Privacy Policy

This Privacy Policy ("Policy") is issued by cucicuci2 ("we", "us", "our") and applies to all personal data collected through the cucicuci2 website at cucicuci2.cam and any related services, features, or communications we provide to you ("User", "Player", or "you").

We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes the types of personal information we collect, the purposes for which we process it, the circumstances under which we may share it, and the rights available to you in relation to your data.

By registering an account on cucicuci2 or otherwise using our platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please do not use the cucicuci2 platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, location data, and online identifiers such as IP address or device ID.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" — cucicuci2, which determines the purposes and means of processing personal data collected through the platform.
• "Third-Party Processor" — a service provider engaged by cucicuci2 to process personal data on our behalf, under contractual data protection obligations.
• "Cookies" — small text files placed on your device by the cucicuci2 website to enable session management, analytics, and personalisation features.
• "KYC" — Know Your Customer verification, the regulatory process of confirming a user's identity through documentary evidence prior to processing financial transactions.

cucicuci2 collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with our platform, and in some cases from third-party verification providers. The categories of data we collect are set out in the table below.

cucicuci2 processes your personal data for the following purposes:

4.1 Account Management

We use identity and contact data to create and administer your cucicuci2 account, authenticate your login sessions, manage account security, and communicate important account-related information such as transaction confirmations, policy updates, and account status notifications.

4.2 Payment Processing

Financial data and identity data are processed to facilitate deposits and withdrawals through your chosen payment method — including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels (BTC, ETH, USDT). All transactions are denominated in MYR unless cryptocurrency alternatives are selected.

4.3 Legal & Regulatory Compliance

We are required to process identity, financial, and verification data in order to comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention protocols, and any other legal or regulatory directive that may apply to our operations.

4.4 Responsible Gambling Monitoring

Usage data and betting history are analysed to identify patterns that may indicate problematic gambling behaviour, to enforce self-imposed limits set by players, and to ensure compliance with our Responsible Gambling Policy. This processing is carried out in the interest of player wellbeing.

4.5 Platform Improvement & Analytics

Technical and usage data is used in aggregated and anonymised form to understand how players interact with the cucicuci2 platform, identify technical issues, and improve the overall user experience including game performance, interface design, and support response quality.

4.6 Marketing Communications

With your consent, we may send promotional communications about bonuses, new games, and platform features by email or in-app notification. You may withdraw marketing consent at any time by updating your account communication preferences or by contacting support at [email protected].

cucicuci2 processes personal data on the basis of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you — including account creation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including AML, KYC, and tax reporting obligations.
• Legitimate Interests: Processing that serves cucicuci2's legitimate business interests — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes where you have given clear, informed, and freely given consent — primarily in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cucicuci2 does not sell, rent, or disclose personal data to third parties for their own commercial purposes. Data is shared only in the following controlled circumstances:

• Payment Service Providers: Financial institutions and payment platform operators (such as those operating FPX, DuitNow, and e-wallet services) receive transaction-relevant data necessary to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity and verification documents for the purpose of fulfilling our legal compliance obligations.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers who store and process data on cucicuci2's behalf under binding data processing agreements that prohibit independent use of your data.
• Fraud Prevention & Security Services: Providers of fraud detection, device fingerprinting, and cybersecurity tools who assist in protecting the platform and its users from unauthorised activity.
• Legal Authorities: Where required by a valid court order, regulatory directive, or lawful request from a competent authority, cucicuci2 may be obligated to disclose personal data. We will notify you where legally permitted to do so.

cucicuci2 uses cookies and similar tracking technologies to operate and optimise the platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the platform to identify performance issues and improve user experience. No personally identifiable information is transmitted through analytics cookies.
• Functional Cookies: Remember your platform preferences such as display language, last viewed games, and notification settings to provide a more personalised experience during and between sessions.
• Marketing Cookies: Used to deliver relevant promotional content within the cucicuci2 platform based on your usage patterns, subject to your consent. These are not used to track you across third-party websites.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the platform. Detailed cookie information is available within the platform's Cookie Settings panel.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with cucicuci2, plus a reasonable period thereafter to handle any post-closure queries or disputes.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with AML regulations and financial record-keeping obligations applicable to online gaming operations.
• KYC Verification Documents: Retained for the duration of the account plus any legally mandated period thereafter. Copies are securely deleted once the retention period expires.
• Communication Records: Support transcripts and email correspondence are retained for up to two (2) years to support dispute resolution and service quality review.
• Marketing Data: Retained until you withdraw consent or for a maximum of three (3) years of inactivity, whichever comes first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

cucicuci2 implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all sensitive data stored on our infrastructure.
• Role-based access controls that restrict internal access to personal data to authorised personnel who require it to perform their responsibilities.
• Regular penetration testing and vulnerability assessments of our platform and infrastructure.
• Intrusion detection systems and 24/7 monitoring of platform security events.
• Staff training on data protection and confidentiality obligations.

While we take all reasonable technical and organisational precautions, no system is entirely immune from security risk. You play an important role in keeping your account secure by maintaining a strong, unique password and reporting any suspicious account activity to our support team immediately.

Subject to applicable data protection principles and legal limitations, you have the following rights in relation to personal data that cucicuci2 holds about you:

To exercise any of the above rights, please submit a written request to [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will respond to all valid requests within a reasonable timeframe and free of charge unless a request is manifestly unfounded or excessive.

cucicuci2 is strictly an adult platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Our registration process includes an age declaration and we conduct verification checks to enforce this requirement.

If you have reason to believe that a person under 21 has accessed or registered on the cucicuci2 platform, please notify us immediately at [email protected]. Upon receipt of a credible report, we will conduct a review and, if confirmed, will promptly close the account and delete associated personal data, retaining only the minimum information legally required to document the incident.

cucicuci2 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly when changes are made.

Where changes are material — for example, where we introduce a new purpose for processing or extend data sharing arrangements — we will notify registered account holders via the email address associated with their account at least fourteen (14) days prior to the changes taking effect. For non-material updates, your continued use of the platform following the revised effective date constitutes acceptance of the amended Policy.

We encourage you to review this page periodically to remain informed about how cucicuci2 manages and protects your personal data. Historical versions of this Policy are available on request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cucicuci2 handles your personal data, please reach out to our support team. We take all privacy-related enquiries seriously and will respond promptly.

cucicuci2 is committed to resolving privacy concerns directly and constructively. If you feel your concern has not been adequately addressed, you retain the right to raise a complaint with the appropriate data protection authority in your jurisdiction.