1. Who We Are
cuci100 ("we," "us," "our") operates the online casino and sports betting platform accessible at cuci100.win (the "Platform"). As the data controller of personal information collected through the Platform, cuci100 is responsible for determining the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable data protection legislation.
If you have any questions regarding how cuci100 handles your personal data, please contact our Data Protection team using the details in Section 14 of this Policy.
2. Data We Collect
cuci100 collects the following categories of personal data:
- Identity Data: Full name, date of birth, nationality, and government-issued identification details (such as your Malaysian MyKad number or passport number) collected during account registration and KYC verification.
- Contact Data: Email address, Malaysian mobile phone number, and residential address.
- Financial Data: Payment method details, transaction history (deposit and withdrawal records), wallet balances, and bank account or e-wallet identifiers used for transactions. cuci100 does not store full card numbers; payment instrument data is tokenised by our payment service providers.
- Account Data: Username, encrypted password, account preferences, session history, and responsible gaming settings.
- Gaming & Betting Data: Records of all gaming activity, wagers placed, game outcomes, bet history, and promotion participation within the cuci100 Platform.
- Technical Data: IP address, browser type and version, device type and operating system, referral URLs, session timestamps, and general geolocation data derived from IP address.
- Communications Data: Records of your communications with cuci100 customer support, including live chat transcripts and email correspondence.
3. How We Collect Data
cuci100 collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
- Automated collection: Technical and usage data collected automatically as you interact with the cuci100 Platform, including via cookies, server logs, and analytics tools. See Section 7 for further detail on cookies.
- Third-party sources: Identity verification and fraud prevention data received from our licensed KYC and AML service providers, and payment data received from our payment processing partners, in each case for the purpose of fulfilling our legal compliance obligations.
4. How We Use Your Data
cuci100 uses your personal data for the following purposes:
- Account management: Creating, maintaining, and administering your cuci100 account, including processing logins, managing your wallet balance, and applying account preferences.
- Service delivery: Providing access to the games, sportsbook, promotions, and other features of the cuci100 Platform in accordance with our Terms & Conditions.
- Payment processing: Processing deposits and withdrawals via your selected Malaysian payment method, including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT TRC20, or 7-Eleven Cliqq.
- Identity verification and KYC: Verifying your identity and age (21+) prior to enabling withdrawal privileges, as required by our licensing authority and applicable AML obligations.
- Fraud prevention and AML compliance: Monitoring transactions and account activity for indicators of fraudulent conduct, money laundering, or breach of our Terms & Conditions.
- Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators, administering player-requested deposit limits, loss limits, and self-exclusion, and complying with mandatory responsible gaming obligations under our licence.
- Customer support: Responding to support enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time via your account settings.
- Legal compliance: Complying with applicable laws, regulations, court orders, and the requirements of our licensing authority, including reporting obligations to relevant authorities.
- Platform improvement: Analysing aggregated and anonymised usage data to improve the cuci100 Platform, optimise user experience, and develop new features.
5. Legal Basis for Processing
cuci100 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our contract with you, including account management, service delivery, and payment processing.
- Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, responsible gaming mandates, and reporting obligations under our licence.
- Legitimate interests: Processing for fraud prevention, platform security, customer support improvement, and internal analytics, where our legitimate interests are not overridden by your privacy interests.
- Consent: Processing for optional marketing communications, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
6. Data Sharing & Disclosure
cuci100 does not sell your personal data to third parties. We share your data only in the following circumstances:
- Payment service providers: We share necessary financial and identity data with our payment processing partners to execute deposit and withdrawal transactions.
- KYC and AML service providers: We share identity data with licensed identity verification and fraud prevention service providers to fulfil our compliance obligations.
- Game software providers: We share account session data with our licensed game providers (such as Pragmatic Play, PG Soft, Evolution, and similar partners) as necessary to deliver game services. These providers are bound by contractual data processing terms.
- Regulatory and law enforcement authorities: We disclose personal data to relevant regulatory bodies, licensing authorities, or law enforcement agencies where required to do so by applicable law or a valid legal order.
- Professional advisers: We may share data with our legal, financial, or compliance advisers under strict confidentiality obligations where necessary for advice or dispute resolution.
- Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections.
All third-party recipients of cuci100 player data are subject to contractual data processing obligations that require them to handle personal data in accordance with applicable data protection law and cuci100's privacy standards.
7. Cookies & Tracking Technologies
cuci100 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:
- Strictly necessary cookies: Required for the Platform to function, including session authentication, wallet state management, and security features. These cannot be disabled without breaking Platform functionality.
- Functional cookies: Used to remember your preferences, such as language settings and login state persistence, to provide a more personalised experience.
- Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the cuci100 Platform, to help us understand usage patterns and improve the service.
- Session security cookies: Short-lived cookies used to prevent cross-site request forgery (CSRF) attacks and maintain secure session integrity.
You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. cuci100 does not use cross-site tracking cookies for advertising purposes on third-party platforms.
8. Data Retention
cuci100 retains personal data for the following periods:
- Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by applicable AML and gaming regulatory requirements.
- Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations under our licence.
- Customer support communications: Retained for two (2) years from the date of the communication.
- Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter as evidence of consent.
- Technical and analytics data: Retained in aggregated or anonymised form indefinitely; identifiable technical data retained for up to twelve (12) months.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with cuci100's data deletion procedures.
9. Your Rights
Subject to applicable law, you have the following rights in relation to your personal data held by cuci100:
- Right of access: You may request a copy of the personal data cuci100 holds about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy.
- Right to data portability: You may request a structured, machine-readable copy of personal data you provided to cuci100.
- Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact cuci100's Data Protection team at the details in Section 14. cuci100 will respond to verified requests within 30 days. We may require identity verification before processing data rights requests.
10. Data Security
cuci100 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS 1.3 encryption for all data in transit between your browser and the cuci100 Platform.
- Encryption of sensitive data at rest, including identity documents and financial information.
- Bcrypt password hashing — your cuci100 account password is never stored in readable form.
- Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
- Two-factor authentication available for all cuci100 player accounts and mandatory for internal administrative access.
- Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
No data transmission over the internet is entirely without risk. While cuci100 takes all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, cuci100 will notify affected players and relevant authorities in accordance with applicable legal requirements.
11. Children's Privacy
The cuci100 Platform is strictly intended for individuals who are 21 years of age or older. cuci100 does not knowingly collect or process personal data of individuals under the age of 21. If cuci100 becomes aware that a person under 21 has registered an account or provided personal data, that account will be immediately closed and all associated data will be deleted except where retention is required for legal compliance purposes.
If you believe a minor has accessed the cuci100 Platform, contact our support team immediately via live chat or at the email address in Section 14.
12. Third-Party Services
The cuci100 Platform may contain links to third-party services or integrate third-party game software, payment gateways, or analytics tools. This Privacy Policy applies solely to data collected and processed by cuci100 through the Platform. cuci100 is not responsible for the privacy practices of third-party operators, and we encourage you to review the privacy policies of any third-party services you interact with in connection with your cuci100 account.
13. Changes to This Policy
cuci100 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via a notice on the cuci100 Platform and, where appropriate, by email to your registered address. The updated Policy will take effect from the date it is published on the Platform. Your continued use of cuci100 following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes.
14. Contact Us
For any questions, concerns, or data rights requests relating to this Privacy Policy or cuci100's data processing practices, please contact us through the following channels:
- Live Chat: Available 24/7 via the cuci100 Platform (fastest response)
- Email: [email protected]
cuci100 aims to acknowledge all privacy enquiries within 48 hours and to resolve substantive requests within 30 days. For complex data rights requests, we may extend this period by a further 30 days with prior notice.