Privacy Policy cuci3 – Your Personal Data Protection

1 Introduction

Welcome to the cuci3 Privacy Policy. This document explains how cuci3 ("we", "Platform", or "Company") collects, uses, discloses, and protects your personal information when you use the cuci3.com website and the cuci3 mobile app.

We understand that privacy is a fundamental right of every individual. Your trust is our most valuable asset. We are therefore committed to ensuring that all information you provide to us is handled with full responsibility, transparency, and in accordance with the laws applicable in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

By registering or continuing to use the cuci3 platform, you agree to the terms set out in this Privacy Policy. Please read this document carefully. If you do not agree with any part of this policy, you have the right to discontinue using our services.

2 Data We Collect

Cuci3 collects various types of information depending on how you interact with our platform. In general, we only collect information that is strictly necessary to provide you with a safe, seamless, and quality service.

A) Information You Provide Directly

• Registration Information: Full name, date of birth, identification card or passport number, email address, phone number, and account password.
• KYC Information (Identity Verification): Copy of identity document, selfie with document, proof of residential address such as a utility bill or bank statement.
• Financial Information: Bank account number, account holder name, and digital wallet details (Touch 'n Go eWallet, GrabPay) registered for deposit and withdrawal purposes.
• Communications: Any messages, complaints, or feedback you send to our support team via live chat or email.

B) Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type, and language settings.
• Usage Data: Pages visited, session duration, games played, total wagering amounts, and activity patterns within the platform.
• Cookie Data: Session information, user preferences, and authentication tokens stored via cookies and your browser's local storage.
• Location Data: General geolocation information based on your IP address for regional compliance purposes.

C) Data Type & Collection Purpose Schedule

3 How We Use Your Data

Every piece of information we collect has a clear and lawful purpose. cuci3 does not process your personal data unless there is a solid legal basis for doing so. The following are the primary purposes for which your data is used:

Service Operations

• Creating and managing your account on the cuci3 platform.
• Processing deposits and withdrawals securely and accurately.
• Verifying your identity through the KYC process to comply with legal requirements.
• Providing efficient and responsive customer support services.
• Sending important notifications related to your account, transactions, and security.

Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Monitoring suspicious account activity and taking appropriate protective action.
• Complying with reporting obligations to the relevant authorities in Malaysia when required by law.

Platform Improvements

• Analysing usage patterns to improve interface design and user experience.
• Running A/B tests to optimise platform features.
• Developing new products and services better suited to members' needs.

Marketing & Promotions (Subject to Consent)

• Sending you information about relevant promotions, bonuses, and the latest offers.
• Personalising your platform experience based on your preferences and gaming history.
• You may withdraw your marketing consent at any time through your account settings or by contacting customer support.

4 Data Sharing

Cuci3 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating our services, there are specific situations where data may need to be shared with trusted parties:

Third-Party Service Providers

We share necessary data with service partners who help us operate the platform, including:

• Payment Processors: FPX, DuitNow, TNG eWallet, GrabPay, and other payment gateway providers to process your financial transactions.
• Game Providers: Game content providers required to deliver the gaming experience to you.
• KYC Services: Digital identity verification providers that help us securely verify your documents.
• Cloud Services: Server infrastructure providers that host the cuci3 platform to the highest security standards.

All third-party service providers are bound by strict data protection agreements and are permitted to use your data solely for the specified purposes.

Authorities & Legal Requirements

Cuci3 may be required to disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when mandated to do so by applicable Malaysian law, court order, or to protect the rights and safety of all parties.

5 Cookies & Tracking Technologies

The cuci3 platform uses cookies and similar tracking technologies to enhance your experience, secure your login session, and analyse platform usage. The following are the types of cookies we use:

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login sessions, access control, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display format, and game settings to enhance your browsing comfort.
• Analytics Cookies: Helping us understand how members use the platform through aggregated and anonymised data for service improvement purposes.
• Security Cookies: Detecting suspicious activity, preventing fraud, and protecting your active session from unauthorised access.

Manage Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may limit your access to certain key features of the cuci3 platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

6 Data Security

Protecting your personal data is cuci3's highest priority. We continuously invest in the latest security infrastructure and industry best practices to ensure your information is always safeguarded against cyber threats.

Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser and the cuci3 servers are fully encrypted using the latest TLS 1.3 protocol.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 standards.
• Two-Factor Authentication (2FA): An additional security layer available to all member accounts to prevent unauthorised access.
• 24/7 Monitoring: A round-the-clock security monitoring system that detects and responds to any threats in real time.
• Regular Penetration Testing: cuci3 conducts regular security audits by independent experts to identify and patch any system vulnerabilities.

Organisational Measures

• Access to members' personal data is granted only to staff who require it to perform their duties (need-to-know principle).
• All staff with access to sensitive data undergo regular security and data privacy training.
• Any data security breach will be promptly investigated and you will be notified if your data is affected.

7 Data Retention Period

Cuci3 retains your personal data only for as long as needed to fulfil the purpose for which it was collected, or as required by Malaysian law. We do not keep data longer than necessary.

Upon expiry of the retention period, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

8 Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by cuci3:

• Right of Access: You have the right to request a copy of your personal data we hold and to obtain information on how it is processed.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request a correction be made promptly.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data, subject to any legal obligations binding us to retain it.
• Right to Withdraw Consent: You may withdraw consent for data processing for marketing purposes at any time without affecting any processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes such as direct marketing.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider where applicable.

How to Submit a Request

To submit any request regarding your privacy rights, please contact the cuci3 support team via live chat available 24/7 on our platform. We will process your request within 14 working days and keep you informed of the progress or any additional information required.

9 Children's Privacy

The cuci3 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children or individuals below the legal age in Malaysia.

If we find that we have collected personal data from an individual under the age of 18 without verified parental or guardian consent, we will take immediate steps to delete that data and close the relevant account.

If you believe that a minor has registered an account at cuci3, please contact our support team immediately so we can take the appropriate action.

10 Privacy Policy Amendments

Cuci3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service features. We will notify you of any material changes through:

• In-account notifications upon your next login.
• Email to the address registered with your account.
• A clear notice on the platform's home page stating the effective date.

Your continued use of the cuci3 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. You are encouraged to review this page periodically.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week directly on the cuci3 platform — the fastest way to get help.
• Email: [email protected] – we aim to respond within 24 hours on business days.
• FAQ Section: Visit the FAQ us for answers to frequently asked questions about privacy and account security.

For formal complaints relating to personal data protection that cannot be resolved directly with us, you may contact the Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for enforcing the PDPA in Malaysia.