Mycuci2 Privacy Policy – Malaysian User Data Protection

Mycuci2 ("we", "our platform") operates the website and services accessible at mycuci2.app. We understand how important privacy is to you, and we do not take this responsibility lightly. From day one, protecting users' personal data has been one of our core priorities.

This Privacy Policy applies to all users who register an account, browse the website, use the mycuci2 mobile app, or interact with any of our services. It also covers information collected through our affiliate program and official communication channels.

If you do not agree with any part of this Privacy Policy, you are advised not to use the mycuci2 platform. If you have any questions before registering, our support team is available to assist via live chat.

Mycuci2 collects several categories of personal data depending on how you interact with our platform. Below is a summary of the types of data we collect:

We do not collect sensitive information such as medical data, political views, religious affiliations, or biometric data unless required by applicable law. All data collection is carried out transparently and with your full knowledge.

The personal data we collect is used responsibly for the following purposes only:

• Account management: Registration, identity verification, secure login and user profile management.
• Transaction processing: Process deposits, withdrawals and bonus payments quickly and accurately.
• KYC Verification: Fulfill anti-money laundering (AML) obligations and verify the age of users.
• Customer support: Respond to inquiries, complaints and support requests more efficiently.
• Platform security: Detect and prevent fraud, unauthorized access and suspicious activity.
• Service improvement: Analyze usage patterns to improve the overall user experience.
• Marketing communications: Send promotional information and exclusive offers — only to users who have consented to receive them.
• Legal compliance: Meet the reporting requirements and legal obligations set by Malaysian authorities.

Mycuci2 processes your personal data on valid legal bases under Malaysia's PDPA. Data processing is only carried out when at least one of the following bases is met:

• Consent: You have given explicit consent for specific processing purposes, such as receiving marketing communications.
• Contract fulfillment: Processing is required to fulfill the service agreement between you and mycuci2, including payment processing and account management.
• Legal obligation: Processing is required to fulfill legal obligations imposed on mycuci2, including AML requirements and tax reporting.
• Legitimate interest: Processing is required for the legitimate interests of mycuci2 or third parties, such as fraud prevention and platform security enhancement, provided those interests do not override your fundamental rights.

Mycuci2 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the context of legitimate platform operations, we may share data with the following categories of selected third parties:

• Payment service providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and partner banks — to process your financial transactions securely.
• Gaming software providers: Licensed game development companies that supply casino, sports, and slot content on the mycuci2 platform.
• Cloud service providers: Server and data storage infrastructure integrated with international security standards.
• Regulatory authorities: Government bodies, law enforcement agencies, or courts when required under applicable Malaysian law.
• Identity verification services: Approved third-party KYC providers to verify user identity documents.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes. We ensure every partner upholds data protection standards consistent with our own commitment.

Protecting your personal data from unauthorized access, misuse, disclosure or destruction is an absolute priority for mycuci2. We continuously invest in robust security infrastructure and apply multiple layers of technical and organizational protection.

Key security measures we have implemented include:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data stored in our databases.
• Two-factor authentication (2FA) for user accounts and internal staff access.
• 24/7 security monitoring with real-time intrusion detection systems.
• Regular security audits by independent cybersecurity experts.
• Strict internal access controls — only authorized staff may access user data, and only to the extent required for their duties.
• A comprehensive incident response plan to address any data breaches swiftly.

Mycuci2 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. When data is no longer needed, it will be securely deleted or anonymised.

• Active account data: Retained for the duration your account remains active and in use.
• Financial transaction data: Retained for a minimum of 7 years in line with Malaysian financial and tax legal requirements.
• KYC records: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML requirements.
• Support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical data & server logs: Retained for 90 days for security and technical troubleshooting purposes.

Once the retention period expires, your data will be permanently deleted from all our systems and backups in accordance with secure, standardized data deletion procedures.

Mycuci2 uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and maintain the security of your login session. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as Login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect information on how you use our website to help us improve its performance. All data is collected anonymously.
• Functionality cookies: Remember your preferences and settings such as language, currency and preferred display format.
• Analytics cookies: Help us understand usage patterns and user behavior to improve the platform's design and content.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect your experience on the mycuci2 platform.

Under Malaysia's PDPA and the mycuci2 privacy policy, you have the following rights regarding your personal data:

To exercise any of the rights above, contact our privacy team by email at [email protected] or via the platform's live chat. Requests will be processed within 14 business days of receipt.

The mycuci2 platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data of minors. Should we become aware that a minor's data has been collected without our knowledge, we will take immediate steps to delete it.

If you are a parent or guardian and believe your underage child has registered a mycuci2 account, please contact us immediately at [email protected]. We will investigate and close the account, and delete all related data as quickly as possible.

Mycuci2 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All changes will be published on this page along with a new effective date.

For significant or material changes, we will notify registered users via in-platform notifications or email at least 7 days before the changes take effect. Continued use of the mycuci2 platform after changes are published constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about how mycuci2 handles your personal data, or wish to exercise any of your rights under the PDPA, our team is ready to assist you at any time.

• Live Chat: The fastest way — available directly on the mycuci2 platform, 24/7 without interruption.
• Privacy Email: [email protected] — for specific enquiries related to personal data and privacy.
• Response Time: Under 3 minutes via live chat; within 2 business days via email.

If you are not satisfied with how we have handled your complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), which is the responsible regulatory authority under the PDPA 2010.