Privacy Policy

1. Introduction

Cuci33 (hereinafter referred to as "Cuci33", "we", "us", or "our") operates the online casino and sports betting platform accessible at cuci33.cam. We are committed to protecting the privacy and personal data of every individual who visits, registers with, or transacts on our Platform.

This Privacy Policy (the "Policy") sets out the categories of personal data we collect from Members and visitors, the purposes for which that data is processed, the legal bases on which processing rests, and the rights available to data subjects under applicable data protection law. This Policy applies to all users of the Cuci33 Platform, including registered Members located in Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — as well as visitors who access the Platform without registering.

By accessing or using the Cuci33 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, identification document details, payment information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Cuci33, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — a third party that processes Personal Data on behalf of Cuci33 in accordance with documented instructions (e.g., payment service providers, identity verification partners).
• "Member" — any individual who has registered a verified account on the Cuci33 Platform.
• "KYC" — Know Your Customer; the regulatory process of verifying Member identity using government-issued documentation.
• "Cookies" — small text files stored on a user's device by a web browser that enable the Platform to recognise and remember the user's session, preferences, and activity data.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their Personal Data for one or more stated purposes.

3. Categories of Personal Data We Collect

Cuci33 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The table below summarises the main categories:

Cuci33 does not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is necessary for identity verification purposes.

4. How We Collect Personal Data

Cuci33 collects Personal Data through the following channels and mechanisms:

4.1 Directly from You

• During the account registration process, where you provide identity, contact, and security information.
• When you submit KYC documentation in connection with identity verification or withdrawal processing.
• When you make a deposit or withdrawal, through the payment details you provide or authorise.
• When you contact our customer support team via live chat, WhatsApp, or email.
• When you participate in surveys, promotions, or bonus programmes and provide information in that context.

4.2 Automatically Through Platform Interaction

• Through cookies and similar tracking technologies as described in Section 10.
• Through server logs that record IP addresses, device identifiers, and access timestamps.
• Through gameplay and betting activity data generated during your use of the Platform.
• Through fraud detection and security monitoring systems that analyse transaction and access patterns.

4.3 From Third Parties

• From identity verification service providers engaged by Cuci33 to assist with KYC compliance.
• From payment processing partners (including FPX, DuitNow, and licensed e-wallet operators) who share transaction confirmation data.
• From fraud prevention and credit reference agencies where Cuci33 reasonably requires additional information to protect the integrity of the Platform.

5. Legal Basis for Processing

Cuci33 processes Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between Cuci33 and the Member — for example, operating the account, processing payments, and applying bonus terms.
• Legal Obligation: Processing is required to comply with applicable law, including Anti-Money Laundering (AML) regulations, Counter-Terrorism Financing (CTF) requirements, and KYC identity verification obligations.
• Legitimate Interests: Processing is in the legitimate interests of Cuci33 or a third party, provided those interests are not overridden by the data subject's rights — including fraud prevention, platform security, and improving service quality.
• Consent: Where processing is based on your consent (e.g., receiving marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your Account preferences.

6. How We Use Your Personal Data

The Personal Data collected by Cuci33 is used for the following purposes:

1. Account Management: Creating, maintaining, and securing your Cuci33 account, including password management, login authentication, and two-factor verification.
2. Payment Processing: Facilitating deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
3. Regulatory Compliance: Meeting KYC, AML, CTF, and other applicable regulatory obligations, including record retention and reporting requirements.
4. Fraud Detection and Security: Monitoring transactions and Platform activity for signs of fraud, money laundering, multi-accounting, and other Prohibited Conduct as defined in our Terms and Conditions.
5. Customer Support: Responding to queries, resolving disputes, processing complaints, and delivering support through live chat, WhatsApp, and email channels.
6. Platform Analytics and Improvement: Analysing aggregated usage data to identify technical issues, improve user experience, and develop new features for the benefit of Malaysian players.
7. Responsible Gambling Monitoring: Monitoring gambling patterns to identify signs of problem gambling behaviour and intervene with appropriate support tools as described in our Responsible Gambling page.
8. Promotional Communications: Sending bonus offers, promotions, and platform updates where you have consented to receive such communications. You may opt out at any time.
9. Legal and Dispute Resolution: Preserving records and evidence as required for the resolution of legal disputes, regulatory proceedings, or law enforcement requests.

7. Data Sharing & Disclosure

Cuci33 does not sell, rent, or trade your Personal Data with any third party for commercial purposes. Your Personal Data may, however, be shared in the following limited and controlled circumstances:

7.1 Service Providers and Data Processors

Cuci33 engages carefully selected third-party service providers to assist in operating the Platform. These providers act as data processors under documented contractual agreements that restrict them from using Personal Data for any purpose beyond the specific service they provide. Categories of service providers include:

• Identity verification and KYC compliance providers.
• Payment processors and licensed financial institutions (e.g., FPX-participating banks, DuitNow operators, licensed e-wallet providers).
• Platform hosting, cloud infrastructure, and cybersecurity service providers.
• Customer support platform operators (live chat system providers).
• Fraud detection and anti-money-laundering screening services.

7.2 Regulatory and Legal Disclosure

Cuci33 may be required to disclose Personal Data to government authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, judicial order, or regulatory direction. Such disclosure will be limited to the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving Cuci33, Personal Data may be transferred to the successor entity as part of that transaction. Affected Members will be notified of any change in data controller in advance of such a transfer.

8. International Data Transfers

In the course of operating the Cuci33 Platform, Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers may occur when Cuci33 uses cloud infrastructure, identity verification services, or other third-party service providers headquartered or operating outside Malaysia.

Where Personal Data is transferred internationally, Cuci33 ensures that appropriate safeguards are in place — including contractual data protection clauses, vendor security assessments, and adherence to recognised data transfer frameworks — to ensure that your data receives a level of protection consistent with this Policy.

9. Data Retention

Cuci33 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of seven (7) years following each transaction to comply with financial regulation and audit requirements.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the last verified transaction, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or investigation.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or otherwise opt out of communications, plus a brief suppression period to honour opt-out requests.

When Personal Data is no longer required to be retained, it is securely deleted or anonymised in accordance with Cuci33's data destruction procedures.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by the Cuci33 Platform when you visit. They allow the Platform to recognise your browser session, store your preferences, maintain your login state, and collect usage analytics. Cuci33 also uses similar technologies such as local storage and session storage.

10.2 Types of Cookies Used

• Essential Cookies: Required for the Platform to function. These enable core features such as login authentication, account security, and payment processing. These cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your preferences — such as language selection, preferred game categories, and display settings — to improve your experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform, including pages visited and session duration, helping Cuci33 identify improvements. These do not track individual users across external websites.

10.3 What We Do Not Use

Cuci33 does not deploy third-party advertising cookies, cross-site tracking pixels, retargeting technologies, or social media tracking scripts on the Platform. You will not be subject to behavioural advertising based on your Cuci33 activity.

10.4 Managing Cookies

You may manage or delete cookies through your browser settings. Please note that disabling essential cookies may prevent access to certain Platform features. Most modern browsers provide guidance on cookie management in their help documentation.

11. Data Security

Cuci33 implements comprehensive technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Cuci33 Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive Personal Data stored in Cuci33's systems, including identity documents and financial data, is encrypted at rest.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis, with role-based permissions, multi-factor authentication, and audit logging for all data access events.
• Penetration Testing and Security Audits: The Platform undergoes regular independent security assessments to identify and address vulnerabilities.
• Incident Response: Cuci33 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Member data, affected individuals will be notified in accordance with applicable legal requirements.

12. Your Data Rights

Subject to applicable data protection law and any overiding legal obligations, you have the following rights in respect of your Personal Data held by Cuci33:

To exercise any of the above rights, please contact Cuci33's support team via the channels described in Section 16. We will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further two months, with prior written notice.

Please note that exercising certain rights — such as requesting erasure — may result in the closure or suspension of your Cuci33 account where that data is required to maintain the Member relationship.

13. Children & Minors

The Cuci33 Platform is strictly intended for persons aged21 years and above. Cuci33 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has created a Cuci33 account or provided us with their Personal Data, please notify our support team immediately so that appropriate action can be taken.

14. Third-Party Links and Services

The Cuci33 Platform does not contain links to external third-party websites for the purpose of advertising or cross-promotion. Where references to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX) are made on the Platform, those services are accessed directly by you through your own banking or e-wallet applications — not through Cuci33-controlled interfaces.

Cuci33 is not responsible for the privacy practices of any third-party payment providers or other services you access independently. We encourage you to review the privacy policies of those services separately.

15. Policy Amendments

Cuci33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or Platform features. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where changes to this Policy are material, Cuci33 will provide advance notice to registered Members via their verified email address and/or a notice on the Platform. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

We encourage all Members to review this Policy periodically to stay informed about how their Personal Data is managed.

16. Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Cuci33, please contact our support team through any of the following channels. All data rights requests and privacy complaints are handled by our compliance team.

Cuci33 will acknowledge all privacy-related requests within five (5) business days and respond substantively within thirty (30) calendar days. Where a complaint cannot be resolved internally to your satisfaction, you may refer the matter to the relevant data protection authority or dispute resolution body in your jurisdiction.

For information on responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page. For full platform terms, refer to our Terms & Conditions.