Privacy Policy

This Privacy Policy (the "Policy") sets out how cuci44 (hereinafter referred to as "cuci44", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at cuci44.cam, collects, uses, stores, processes, and protects the personal data of individuals who register for or use the cuci44 platform (hereinafter referred to as "you", "your", or the "User").

Cuci44 is committed to protecting the privacy and security of all personal data entrusted to us by our players, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. This Policy is designed to be transparent, comprehensive, and easy to understand.

By accessing the cuci44 platform, registering an account, making a deposit, or otherwise using any cuci44 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes names, identification numbers, location data, account credentials, transaction records, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means cuci44, the entity that determines the purposes and means of processing Personal Data collected via the cuci44 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of cuci44 under a contractual arrangement, such as payment service providers, KYC verification partners, and IT infrastructure providers.
• "Consent" means freely given, specific, informed, and unambiguous confirmation by the User that they agree to the processing of their Personal Data for a stated purpose.
• "Cookies" means small text files stored on your device by the cuci44 platform for the purposes of session management, analytics, and platform security.
• "KYC" or "Know Your Customer" means the identity and age verification process conducted by cuci44 in accordance with responsible gambling obligations and anti-money laundering requirements.

Cuci44 collects the following categories of personal data from users of the platform:

Identity & Contact Data

Full Legal Name Date of Birth Email Address Mobile Number Residential Address Government ID Number (MyKad / Passport)

This data is collected during account registration and KYC verification. It is used to confirm your identity, verify that you meet the minimum age requirement of 21 years, and comply with regulatory obligations.

Financial & Payment Data

Bank Account Details E-Wallet Identifiers Cryptocurrency Wallet Addresses Transaction History Deposit & Withdrawal Records

Payment data is collected for the purpose of processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency networks (USDT, BTC, ETH, BNB). Cuci44 does not store full card numbers or complete e-wallet access credentials.

Technical & Usage Data

IP Address Device Type & OS Browser Type & Version Session Duration Pages Visited Game Session Logs Betting History

Technical data is collected automatically when you access the cuci44 platform. It is used for platform security, fraud detection, responsible gambling monitoring, performance optimisation, and internal analytics. This data is not used to build advertising profiles for external parties.

Communications Data

When you contact cuci44's customer support team via live chat, WhatsApp, or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes. You should not share sensitive financial credentials through these channels.

Cuci44 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC verification, submitting a support request, or participating in a promotion.
• Automated Collection: Data collected automatically by our platform infrastructure when you access cuci44, including IP address, device identifiers, session cookies, and usage analytics.
• Payment Processing: Transaction data shared with cuci44 by our payment service providers in the course of processing deposits and withdrawals. This is limited to the information necessary to confirm successful transaction completion and maintain accurate account records.
• KYC & Verification Partners: Identity data verified against government records or third-party identity verification services during the KYC process. Cuci44 uses only reputable, contracted verification providers subject to strict data processing agreements.
• Responsible Gambling Systems: Data generated by your use of cuci44's responsible gambling tools, including deposit limit settings, self-exclusion requests, and session time configurations.

Cuci44 processes your personal data exclusively for the following legitimate purposes:

• Account Management: To create, maintain, verify, and secure your cuci44 account, including processing login sessions and managing account preferences.
• Identity & Age Verification: To confirm that you satisfy the minimum age requirement of 21 years and to comply with responsible gambling obligations.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, whether via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, direct bank transfer, or cryptocurrency.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), responsible gambling, and data protection obligations.
• Customer Support: To respond to your queries, complaints, and support requests promptly and effectively across English, Bahasa Melayu, and Mandarin channels.
• Platform Performance & Analytics: To monitor, maintain, and improve the performance, security, and user experience of the cuci44 platform based on anonymised or aggregated usage data.
• Responsible Gambling Monitoring: To identify and respond to patterns of play that may indicate problem gambling, and to administer the responsible gambling tools available to players.
• Promotions & Bonuses: To administer bonus claims, verify eligibility, and ensure compliance with promotional terms and conditions.
• Legal Obligations: To meet cuci44's obligations under applicable international gaming regulations, licensing conditions, and any other legally mandated requirements.

Cuci44 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to fulfil the contract between cuci44 and the account holder — including account creation, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, responsible gambling requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out in pursuit of cuci44's legitimate business interests, including fraud detection, platform security, and internal analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where cuci44 seeks to use your data for optional purposes — such as sending promotional communications or personalising marketing content — we will obtain your explicit prior consent. You may withdraw such consent at any time without affecting the lawfulness of prior processing.

Cuci44 does not sell, rent, or commercially trade your personal data to any third party for their independent use. Personal data may be shared with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

• Payment Service Providers: Including but not limited to the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network participants, and cryptocurrency payment processors. Data shared is limited to that required to complete your transaction.
• Identity Verification Partners: Third-party KYC and age verification service providers engaged by cuci44 to confirm identity and prevent underage gambling. All such providers are subject to binding data processing agreements.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers that support the operation of the cuci44 platform under strict contractual confidentiality obligations.
• Game Providers: Licensed international game studios whose titles are hosted on the cuci44 platform. These providers receive only the minimum session data necessary to deliver game functionality and calculate RNG outcomes.
• Regulatory & Law Enforcement Authorities: Cuci44 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, a valid legal order, or regulatory obligation. Cuci44 will seek to notify affected users where legally permitted to do so.
• Professional Advisers: Legal, accounting, or auditing firms engaged by cuci44 in connection with business operations, disputes, or compliance reviews, subject to professional confidentiality obligations.

As cuci44 operates as an international online gaming platform, your personal data may be transferred to, stored, and processed in jurisdictions outside Malaysia, including but not limited to the countries in which our licensed game providers, payment processors, and IT infrastructure partners are established.

Where personal data is transferred internationally, cuci44 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection laws. Such safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable.

By using the cuci44 platform, you acknowledge and consent to such international transfers of your personal data to the extent necessary to deliver the services described herein.

Cuci44 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered account and for a minimum period of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years from the date of the transaction, or longer if required by applicable regulatory or legal obligations.
• KYC Documentation: Identity verification documents are retained for the period required under applicable AML/CTF regulations, which is typically five (5) years from the date of verification or account closure, whichever is later.
• Customer Support Communications: Records of support interactions are retained for a maximum of three (3) years from the date of the interaction unless subject to an ongoing dispute or legal proceeding.
• Technical & Usage Logs: Server logs and session data are retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised in accordance with cuci44's data lifecycle management procedures.

Cuci44 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function correctly, including maintaining your login session, remembering security settings, and enabling core gaming functionality. These cookies cannot be disabled without impairing platform operation.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the cuci44 platform, enabling us to identify and resolve performance issues. No personally identifiable information is transmitted to analytics systems.
• Security Cookies: Used for fraud detection, bot prevention, and account security monitoring. These cookies help cuci44 identify unusual patterns of activity that may indicate unauthorised access or prohibited automated behaviour.
• Preference Cookies: Used to remember your platform preferences, such as language settings and responsible gambling tool configurations.

Cuci44 does not use cross-site behavioural tracking cookies or share cookie data with advertising networks for targeted marketing purposes. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies will impair your ability to use the cuci44 platform.

Subject to applicable data protection law and certain exceptions that may apply (for example, where retaining data is required by law), you have the following rights in relation to your personal data held by cuci44:

To exercise any of the above rights, please contact cuci44's support team via live chat, WhatsApp, or email at [email protected]. Cuci44 will respond to all valid requests within 30 calendar days of receipt. Where a request is complex or we receive multiple concurrent requests, this period may be extended by a further 60 days, and we will notify you of the extension within the initial 30-day period.

Please note that certain rights may be subject to exceptions. For example, cuci44 cannot delete data that it is legally required to retain for AML/CTF or regulatory compliance purposes, and we will inform you of any applicable exemptions when responding to your request.

Cuci44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and cuci44 servers is encrypted using industry-standard TLS protocols.
• Encrypted Data at Rest: Sensitive personal data stored on cuci44 servers is encrypted using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data is strictly limited to authorised personnel on a need-to-know basis. All access is authenticated, logged, and subject to regular review.
• Multi-Factor Authentication: Internal administrative systems are protected by multi-factor authentication requirements for all staff with access to player data.
• Regular Security Audits: Cuci44's security infrastructure undergoes regular internal and third-party penetration testing and vulnerability assessments.
• Incident Response: Cuci44 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you without undue delay where required by applicable law.

Whilst cuci44 takes all commercially reasonable steps to protect your data, no internet-based transmission or electronic storage system can be guaranteed to be completely secure. You are encouraged to use strong, unique passwords for your cuci44 account and to enable two-factor authentication.

The cuci44 platform is strictly intended for adults aged 21 years and above. Cuci44 does not knowingly collect, process, or retain personal data from individuals below the minimum age of 21 years.

All accounts are subject to age verification as part of the KYC process. Where cuci44 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, such data will be deleted promptly, the associated account will be permanently closed, and any deposited funds will be returned to the source payment method after appropriate verification.

If you have reason to believe that a minor has registered an account with cuci44, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

The cuci44 platform may, from time to time, contain references to or integrations with third-party services — including but not limited to payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and the FPX network — in the course of delivering its services.

Cuci44 is not responsible for the privacy practices or content of any third-party services. When you interact with a third-party payment portal or external service, you are subject to that third party's own privacy policy and terms of service. Cuci44 encourages users to review the privacy policies of any third-party services they use in connection with the platform.

Cuci44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. The "Last Updated" date displayed at the top of this page will be revised to reflect the date of the most recent amendment.

Where amendments are material in nature — meaning they significantly change the way cuci44 processes your personal data or affect your rights as a data subject — we will endeavour to notify you via email or prominent in-platform notification prior to the changes taking effect.

Your continued use of the cuci44 platform following the posting of any amended Privacy Policy constitutes your acceptance of those amendments as they apply to data processed from the effective date onwards. If you do not agree with any changes, you must discontinue your use of the platform and contact us to exercise your data rights as described in Section 11.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cuci44 processes your personal data, please contact our dedicated Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the cuci44 platform — average first response under 5 minutes. Request to speak with the Data Protection team if your enquiry is privacy-specific.
• WhatsApp: WhatsApp Support — available 24/7 in English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — please include "Privacy Request" in your subject line for prioritised routing. We aim to respond to all privacy-related email queries within 5 business days and to formally complete all subject access requests within 30 calendar days.