cuci99 Privacy Policy

1. Who We Are & Scope of This Policy

This Privacy Policy applies to cuci99 ("cuci99", "we", "us", "our"), the licensed online casino and sports betting platform accessible at cuci99.win. cuci99 is operated by a licensed entity holding an international gaming authority licence, which imposes binding data protection obligations as a condition of that licence.

This Policy governs all personal data collected from individuals who:

• Visit or browse the cuci99 website at cuci99.win;
• Register or attempt to register a player account on the cuci99 Platform;
• Deposit funds, place bets, play casino games, or withdraw winnings;
• Contact the cuci99 customer support team via any channel;
• Subscribe to cuci99 promotional communications.

This Policy should be read alongside the cuci99 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

2. Data We Collect

cuci99 collects only the personal data that is necessary to provide a licensed, secure, and legally compliant gaming service to Malaysian players. The categories of data we process are set out in the table below:

cuci99 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity document verification under our KYC obligations.

3. How We Collect Your Data

cuci99 collects personal data through the following channels:

• Direct submission: Data you provide when registering your cuci99 account, completing KYC verification, making a deposit or withdrawal request, contacting support, or completing any other form or interaction on the Platform;
• Automated collection: Technical data collected automatically when you access the cuci99 Platform, including IP address, device identifiers, and session activity logs via cookies and server logs;
• Third-party sources: Identity verification data received from our KYC service providers when verifying the authenticity of documents you have submitted; transaction data received from payment processors including Touch n Go eWallet, Boost, and Malaysian banking partners; and fraud-risk signals received from our fraud detection partners.

4. Legal Basis for Processing

cuci99 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to operate your cuci99 account, process transactions, and deliver the gaming services you have requested under the cuci99 Terms & Conditions;
• Legal obligation: Processing required to comply with our international gaming authority licence conditions, anti-money-laundering regulations, age verification requirements, and applicable data protection laws;
• Legitimate interests: Processing for fraud detection, security monitoring, platform improvement, and responsible gaming analysis, where these interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for optional marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time by contacting support or updating your account communication preferences.

5. How We Use Your Data

cuci99 uses your personal data for the following purposes:

• Creating, verifying, and maintaining your cuci99 player account;
• Processing deposits and withdrawals in Malaysian Ringgit via your chosen payment method;
• Fulfilling our Know Your Customer (KYC) and anti-money-laundering obligations as required by our international gaming authority licence;
• Detecting and preventing fraud, collusion, bonus abuse, money laundering, and other prohibited activities on the Platform;
• Providing responsible gaming tools including deposit limits, self-exclusion enforcement, and session monitoring as described in our Responsible Gaming Policy;
• Responding to customer support enquiries, complaints, and dispute resolution requests;
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts;
• Sending promotional communications and personalised bonus offers where you have given consent;
• Analysing Platform usage to improve the cuci99 user experience for Malaysian players;
• Complying with any court order, regulatory investigation, or lawful authority request.

6. Data Sharing & Third Parties

cuci99 does not sell or rent your personal data to unaffiliated third parties for their marketing purposes. We share your data only as set out below and only to the extent necessary for each stated purpose:

• Payment processors: Financial data is shared with licensed payment service providers (including Touch n Go eWallet, Boost, and Malaysian banking partners) solely to process your requested transactions;
• KYC and identity verification providers: Identity and document data is shared with our accredited KYC verification partners to fulfil our licensing obligations;
• Fraud detection and security partners: Technical and behavioural data is shared with fraud prevention services to detect and prevent prohibited activities;
• Game providers: Gaming session data is shared with licensed game studios and live dealer providers as necessary to deliver the games you play;
• Regulatory and law enforcement authorities: cuci99 will disclose personal data to regulators, licensing authorities, or law enforcement agencies where required by law or court order;
• Professional advisers: Legal counsel, auditors, and insurance providers may access personal data on a strictly confidential basis in connection with their professional services to cuci99.

All third parties with whom cuci99 shares personal data are required to process it in accordance with applicable data protection laws and are prohibited from using it for any purpose beyond those specified in their contracts with cuci99.

7. Cookies & Tracking Technologies

The cuci99 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your language and regional preferences, your login state, and your game lobby settings to improve your experience on return visits.
• Analytics cookies: Collect anonymised information about how players navigate the Platform (pages visited, time on site, error pages encountered) to help us improve performance and content.
• Marketing cookies: Used where you have given consent to help cuci99 deliver relevant promotional offers. You may withdraw consent at any time via your account preferences.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the cuci99 Platform.

8. Data Retention

cuci99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, or reporting obligations. In practice, retention periods are governed as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our licensing authority's anti-money-laundering obligations;
• Transaction and gaming records: Retained for a minimum of five (5) years following the date of each transaction or gaming session;
• KYC documents: Retained for five (5) years from the date of verification, or longer if required by applicable regulation;
• Support communications: Retained for three (3) years from the date of the communication;
• Marketing preference records: Retained until consent is withdrawn plus twelve (12) months to evidence the prior consent state.

When personal data is no longer required, cuci99 will securely delete or anonymise it in accordance with our data destruction procedures.

9. Data Security

cuci99 implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and the cuci99 Platform;
• Cryptographic hashing with per-account salting for all stored passwords — your password is never readable in plain text;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Automated login anomaly detection and alerting for unusual access patterns;
• Regular penetration testing and security audits conducted by independent third parties;
• Data breach response procedures, including notification to affected players and regulatory authorities where required within applicable timeframes.

Whilst cuci99 takes all reasonable steps to protect your data, no online system is entirely immune from risk. You play an important role in your own data security — use a strong, unique password for your cuci99 account, enable two-factor authentication, and do not share your login credentials with any third party.

10. Your Rights as a Data Subject

Subject to the conditions and limitations set out in applicable data protection law, you have the following rights in relation to your personal data held by cuci99:

• Right of access: You may request a copy of the personal data cuci99 holds about you;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where cuci99 no longer has a legal basis to retain it, subject to our mandatory data retention obligations under gaming and anti-money-laundering regulations;
• Right to restrict processing: You may request that cuci99 limits its processing of your data in certain circumstances, for example while a dispute is being resolved;
• Right to data portability: You may request your personal data in a structured, machine-readable format where processing is based on your consent or contract;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where cuci99 processes your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11. Children & Minors

If cuci99 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the data without retention, and take appropriate steps to prevent re-registration. If you believe a minor has accessed the cuci99 Platform, please notify our support team immediately.

cuci99 performs mandatory age verification as part of the KYC process prior to processing any withdrawal. We take our obligations regarding the protection of minors extremely seriously under both our licensing conditions and applicable law.

12. International Data Transfers

As a licensed online gaming platform, cuci99 may transfer personal data to service providers located outside Malaysia, including KYC verification providers, fraud detection systems, and cloud infrastructure partners. Where such transfers occur, cuci99 ensures that adequate safeguards are in place, including:

• Contractual clauses requiring recipient organisations to protect data to a standard equivalent to that required under our licensing authority's data protection framework;
• Due diligence on the data protection practices of all overseas data processors prior to engagement;
• Minimisation of personal data transferred to only what is strictly necessary for the stated purpose.

By registering a cuci99 account, you acknowledge that your personal data may be transferred and processed outside Malaysia as described in this section.

13. Changes to This Policy

cuci99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Material changes will be communicated to registered players by email to the address on file or via a prominent notice on the cuci99 Platform at least 14 days before the change takes effect where practicable.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the cuci99 Platform following the effective date of any update constitutes your acknowledgement of the revised Policy.

14. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data cuci99 holds about you, please contact our data protection team. Our support team is available 24 hours a day, 7 days a week, including Malaysian public holidays.

Contact us at: [email protected] (plain text — not a clickable link)

We aim to acknowledge all data protection enquiries within 48 hours and to provide a substantive response within 30 calendar days of receiving a verified request.