Cuci1000 Privacy Policy – Personal Data Protection for Malaysian Users

Cuci1000 is an online sports betting and casino platform serving users in Malaysia. We understand that your personal data is a trust placed in us, and we take that responsibility very seriously. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, and protection of your personal data as a cuci1000 user.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the principal legislation governing personal data protection in Malaysia. cuci1000 is committed to complying with all provisions of this law as well as international best practices in data privacy protection.

By registering a cuci1000 account or using any of our services, you consent to the collection and processing of your personal data in accordance with the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the cuci1000 platform.

Cuci1000 only collects personal data that is strictly necessary to provide our services safely, efficiently, and responsibly. We do not collect excessive data that is unrelated to platform operations.

2.1 Identity & Account Data

• Full name as stated on your Malaysian identity card or passport
• National identity card number (MyKad) or passport number for identity verification
• Date of birth to verify the minimum age requirement of 18 years
• Email address for account communications and important notifications
• Phone number registered in Malaysia for verification and support
• Username and password that you created during registration

2.2 Financial & Transaction Data

• Payment method details used – Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX account (Maybank2u, CIMB Clicks)
• Deposit and withdrawal transaction history, including amounts and timestamps
• Betting records and gaming activity for security and compliance purposes

2.3 Technical & Usage Data

• IP address and device information used to access cuci1000
• Login records including time, date, and general geographic location
• Web browser type and operating system
• Cookie data and similar tracking technologies (see Section 8)

Cuci1000 collects personal data through several distinct channels, all within the scope of the services we provide to you:

3.1 Directly from You

The primary way we collect your data is through your direct interaction with the cuci1000 platform — including during new account registration, identity verification (KYC), deposit or withdrawal transactions, when you contact our customer support, and when you submit feedback or complaint forms.

3.2 Automatically During Platform Use

When you browse the cuci1000 website or use our platform, the system automatically records certain technical information, including your IP address, device type and browser, pages visited, session time and duration, and relevant cookie data.

3.3 From Authorised Third Parties

In certain cases, cuci1000 may receive your information from authorised third parties, including identity verification service providers, payment platforms you use (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX), and accredited fraud prevention agencies.

Cuci1000 uses the personal data we collect solely for legitimate and transparent purposes. We will not use your data for any purpose not stated in this document without first obtaining your consent.

• Service Provision: Processing account registration, managing deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, and other local payment methods, and ensuring a seamless gaming experience at cuci1000.
• Identity Verification & Security: Verifying your identity during registration and financial transactions, and detecting and preventing fraud, money laundering, and other unlawful activities.
• Legal Compliance: Fulfilling cuci1000's obligations under applicable Malaysian laws including PDPA 2010, anti-money laundering (AML) requirements, and regulatory body directives.
• Service Communications: Sending important notifications about your account, transactions, policy changes, and security information you need to be aware of.
• Marketing & Promotions (with consent): Presenting cuci1000 offers, bonuses, and promotions that may interest you – only if you have given consent to receive marketing communications.
• Platform Enhancements: Analysing usage patterns in aggregate and anonymised form to improve the overall user experience at cuci1000.
• Customer Support: Handling your enquiries, complaints, and support requests efficiently and effectively.

Cuci1000 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in operating the platform, we need to share certain data with a limited and strictly controlled set of third-party categories:

5.1 Authorised Service Providers

Cuci1000 works with trusted service providers that help us operate the platform, including identity verification and KYC providers, payment processors such as Touch 'n Go, DuitNow, GrabPay, Boost and ShopeePay, cloud and technical infrastructure providers, and gaming software providers such as Pragmatic Play and PG Soft. All providers are bound by strict data protection agreements.

5.2 Legal Requirements & Authorities

Cuci1000 may be required to disclose your personal data to Malaysian authorities when mandated by law, court order, or directive from a legitimate regulatory body. This includes investigations into financial crime, money laundering, or public safety threats.

Protecting your personal data is cuci1000's foremost technical and operational priority. We continually invest in the latest security infrastructure to ensure your data remains protected at all times.

• 256-bit SSL Encryption: All communications between your web browser and cuci1000 servers are encrypted using 256-bit SSL/TLS technology — the highest security standard adopted by leading financial institutions worldwide.
• Data at Rest Encryption: Sensitive data stored in cuci1000's databases is encrypted using modern encryption algorithms for layered protection.
• Strict Access Controls: Only cuci1000 staff with a legitimate business need may access user personal data, and all such access is logged and regularly audited.
• 24/7 Monitoring: Our continuous security monitoring system detects and alerts us to any suspicious activity or unauthorised access attempts.
• Regular Security Audits: cuci1000 conducts independent security audits on a regular basis to identify and address vulnerabilities before they can be exploited.
• Segregated Fund Storage: Player funds are held in segregated protected accounts and are never commingled with cuci1000's operational funds.

While we take all reasonable measures to protect your data, no security system is completely infallible. You also play an important role by keeping your cuci1000 account password and login credentials confidential.

Cuci1000 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable Malaysian law.

• Identity & Account Data: Retained for the duration of your active account, plus an additional seven years after account closure for legal compliance and financial record purposes.
• Financial Transaction Data: Retained for seven years in accordance with Malaysian financial and tax regulatory requirements.
• Technical Log Data: Retained for 90 days, then automatically deleted or anonymised.
• Cookie Data: Depending on the cookie type – session cookies are deleted when you close your browser, while persistent cookies have their own expiry period (see Section 8).
• Support Communication Data: Retained for two years after issue resolution for reference and service quality purposes.

When your personal data is no longer needed, cuci1000 will securely delete or anonymise it using accredited data deletion procedures.

Cuci1000 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the cuci1000 website.

We use several categories of cookies, each serving a different purpose. You can manage cookie settings through your web browser preferences, though disabling certain cookies may affect the functionality of the cuci1000 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and cuci1000's policies, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct or update that information.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data. However, this may not be fully fulfilled where there is a legal obligation to retain such data.
• Right to Withdraw Consent: You may withdraw your consent to certain data processing, particularly for marketing purposes, at any time.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Data Portability Rights: You may request your personal data in a machine-readable format for the purpose of transferring it to another service.

To submit any of the above requests, please contact the cuci1000 Privacy team by email at support@cuci1000.ws with the subject line "Privacy Rights Request". We will verify your identity before processing the request.

If you have any questions, concerns, or complaints about how cuci1000 handles your personal data, please do not hesitate to get in touch. We are committed to addressing every enquiry seriously and thoroughly.