cuci365 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by cuci365 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at cuci365.org (the "Platform"). It governs the collection, use, storage, and disclosure of personal data belonging to individuals who register, access, or interact with the cuci365 Platform ("you", "User", "Player").

cuci365 processes personal data in accordance with applicable data protection legislation and in a manner consistent with internationally recognised privacy principles, including those set out by the Personal Data Protection Act 2010 (PDPA) of Malaysia. We are committed to ensuring that your personal data is handled responsibly, transparently, and securely at all times.

This Policy should be read together with our Terms & Conditions and Responsible Gaming policy. By creating a cuci365 account or continuing to use our Platform, you consent to the data practices described in this Policy.

2. Data We Collect

cuci365 collects personal data in the following categories depending on how you interact with our Platform:

2.1 Registration & Identity Data

• Full legal name as appearing on your government-issued identification document
• Date of birth (used to verify the mandatory 21+ age requirement)
• Email address and mobile phone number
• Residential address, including postcode and state within Malaysia
• Username and encrypted account password
• Copies of identity documents (MyKad, passport) submitted for KYC verification

2.2 Financial & Transaction Data

• Payment method identifiers (e.g., Touch n Go eWallet account reference, bank account details linked to FPX, Boost wallet ID)
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used
• Account balance history and bonus redemption records

2.3 Usage & Technical Data

• IP address, device type, operating system, and browser type at the time of login and gameplay
• Session duration, pages visited, and game activity logs
• Betting history, wagering patterns, and game outcome records
• Cookie and tracking data as described in Section 8

2.4 Communications Data

• Content of live chat support conversations
• Email correspondence with the cuci365 support team
• Responses to surveys or feedback forms if voluntarily completed

3. How We Use Your Data

cuci365 uses the personal data we collect for the following purposes:

4. Legal Basis for Processing

cuci365 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is required to fulfil our obligations under the cuci365 Terms & Conditions, including account management, gameplay, and financial transactions.
• Legal obligation: Processing is required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations.
• Legitimate interests: Processing is carried out for fraud prevention, platform security, and service improvement in a manner that does not override your fundamental rights.
• Consent: Where you have provided explicit consent — for example, to receive promotional communications — we process your data on that basis. You may withdraw consent at any time by contacting support.

5. Data Sharing & Disclosure

cuci365 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX. Each processor is bound by their own privacy and data security obligations.
• Game software providers: Aggregated, anonymised gameplay data may be shared with licensed game studios for RTP auditing and technical maintenance purposes.
• Identity verification services: KYC document data is shared with regulated identity verification partners to fulfil our legal obligations.
• Regulatory and law enforcement authorities: cuci365 will disclose personal data where required to do so by law, court order, or competent regulatory authority, including in connection with AML investigations.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction. You will be notified of any such change in data controller via the Platform.

6. Data Retention

cuci365 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general retention practices are as follows:

• Active account data is retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to satisfy AML and regulatory recordkeeping obligations.
• Transaction and financial records are retained for a minimum of seven (7) years in accordance with applicable financial regulations.
• KYC identity documents are retained for the period required by the applicable gaming authority and anti-money laundering legislation.
• Communications records (support chat, emails) are retained for up to three (3) years unless required longer for dispute resolution.
• Technical and usage logs are retained for a rolling period of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction policy.

7. Data Security

cuci365 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the cuci365 Platform
• Encrypted storage of passwords using industry-standard hashing algorithms; cuci365 staff cannot view your password in plain text
• Two-factor authentication (2FA) available for all cuci365 accounts, strongly recommended for all players
• Access controls ensuring that only authorised cuci365 personnel with a legitimate business need can access personal data
• Regular security audits and penetration testing of Platform infrastructure
• Automated fraud detection and anomalous login monitoring systems

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cuci365 will notify affected users and relevant authorities in accordance with applicable legal requirements.

8. Cookies & Tracking Technologies

cuci365 uses cookies and similar tracking technologies on the Platform to enhance your experience and gather analytical data. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your cuci365 session. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the cuci365 Platform — such as which pages are most visited and average session duration — to help us improve the service.
• Functional cookies: Used to remember your preferences such as language settings and display options across sessions on cuci365.
• Marketing cookies: Used only where you have provided consent, to personalise promotional content displayed within the cuci365 Platform.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impact the functionality of the cuci365 Platform.

9. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data cuci365 holds about you:

• Right of access: You may request a copy of the personal data cuci365 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where there is no longer a legitimate basis for processing, subject to our regulatory retention obligations.
• Right to restrict processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes.

To exercise any of these rights, please contact the cuci365 data protection team via live chat or by email at [email protected]. We will respond to all requests within thirty (30) days. Requests relating to account closure or data deletion may require identity verification before we can act.

10. Minors & Age Restriction

cuci365 strictly prohibits the registration and use of the Platform by persons under the age of 21. 21+

cuci365 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, that account will be immediately suspended, the data will be securely deleted, and any deposited funds will be returned to the originating payment method.

If you believe a minor has registered on cuci365, please notify us immediately via live chat or at [email protected].

11. Third-Party Services

The cuci365 Platform may integrate third-party services including payment gateways, game software providers, and customer support tools. These third parties operate under their own privacy policies and data protection obligations. cuci365 is not responsible for the privacy practices of third-party operators beyond the data sharing arrangements described in Section 5.

cuci365 does not include third-party advertising networks on its Platform that would track your behaviour across external websites without your knowledge.

12. Policy Updates

cuci365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. The current version will always be available at cuci365.org/privacy-policy with the date of last revision clearly displayed at the top of this page.

Where a change to this Policy is material — meaning it substantially affects how we process your data or your rights — cuci365 will notify registered players via the email address on record or via a prominent notice on the Platform. Continued use of cuci365 following any such update constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cuci365 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the cuci365 Platform — average response time 3–5 minutes
• Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related enquiries within 48 hours and resolve substantive requests within 30 days. For complex requests involving data subject rights, we may request proof of identity before proceeding.