Cuci21 Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction & Scope of Privacy Policy

Cuci21 ("we", "our platform") is an online sports betting and casino platform operating in Malaysia. We regard the protection of member personal data as our foremost responsibility, not merely a legal obligation.

This Privacy Policy applies to all users who access or use the cuci21 platform, including the website, mobile app, and all related services. It clearly explains what information we collect, why we need it, how it is used, and your rights as the owner of that data.

Cuci21 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All personal data processing we carry out has a lawful basis, is necessary, and is limited strictly to what is required to deliver the best possible service to our members across Malaysia.

2Personal Information We Collect

Cuci21 only collects information that is strictly necessary to deliver a safe, compliant, and high-quality service. The following are the categories of information we collect:

Cuci21 never request or store irrelevant information such as your bank account password, full credit card number, or other sensitive details not required for platform operations.

3How We Use Your Personal Data

Every piece of data we collect is used for a clear and legitimate purpose. cuci21 uses members' personal information for the following purposes:

• Account Management: Creating and managing your cuci21 account, processing your registration, and verifying your identity through the required KYC process.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and other Malaysian payment methods, as well as managing withdrawals securely and accurately.
• Platform Security: To detect and prevent fraud, money laundering, unauthorised access, and any suspicious activity that could compromise your account or funds.
• Responsible Gaming: To monitor gameplay patterns in order to identify signs of problem gambling and provide appropriate support to members who need it.
• Communications: To send account notifications, transaction confirmations, security updates, and relevant promotional information (with your consent).
• Service Improvement: Analysing how members use the cuci21 platform to improve our products, develop new features, and enhance the overall user experience.
• Legal Compliance: Fulfilling obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and directives from relevant regulatory bodies.

4Information Sharing & Disclosure

Cuci21 does not sell, rent, or trade members' personal data. However, in certain limited circumstances, we may need to share information with the following parties:

• Payment Service Providers: Required transaction information is shared with approved payment processors such as DuitNow, FPX, and Malaysian digital wallet providers to process your deposits and withdrawals.
• Technology Service Providers: Technical partners supporting cuci21's platform operations (server hosting, cybersecurity, analytics) are bound by strict confidentiality agreements.
• Malaysian Authorities: cuci21 fully complies with Malaysian legal requirements. Information will be disclosed to relevant authorities such as the PDRM, BNM, or the courts where required by law or court order.
• Regulatory Authority: Information required for compliance and audit purposes by the relevant regulatory authorities.

All third parties we work with are required to uphold data protection standards equivalent to or higher than those of cuci21 itself. They are not permitted to use your data for any purpose other than the specific purpose agreed upon.

5Data Security & Protection Measures

Cuci21 continuously invests in best-in-class security infrastructure to ensure your personal and financial data is protected at all times. Key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and cuci21's servers is protected by 256-bit TLS/SSL encryption — the same standard used by Malaysia's leading banks.
• Data-at-Rest Encryption: Sensitive data stored in cuci21's databases is encrypted using robust AES-256 algorithm.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their accounts.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and block any unauthorised access attempts or suspicious activity.
• Internal Access Controls: Only specifically authorised cuci21 staff may access member personal data, and only to the extent necessary to carry out their duties.
• Regular Security Audits: cuci21 conducts regular internal security audits and vulnerability assessments by independent security experts.

6Cookies & Tracking Technologies

Cuci21 uses cookies and similar tracking technologies to enhance the user experience, maintain the security of login sessions, and understand how members interact with our platform.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of certain areas of the cuci21 platform.

7Data Retention & Deletion

Cuci21 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law.

• Active Account Data: Retained for the duration your account remains active on the cuci21 platform.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysia's tax and anti-money laundering legal requirements.
• KYC Data (Identity Verification): Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for 3 years for reference and dispute resolution purposes.
• Security Log Data: Retained for 12 months for security incident investigation purposes.

Once data is no longer needed and the mandatory retention period has expired, cuci21 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

8Your Privacy Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data subject have the following rights, which you may exercise at any time:

To exercise any of the rights above, please submit a written request to support@cuci21.bet by stating the right you wish to exercise and sufficient information to verify your identity. cuci21 will respond within 30 business days.

9Children's Data Protection

The cuci21 platform is strictly for individuals aged 18 and above. cuci21 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

Should we discover that a minor's personal data has been collected without proper age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered on cuci21 are urged to contact us immediately at support@cuci21.bet.

10Changes to This Privacy Policy

Cuci21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or service improvements. Members will be notified of any material changes through:

• A prominent notice will be displayed on the cuci21 platform homepage at least 14 days before any changes take effect.
• A notification email will be sent to your registered email address if any changes affect members' key rights.

The "Updated" date at the top of this page will always reflect the date of the latest revision. We encourage you to review this Privacy Policy periodically. Your continued use of the cuci21 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci21 handles your personal data, please reach us through the following channels:

• Email: support@cuci21.bet
• Live Chat: Available 24/7 directly within the cuci21 platform — response within 5 minutes
• Service Language: Bahasa Malaysia & English

We are committed to resolving any privacy concerns within a reasonable timeframe and in a fair manner. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.