Privacy Policy cuci7 – Personal Data Protection for Malaysian Players

Cuci7 collects your personal information through several different channels throughout your use of the platform. We only collect information that is genuinely necessary for legitimate, clearly stated purposes. The following are the categories of information we collect:

Cuci7 does not collect sensitive information such as biometric data, medical records, or religious information unless required by law. We also do not knowingly collect information from anyone under 18 years of age — please refer to Section 9 for our children's privacy policy.

Cuci7 uses the personal information collected solely for legitimate purposes directly related to the operation of the platform. We do not use your data for any purpose beyond those stated below without your prior consent:

• Account management: To create and manage your cuci7 account, verify your identity, process secure logins and maintain accurate account records.
• Transaction processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, and to process withdrawal requests within the committed timeframe.
• Service provision: To give you access to all cuci7 games and services, including Live Casino, slots, badminton betting, football betting, cricket, and more.
• Customer support: To provide effective assistance when you contact the cuci7 support team via live chat, WhatsApp, or email.
• Security & fraud prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or violations of the Terms & Conditions.
• Legal compliance: To comply with applicable legal requirements, including financial reporting obligations and requests from competent authorities.
• Platform improvement: To analyze usage patterns in aggregate (not at an individual level) in order to improve the overall cuci7 user experience.
• Marketing communications: To send you information about cuci7 promotions, bonuses and offers that may interest you — but only if you have opted in to receive marketing communications during registration or subsequently through your account settings.

For each processing purpose, cuci7 relies on a valid legal basis as provided under Malaysia's PDPA — whether that is the performance of a contract, compliance with a legal obligation, legitimate interests, or your explicit consent.

Cuci7 does not sell, rent or trade your personal information to any third party for their own marketing or commercial purposes. However, there are limited situations where we need to share certain information with trusted third parties in order to provide our services to you:

• Payment service providers: Providers such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and the FPX network receive the transaction information necessary to process your deposits and withdrawals. All of these providers maintain their own privacy and data protection policies that comply with industry standards.
• Game providers: Live casino platforms such as Evolution Gaming, Pragmatic Play Live, SA Gaming and slots providers may receive session data required to display games correctly. No more personal identifying information than is necessary will be shared.
• Technology providers: Companies that provide server infrastructure, platform analytics, and cybersecurity services to cuci7 may access data solely in their capacity as data processors acting on cuci7's instructions.
• Legal authorities: cuci7 will disclose personal information when required to do so by law, court order, or directive from a competent authority in Malaysia.
• Protection of cuci7's interests: In cases where disclosure is required to prevent, detect or prosecute fraud, money laundering or other crimes involving the cuci7 platform.

Cuci7 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or accidental disclosure. These measures include:

• 256-bit SSL Encryption: All communications between your browser or app and cuci7's servers are encrypted using 256-bit TLS/SSL — the highest security standard available for web applications, equivalent to that used by Malaysia's leading banking institutions.
• Encryption of data at rest: Sensitive data stored in the cuci7 database — including account information and transaction records — is encrypted at rest using AES-256, the same standard used by global financial institutions.
• Strict access controls: Only authorised cuci7 staff with a legitimate operational need may access player personal data. All access is logged and audited on a regular basis.
• Two-factor authentication (2FA): cuci7's internal systems require two-factor authentication for all staff accessing the player database, adding an extra layer of security.
• Regular security testing: cuci7 conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Real-time anomaly monitoring: cuci7's automated monitoring system detects unusual access patterns — such as repeated login attempts or access from unrecognised locations — and takes protective action immediately.

While cuci7 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data breach affecting your information, cuci7 will notify you within the timeframe required by applicable law and take immediate remedial action.

Like most digital platforms, cuci7 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies cuci7 uses:

• Essential Cookies: Cookies that are required for the cuci7 platform to function — including login session cookies, security cookies, and language preference cookies. These cookies cannot be disabled, as the platform will not work properly without them.
• Performance Cookies: Cookies that collect anonymous information about how players use the cuci7 platform — which pages are visited most, how long sessions last, and where players typically drop off. This information helps us improve the overall user experience.
• Functional Cookies: Cookies that allow the cuci7 platform to remember your preferences — such as your chosen language, display settings and login information — for your convenience in future sessions.
• Analytics Cookies: cuci7 uses analytics tools to understand platform usage patterns at an aggregate level. This data informs product development decisions and is not used to identify any individual user.

You can manage your cookie preferences through your web browser. Most browsers allow you to view, delete, or block cookies from specific sites. Please note that disabling certain cookies may affect the functionality of the cuci7 platform.

Under Malaysia's PDPA and the data protection principles we uphold, you have several important rights regarding your personal data held by cuci7. cuci7 respects and facilitates the exercise of these rights:

Cuci7 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. The following are data retention guidelines for the main categories:

• Active account data: Retained for the duration your cuci7 account remains active. This data is required to ensure continuous and secure service delivery to you.
• Financial transaction data: Deposit and withdrawal records are retained for a minimum of 7 years from the date of the transaction, in accordance with applicable accounting and anti-money laundering legal requirements in Malaysia.
• Betting record data: Betting and game history is retained for a minimum of 5 years for dispute resolution, regulatory compliance, and fraud detection purposes.
• Support communication records: Records of conversations with the cuci7 support team are retained for 3 years to ensure service continuity and to assist in resolving any issues that may arise at a later stage.
• Technical data (server logs): Technical logs such as IP addresses and platform activity logs are retained for 90 days for security and technical troubleshooting purposes.

Once your data is no longer needed and the minimum retention period has elapsed, cuci7 will securely delete or anonymise it. Deletion is carried out using methods that ensure the data cannot be recovered.

In the course of its operations, cuci7 may need to transfer your personal data to third parties operating outside Malaysia — for example, international live casino software providers such as Evolution Gaming. Where such transfers are required, cuci7 ensures adequate protection is always in place through the following measures:

• Verifying that the recipient country or region maintains data protection standards equivalent to or higher than those in Malaysia.
• Executing binding data processing agreements that require recipients to uphold the data protection standards set by cuci7.
• Only the minimum data necessary for a specific purpose is transferred — the principle of data minimisation is applied to all international transfers.
• Ensuring that all data transfers are encrypted in transit using industry-recognised security protocols.

Cuci7 does not transfer Malaysian players' personal data to parties operating in countries without adequate data protection standards unless additional agreed safeguards are in place.

The cuci7 platform is strictly for adults aged 18 and above. cuci7 does not knowingly collect, store, or process personal data from individuals under the age of 18. All players are required to confirm they are at least 18 years old when registering an account.

Should cuci7 discover that personal data belonging to a minor under the age of 18 has been collected without our knowledge — whether through registration using false information or otherwise — we will take immediate action to:

• Suspending and closing the relevant account promptly.
• Deleting all personal data associated with the account in as short a time as possible.
• Returning any available account balance in accordance with established procedures.

If you become aware that a child under the age of 18 has registered or is using the cuci7 platform, please contact our support team immediately at support@cuci7.asia so that appropriate action can be taken without delay.

Cuci7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or the technologies we use. When material changes are made to this Privacy Policy, cuci7 will:

• Updating the "Last updated" date at the top of this document.
• Notifying all registered players by email or in-platform notification of any changes made.
• Providing a minimum of 14 days' notice before changes take effect, giving players sufficient time to review and understand them.
• For significant changes that materially affect how we use your data, we will seek fresh consent from you where required by law.

Your continued use of the cuci7 platform after a revised Privacy Policy takes effect will be considered your acceptance of the latest version. We encourage you to review this page periodically so you are always informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cuci7 handles your personal data, please do not hesitate to reach out to us:

• Email (recommended for privacy enquiries): support@cuci7.asia — Send an email with the subject line "Privacy Enquiry" and we will respond within 2 business days.
• Live Chat: Available on the cuci7 platform 24 hours a day, 7 days a week. Suitable for general privacy enquiries that do not require detailed identity verification.
• WhatsApp: For enquiries that require supporting documents or a more detailed explanation of your privacy rights.

The cuci7 support team responsible for privacy matters will handle your enquiry with care, professionalism and within the stipulated timeframe. All privacy-related communications are confidential and protected.