cuci888 Privacy Policy

1. Introduction

cuci888 ("we", "us", "the Company", or "cuci888") operates the online gaming platform accessible at cuci888.club and associated subdomains and applications (collectively, the "Platform"). This Privacy Policy describes how cuci888 collects, processes, stores, uses, and protects the personal data of individuals who use the Platform, register an account, or otherwise interact with cuci888 in any capacity.

cuci888 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. For Malaysian players, we recognise the relevance of Malaysia's Personal Data Protection Act 2010 (PDPA) to the extent applicable, and we align our practices with PDPA principles including the principles of lawful processing, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

This Privacy Policy should be read in conjunction with the cuci888 Terms & Conditions. By registering on the Platform or using the Platform in any way, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

cuci888 is the data controller in respect of personal data collected through the Platform. As data controller, cuci888 determines the purposes and means by which your personal data is processed.

For all data protection enquiries, access requests, or complaints, you may contact the cuci888 Data Protection team at: [email protected] with the subject line "Data Protection Enquiry". We aim to acknowledge all data-related requests within five (5) business days and resolve substantive requests within thirty (30) days of receipt.

3. Personal Data We Collect

cuci888 collects the following categories of personal data from Players, depending on the nature of the interaction:

cuci888 does not deliberately collect special categories of personal data (as defined under applicable data protection law, e.g., health data, racial or ethnic origin, religious beliefs, political opinions) unless specifically required by regulatory authority under applicable anti-money laundering or responsible gaming obligations, and only to the minimum extent necessary.

4. How We Collect Your Data

cuci888 collects personal data through the following mechanisms:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated collection: Technical data collected automatically through cookies, web beacons, and analytics tools when you visit or interact with the Platform. See Section 8 for full details on cookies.
• Third-party sources: Identity verification data received from KYC providers; fraud and AML risk scores from specialist third-party screening services; payment data from payment processors including Touch 'n Go eWallet, Boost, DuitNow, and FPX banking networks.
• Publicly available sources: Where required for AML compliance, cuci888 may verify identity information against publicly available government registries or commercially available data sources.

5. Legal Basis for Processing

cuci888 processes your personal data on the following legal grounds, consistent with applicable data protection principles:

• Performance of a contract: Processing necessary to provide you with cuci888 Platform services, manage your account, process deposits and withdrawals, and deliver the gaming experience you have registered for.
• Legal obligation: Processing required to comply with applicable law and regulatory requirements, including AML/CFT obligations, KYC verification requirements, age verification, responsible gaming obligations, and responses to lawful requests from regulatory authorities.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, improving the Platform's features and user experience, and communicating service updates — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications (where you have opted in), and certain non-essential cookies. You may withdraw consent at any time as described in Section 12.

6. How We Use Your Personal Data

cuci888 uses your personal data for the following specific purposes:

• Creating, managing, and maintaining your cuci888 Account;
• Processing your deposits and withdrawals and reconciling financial transactions;
• Verifying your identity and age (21+) in compliance with KYC and responsible gaming requirements;
• Detecting, investigating, and preventing fraud, money laundering, and other financial crimes;
• Personalising your gaming experience on the Platform, including recommending games and promotions relevant to your activity;
• Administering cuci888 bonus offers and promotions;
• Providing and improving 24/7 customer support services;
• Sending you service communications, including Account notifications, security alerts, and policy updates;
• Conducting responsible gaming monitoring, including identifying patterns of behaviour that may indicate problem gambling, and applying player protection measures;
• Complying with applicable legal and regulatory obligations; and
• Analysing Platform usage patterns to improve cuci888's services, products, and user experience.

cuci888 does not use automated decision-making processes that produce legal or similarly significant effects on Players without human oversight, except where required by law or where necessary to comply with AML screening obligations.

7. Data Sharing and Disclosure

7.1 cuci888 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Period.

7.2 cuci888 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency payment networks — to process your financial transactions.
• KYC and identity verification providers: Specialist third-party services that validate government-issued identity documents as part of our age verification and AML compliance process.
• Fraud prevention and AML screening services: Third-party providers that screen transactions and account activity against known fraud patterns and financial crime databases.
• Gaming content providers: Game studios and platform providers whose titles are integrated into the cuci888 Platform, to the extent required for game delivery and fairness auditing.
• Customer support infrastructure providers: Live chat and ticketing platform providers that process support communications on cuci888's behalf.
• Regulatory authorities and law enforcement: Where cuci888 is required by law, court order, or regulatory direction to disclose personal data, we will comply with such requirements. Where legally permissible, cuci888 will attempt to notify you of such disclosure.

7.3 All third-party processors engaged by cuci888 are required to process personal data only in accordance with cuci888's documented instructions and to maintain appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

cuci888 uses cookies, web beacons, and similar tracking technologies to operate the Platform and collect behavioural data. Cookies are small data files stored on your device by your browser.

Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting Platform functionality.
• Functional cookies: Enable enhanced Platform features such as remembering your language preference, game lobby settings, and responsible gaming configuration.
• Analytics cookies: Allow cuci888 to understand how Players navigate the Platform, which features are most used, and where errors occur — enabling Platform improvements. Data collected is aggregated and anonymised.
• Marketing and personalisation cookies: Used (only where you have consented) to deliver cuci888 promotional content relevant to your stated preferences and gaming history.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including your ability to remain logged in. cuci888 does not use cross-site tracking cookies to monitor your activity on third-party websites.

9. Data Retention

cuci888 retains personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy and to comply with applicable legal obligations. The following general retention principles apply:

• Account data: Retained for the duration of your active cuci888 Account, plus a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements applicable to licensed gaming operators.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following Account closure or the completion of the business relationship, in accordance with applicable AML/CFT regulations.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction, unless a longer retention period is required in connection with a dispute or regulatory inquiry.
• Marketing opt-in data: Retained until you withdraw consent, subject to a maximum period of three (3) years from your last confirmed opt-in, after which your consent will be refreshed or the data deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

10. Data Security

cuci888 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cuci888 Platform;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Access controls limiting Platform system access to authorised cuci888 personnel on a need-to-know basis;
• Multi-factor authentication requirements for cuci888 internal system access;
• Regular vulnerability assessments and penetration testing by independent security specialists;
• Incident response procedures enabling rapid detection of and response to any data security incidents; and
• Employee data protection training and awareness programmes.

In the event of a data breach that poses a risk to your rights and freedoms, cuci888 will notify affected Players promptly and, where required by applicable law, will report the breach to the relevant regulatory authority within the timeframe prescribed by law.

11. International Data Transfers

cuci888 may transfer your personal data to, and process it in, countries outside Malaysia in connection with the operation of the Platform. This may occur where cuci888's servers, third-party service providers, or game content providers are located in other jurisdictions.

Where personal data is transferred internationally, cuci888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection principles. These safeguards may include contractual clauses, data processing agreements incorporating standard protection obligations, or transfers to jurisdictions that are recognised as providing adequate data protection under applicable law.

12. Your Data Protection Rights

Subject to applicable law and regulatory constraints (including AML and KYC legal retention requirements), cuci888 Players have the following rights in respect of their personal data:

• Right of access: You may request confirmation of whether cuci888 processes your personal data and, if so, receive a copy of the personal data held about you.
• Right to rectification: You may request that inaccurate or incomplete personal data held by cuci888 be corrected. Many details can be updated directly from your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cuci888's legal obligations to retain certain data (e.g., AML and KYC records).
• Right to restriction of processing: You may request that cuci888 restrict the processing of your personal data in certain circumstances, e.g., where you contest the accuracy of the data.
• Right to data portability: You may request a copy of personal data you have provided to cuci888 in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact cuci888 at [email protected] with the subject line "Data Rights Request". cuci888 will respond within thirty (30) days of receipt. We may require identity verification before processing certain requests.

13. Children's Privacy

The cuci888 Platform is strictly for individuals aged 21 years and above. cuci888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If cuci888 discovers that personal data has been collected from an individual under 21, the associated Account will be immediately suspended and the personal data deleted (subject to any mandatory retention obligations applicable to the voided transactions).

If you are a parent or guardian and believe that a minor has registered on the cuci888 Platform, please contact us immediately at [email protected] so we can take appropriate action.

14. Third-Party Links

The cuci888 Platform may contain links to third-party websites or services (for example, links to responsible gaming support organisations). This Privacy Policy applies solely to the cuci888 Platform. cuci888 is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policy of any third-party service before providing your personal data to them.

15. Changes to This Privacy Policy

cuci888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will notify registered Players by posting a prominent notice on the Platform and, where appropriate, sending a notification to your registered email address.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the cuci888 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or cuci888's handling of your personal data, please contact us through the following channels: