Cuci71 Privacy Policy – Malaysian Member Personal Data Protection

Cuci71 ("we", "Platform", or "cuci71") takes member privacy extremely seriously. This Privacy Policy explains in detail how we collect, store, use, disclose, and protect your personal information when you use the cuci71.app website and our mobile application.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. Our commitment is to ensure your personal data is always handled in a transparent, responsible, and secure manner.

By registering an account, using the Platform, or accessing any cuci71 service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of our Platform.

Cuci71 collects your personal data through several key channels. The following is a summary of the types of data we collect and their respective purposes:

Data We Do Not Collect: cuci71 does not directly store your full credit or debit card information. All card transactions are processed through a PCI-DSS certified third-party payment processor, not directly through cuci71 servers.

Every piece of data we collect has a clear and legitimate purpose. cuci71 does not use your data for unrelated purposes without your prior consent. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your member account, including secure login processes and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and all financial activities in your account promptly and securely.
• Legal Compliance (KYC/AML): Verifying your identity to comply with legal requirements related to anti-money laundering and counter-terrorism financing.
• Platform Security: Detecting and preventing fraud, unauthorised access, and any suspicious activity that could compromise your account.
• Service Improvement: Analysing usage patterns to improve the Platform experience, resolve technical issues, and develop new features.
• Service Communications: Sending important notifications regarding your account, policy updates, and relevant security information.
• Marketing (with consent): Delivering promotional offers, bonuses, and the latest updates on new games — only if you have consented to receive them.

Cuci71 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We only share your data in the following limited circumstances:

• Payment Service Providers: Required transaction information is shared with certified payment processors (FPX, DuitNow, Touch 'n Go, Boost, GrabPay) solely to complete your transactions.
• Game Providers: Basic game session information is shared with game software providers to ensure a smooth and fair gaming experience.
• Relevant Authorities: Data may be disclosed to Malaysian government authorities or law enforcement agencies when required by law or a valid court order.
• Security Services: Limited technical information is shared with our cybersecurity partners to detect and prevent fraud and cyberattacks.
• Auditor: During legitimate internal or external audits, appointed auditors may have limited access to relevant records.

All third parties we work with are required to comply with data protection standards equal to or higher than our own. Legally binding data protection agreements are signed with every one of our data processing partners.

We invest seriously in security infrastructure to ensure your personal data is always protected. The following are the key security measures we have implemented:

• 256-bit SSL Encryption: All data transmitted between your device and cuci71 servers is encrypted using the latest TLS protocol — the same standard used by leading banks.
• Data-at-Rest Encryption: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): You can enable 2FA on your cuci71 account for an added layer of protection during login.
• 24/7 Monitoring: Our cybersecurity team monitors Platform activity around the clock to detect any unauthorised access attempts or suspicious behaviour.
• Regular Penetration Testing: cuci71 conducts regular security testing by independent security firms to identify and patch any system vulnerabilities.
• Internal Access Control: Only staff who require access to personal data for their job functions are permitted to do so, and all access is logged and audited.

While no system can be guaranteed 100% secure, we take all reasonable steps to protect your data. Should any security incident involving your data occur, we will notify you and the relevant authorities within the timeframe prescribed by law.

Cuci71 uses cookies and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain features of the cuci71 Platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by us:

To exercise any of the above rights, contact our privacy team by email at [email protected] or via live chat. We will process your request within 14 business days. Some requests may require identity verification beforehand to ensure the security of your data.

In the course of operating the Platform, your personal data may be stored or processed on servers located outside Malaysia. However, cuci71 ensures that any such data transfer is carried out with adequate safeguards, including:

• Only transfer data to countries or regions with an equivalent or higher level of data protection.
• Using legally binding standard data transfer agreements with all data processors outside Malaysia.
• Ensuring all data is encrypted in transit using the latest TLS protocols.

Cuci71 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following are general guidelines for our retention periods:

• Active Account Data: Retained for as long as your account is active and for the required period after account closure for audit and legal compliance purposes (typically 7 years).
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial legislation and anti-money laundering requirements.
• Communication Logs: Customer support records and communications are retained for 3 years.
• Technical Data & System Logs: Retained for 90 days for security and troubleshooting purposes.

When data is no longer needed, we will delete or destroy it in a secure and irreversible manner.

The cuci71 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that data has been collected from a person under 18, we will immediately delete that data and close the account in question.

Cuci71 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new Platform features. Whenever material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying clear notices on the Platform regarding changes made.
• Sending email notifications to registered members for significant changes.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the cuci71 Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the cuci71 website and App

We are committed to responding to all privacy-related enquiries within 14 business days. For urgent data security issues, our response will be faster.