cuci44 Privacy Policy

1. Introduction

cuci44 is committed to protecting the personal data of all players who use its online casino and sportsbook platform. We take our data protection obligations seriously — not merely as a regulatory requirement, but as a fundamental aspect of the trust relationship we maintain with Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Ipoh, and beyond.

This Policy is intended to be transparent and plain-spoken. Where legal language is necessary, we have aimed to supplement it with plain-English explanations so that every cuci44 player understands exactly how their data is handled.

2. Data Controller

cuci44 is the data controller in respect of all personal data collected through the platform at cuci44.app. For all data-related enquiries, requests, or complaints, the designated contact is: [email protected].

3. Personal Data We Collect

cuci44 collects the following categories of personal data:

• Identity data: full legal name, date of birth, gender, nationality, copy of Malaysian IC (MyKad) or passport submitted for KYC verification;
• Contact data: email address, mobile phone number, residential address (including city and postcode);
• Account data: username, encrypted password hash, account preferences, responsible gaming limit settings;
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g., last four digits of bank account, e-wallet account reference), balance history. cuci44 does not store full card numbers or full bank account numbers;
• Gaming data: game play history, bet amounts, win/loss records, session durations, bonus usage records;
• Technical data: IP address, device type, operating system, browser type, time zone, approximate geographic location (country/city level), cookies and session tokens;
• Communications data: records of support chat conversations, emails sent to and from cuci44, and any information voluntarily provided in the course of support interactions.

4. How We Collect Your Data

cuci44 collects personal data through the following means:

• Direct provision: information you enter during registration, KYC submission, deposit/withdrawal requests, or contact with support;
• Automated collection: technical and usage data collected automatically when you access cuci44, including via cookies, server logs, and analytics tools;
• Third-party sources: KYC verification providers who cross-reference identity documents against authoritative databases; payment processors who confirm transaction outcomes; fraud prevention services that provide risk signals associated with IP addresses or device fingerprints.

5. Purpose and Legal Basis for Processing

cuci44 processes personal data for the following purposes and on the following legal bases:

• Account creation and service delivery — necessary for the performance of the contract between you and cuci44 (the Terms and Conditions);
• KYC identity and age verification — compliance with legal obligations under the Platform's international gaming authority licence, including anti-money laundering (AML) requirements;
• Payment processing and fraud prevention — legitimate interests of cuci44 in preventing financial crime and ensuring payment integrity, as well as compliance with AML obligations;
• Customer support — performance of the contract and legitimate interests in resolving player queries effectively;
• Responsible gaming monitoring — legal obligation under the Platform's gaming licence to identify and assist at-risk players;
• Platform security and abuse prevention — legitimate interests of cuci44 in maintaining platform integrity and protecting all players;
• Marketing communications — consent, which you provide at registration and may withdraw at any time;
• Analytics and platform improvement — legitimate interests of cuci44 in understanding how the platform is used in order to improve it, using aggregated and anonymised data wherever possible.

6. Data Sharing with Third Parties

6.1 cuci44 does not sell, rent, exchange, or otherwise transfer your personal data to third parties for their own commercial purposes under any circumstances.

6.2 cuci44 shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment service providers — Touch n Go eWallet, Boost, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, and others), and other payment processors, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers — accredited third-party identity verification services that cross-check your documents and personal data against authoritative identity databases;
• Fraud prevention and AML services — specialist providers that analyse transaction patterns and device signals to detect and prevent money laundering, fraud, and platform abuse;
• Game content providers — live casino and slot providers (including Evolution Gaming, Pragmatic Play Live, SA Gaming, and others) receive session tokens necessary to launch games within your authenticated session, but do not receive your full personal profile;
• Regulatory and law enforcement authorities — where cuci44 is required by law, court order, or regulatory direction to disclose personal data;
• Professional advisors — lawyers, auditors, and accountants where disclosure is necessary for the provision of professional services to cuci44, subject to confidentiality obligations.

6.3 All third-party service providers engaged by cuci44 are subject to contractual data processing agreements that require them to process personal data only for the specified purpose and to maintain appropriate security standards.

7. International Data Transfers

Some of cuci44's third-party service providers are located outside Malaysia. Where personal data is transferred to recipients in countries that may not provide a level of data protection equivalent to that in Malaysia, cuci44 implements appropriate safeguards including standard contractual clauses, contractual obligations of confidentiality, and security requirements aligned with internationally recognised standards. By using cuci44, you consent to such transfers where they are necessary for the provision of services.

8. Data Retention

8.1 cuci44 retains personal data for as long as your Account is active and for a period thereafter as required by applicable laws and our licensing obligations. Specifically:

• Account and identity data is retained for a minimum of 5 years following Account closure, in compliance with AML record-keeping requirements;
• Financial transaction records are retained for a minimum of 5 years following the transaction date;
• Gaming history records are retained for a minimum of 3 years following the relevant gaming session;
• Support communication records are retained for 3 years following the conversation.

8.2 Following the expiry of mandatory retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.

9. Security Measures

cuci44 implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data in transit between user devices and cuci44 servers;
• Encryption at rest for sensitive data fields including KYC document copies and payment method identifiers;
• Password hashing using industry-standard algorithms — cuci44 staff cannot read player passwords;
• Role-based access controls ensuring that cuci44 staff access only the personal data necessary for their specific job function;
• Regular security assessments and penetration testing by qualified third-party security professionals;
• Incident response procedures for managing and notifying affected parties in the event of a data breach.

10. Cookies and Tracking Technologies

10.1 cuci44 uses the following categories of cookies:

• Strictly necessary cookies — session authentication tokens and security cookies essential for the platform to function. These cannot be disabled without preventing you from using cuci44;
• Analytics cookies — used to understand aggregate usage patterns on the platform, such as which pages are visited most frequently and how players navigate between sections. These use anonymised data and are used solely to improve cuci44. You may opt out of analytics cookies via our cookie preference tool.

10.2 cuci44 does not use advertising cookies, retargeting pixels, or any third-party tracking technologies designed to track your behaviour across other websites.

11. Your Data Protection Rights

Subject to applicable law and cuci44's regulatory obligations, you have the following rights in respect of your personal data held by cuci44:

• Right of access — to request a copy of all personal data cuci44 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to our legal retention obligations;
• Right to restrict processing — to request that cuci44 limits how it uses your data in certain circumstances;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — to withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing;
• Right to data portability — to request your personal data in a structured, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, contact cuci44 at [email protected]. cuci44 will respond within 30 calendar days of receiving a verifiable request. We may need to verify your identity before processing the request.

12. Children and Minors

cuci44 services are strictly for individuals aged 21 and above. cuci44 does not knowingly collect personal data from individuals under the age of 21. If cuci44 becomes aware that personal data has been collected from a person under 21, that Account will be immediately closed, the data deleted, and any deposits refunded in accordance with our Terms and applicable law. If you believe a minor has registered a cuci44 Account, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

cuci44 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our services. Material changes will be communicated to registered Players via email to the address on file at least 14 days before they take effect. The "Last Updated" date at the top of this page reflects when the most recent version was published. Your continued use of cuci44 following notification of changes constitutes acceptance of the updated Policy.

14. Contact Us

For all privacy-related enquiries, requests to exercise your data rights, or complaints about how cuci44 handles your personal data, please contact our dedicated data protection contact at: [email protected]. We aim to acknowledge all privacy enquiries within 48 hours and resolve them fully within 30 calendar days.

If you are not satisfied with cuci44's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.