Cuci33 Privacy Policy – Protection of Your Personal Data

Welcome to cuci33's Privacy Policy. This document explains in detail how cuci33 ("we", "our platform", or "cuci33.app") collects, processes, stores, and protects your personal data when you register, login, or use any services on our platform.

This Privacy Policy applies to all users of the cuci33 platform, including registered members, website visitors, and anyone who interacts with our services via web browser or mobile app. By registering an account or continuing to use the cuci33 platform, you are deemed to have read, understood, and agreed to all terms set out in this Privacy Policy.

Cuci33 operates as an online entertainment platform providing a wide variety of games for Malaysian users. We take data protection seriously and continuously strive to ensure a safe, transparent, and trustworthy user experience at every stage of your interaction with us.

Cuci33 only collects personal data that is strictly necessary to provide our services effectively and securely. We do not collect information beyond legitimate operational needs. Below are the categories of data we collect:

Data you provide directly during registration or profile updates is our primary source of data collection. Additionally, certain data is collected automatically through industry-standard tracking technologies when you use our platform. We never purchase or obtain your personal data from third-party sources without your knowledge.

The personal data we collect is used responsibly and only for legitimate purposes. cuci33 will not use your data for any purpose beyond what is stated here without obtaining your consent first. The purposes for which data is used are as follows:

• Account Management: To create, verify, and manage your account, including the KYC process required for platform security.
• Transaction Processing: To process deposits, withdrawals, and all other financial transactions you carry out on the cuci33 platform securely and accurately.
• Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, or any security threats that may affect the platform or other players.
• Customer Support: To provide technical support and resolve any enquiries or complaints you raise with our support team.
• Service Communications: To send important notifications relating to your account, transactions, changes to terms, or security information you need to be aware of.
• Platform Improvements: To analyse aggregate and anonymised usage patterns in order to improve our platform's design, performance, and user experience.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements to relevant authorities where necessary.

Cuci33 understands that your privacy is a trust that must not be taken lightly. We do not sell, rent, or disclose your personal data to any third party for their own commercial purposes. However, there are limited situations where data sharing is necessary for legitimate operations:

• Payment Service Providers: Required financial data is shared with trusted payment service providers such as FPX, DuitNow, Touch 'n Go, and GrabPay solely for the purpose of processing your transactions. All such providers are bound by strict confidentiality agreements.
• Game Providers: Game session data is shared with authorised game software providers to ensure a smooth gaming experience and accurate game records.
• Legal Authority: cuci33 may be required to disclose your data to law enforcement agencies, courts, or regulatory bodies if mandated by Malaysian law or a valid court order.
• Fraud Prevention: Data may be shared with recognised industry bodies for fraud prevention and anti-money laundering purposes, in line with our compliance obligations.
• Auditors & Professional Advisors: Legal advisors, auditors, or consultants bound by strict confidentiality obligations may access certain data within the scope of their professional engagement with cuci33.

In all data sharing arrangements, cuci33 ensures that recipients maintain adequate data protection standards and only receive data strictly necessary for the stated purpose. We never share more data than is required.

The cuci33 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to platform operations.
• Functional Cookies: To save your preferences such as preferred language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Performance Cookies: To collect anonymised information about how you use the platform, helping us identify technical issues and improve overall performance.
• Analytics Cookies: Helps us understand aggregate usage patterns, most frequently visited pages, and general navigation flows for continuous improvement.

Most web browsers allow you to manage cookies through browser settings. You may choose to block or delete cookies at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the cuci33 platform.

Cuci33 continuously invests in industry-grade security infrastructure to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The key security measures we employ include:

• End-to-End Encryption: All communications between your device and cuci33's servers are protected with 256-bit TLS/SSL encryption, ensuring that data in transit cannot be intercepted.
• Two-Factor Authentication (2FA): cuci33 supports two-factor authentication for user accounts to add an extra layer of protection beyond passwords alone.
• Layered Access Control: Access to users' personal data at cuci33 is restricted to authorised personnel only, in accordance with the principle of least privilege.
• 24/7 Security Monitoring: A continuous monitoring system automatically detects and alerts our security team of any suspicious or unusual activity in real time.
• Regular Penetration Testing: cuci33 conducts regular security assessments including penetration testing by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Secure Data Backup: Data is regularly backed up to secure, separate locations, ensuring rapid data recovery in the event of any unexpected incident.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to our support team.

As a cuci33 user and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which we fully respect:

To exercise any of the above rights, please contact our privacy team via email at [email protected], clearly stating the right you wish to exercise and the details required to verify your identity. We will send an acknowledgement within 3 business days and endeavour to fulfil your request within the timeframe prescribed by law.

Cuci33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Our core principle is to never retain data longer than necessary.

• Active Account Data: For as long as your account remains active and you continue to use cuci33's services.
• Financial Transaction Data: Minimum 7 years from the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Records: Minimum 5 years after account closure or the date of last verification, whichever is later, in line with compliance requirements.
• Security Logs: Up to 12 months for security investigation and fraud detection purposes.
• Marketing Data (if consent provided): Until you withdraw consent or request deletion.
• Dispute Data: Until the dispute is fully resolved and the relevant appeal period has expired.

Once the relevant retention period has expired and no other legal obligation requires the data to be kept, cuci33 will securely delete or anonymise your personal data using industry-recognised methods. Anonymised data is no longer associated with your identity and may be used for aggregate analytics purposes without restriction.

The cuci33 platform may have technical integrations with third-party services required for operations, such as game software providers, payment gateway providers, and analytics services. This Privacy Policy covers only cuci33's own practices and does not extend to the privacy practices of those third parties.

Important things you need to know regarding third parties:

• Every third-party service provider working with cuci33 has signed a data processing agreement requiring them to adhere to data protection standards equivalent to our own.
• Cuci33 is not responsible for the privacy policies or data handling practices of any third party outside our control.
• If you access third-party services through our platform, we encourage you to read and understand their respective privacy policies separately.
• Game providers may technically collect game session data as part of game functionality. This data is subject to binding data-sharing agreements between cuci33 and the respective providers.

Cuci33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform service improvements. We are committed to informing you of any material changes in a transparent and timely manner.

How we notify you of policy changes:

• In-Platform Notices: Clear notices displayed on the home page or at login to inform you of changes currently taking effect.
• Email Notifications: For material and significant changes, we will send a notification email to your registered email address at least 14 days before the changes take effect.
• Last Updated: The "Updated" date at the top of this policy will always reflect the date of the latest amendment, so you can identify whether the policy has changed since you last read it.

Continued use of the cuci33 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the rights set out in Section 7 of this policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci33 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you.

When contacting us regarding privacy matters, please include your username or account email, the type of request or complaint, and sufficient details to help us understand and address your issue effectively. All privacy complaints will be handled seriously and in strict confidence.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia or the relevant regulatory authority in your country.