Privacy Policy

1. Introduction

cuci1000 ("cuci1000", "we", "us", "our") operates the online gaming platform at cuci1000.org, providing sports betting, live casino, and slot gaming services to members in Malaysia and other permitted jurisdictions. We are committed to protecting the privacy and personal data of every individual who registers with or visits our platform.

This Privacy Policy ("Policy") describes how cuci1000 collects, uses, discloses, stores, and protects personal data in connection with your use of the cuci1000 platform and all associated services. It applies to all registered members, prospective members, and visitors to cuci1000.org.

This Policy should be read alongside our Terms & Conditions, which govern your use of the cuci1000 platform, and our Responsible Gaming Policy. By registering for a cuci1000 account or using any part of our platform, you confirm that you have read and understood this Policy and consent to the data practices described herein.

2. Data We Collect

2.1 Registration & Identity Data

When you create a cuci1000 account, we collect the following personal data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required to verify that you are 21 years of age or older).
• Residential address, including postcode and state within Malaysia.
• Email address and mobile phone number.
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, cuci1000 may request copies of government-issued identification (e.g. MyKad or passport), proof of address, and proof of ownership of your registered payment methods.

2.3 Financial & Transaction Data

We record all deposits, withdrawals, bonus transactions, and wagering activity associated with your cuci1000 account. This includes payment method details (masked card numbers, eWallet account references, or bank account identifiers) sufficient to process transactions and maintain financial records.

2.4 Technical & Usage Data

When you access cuci1000, we automatically collect certain technical data including your IP address, device type, browser type and version, operating system, session timestamps, pages visited, and in-session activity logs. This data is used for platform security, fraud prevention, performance optimisation, and regulatory compliance.

2.5 Communications Data

If you contact cuci1000 via live chat, email, or any other communication channel, we retain records of those communications for support, quality assurance, and compliance purposes.

3. How We Use Your Data

cuci1000 uses your personal data for the following purposes:

• Account management: Creating and maintaining your cuci1000 member account, processing logins, and managing account settings.
• Identity verification: Confirming your age (21+), identity, and eligibility to use the cuci1000 platform in accordance with applicable regulations.
• Payment processing: Facilitating deposits and withdrawals in MYR through your chosen payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, RHB, and bank transfer.
• Regulatory compliance: Maintaining records required by applicable gaming authority regulations, AML obligations, and financial reporting requirements.
• Platform security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited conduct.
• Customer support: Responding to your queries, resolving disputes, and providing assistance through our 24/7 support team.
• Platform improvement: Analysing usage patterns and member feedback to improve the cuci1000 platform, user interface, and product offering.
• Marketing communications: Where you have consented, sending you promotional offers, bonus notifications, and updates relevant to your cuci1000 account. You may opt out of marketing communications at any time through your account settings.
• Responsible gaming: Monitoring account activity to identify potential indicators of problem gambling and to apply responsible gaming tools where appropriate.

4. Legal Basis for Processing

cuci1000 processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to fulfil our obligations to you under the Terms & Conditions, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing is required to comply with applicable AML regulations, KYC requirements, gaming authority rules, and other regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal.

5. Data Sharing

cuci1000 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients:

• Payment processors: Your payment method details are shared with the relevant payment service providers (such as Touch n Go eWallet, Boost, or banking institutions) solely for the purpose of processing your transactions.
• Identity verification providers: KYC documents may be processed by certified third-party identity verification services engaged by cuci1000 to fulfil our regulatory obligations.
• Gaming technology providers: Game providers and platform technology vendors who process data solely to deliver their contracted services to cuci1000 and who are bound by appropriate data processing agreements.
• Regulatory and law enforcement authorities: We may disclose personal data to relevant authorities where required by applicable law, gaming regulations, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, illegal activity, or harm.
• Corporate group entities: Personal data may be shared within the cuci1000 corporate group for operational purposes, subject to equivalent data protection standards.

All third parties with whom cuci1000 shares personal data are required to process that data securely, only for the specified purpose, and in compliance with applicable data protection law.

6. Cookies & Tracking Technologies

cuci1000 uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device that help us recognise returning visitors, maintain session state, prevent fraud, and analyse platform usage.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functionality, including maintaining your login session and processing transactions. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors interact with cuci1000, enabling us to identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised logins.
• Preference cookies: Used to remember your language, display settings, and other preferences between sessions.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the cuci1000 platform.

7. Data Retention

cuci1000 retains your personal data for as long as your account remains active and for such additional periods as are required to comply with our legal, regulatory, and contractual obligations. Specifically:

• Account and identity data is retained for the duration of your membership and for a minimum of five (5) years following account closure, as required under applicable AML and gaming regulations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for three (3) years unless a longer period is required for dispute resolution or regulatory purposes.
• Technical and usage logs are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

8. Data Security

cuci1000 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cuci1000 platform.
• Hashing and salting of account passwords — cuci1000 staff cannot view your password in plain text.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Optional two-factor authentication (2FA) via mobile OTP for all cuci1000 accounts.

While cuci1000 takes all reasonable steps to protect your data, no transmission over the internet is entirely without risk. You are responsible for maintaining the security of your login credentials. If you suspect your account has been compromised, contact our support team immediately via live chat or at [email protected].

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by cuci1000:

• Right of access: You may request a copy of the personal data cuci1000 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our retention obligations under applicable law and regulation.
• Right to restrict processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your data in a portable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting lawfulness of prior processing.

To exercise any of these rights, please contact us via the live chat in your cuci1000 account dashboard or at [email protected]. We will respond within 30 days of receiving your request.

10. Children & Minors

cuci1000 strictly prohibits use of our platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21. If we determine that personal data has been collected from a person under 21, that account will be suspended immediately, related personal data will be deleted, and any associated funds may be forfeited in accordance with our Terms & Conditions and applicable regulations.

If you have reason to believe that a person under 21 has registered a cuci1000 account, please notify us immediately at [email protected].

11. International Data Transfers

cuci1000's platform and data infrastructure may involve the transfer of your personal data to servers or service providers located outside Malaysia. Where such transfers occur, cuci1000 ensures that appropriate safeguards are in place — including data processing agreements incorporating applicable standard contractual clauses — to ensure your data receives a level of protection consistent with this Policy.

12. Changes to This Policy

cuci1000 reserves the right to update or modify this Privacy Policy at any time. We will notify registered members of material changes via platform notification or email to your registered address. The date of the most recent revision is shown at the top of this page. Your continued use of cuci1000 following notification of changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data held by cuci1000, please contact us through the following channels:

• Live Chat: Available 24/7 from your cuci1000 account dashboard — average response time under 2 minutes.
• Email: [email protected]

Please include your registered username and a clear description of your query when contacting us. We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 days.