Privacy Policy cuci2u — Protection Malaysian User Data

Cuci2u is an online betting platform built specifically for users in Malaysia, accessible at cuci2u.best. We operate as the data controller for all personal information collected from users of our platform.

We understand that trust is the foundation of our relationship with every cuci2u user. When you register an account and use our services, you are entrusting us with your personal information. We take that responsibility very seriously. This Privacy Policy is written in clear terms so you know exactly what happens to your data — no hidden surprises, no deliberately confusing legal language.

Cuci2u fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010 and all related implementing regulations. Beyond legal compliance, we also apply international industry best practices in data privacy management.

Cuci2u only collects personal data that is strictly necessary to provide our services. We do not collect excessive data. Below are the categories of data we collect and the purposes for which they are collected:

Data We Do Not Collect

Cuci2u does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless specifically required for KYC identity verification purposes and only with your explicit consent.

Cuci2u uses the personal data it collects solely for legitimate and reasonable purposes. The primary purposes for which your data is used are as follows:

• Account operations: To create, manage, and maintain your cuci2u account, including processing logins, identity verification, and password management.
• Financial transaction processing: To process deposits and withdrawals via your preferred Malaysian payment methods, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Betting service provision: To give you full access to all cuci2u platform features, including Malaysia Super League and EPL Sports Betting, Live Casino, slots, Baccarat, and other games.
• Customer support: To respond to enquiries, complaints, or support requests you submit via live chat, email, or WhatsApp.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, or unauthorised access to the platform.
• Legal compliance: To fulfil our legal obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and the reporting requirements of relevant authorities.
• Platform improvements: To analyse usage patterns and improve the user experience, interface design, and overall platform performance.
• Marketing communications (with your consent): To send you promotional information, the latest bonuses, and exclusive cuci2u offers, where you have given your consent to receive such communications.

Cuci2u will not use your data for any purpose beyond those stated above without first obtaining fresh consent from you.

Under Malaysia's PDPA 2010, cuci2u only processes personal data on a valid legal basis. For each data processing activity, we rely on one of the following bases:

• Contract performance: Processing required to fulfil our contractual obligations to you — for example, processing your RM10 deposit or withdrawing winnings to your Malaysian bank account. This underpins the majority of account operations.
• Consent: For marketing and promotional communications, we rely on the explicit consent you provided during registration or at a later date. You may withdraw this consent at any time.
• Legitimate interests: For fraud detection and platform security purposes, we process data on the basis of legitimate business interests, provided this does not override your privacy rights.
• Legal obligations: Certain data processing is mandatory under Malaysian law, including KYC requirements and transaction reporting obligations under anti-money laundering legislation.

Cuci2u does not sell or disclose users' personal data to third parties for their own marketing purposes. However, we may share your personal data in the following limited circumstances only:

• Payment service providers: Required transaction data is shared with the Malaysian payment providers you use — such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks — to process your financial transactions. These providers are bound by strict confidentiality agreements.
• Licensed game providers: Required game session data is shared with licensed game providers such as Evolution Gaming and Pragmatic Play to enable you to play Live Casino and slots. All such providers comply with international privacy standards.
• Analytics services: Non-personally identifiable usage data may be shared with analytics service providers that help us understand platform usage patterns for improvement purposes.
• Legal authorities: cuci2u will disclose data to the relevant Malaysian authorities where required to do so by court order, a valid legal investigation request, or reporting obligations under anti-money laundering laws.
• Business transfers: In the event of a merger, acquisition, or sale of cuci2u assets, user data may be transferred to the successor entity, subject to advance notice to users and equivalent privacy protections.

Cuci2u invests seriously in infrastructure security to protect users' personal data from unauthorised access, loss, or inadvertent disclosure. The technical security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your browser and cuci2u's servers is protected by 256-bit SSL encryption — the same level of encryption used by Malaysia's major banking institutions.
• Two-Factor Authentication (2FA): cuci2u supports and encourages all users to enable 2FA on their accounts for an added layer of protection.
• 24/7 Monitoring: cuci2u's threat detection system continuously monitors all platform activity to identify and respond to suspicious behaviour in real time.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are encrypted in our storage systems using AES-256 encryption.
• Strict access controls: Only cuci2u staff with a legitimate business need are permitted to access user data, and all such access is logged and audited on a regular basis.
• Regular security testing: The cuci2u platform undergoes penetration testing and security audits conducted by independent experts at least twice a year.

However, no security system can guarantee 100% protection. In the event of a data breach affecting your personal data, cuci2u will notify you and the relevant authorities as required by Malaysia's PDPA within the stipulated timeframe.

Cuci2u adheres to the principle of data minimisation and only retains your personal data for as long as necessary. Retention periods vary by data category and legal requirement:

• Active account data: Personal data is retained for the duration your account is active, plus any additional period required to fulfil legal obligations following account closure.
• Financial transaction records: Records of deposits, withdrawals, and all financial transactions are retained for seven (7) years from the transaction date, in accordance with Malaysian accounting and anti-money laundering laws.
• KYC Documents: MyKad copies and identity verification documents are retained for the duration of the active account period plus five (5) years following account closure.
• Support communication records: Live chat session records and emails with the support team are retained for two (2) years for dispute resolution and service improvement purposes.
• Inactive account data: For accounts inactive for more than 24 months with no activity, cuci2u will process the deletion of data that is no longer required, following notification to the account holder.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered, or it will be anonymised in a way that can no longer be linked to your identity.

Cuci2u uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The types of cookies we use are as follows:

Cookies We Use

• Necessary cookies: These cookies are essential for the cuci2u platform to function. They include login session cookies, security cookies, and basic preference cookies. They cannot be disabled as they are critical to the security and functionality of your account.
• Analytics cookies: Used to understand how users interact with the cuci2u platform — which pages are visited most, how long users spend on them, and where technical issues occur. This information helps us improve the platform for everyone.
• Functional cookies: Saves your preferences such as interface language, odds display settings, and other personal configurations so you do not have to reconfigure them each time you log in.
• Performance cookies: Collects data on platform performance such as load times and technical errors to help the cuci2u technical team identify and resolve issues more efficiently.

Cookie Management

You can control and manage cookies through your web browser settings. However, disabling necessary cookies may affect the functionality of the cuci2u platform and your gaming experience. For non-essential cookies, you may opt out without affecting access to your account.

In certain circumstances, your personal data may be processed or stored outside Malaysia — for example, by international gaming service providers such as Evolution Gaming, which operates studios across multiple global locations.

In all cases of cross-border data transfers, cuci2u ensures that:

• The recipient country or entity provides a level of data protection equivalent to or higher than Malaysia's PDPA 2010 standards.
• Legally binding data processing agreements are signed with all recipient parties, requiring them to protect your data.
• Only the minimum data genuinely required for the stated purpose is transferred.
• You will be informed of any such transfer through this Privacy Policy before it takes place.

Cuci2u services are strictly for individuals aged 18 and above. cuci2u does not knowingly collect or process personal data of anyone under the age of 18. This is a child protection principle that cuci2u will not compromise on.

If cuci2u becomes aware that personal data belonging to an individual under the age of 18 has been collected unintentionally, we will take immediate steps to delete that data and close the account in question without any compensation. Any remaining balance in an account confirmed to belong to an underage user will be handled in accordance with procedures set by the relevant authorities.

Parents or guardians who suspect their minor child may have registered a cuci2u account are encouraged to contact our support team immediately at support@cuci2u.best so that prompt action can be taken.

Cuci2u may update this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or technological developments that affect how we manage data.

For material changes — meaning changes that significantly affect your privacy rights or how we use your data — cuci2u will provide at least 14 days' notice before the changes take effect, via:

• An in-platform notification on cuci2u will appear the next time you log in.
• An email to the address registered to your account.
• A notice banner prominently displayed on the cuci2u.best homepage.

For non-material changes such as spelling corrections, language clarifications, or updated contact information, we may make changes without prior notice. The "Updated" date at the top of this document always reflects the latest version of the Privacy Policy.

Continued use of the cuci2u platform after the effective date of an updated Privacy Policy constitutes acceptance of the latest version. If you do not agree with the changes made, you have the right to close your account and withdraw any outstanding balance.

If you have any questions, concerns, or wish to exercise your privacy rights regarding personal data held by cuci2u, please contact us through the following channels:

• 24/7 Live Chat: Available on the cuci2u platform at all times. This is the fastest channel for all enquiries, including privacy-related ones. Average response time is under 3 minutes.
• Privacy Email: support@cuci2u.best — please include "Privacy Enquiry" in your email subject line so it reaches the right team. We will respond within 3 business days.
• WhatsApp: The cuci2u support WhatsApp number can be found in the Support section of the cuci2u app.

For formal requests relating to PDPA rights — such as data access, correction, or deletion — please submit a written request by email, including sufficient identifying information for us to process your request securely. We will action your request within 14 business days of receiving a complete submission.

If you are dissatisfied with cuci2u's response to your privacy complaint, you have the right to escalate the matter to Malaysia's Department of Personal Data Protection, the authority responsible under PDPA 2010.