Privacy Policy – Personal Data Protection at 2cuci Malaysia

1. Introduction & Scope of This Privacy Policy

Welcome to the Privacy Policy 2cuci. We understand that when you entrust your personal information to any online platform, you deserve to know exactly how it is handled. That is why we have written this document in plain, straightforward language — not in legal jargon that only a lawyer could understand.

2cuci is an online gaming platform operator serving players in Malaysia. In the course of providing our services, we collect certain information about our users — a technical necessity for any modern digital platform. However, we are committed to ensuring that every piece of data we collect has a clear purpose, is gathered lawfully, stored securely, and never used for any other purpose without your knowledge.

This Privacy Policy applies to all information collected through the 2cuci, mobile application, or any other communication channel we operate. It does not apply to third-party websites or services that may be accessible via links within our platform.

• This Policy should be read together with Terms & Conditions 2cuci which forms the overarching agreement between you and us.
• Should any changes be made to this Privacy Policy, you will be notified via email or an in-platform notification before the changes take effect.
• 2cuci comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all related regulations in all of our data handling practices.

2. Types of Personal Data We Collect

2cuci only collects data that is strictly necessary to operate our services effectively and securely. We do not collect excessive data or data that has no direct relevance to the purpose of our services to you as a Malaysian player.

3. How We Use Your Personal Data

Every piece of data we collect from you as a member 2cuci used for specific and legitimate purposes. We do not use your data for any purposes not stated here without first obtaining additional consent from you.

• Account management: To create, verify, and manage your account 2cuci you — including the login process, identity verification (KYC), and password management.
• Transaction processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and to carry out withdrawals to your Malaysian bank account quickly and securely.
• Service delivery: To enable you to play slots and other games available on the platform 2cuci, monitors gaming activity for security and fairness verification purposes.
• Customer support: To assist you when you contact our support team 2cuci via Live Chat or email — these communication records help us resolve issues more efficiently.
• Legal compliance: To fulfil legal obligations including Anti-Money Laundering (AML) requirements, Know Your Customer (KYC) compliance, and reporting to relevant authorities as required by law.
• Platform security: To detect and prevent fraud, account abuse, suspicious activity, and other security threats that could affect our Malaysian players.
• Service improvement: Anonymised usage data helps us understand how players interact with the platform 2cuci and make relevant improvements.
• Marketing communications: To send you information about bonuses, promotions, and new games at 2cuci — but only if you have given your consent to receive such communications during registration or within your account settings.

4. Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010, 2cuci may only process your personal data on a lawful basis. We handle your data based on the following grounds, depending on the type of processing involved:

• Contract performance: Processing required to deliver the services you have agreed to receive as a member of 2cuci — including processing financial transactions and operating games.
• Legal obligation: Processing required for 2cuci to comply with applicable laws and regulations in Malaysia, including the AML and KYC requirements set by the relevant authorities.
• Legitimate interests: Processing we carry out on the basis of legitimate business interests — such as fraud prevention and platform security improvements — where those interests do not override your fundamental privacy rights.
• Consent: For certain processing activities such as direct marketing communications, we will obtain your explicit and informed consent beforehand. You may withdraw this consent at any time without any adverse effect on core services 2cuci that you receive.

5. Sharing & Disclosure of Data to Third Parties

2cuci does not sell your personal data to any third party for their own marketing purposes. This is a non-negotiable commitment. However, in the course of operating the platform safely and efficiently, we may at times need to share data with certain parties for legitimate purposes.

• Payment provider: Information required to process financial transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and Malaysian banks is shared with the relevant payment service providers only to the extent necessary to complete those transactions.
• Technology service providers: 2cuci uses select third-party services for server hosting, security analytics, and technical support. These providers are only permitted to access the data necessary for their specific tasks and are bound by strict confidentiality agreements.
• Government authorities: 2cuci will disclose data to Malaysian authorities — such as the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other regulatory bodies — when required to do so by law or a valid court order.
• Identity verification: For identity verification (KYC) and anti-money laundering purposes, certain information may be shared with licensed and accredited identity verification agencies in Malaysia.
• Game providers: To ensure games run correctly and for fairness audit purposes, the game software providers partnered with 2cuci may receive limited technical data that does not directly reveal your personal identity.

6. Data Security Measures at 2cuci

Protecting your personal data is the highest technical priority for the 2cuci. We continuously invest in our security infrastructure to ensure your information is always protected against a wide range of threats.

• 256-bit SSL Encryption: All communication between your device and the server 2cuci is encrypted to Transport Layer Security (TLS) 1.3 and 256-bit SSL standards — the same technology used by leading Malaysian commercial banks such as Maybank and CIMB. This means that data transmitted cannot be read by any unauthorised party, even if they manage to intercept the communication.
• Encryption of data at rest: Sensitive data stored in the database 2cuci — such as financial details and identity information — is encrypted at rest using the latest encryption standards.
• Strict access controls: Access to members' personal data within internal systems 2cuci is limited solely to staff with a legitimate business need. All access is logged and automatically monitored by our security systems.
• Two-Factor Authentication (2FA): 2cuci offers 2FA for member accounts as an additional layer of protection against unauthorised access. We strongly encourage all members to enable this feature in their account settings.
• 24/7 continuous monitoring: Technical security team 2cuci continuously monitors platform activity using advanced threat detection tools to identify and respond to any security incidents promptly.
• Regular security audits: 2cuci conducts regular security assessments and penetration testing carried out by independent security experts to identify and address any vulnerabilities in our infrastructure.

7. Personal Data Retention Period

2cuci retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. We do not retain data longer than necessary.

• Active account data: For as long as your account 2cuci account is active and you continue using our platform, relevant personal data will be retained to support the services you receive.
• Data after account closure: When your 2cuci closed — whether at your request or due to a breach of terms — personal data will be retained for the period required to fulfil our legal obligations (typically between 5 and 7 years, in accordance with Malaysian financial regulations).
• Financial transaction data: Financial transaction records are retained for the minimum period required under Malaysian law, including financial audit requirements and AML compliance.
• Support contact details: Communication records between you and the support team 2cuci is retained for 2 years from the date of the last communication, for reference purposes and to resolve any disputes that may arise.
• Technical data and logs: Server logs and technical data are retained for a shorter period (typically 90 days) unless there is a specific need to retain them longer for security investigation purposes.

Once the designated retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

8. Cookies & Tracking Technologies at 2cuci

Platform 2cuci uses cookies and similar tracking technologies to enhance the user experience, maintain security, and understand how our platform is used. Cookies are small text files stored on your device by your web browser.

• Essential Cookies: These cookies are required for the core functions of the platform 2cuci — such as keeping you logged in and remembering your language preference. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Performance Cookies: Used to collect information about how visitors use the platform 2cuci — for example, which pages are visited most frequently. This data helps us improve platform performance. All data is collected anonymously.
• Functional Cookies: Enables the platform 2cuci remember your preferences such as your previously entered username, language settings, and favourite game selections to provide a more personalised experience.
• Security Cookies: Used to identify and prevent fraudulent activity, unauthorised access attempts, and other security threats to accounts 2cuci you.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the 2cuci. For the best gaming experience, we recommend allowing cookies related to our platform.

9. Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010, you as a member 2cuci have certain rights regarding the personal data we hold about you. 2cuci fully respects these rights and has clear procedures in place to help you exercise them.

To exercise any of the above rights, please contact us by email at [email protected], stating the type of request, your account details, and any identity verification documents required. 2cuci will respond to your request within the timeframe stipulated by applicable law.

10. Protection of Children's Data

Platform 2cuci is a service designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from minors.

• 2cuci uses an age verification process during registration to prevent individuals under 18 from creating an account. This includes a requirement to provide a valid date of birth and, where necessary, age verification documents such as a copy of your MyKad.
• If 2cuci finds that we have collected personal data from individuals under the age of 18 without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.
• Parents or guardians who suspect that their children have registered for or used the 2cuci should contact us immediately at [email protected] for prompt action.

11. Changes to This Privacy Policy

2cuci reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the services we offer to Malaysian players.

• When we make material changes to this Privacy Policy, you will be notified via an in-platform notification 2cuci or via the email address registered to your account, at least 7 days before the changes take effect.
• The "Updated" date at the top of this document will always reflect the date of the latest version of this Privacy Policy.
• Continued use of the platform 2cuci after the effective date of any changes will be considered your acceptance of the latest version of this Privacy Policy.
• If you do not agree with the changes made, you have the right to close your account 2cuci you and request the deletion of your personal data by following the procedure outlined in the preceding section.

12. How to Contact 2cuci Regarding Privacy

If you have any questions, confusion, or concerns regarding this Privacy Policy or how 2cuci handles your personal data, do not hesitate to contact us. Our data protection team is ready to assist you.

• Privacy email: [email protected] — for enquiries specifically related to privacy and data rights requests, please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the platform 2cuci for general enquiries about privacy and data security.
• Response time: We aim to respond to all privacy-related enquiries within 1 to 3 business days. For more complex data rights requests, we will notify you within 5 business days regarding the status of your request.