User Data Protection

Privacy Policy Transparent & Trusted cuci2

At cuci2, your privacy is more than a legal obligation — it is a genuine commitment. This document clearly explains what data we collect, how it is used, and your rights as a user of our platform.

Last updated: 1 January 2026
Malaysia PDPA Compliant
Our Privacy Commitment
256-bit SSL Encryption
All data transmitted securely
No Data Sales
Your data is never sold to anyone
User Rights Respected
Access, amend or delete your data
PDPA 2010 Compliance
In accordance with Malaysian law

How cuci2 Protects Your Data

Six layers of protection we apply to keep your personal information secure on the cuci2 platform.

Secure & Isolated Servers

Member personal data is stored on servers protected by multi-layered firewalls, biometric access controls and round-the-clock security monitoring.

No Third-Party Data Sharing

Cuci2 does not sell, rent or share your personal data with third parties for marketing purposes without your explicit consent.

End-to-End Encryption

All communications between your device and the cuci2 platform are protected with TLS 1.3 and 256-bit SSL encryption, ensuring data cannot be intercepted.

Two-Factor Authentication (2FA)

Your cuci2 account is protected by OTP verification via SMS or email every time you log in from a new device, reducing the risk of unauthorised access.

Regular Security Audits

Cuci2's infrastructure undergoes regular independent security audits by international specialist firms to ensure there are no system vulnerabilities that could be exploited.

Full Notification Control

You can manage your marketing communication preferences at any time through your cuci2 account settings, including unsubscribing from promotional emails with a single click.


Important Note: This Privacy Policy explains how cuci2 collects, uses, stores and protects your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the cuci2 platform, you agree to the practices described in this policy.

1Introduction & Scope of This Policy

Cuci2 ("we", "Platform" or "cuci2") is an online gaming platform operating in Malaysia. We understand that your trust is our most valuable asset, and protecting your personal information is our highest priority.

This Privacy Policy applies to all users who access the cuci2.run website, the official cuci2 mobile app, and all related services provided by cuci2. It details the types of data we collect, the purposes for collection, the parties who may receive that data, and your rights as a data subject under Malaysian law.

We encourage you to read this document in full. If you have any questions, the cuci2 support team is available to assist you via 24/7 Live Chat within the platform.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy cuci2 for a comprehensive understanding of your rights and obligations.

2Personal Data We Collect

Cuci2 only collects personal data that is strictly necessary to provide you with a safe, lawful and high-quality service. The following are the categories of data we collect and store:

Data Category Example Information Collection Methods
Identity Information Full name, date of birth, MyKad/passport number Account registration & KYC
Contact Information Phone number, email address, residential address Registration & profile updates
Financial Information Bank account number, bank name, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, browser, operating system Automated system logs
Gaming Data Game history, wagering records, account activity Platform usage
Communication Data Live Chat conversation records, support tickets Interactions with the support team

We do not collect sensitive information such as health data, political views or religious beliefs unless specifically required for legal compliance purposes.

3Purpose of Data Use

Every piece of data we collect is used for a clear, legitimate, and reasonable purpose. cuci2 uses your personal information for the following purposes:

  • Identity verification and KYC — to verify that you are a legitimate user and meet the minimum age requirement of 18 years before using the platform.
  • Financial transaction processing — to facilitate safe deposits and withdrawals to the bank account registered in your name.
  • Account Security — to detect and prevent suspicious activity, fraud attempts and unauthorised access to your account.
  • Legal compliance — to fulfil cuci2's obligations under the PDPA 2010, anti-money laundering (AML) regulations and reporting requirements of lawful authorities.
  • Service improvement — to analyse usage patterns in aggregate and anonymised form to improve the user experience, introduce new features and optimise platform performance.
  • Service communications — to send important account notifications, security updates, terms changes and relevant promotional information (subject to your communication preferences).
  • Customer support — to enable the cuci2 team to provide accurate and efficient assistance when you contact us via Live Chat or email.

Data Minimisation Principle: cuci2 only collects data that is strictly necessary for the stated purposes. We do not collect excessive data and continuously reassess our data retention requirements.

4Data Sharing & Disclosure

Cuci2 does not sell, rent or trade your personal data to any third party for marketing or commercial gain. However, there are limited situations where we may need to share your data with certain parties:

  • Payment and banking providers — such as FPX, Touch 'n Go eWallet, Boost, GrabPay and local banks to securely process your financial transactions.
  • Technology service providers — companies that assist us in managing platform infrastructure, data processing and cybersecurity, all of whom are bound by strict confidentiality agreements.
  • Lawful authorities — law enforcement, courts or regulatory bodies where we are required to do so under Malaysian law or by valid court order.
  • Identity verification providers — for KYC purposes and verification of user identity documents to meet compliance requirements.

All third parties receiving your data from cuci2 are required to uphold data protection standards equivalent to or exceeding Malaysia's PDPA requirements. We do not transfer your personal data outside Malaysia unless there is a specific need and adequate safeguards have been confirmed.

5Cookies & Tracking Technologies

Cuci2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the cuci2 platform.

  • Session Cookies — session cookies that expire when you close your browser. Used to maintain your login session and game preferences while online.
  • Persistent Cookies — persistent cookies stored longer to remember your language preference, display settings and login convenience on future visits.
  • Analytics Cookies — used in aggregate and anonymised form to understand platform usage patterns for service improvement purposes only.
  • Security Cookies — to help detect and prevent fraudulent activity and ensure only authorised users can access their accounts.

You can configure your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of the cuci2 platform and your gaming experience.

6Data Retention Period

Cuci2 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations in Malaysia.

  • Active account data is retained for as long as your account remains active on the cuci2 platform, and for at least seven (7) years after account closure for legal compliance purposes.
  • Financial transaction records are retained for a minimum of seven (7) years in accordance with Malaysia's financial reporting and AML requirements.
  • Customer support communication logs are retained for three (3) years from the date of last interaction.
  • Technical data such as IP logs are retained for 90 days and then automatically deleted or anonymised.

Once the retention period expires, cuci2 will securely delete or anonymise your personal data to ensure it cannot be accessed or recovered.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data held by cuci2. We are committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

2
Right to Rectification

You have the right to request correction of any inaccurate or incomplete data held in our records.

3
Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations.

4
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

5
Right to Data Portability

You have the right to receive your data in a structured format for transfer to another platform where applicable.

6
Right to Withdraw Consent

You may withdraw your consent to data processing at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the cuci2 team via Live Chat on the platform or email us. We will process your request within 21 business days from the date of receipt.

8Security & Data Protection

Cuci2 implements a range of robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or accidental destruction.

  • 256-bit SSL/TLS encryption applied to all data communications between your device and cuci2 servers ensures information cannot be intercepted in transit.
  • User passwords are stored in hashed form using the latest cryptographic algorithms and cannot be read even by cuci2 staff.
  • Role-based access control (RBAC) ensures that only authorised staff with a clear work requirement can access user data.
  • An intrusion detection system (IDS) and round-the-clock 24/7 security monitoring enable cuci2 to respond swiftly to any threats.
  • Regular data backups and a disaster recovery plan ensure service continuity and data protection even in the event of unexpected system failures.

In the Event of a Data Breach: In the rare event that your data may be compromised, cuci2 will notify you and the relevant authorities within the timeframe required by law, and take immediate steps to limit the impact of the breach.

9Children's Privacy

The cuci2 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we determine that personal data of an underage child has been collected without parental or guardian knowledge, we will take immediate steps to delete that information and close the associated account. Any balance in that account will be forfeited in accordance with cuci2's Terms and Conditions.

Parents or guardians who suspect that a child under their care has registered on cuci2 are encouraged to contact us immediately via Live Chat or our support email.

10Amendments to the Privacy Policy

Cuci2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements or technological developments.

  • Any material amendments to this policy will be communicated to you via your registered email or a prominent notice within the cuci2 platform at least 14 days before the changes take effect.
  • The "Updated" date at the top of this document will be revised with each amendment to help you identify the latest version.
  • Continued use of the cuci2 platform after an amendment notice is considered your acceptance of the updated policy.
  • Previous versions of the cuci2 Privacy Policy are available from the cuci2 support team for your reference if needed.

11How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cuci2 handles your personal data, please contact us through the following channels:

  • Live Chat 24/7 — the fastest way to get immediate assistance. Our support team is available to handle enquiries in Bahasa Malaysia and English at all times.
  • Support Email — send your written enquiry to [email protected]. We aim to respond within 24 business hours.
  • Privacy Enquiry Form — for formal requests relating to personal data rights, please use the dedicated form available in the Account Settings section of the cuci2 platform.

Data Protection Officer: cuci2 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all privacy-related enquiries. You can reach our DPO directly via [email protected] for matters requiring direct privacy policy attention.


Secure & Trusted Platform

Your Data is Secure. Register with Confidence.

Cuci2 protects your privacy with the latest encryption and full compliance with Malaysia's PDPA. Play with peace of mind — your data is always in safe hands.

Malaysia PDPA Compliant 256-bit SSL No Data Sales 24/7 Support
Bahasa Melayu