cuci2vip Privacy Policy

1. Introduction and Scope

1.1 cuci2vip is committed to protecting the privacy and personal data of all individuals who interact with the Platform, including registered Members, visitors, and prospective players. This Policy applies to all personal data collected in connection with the cuci2vip platform, whether collected online via cuci2vip.org, through customer support interactions, or through payment processing systems integrated with the Platform.

1.2 This Policy governs the processing of personal data relating to natural persons ("data subjects") and does not apply to data relating to legal entities or organisations. It applies regardless of the device or method used to access cuci2vip, whether by desktop browser, mobile browser, or any other supported access method.

1.3 cuci2vip processes personal data in accordance with applicable international data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These principles guide every aspect of our data handling practices across the entire cuci2vip operation.

2. Data Controller Information

2.1 For the purposes of this Policy, cuci2vip acts as the data controller in respect of all personal data collected and processed through the cuci2vip platform. As data controller, cuci2vip determines the purposes and means of processing personal data as described in this Policy.

2.2 Enquiries relating to data protection, including requests to exercise data subject rights, may be directed to the cuci2vip data team via the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

3.1 cuci2vip collects and processes the following categories of personal data, subject to the nature of your interaction with the Platform:

3.2 cuci2vip does not collect special categories of personal data (such as racial or ethnic origin, health data, biometric data, or political opinions) unless specifically required by applicable law or regulatory obligation, and only with your explicit consent where such consent is the applicable lawful basis.

4. How We Collect Your Data

4.1 Directly from you — when you register a cuci2vip account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotions.

4.2 Automatically — through cookies, server logs, and device fingerprinting technologies when you access the cuci2vip platform, as described in Section 10.

4.3 From third parties — including payment processors (such as Touch 'n Go, Boost, and FPX bank partners), identity verification service providers, fraud detection agencies, and gaming software licensors, each of whom may share data with cuci2vip as necessary to deliver the services you have requested.

5. Purposes and Legal Basis for Processing

5.1 cuci2vip processes your personal data for the following purposes, each supported by a lawful basis:

• Account creation and management — necessary for the performance of the contract between you and cuci2vip;
• Identity and age verification (KYC) — compliance with legal obligation and legitimate interest in preventing underage gambling and fraud;
• Processing deposits and withdrawals — performance of contract and compliance with financial regulations;
• Game provision and session management — performance of contract;
• Bonus and promotion administration — performance of contract and legitimate interests;
• Fraud detection and prevention — legitimate interests and compliance with legal obligations;
• Anti-money laundering (AML) compliance — compliance with legal obligation;
• Customer support — performance of contract and legitimate interests;
• Responsible gaming monitoring — legitimate interests and compliance with gaming authority requirements;
• Marketing communications — consent (where you have opted in to receive such communications from cuci2vip);
• Platform analytics and improvement — legitimate interests in improving the cuci2vip service.

5.2 Where cuci2vip relies on legitimate interests as the lawful basis for processing, we have assessed that our interests are not overridden by your rights and freedoms, having regard to the nature of the data and the context of the processing.

6. Data Sharing and Disclosure

6.1 cuci2vip does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only as necessary and only with the following categories of recipients:

• Payment service providers — to process deposits and withdrawals via Touch 'n Go, Boost, DuitNow, FPX, and affiliated banking partners;
• Identity verification providers — to perform KYC and AML checks on cuci2vip account holders;
• Gaming software licensors — to deliver live casino, slot, and sportsbook products through the cuci2vip platform;
• Fraud detection services — to identify and prevent fraudulent or suspicious activity on the Platform;
• IT and cloud infrastructure providers — who host and maintain cuci2vip's platform infrastructure under strict data processing agreements;
• Legal and regulatory authorities — where cuci2vip is required by applicable law, court order, or regulatory mandate to disclose data.

6.2 All third-party recipients who process personal data on behalf of cuci2vip are subject to written data processing agreements that impose obligations equivalent to those applicable to cuci2vip under this Policy, including requirements for confidentiality, security, and use limitation.

7. International Data Transfers

7.1 Some of cuci2vip's data processors and service providers may be located outside Malaysia. Where personal data is transferred internationally, cuci2vip ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms recognised under applicable data protection frameworks.

7.2 By using the cuci2vip platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where such transfers are necessary for the delivery of services, subject always to the protections described in this Policy.

8. Data Retention

8.1 cuci2vip retains personal data for the period necessary to fulfil the purposes set out in this Policy, subject to applicable legal requirements for longer retention. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML and gaming authority record-keeping requirements;
• Transaction and financial data is retained for a minimum of seven (7) years;
• Gaming session data is retained for a minimum of two (2) years;
• Communications data (support interactions) is retained for two (2) years;
• Marketing consent records are retained for the duration of consent plus one (1) year following withdrawal.

8.2 Upon expiry of the applicable retention period, cuci2vip will securely delete or anonymise personal data in accordance with our data disposal procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

9.1 cuci2vip implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, destruction, and loss. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cuci2vip platform;
• One-way cryptographic hashing for all account passwords — plaintext passwords are never stored;
• Role-based access controls limiting internal data access to personnel with a documented business need;
• Regular penetration testing and vulnerability assessments by independent security professionals;
• Intrusion detection systems and anomaly monitoring on all production infrastructure;
• Secure data centre facilities with physical access controls for all servers hosting cuci2vip data.

9.2 Despite these measures, no data transmission over the internet or electronic storage system is guaranteed to be completely secure. cuci2vip cannot warrant the absolute security of your data but will notify affected Members and relevant authorities promptly in the event of a confirmed personal data breach, in accordance with applicable notification obligations.

10. Cookies and Tracking Technologies

10.1 cuci2vip uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security. These cannot be disabled without impairing your use of cuci2vip;
• Functional Cookies: Remember your preferences (language, deposit method, game history) to provide a personalised cuci2vip experience;
• Analytics Cookies: Collect aggregated, anonymised data on how Members use the Platform to help us improve cuci2vip's performance and user experience;
• Fraud Prevention Cookies: Support device fingerprinting and session integrity checks to protect your cuci2vip account from unauthorised access.

10.2 You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cuci2vip platform. cuci2vip does not use third-party advertising or retargeting cookies.

11. Your Rights as a Data Subject

11.1 Subject to applicable law and legitimate processing grounds, you have the following rights in relation to your personal data held by cuci2vip:

• Right of Access: Request a copy of the personal data cuci2vip holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where no legitimate basis for retention exists, subject to legal retention obligations;
• Right to Restriction: Request that cuci2vip restricts processing of your data in certain circumstances;
• Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another controller where technically feasible;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Withdraw consent for processing activities based on consent at any time, without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, please contact cuci2vip through the details in Section 14. We will respond to verified requests within 30 days. Requests may be subject to identity verification to protect against unauthorised access to account data.

12. Minors and Age Verification

12.1 The cuci2vip platform is strictly for adults aged 21 and above. cuci2vip does not knowingly collect or process personal data from individuals under the age of 21. Where cuci2vip becomes aware that personal data has been collected from an underage individual, the account will be immediately closed and data securely deleted, subject to any legal retention obligations arising from the investigation.

12.2 cuci2vip employs mandatory age verification as part of the KYC process and reserves the right to request identity documentation to confirm age compliance at any stage of the account lifecycle.

13. Changes to This Privacy Policy

13.1 cuci2vip may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or gaming authority requirements. The current version will always be published on this page with the effective date indicated at the top.

13.2 Where material changes are made that affect your rights or the way we process your data, cuci2vip will notify registered Members by email to the address on file or via a prominent notice upon next login. Continued use of the cuci2vip platform following notification constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

14.1 For all privacy-related enquiries — including requests to exercise data subject rights, questions about this Policy, or reports of potential data security concerns — please contact the cuci2vip data team through the following channel:

14.2 cuci2vip will handle all privacy enquiries with discretion and in accordance with this Policy. We may need to verify your identity before processing a data subject rights request to ensure the security of your cuci2vip account data.