cuci21 Privacy Policy

1. Introduction

cuci21 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at cuci21.win. In the course of providing our services to registered players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar — we collect, process, and store certain personal data about you ("Player", "User", "you").

This Privacy Policy ("Policy") is designed to inform you clearly about our data practices. It describes what personal data we collect, the purposes for which we use it, the circumstances in which we may share it with third parties, the security measures we employ to protect it, and the rights available to you in respect of your personal data.

By registering an account on cuci21, depositing funds, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into the cuci21 Terms and Conditions, which constitute the overarching agreement governing your use of the Platform.

2. Personal Data We Collect

cuci21 collects personal data through several channels, including account registration forms, identity verification procedures, financial transactions, platform usage, and customer support interactions. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used for age verification — players must be 21 or above);
• Malaysian Identity Card (MyKad) number or passport number;
• Residential address;
• Email address and mobile phone number.

2.2 Financial Data

• Bank account details (for withdrawal processing);
• E-wallet identifiers (Touch n Go, Boost, GrabPay);
• Transaction history including deposits, withdrawals, and wager amounts;
• Cryptocurrency wallet addresses where applicable (USDT TRC20).

2.3 Technical & Usage Data

• IP address and device identifiers;
• Browser type, operating system, and screen resolution;
• Login timestamps and session duration;
• Game history, betting patterns, and platform navigation data;
• Geolocation data (country-level, derived from IP address).

2.4 Communications Data

• Records of live chat, email, and Telegram support interactions;
• Feedback and complaint submissions;
• Marketing preference settings.

3. How We Use Your Personal Data

cuci21 processes your personal data only for legitimate purposes directly related to the provision and improvement of our services. The principal purposes for which we use your data are:

• Account management — creating and maintaining your cuci21 player account, verifying your identity, and managing your account settings;
• Age verification — confirming that you meet the minimum age requirement of 21 years before permitting access to any gaming content;
• Transaction processing — handling deposits, withdrawals, and currency conversions in Malaysian Ringgit (MYR / RM);
• Gaming services — facilitating your participation in casino games, slots, live dealer games, and sports betting markets;
• Fraud prevention & AML compliance — monitoring for suspicious activity, complying with anti-money laundering obligations, and protecting the integrity of the platform;
• Customer support — responding to your enquiries, resolving disputes, and processing complaints;
• Responsible gaming — monitoring gaming behaviour to identify potential problem gambling patterns and administering self-exclusion and limit-setting tools;
• Marketing communications — sending promotional offers, bonus notifications, and platform updates where you have consented or where we have a legitimate interest, subject to your opt-out rights;
• Platform improvement — analysing usage patterns to optimise the cuci21 user experience, game library, and technical performance;
• Legal compliance — meeting obligations imposed by our licensing authority, applicable law, and regulatory bodies.

4. Legal Basis for Processing

cuci21 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the cuci21 Terms and Conditions, including account management and transaction processing;
• Legal obligation — processing required to comply with applicable laws, including AML regulations and licensing conditions;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your marketing preferences in your account settings or contacting support at [email protected].

5. Data Sharing & Disclosure

cuci21 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Licensed gaming software providers — game providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others require certain transaction and session data to deliver their gaming content. These providers are bound by data processing agreements and are prohibited from using your data for purposes beyond service delivery.
• Payment processors — financial data is shared with payment processors (including e-wallet operators and banking partners) solely for the purpose of processing your transactions.
• Identity verification services — third-party KYC providers may receive your identity documents for the purpose of age and identity verification.
• Regulatory authorities — cuci21 may be required to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies pursuant to a legal obligation or court order.
• Corporate transactions — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same data protection obligations.

All third parties with whom cuci21 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purpose for which it was disclosed.

6. Cookies & Tracking Technologies

cuci21 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow us to recognise returning users, maintain session states, and analyse platform usage.

6.1 Types of Cookies Used

• Strictly necessary cookies — required for core platform functionality including login sessions and security. These cannot be disabled.
• Performance cookies — collect anonymised data about how users interact with the platform to help us identify and resolve technical issues.
• Functional cookies — remember your preferences such as language settings and game lobby filters.
• Analytics cookies — used to understand aggregate user behaviour patterns. Data collected is anonymised and does not identify individual users.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cuci21 platform.

7. Data Retention

cuci21 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Account data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements;
• Transaction records — retained for a minimum of seven (7) years for financial compliance purposes;
• Identity verification documents — retained for five (5) years following account closure;
• Customer support records — retained for three (3) years from the date of the last interaction;
• Marketing data — retained until you withdraw consent or opt out, after which marketing records are deleted within 30 days.

Data that is no longer required is securely deleted or anonymised in accordance with cuci21's data destruction procedures.

8. Data Security

cuci21 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and cuci21 servers;
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular third-party penetration testing and security audits;
• Multi-factor authentication requirements for all internal system access;
• Intrusion detection and monitoring systems operating 24/7.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. cuci21 encourages you to use a strong, unique password for your account and to enable two-factor authentication (2FA) in your account settings.

9. Your Data Rights

Subject to applicable data protection legislation, you have the following rights in respect of your personal data held by cuci21:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing — you may request that we limit how we process your data in certain circumstances;
• Right to data portability — you may request a structured, machine-readable copy of your personal data for transfer to another service provider;
• Right to object — you may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact cuci21 at [email protected]. We will respond to verified requests within 30 calendar days. Note that certain rights may be limited where cuci21 has a legal obligation to retain the relevant data.

10. Children's Privacy

The cuci21 platform is strictly for adults aged 21 and above. cuci21 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account.

If you believe that a minor has registered on the cuci21 platform, please notify us immediately at [email protected] so that we can take appropriate action.

11. International Data Transfers

cuci21 may transfer your personal data to third-party service providers located outside of Malaysia, including gaming software providers and cloud infrastructure partners. Where such transfers occur, cuci21 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and adequacy determinations — to protect your data to a standard equivalent to that provided under applicable Malaysian data protection law.

12. Updates to This Privacy Policy

cuci21 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our services. We will notify registered players of material changes by email to the registered address or via a prominent notice on the platform, with at least 14 days' notice prior to the changes taking effect where practicable.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how cuci21 protects your data. Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by cuci21, please contact our data protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via cuci21.win
• Telegram: @cuci21support

All privacy-related enquiries are handled by cuci21's dedicated data protection team and will receive a response within 5 business days. Formal data subject access requests will be processed within 30 calendar days of identity verification.