cuci12 Privacy Policy

1 Who We Are

cuci12 ("we", "us", "our") operates the online gaming platform accessible at cuci12.co and all associated subdomains. cuci12 is the data controller in respect of personal data collected from players and visitors who access the platform.

cuci12 operates under an international gaming authority licence and processes personal data in accordance with the obligations of that licence, applicable data protection legislation, and this Privacy Policy. For data-related enquiries, please contact us at the details provided in Section 14 of this Policy.

2 Personal Data We Collect

cuci12 collects the following categories of personal data in the course of operating the platform:

2.1 Identity Data

• Full legal name
• Date of birth (required to verify that you are 21 years of age or older)
• Government-issued identification document number and type (for KYC verification)
• Nationality and country of residence

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address

2.3 Financial Data

• Payment method details (e.g., e-wallet identifiers, FPX bank account information — cuci12 does not store full card numbers)
• Transaction history, deposit and withdrawal records
• Account balance information

2.4 Account and Gaming Data

• Username, account ID, and login history
• Wagering history, game session records, and betting activity
• Responsible gaming settings and self-exclusion status
• Customer support interaction records

2.5 Technical Data

• IP address, device type, operating system, and browser information
• Platform access logs and session timestamps
• Cookie identifiers and analytics data

3 How We Collect Your Data

cuci12 collects personal data through the following means:

• Direct submission: When you register a cuci12 account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings, you provide data directly to us.
• Automated collection: When you access cuci12.co, our systems automatically collect technical data including IP address, device identifiers, and session activity through server logs and cookies.
• Third-party verification: Where required for KYC compliance, cuci12 may receive identity verification results from authorised third-party identity verification service providers.
• Payment processors: Transaction confirmation data is received from payment processors handling deposits and withdrawals via Touch 'n Go eWallet, Boost, FPX, and other supported payment methods.

4 Purpose and Use of Your Data

cuci12 processes your personal data for the following purposes:

• Account registration and management: To create and maintain your cuci12 account, authenticate your identity at login, and manage your account settings.
• Identity verification (KYC/AML): To verify that you are 21 or older, confirm your identity, and meet anti-money laundering obligations under our gaming licence.
• Transaction processing: To process deposits, withdrawals, and internal account transfers in Malaysian Ringgit (MYR) via your selected payment method.
• Platform operation and improvement: To provide and maintain the cuci12 gaming platform, diagnose technical issues, and improve platform performance and user experience.
• Customer support: To respond to and resolve support enquiries, complaints, and account-related requests.
• Responsible gaming: To monitor gaming activity, apply responsible gaming tools at your request, and identify patterns that may indicate problem gambling behaviour.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and platform abuse.
• Regulatory compliance: To meet obligations under our international gaming authority licence, applicable data protection law, and anti-money laundering regulations.
• Marketing communications: Where you have provided consent, to send you information about cuci12 promotions, bonuses, and platform updates. You may withdraw consent at any time via your account settings.

5 Legal Basis for Processing

cuci12 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and cuci12 — including account creation, transaction processing, and platform access.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations under our gaming licence and applicable Malaysian and international regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and operational analytics, where those interests do not override your rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

cuci12 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients in limited circumstances:

• Identity verification providers: Authorised third-party KYC service providers who assist in verifying player identity documents and age.
• Payment service providers: Financial institutions and payment processors (including FPX gateway operators, e-wallet providers such as Touch 'n Go and Boost, and banking partners including Maybank and CIMB) as necessary to process transactions.
• Gaming software providers: Game studios and platform technology providers who require access to account or session data to operate licensed game content on the cuci12 platform.
• Regulatory authorities: Our gaming authority licensor and other relevant regulatory or law enforcement bodies where disclosure is required by law, court order, or regulatory obligation.
• Professional advisers: Legal, compliance, audit, and IT security advisers acting on behalf of cuci12, subject to confidentiality obligations.

7 International Data Transfers

cuci12's platform infrastructure and third-party service providers may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to the standards applicable in Malaysia, cuci12 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to protect your data in transit and at the destination.

8 Data Retention

cuci12 retains personal data for the following periods:

• Active accounts: Personal data is retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with our gaming licence obligations.
• KYC and AML records: Identity and transaction verification records are retained for a minimum of five (5) years following the end of the business relationship, as required by anti-money laundering regulations.
• Technical logs: Server access and session logs are retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing consent records: Consent records are retained for three (3) years from the date of consent withdrawal to demonstrate compliance.

Following expiry of the applicable retention period, data is securely deleted or anonymised in accordance with cuci12's data destruction procedures.

9 Cookies and Tracking Technologies

cuci12 uses cookies and similar tracking technologies on cuci12.co for the following purposes:

• Essential cookies: Required for core platform functionality including session authentication and account security. These cannot be disabled without affecting platform operation.
• Performance cookies: Collect anonymised analytics data about how visitors use cuci12.co, enabling us to improve platform performance and user experience.
• Fraud prevention cookies: Help identify and prevent fraudulent account access and suspicious platform activity.

cuci12 does not use third-party advertising or targeting cookies. You can manage cookie preferences through your browser settings, although disabling essential cookies may affect your ability to log in and use the cuci12 platform.

10 Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by cuci12:

• Right of access: You may request a copy of the personal data cuci12 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cuci12's legal retention obligations.
• Right to restriction: You may request that cuci12 restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a machine-readable copy of your data.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact cuci12 via the details in Section 14. We will respond to requests within thirty (30) calendar days. cuci12 may need to verify your identity before processing a data rights request.

11 Data Security

cuci12 implements technical and organisational security measures appropriate to the risk presented by the personal data we process. These include:

• SSL/TLS encryption for all data transmitted between your device and cuci12 servers
• Encrypted storage of sensitive data at rest
• Role-based access controls limiting data access to authorised personnel only
• Regular security assessments and penetration testing
• Incident response procedures for detecting and responding to data breaches

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cuci12 will notify affected players without undue delay in accordance with applicable law.

Please note that no data transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the security of your cuci12 login credentials.

12 Children and Minors

cuci12 is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If cuci12 becomes aware that a person under 21 has provided personal data, the account will be immediately closed, data will be deleted (subject to any mandatory legal retention requirements), and any funds will be returned at cuci12's discretion following review.

If you believe that a minor has registered on cuci12, please contact us immediately at the details in Section 14.

13 Changes to This Privacy Policy

cuci12 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via their registered email address and/or via a notice on the cuci12 platform, with not less than fourteen (14) days' notice prior to the effective date of the change, except where immediate amendment is required by law.

The date of the most recent revision is displayed at the top of this page. Continued use of the cuci12 platform following an update to this Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, please close your account and cease using the platform.

14 Contact and Data Protection

For questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by cuci12, please contact us:

• Live Chat: Available 24/7 via the cuci12 platform — the fastest route for general account and data queries.
• Email: support@cuci12.co (plain text — not a clickable link)

Data rights requests will be acknowledged within five (5) business days and responded to within thirty (30) calendar days. If your request is complex or numerous, we will notify you and may extend this period by a further two months, providing written explanation.

If you are not satisfied with cuci12's response to a data-related complaint, you may escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution mechanism provided under cuci12's gaming licence.