Data Protection

Cuci99 Privacy Policy – Personal Data Protection for Malaysian Players

At cuci99, your privacy is more than a legal obligation — it is a core value. This policy transparently explains how we collect, use, store, and protect your personal data as a player on our platform.

Updated: 1 January 2026 256-bit SSL Active Applicable in: Malaysia Language: ms-MY
Privacy Commitment

How cuci99 Protects Your Personal Data

Six data protection principles cuci99 upholds to safeguard the security and privacy of every Malaysian player.

256-bit SSL Encryption at All Times

All data transmitted between your device and cuci99's servers is encrypted using 256-bit SSL protocol — the same level of encryption used by Malaysia's major banks such as Maybank and CIMB. Your data cannot be read by any third party during transmission.

No Sharing Without Consent

Cuci99 does not sell, rent, or share players' personal data with any third party for marketing purposes without your explicit consent. Exceptions apply only where required by applicable Malaysian law.

Secure & Limited Data Retention

Player data is stored on servers protected by strict access controls. Only cuci99 staff who require access to perform their job duties are permitted to view player data, and all access is logged and audited.

Passwords Are Not Stored in Plain Text

Your cuci99 account password is never stored in plain text. It undergoes a one-way cryptographic hashing process, ensuring that even cuci99 staff cannot view your actual password.

Full Data Access & Control Rights

You have the right to access, correct, amend, or request deletion of your personal data at any time. All requests will be processed within 14 business days by cuci99's support team, available 24/7.

Malaysia PDPA Compliance

Cuci99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Personal data is collected and processed only for legitimate purposes that are necessary and aligned with players' interests.

Data Flow

How Your Data Is Processed at cuci99

A brief overview of your personal data flow — from collection to protection.

📝
You Register
Basic information collected
🔐
Encrypted
256-bit SSL active
💾
Stored Securely
Protected servers
🔍
Lawfully Used
Stated purpose
🛡️
Player Rights
Access, correct, delete

1Privacy Policy Introduction & Scope

This Privacy Policy ("Policy") is published by cuci99 ("we", "Platform") and applies to all players, visitors, and users of the cuci99 platform at cuci99.click. This policy describes our privacy practices regarding the collection, use, disclosure, retention, and protection of your personal data.

By registering as a cuci99 member, accessing our platform, or using any of our services, you agree to the terms of this Privacy Policy. Please read it carefully. This Policy should be read together with Terms & Conditions and Responsible Gaming Policy cuci99.

cuci99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). As a data controller, we are responsible for ensuring that all personal data processing is lawful, fair, and transparent.

2Types of Personal Data Collected

Cuci99 collects the following categories of personal data from our players. Collection is carried out only for legitimate purposes that are necessary for platform operations.

Data Categories Type of Information How It's Collected
Identity Data Full name, MyKad number, date of birth, gender, nationality Registration forms, KYC verification
Contact Data Email address, phone number, Malaysian residential address Account registration, user profile
Financial Data Bank account numbers, digital wallet details (TNG, GrabPay, DuitNow), transaction history Deposit/withdrawal process
Usage Data Game history, betting activity, game preferences, play duration Automated by the platform system
Technical Data IP address, device type, web browser, operating system, cookie data Server logs, cookies, pixel tracking
Communication Data Live chat transcripts, support emails, WhatsApp/Telegram logs Interactions with the support team

Cuci99 does not collect sensitive personal data such as health information, religious beliefs, or political views, unless specifically required for our responsible gaming programme.

3Data Collection & Usage Purposes

Every piece of data collected by cuci99 has a clear and justified purpose. We do not collect data beyond what is necessary for the operation of our platform.

  • Account management: Creating, verifying, and maintaining your cuci99 player account
  • Payment processing: Verifying and processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks) and withdrawal of winnings
  • Identity verification (KYC): Meeting anti-money laundering (AML) regulatory requirements and preventing fraud
  • Service provision: Enabling you to play slots, Live Casino, baccarat, Malaysia Super League football, badminton, live matches, and all cuci99 services
  • Customer support: Resolving player enquiries, complaints, and technical issues
  • Security & fraud prevention: Detecting and preventing fraud, money laundering, and multiple account activity
  • Legal compliance: Fulfil legal obligations under Malaysia's PDPA and related regulations
  • Platform improvements: Analysing usage patterns to improve cuci99's products and services
  • Marketing communications: Sending information about bonuses, promotions, and platform updates (with your consent)

For marketing communications, you may opt out of receiving promotional emails or messages at any time by updating your notification preferences in your cuci99 account settings or by contacting our support team. Opting out does not affect your access to the platform.

4Disclosure & Third-Party Data Sharing

Cuci99 does not sell, rent, or trade players' personal data to any third party. However, your data may be shared in the following limited circumstances:

  • Contracted service providers: Companies providing services to cuci99, such as game software providers (under strict confidentiality agreements), server infrastructure providers, and approved payment processors. They may only use your data for the specific purposes contracted with cuci99
  • Regulatory authority: When required by Malaysian law, court order, or a legitimate authority request
  • Fraud prevention: With industry bodies and fraud prevention agencies to protect cuci99 and our players from illegal activity
  • Business transfers: In the event of a merger, acquisition, or sale of cuci99 assets, player data may be transferred to the successor entity with appropriate notice to players

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are required to maintain a level of data protection at least equivalent to cuci99's standards.

5Data Security Measures

Cuci99 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

Technical security measures in place:

  • Data encryption in transit using 256-bit SSL/TLS
  • Encryption at rest for sensitive information
  • Password hashing using an irreversible bcrypt algorithm
  • Two-factor authentication (2FA) is available for all player accounts
  • Intrusion detection systems (IDS/IPS) that monitor suspicious activity 24/7
  • Layered firewall and network segmentation
  • Regular security audits conducted by independent third parties
  • Regular vulnerability scanning

Organisational security measures in place:

  • Role-based access control (RBAC) — staff are granted access only to the data required for their specific responsibilities
  • Mandatory cybersecurity awareness training for all cuci99 staff
  • Clean desk and clear screen policy across all cuci99 premises
  • Non-disclosure agreements (NDAs) signed by all staff
  • Documented security incident response procedures

While cuci99 takes all reasonable steps to protect your data, no security system is 100% impenetrable. If you suspect your account has been compromised, please contact the cuci99 support team immediately via live chat.

6Data Retention Period

Cuci99 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law.

  • Active account data: For the duration of your active cuci99 account, plus 5 years after account closure (audit and legal compliance requirements)
  • Financial transaction records: 7 years from the date of transaction (as required under Malaysia's PDPA and financial legislation)
  • KYC Documents: 5 years after the end of the business relationship (AML requirement)
  • Support communication logs: 2 years from the date of last interaction
  • Analytics cookie data: Maximum 13 months
  • Technical and security logs: Rolling 12 months

Once the retention period expires, data will be securely deleted or anonymised in accordance with cuci99's internal procedures. You may request early deletion by contacting us (subject to applicable legal retention obligations).

7Your Rights Under Malaysia's PDPA

As a cuci99 player subject to Malaysia's PDPA 2010, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you within 21 business days.

Right to Correction

Request correction of any inaccurate or incomplete personal data we hold.

Right to Erasure

Request the deletion of your personal data (subject to legal obligations).

Right to Restriction of Processing

Request that we restrict how we process your data under certain circumstances.

Data Portability Right

Receiving your data in a machine-readable format for transfer to another party.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the cuci99 Data Protection Officer (DPO) team via email: privacy@cuci99.click or via live chat. All requests will be processed within 14 business days.

8Cookie & Tracking Technology Usage

Cuci99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and deliver relevant content. Cookies are small text files stored on your device when you access cuci99.click.

Cookie Types Purpose Duration
Important Maintaining login sessions, language preferences, account security Session / 30 days
Analytics Understanding usage patterns, popular pages, and time spent on the site 13 months
Marketing Displaying relevant cuci99 advertisements and promotions 90 days

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the cuci99 platform. Continued use of cuci99.click after the cookie notice is displayed constitutes consent to the use of cookies.

9Financial Data & KYC Procedures

Cuci99 is subject to anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements. This means we are required to verify a player's identity before processing withdrawals that exceed certain limits.

Financial information collected and protected by cuci99:

  • Malaysian bank account details used for withdrawals
  • Phone number linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow
  • Deposit and withdrawal history (retained for 7 years)
  • Copies of KYC documents such as MyKad and bank statements (encrypted and stored securely)

Cuci99 never stores full credit or debit card numbers. Where a bank card is used as a payment method, only the token securely generated by a registered payment processor is stored — not the actual card number. This is in accordance with PCI DSS security standards.

10Cross-Border Data Transfers

In the course of its operations, cuci99 may need to transfer your personal data to servers or service providers located outside Malaysia. This may occur when using international game software providers, analytics platforms, or cloud infrastructure.

Where such data transfers occur, cuci99 ensures that:

  • The recipient country has adequate data protection laws, or
  • The data recipient has signed a recognised Standard Contractual Clause (SCC), or
  • Equivalent alternative safeguards have been implemented

Further details on the countries and parties that receive your data are available upon request from our Data Protection Officer.

11Children's Privacy & Minor Protection

The cuci99 platform is intended solely for individuals who are 18 years of age and above. cuci99 does not knowingly collect, process, or store personal data of individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18 without proper verification, we will take immediate steps to:

  • Close the account in question immediately
  • Deletion of all collected personal data
  • Returning any valid balance (where applicable)

If you believe a minor has accessed the cuci99 platform, please contact us immediately at privacy@cuci99.click.

12Changes to This Privacy Policy

Cuci99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. All changes take effect immediately upon publication at cuci99.click/privacy-policy.

For material changes that significantly affect your privacy rights, cuci99 will:

  • Display a prominent notice on the cuci99.click homepage
  • Sending email notifications to all registered players
  • Ensuring a notice period of at least 14 days before material changes take effect

Continued use of the cuci99 platform after any changes are published constitutes acceptance of the updated policy. The "Last Updated" date at the top of this document will always reflect the date of the most current version.

13Contact the cuci99 Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by cuci99, please contact our Data Protection Officer (DPO):

  • Privacy-Specific Email: privacy@cuci99.click
  • General Support Email: support@cuci99.click
  • Live Chat: Available 24/7 at cuci99.click – select "Privacy & Data" from the topic menu

All privacy-related enquiries will be handled in strict confidence and responded to within 14 business days. For more complex cases requiring further investigation, we will keep you informed of progress within 7 working days of receiving your enquiry.

If you believe that cuci99 has not fulfilled its data protection obligations under Malaysia's PDPA and we have failed to resolve your complaint within a reasonable time, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia (PDPC) under the Ministry of Communications.

Play Responsibly

Your Data Is Safe. Ready to Play at cuci99?

Your privacy is protected with 256-bit SSL. Register with cuci99 now and enjoy Welcome Bonus up to RM 888 Join over 500,000 Malaysian players who have trusted us!

256-bit SSL Active PDPA Compliance No Data Sharing Full Player Rights
Already have an account? Log In here
Bahasa Melayu