Privacy Policy cuci3 – Personal Data Protection for Malaysia Members

Welcome to the cuci3 Privacy Policy page. We understand that entrusting your personal information to any online platform requires strong confidence. At cuci3, we do not take that trust lightly.

This policy applies to all users who register, browse, or interact with the cuci3 platform via the website cuci3.net or our official mobile app. By registering as a cuci3 member, you agree to the practices described in this document. If you disagree with any part of this policy, you may contact our team for further clarification before continuing to use the platform.

Cuci3 collects your personal data through several channels — during account registration, during platform use, and automatically via website tracking technologies. This collection is carried out on the basis of legitimate operational necessity and compliance with Malaysian law.

Data you provide directly:

Automatically collected data:

• IP address and approximate location — used for security verification and geographic compliance.
• Device and browser type — helps us detect suspicious login attempts from new devices.
• Session records and usage time — used for security analysis and user experience improvement.
• Cookie and tracking technology data — to ensure platform functions run smoothly and your session remains secure.

Personal data collected by cuci3 is used responsibly for specific, legitimate purposes. We do not use your data for purposes unrelated to platform operations without your explicit consent.

• Account management: Creating, verifying, and maintaining your member account so it functions properly.
• Transaction processing: Ensuring deposits and withdrawals to your bank account or eWallet are processed accurately and securely.
• Identity verification (KYC): Meeting legal compliance requirements related to anti-money laundering (AML) and fraud prevention.
• Account security: Detecting and preventing unauthorized access, fraud, and platform abuse through monitoring of unusual usage patterns.
• Customer support: Providing relevant and effective assistance based on your account history and previously reported issues.
• Platform communication: Sending important account-related notifications, promotions you have subscribed to, and terms updates that affect you.
• Platform improvements: Analyzing usage patterns in aggregate (not individually) to improve the gaming experience and technical stability.
• Legal compliance: Complying with legal obligations under applicable Malaysian law, including lawful requests from authorities.

Cuci3 does not use individuals' personal data to make automated decisions that materially affect you without human intervention. Where cases require automated review (such as fraud detection), the final decision is still reviewed by our team before any action is taken on your account.

Cuci3 does not sell, rent, or trade your personal data to any party for marketing or advertising purposes. This is a core principle we will not compromise.

However, there are situations where cuci3 needs to share the minimum required data with certain parties:

• Payment service providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and member banks involved in processing your transactions. Data shared is limited strictly to information required to complete the transaction.
• Game providers: Game software providers such as slot and fish shooting game providers receive only the minimum session data required to run games properly. They do not receive your full personal identification information.
• Security services: Fraud analytics and cybersecurity service providers that assist cuci3 in detecting suspicious activity. This data sharing is conducted under strict confidentiality agreements.
• Lawful authorities: cuci3 will disclose required data to Malaysian authorities when mandated by law, court order, or official investigations related to fraud or financial crime.

Cuci3 continuously invests in security infrastructure to ensure your personal data is protected at every stage — in transit, in processing, and in storage.

• 256-bit SSL encryption: All communications between your browser or app and cuci3's servers are encrypted using TLS 1.3 protocol with 256-bit key length — the same standard used by leading banking institutions in Malaysia.
• Two-factor authentication (2FA): Every cuci3 account is protected with mandatory 2FA. This additional security layer ensures that even if your password falls into the wrong hands, they still cannot access your account without the verification code from your device.
• 24/7 Monitoring: cuci3's security monitoring system operates 24/7 to detect unusual login patterns, access attempts from new locations, and suspicious transaction activity.
• Encrypted data storage: Sensitive data such as bank details and identification numbers are stored in encrypted format within databases isolated from public access.
• Regular security audits: cuci3 conducts internal security audits and engages third-party security assessment services on a regular basis to ensure our systems consistently meet current security standards.

While cuci3 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of a data breach affecting your information, cuci3 is committed to notifying you within 72 hours of confirming the incident.

Cuci3 uses cookies and similar tracking technologies to keep the platform running smoothly, maintain the security of your session, and improve your experience as a user over time. Below are the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect core platform functions, including the ability to log in and conduct transactions securely.

Cuci3 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account is active and up to 7 years after account closure, in accordance with financial record-keeping requirements under Malaysian law.
• Transaction records: Retained for a minimum of 7 years for anti-money laundering (AMLA) compliance and financial audit requirements.
• Support communication logs: Retained for 2 years after case resolution for reference and service quality improvement purposes.
• Aggregated analytics data: Anonymised data (with all personal identifiers removed) may be retained indefinitely, as it can no longer be linked to any specific individual.

If you request account closure, cuci3 will delete or anonymize personal data no longer needed for legal compliance purposes within 30 days. Data that must be retained for legal purposes will be stored in an isolated system and not used for any operational purpose.

As a registered cuci3 user in Malaysia, you have certain rights regarding your personal data. cuci3 fully respects and facilitates the exercise of these rights.

To exercise any of the above rights, contact the cuci3 support team via live chat, available 24/7. We will verify your identity before processing any request related to personal data for security purposes.

Cuci3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, new legal requirements, or improvements to how we protect your data.

For any significant changes — such as changes to how we use your data or the categories of third parties receiving your data — cuci3 will:

• Sending email notifications to all active members at least 14 days before the changes take effect.
• Displaying clear notices on the cuci3 website homepage and within the mobile app.
• Updating the "Last Updated" date at the top of this document.

Continued use of the cuci3 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you disagree, you have the right to close your account and withdraw your balance before the effective date.

If you have any questions, concerns, or complaints regarding how cuci3 handles your personal data, our team is ready to assist you at any time.

• Live Chat: The fastest way to get a response — typically within 2 minutes. Available 24 hours a day, 7 days a week.
• Email: [email protected] — for written enquiries requiring documentation or more detailed information. We respond within 24 business hours.
• Official complaints: If you are not satisfied with cuci3's response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.