred to the acquiring entity with equivalent privacy protections in place.

Cuci66 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your login session. The types of cookies we use are:

• Session Cookies (Required): Required to maintain your login session, save language preferences, and ensure secure navigation. These cookies cannot be disabled without affecting core platform functionality.
• Preference (Functional) Cookies: Storing your personal configurations such as self-set betting limits, interface layout, and notification settings.
• Analytics Cookies: Helps us understand how members use the platform for product improvement purposes. Analytics data is collected in aggregate and cannot be individually identified.
• Security Cookies: Used to detect suspicious activity, unauthorised login attempts, and to protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect your ability to log in or use certain features of the cuci66 platform.

Under Malaysia's PDPA and the cuci66 privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the cuci66 Data Protection Officer (DPO) via email [email protected]. We will respond within 30 working days. Identity verification may be required before a request is processed.

Cuci66 services are exclusively for individuals aged 18 years and above. We do not intentionally collect or store any personal information from minors.

All registrations go through a strict age verification process, including KYC checks using official documents. Should we discover that a child's personal data has been inadvertently collected, we will take immediate action to delete that data and close the relevant account.

In the course of its operations, cuci66 may need to process or store some of your data on servers located outside Malaysia, specifically for data backup, cloud services, and international KYC providers.

All cross-border data transfers are carried out with protective measures equal to or exceeding the standards required by Malaysia's PDPA, including:

• Legally binding data processing agreements (DPA) with all overseas service providers.
• Standard contractual clauses requiring a level of data protection equivalent to Malaysia's PDPA.
• End-to-end data encryption before and during cross-border transfer.

Cuci66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technologies in use. Every amendment will include a clear effective date at the top of this document.

For material or significant amendments, we will:

• Sending email notifications to all registered members at least 14 days before the amendment takes effect.
• Displaying a clear notice on the cuci66 platform's home page for the duration of the notice period.
• Providing a summary of key changes in notifications so you can easily assess their impact.

Your continued use of the cuci66 platform after an amendment's effective date constitutes your acceptance of the updated policy. If you disagree with the amendments, you have the right to close your account before the effective date by contacting our customer support.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci66 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

We are committed to responding to all privacy-related enquiries within 5 working days and resolve formal complaints within 30 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.