Cuci net Privacy Policy – How We Protect the Personal Data of Malaysian Members

1Introduction and Scope of This Privacy Policy

This Privacy Policy explains how cuci net ("we", "Platform") collects, uses, stores, and protects your personal information when you use our services – whether through the cucinet.net website, mobile app, or any other digital channel associated with the cuci net brand.

We understand that your personal data is sensitive and valuable. As an online gaming platform serving hundreds of thousands of Malaysian players, we take our responsibility seriously in upholding the trust you place in us every time you register, make a deposit via DuitNow or Touch 'n Go eWallet, or simply log in to play your favourite games.

This policy applies to all users of the platform cuci net including registered members, unregistered website visitors, and prospective members in the process of registering. It also covers all types of services we offer – from EPL and Malaysia Super League Sports Betting to live table games, poker, roulette, and e-sports.

2Types of Personal Data We Collect

cuci net only collects data that is strictly necessary to provide a safe, fair, and efficient service. We do not collect data excessively or for unnecessary purposes. The following are the categories of data we collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you use the platform cuci net, our system automatically records certain technical information for security purposes, user experience improvement, and fraud detection:

• The IP address of your device when accessing the platform.
• The type of device, operating system, and web browser version you are using.
• The date, time, and duration of each login session.
• Pages visited, buttons clicked, and actions taken within the platform.
• State/city-level geolocation data (not your precise GPS location).
• Transaction logs covering all deposits and withdrawals made via DuitNow, GrabPay, Boost, ShopeePay, FPX, and Touch 'n Go eWallet.

3Purpose of Data Collection and Use

cuci net uses personal data collected solely for legitimate and necessary purposes. Every use of data has a clear justification, and we do not use your data for unrelated purposes without your consent.

• Registration and Account Management: To securely create, verify, and manage your cuci net account.
• Financial Transaction Processing: To accurately and securely process deposits and withdrawals via your preferred Malaysian payment method.
• Identity Verification (KYC): To meet legal compliance requirements related to anti-money laundering and to verify that members meet the minimum age requirement of 18 years.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, duplicate account usage, bonus abuse, and any violations of cuci net's terms & conditions.
• Platform Improvements: To analyse usage patterns and improve the performance, interface, and overall experience of the cuci net platform for the benefit of all members.
• Service Communications: To send you important information relating to your account, transactions, terms updates, and security notices that you need to be aware of.
• Marketing Communications: To keep you informed about promotions, new bonuses, and special offers – only if you have consented to receive them. You may withdraw this consent at any time.
• Customer Support: To process and resolve inquiries, complaints, or requests you submit to the cuci net support team.

We will only use your data for the purposes stated above. Should we need to use your data for a new purpose not mentioned here, we will notify you in advance and, where required, obtain your consent before doing so.

4Sharing Data with Third Parties

cuci net does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited circumstances in which we may need to share your data with certain parties:

4.1 Trusted Service Providers

We may share necessary data with third-party service providers that support the operation of the cuci net platform – such as payment processors for DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. All third parties are required to comply with security and privacy standards no less stringent than our own, and are prohibited from using that data for any purpose other than what we direct.

4.2 Legal Requirements

Cuci net may disclose your personal data if required by applicable Malaysian law, a valid court order, directives from regulatory authorities, or in circumstances where disclosure is necessary to protect public safety or prevent serious crimes such as money laundering or identity fraud.

4.3 Business Transfers

In the event of an acquisition, merger, or transfer of cuci net's business assets, member data may be transferred as part of those assets. In such a situation, you will be notified in advance and the same or stricter privacy policy will continue to apply to your data.

5Data Security and Protection Measures

cuci net continuously invests in the latest security infrastructure to ensure our members' personal data remains protected against both external and internal threats. Data security is not a one-time project – it is an ongoing process that we take with the utmost responsibility.

• 256-bit SSL Encryption: All communications between your device and cuci net's servers are encrypted using TLS 1.3 protocol with 256-bit encryption keys.
• Multi-Layer Access Control: Access to systems containing member data is restricted to authorized personnel only, using multi-factor authentication and comprehensive audit logs.
• 24/7 Threat Monitoring: An automated security monitoring system operates around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
• Regular Security Testing: cuci net conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Secure Data Backup: Member data is regularly backed up to secure, separate locations to ensure service continuity in the event of an emergency.
• Two-Factor Authentication (2FA): cuci net members are encouraged to enable 2FA for an added layer of security on their accounts.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We therefore encourage members to play an active role in keeping their accounts safe – by using strong passwords, not sharing login credentials, and promptly reporting any suspicious activity to the cuci net support team.

6Data Retention Period

cuci net retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. The following are retention period guidelines for key data categories:

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The data deletion process follows internationally recognised information security standard procedures.

7Your Rights Regarding Personal Data

As a member cuci net, you have certain rights regarding your personal data. We respect these rights and provide straightforward mechanisms for you to exercise them.

To exercise any of the rights above, please contact our privacy team at support@cucinet.net with the email subject line "Privacy Rights Request". We will process your request within 30 business days and provide a written response detailing the action taken. In complex cases, this period may be extended by up to 60 days, with prior notice to you.

8Cookies and Tracking Technologies

Platform cuci net uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyze platform usage patterns. Cookies are small data files stored on your device when you access our website.

8.1 Types of Cookies We Use

• Essential Cookies (Required): Required for core platform functionality such as maintaining your login session, saving language preferences, and ensuring transaction security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous information about how users interact with the cuci net platform to help us identify technical issues and improve performance.
• Functional Cookies: Stores your personal preferences such as display settings, preferred language, and other information that helps make your experience more comfortable.
• Analytics Cookies: Helps us understand usage patterns on an aggregated, anonymous basis – no personally identifiable information is collected through analytics cookies.

8.2 Managing Your Cookie Preferences

You can manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies. Please note, however, that blocking essential cookies may affect the functionality of the platform cuci net and your gaming experience. For specific guidance on managing cookies in popular browsers, please refer to your respective browser's help section.

9Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cuci net manages your personal data, we are always open to an honest and transparent conversation with you.

Our privacy and data protection team can be reached via:

• Email: support@cucinet.net (include the subject "Privacy Inquiry" to help us respond faster)
• Live Chat: Available on the cuci net platform, 24 hours a day, 7 days a week, including public holidays
• Response Time: We are committed to responding to all privacy-related enquiries within 5 business days

We also welcome feedback on this Privacy Policy. If you feel we could explain something more clearly, or if there are aspects of data protection you would like us to address in greater depth, your input is valued and will be considered in future policy updates.

Cuci net updates this Privacy Policy from time to time to reflect changes in our data practices, the technologies we use, or applicable legal requirements. All material changes will be communicated to members via their registered email or in-platform notification at least 14 days before taking effect.