Privacy Policy

This Privacy Policy ("Policy") describes how mycuci2 ("mycuci2", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the mycuci2 online gaming platform accessible at mycuci2.cam and all associated services (the "Platform").

mycuci2 operates as an online casino and sports betting platform primarily serving players across Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and the broader Malaysian market. We are committed to handling all personal data we receive with the highest standards of care, transparency, and security.

By registering an Account, accessing the Platform, or using any service provided by mycuci2, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not access or use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together govern your relationship with mycuci2.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, phone number, IP address, device identifier, payment details, and gaming activity records.
• "Processing" — Any operation performed on Personal Data, whether automated or manual, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — mycuci2, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — Any third party that processes Personal Data on behalf of mycuci2 pursuant to a written data processing agreement, including payment service providers, KYC verification services, and cloud infrastructure providers.
• "Data Subject" — The natural person to whom Personal Data relates; in this context, any registered Player or visitor to the Platform.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform to facilitate functionality, analytics, and session management.
• "KYC" — Know Your Customer; the identity and address verification process mandated under mycuci2's compliance obligations.

mycuci2 collects personal data across three broad categories. The specific data collected depends on your level of engagement with the Platform:

mycuci2 collects personal data through the following channels:

• Direct Submission: Information you provide voluntarily when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or submitting feedback.
• Automated Technical Collection: Data collected automatically when you visit or interact with the Platform, including through cookies, log files, pixel tags, and similar tracking technologies as detailed in Section 9.
• Third-Party Service Providers: Identity and address verification data received from licensed KYC service providers when processing your verification documents. Financial data received from payment processors in connection with deposit and withdrawal transactions.
• Fraud and Security Monitoring: Data obtained from fraud detection services and shared databases operated by the gaming industry and financial sector for the purpose of preventing money laundering and identifying prohibited users.

mycuci2 does not purchase personal data from external data brokers, social media platforms, or any other commercial source for the purpose of targeting players.

mycuci2 processes your personal data for the following specific purposes:

• Account Registration and Management: Creating, maintaining, and administering your Player Account, verifying your identity and age (21+ requirement), and managing account security.
• Service Delivery: Facilitating gameplay across all game categories, processing deposits and withdrawals in MYR via supported Malaysian payment methods (including Touch 'n Go eWallet, DuitNow, FPX, and Maybank2u), and administering sports betting markets.
• KYC and Compliance: Verifying your identity and address in accordance with anti-money laundering (AML) obligations, conducting ongoing transaction monitoring, and fulfilling regulatory reporting requirements.
• Responsible Gambling: Administering self-exclusion requests, deposit and loss limits, session time reminders, and other player protection tools. Monitoring for signs of problematic gambling behaviour and reaching out where appropriate.
• Customer Support: Responding to queries, complaints, and support requests submitted via live chat or email.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, unauthorised access, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Marketing Communications: Sending promotional emails, SMS notifications, and targeted offers where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data and game performance metrics to improve the Platform's functionality, user experience, and game offering.

mycuci2 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player, including account management, game delivery, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC/AML obligations, fraud reporting, and responsible gambling mandates.
• Legitimate Interests: Processing carried out in furtherance of mycuci2's legitimate business interests, such as fraud prevention, platform security, and product improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in relation to direct marketing communications. You may withdraw consent at any time without detriment to your Account.

mycuci2 does not sell or rent your personal data to any third party. We may share your personal data with third parties only in the following circumstances:

• Payment Service Providers: Your financial data is shared with authorised payment processors (such as FPX gateway operators, e-wallet providers like Touch 'n Go, Boost, GrabPay, and banking partners including Maybank, CIMB, and Public Bank) to the extent necessary to process your transactions.
• KYC and Identity Verification Services: Identity documents and related data are shared with licensed third-party KYC verification service providers for the purpose of identity confirmation and age verification.
• Game Content Providers: Aggregated or pseudonymised gameplay data may be shared with licensed game studios to support RTP auditing, game performance analysis, and regulatory compliance.
• Cloud Infrastructure Providers: Personal data is stored on secure cloud servers operated by vetted infrastructure providers under contractual data processing agreements that meet applicable data protection standards.
• Fraud Prevention and AML Services: Data may be shared with fraud detection platforms and industry-wide responsible gambling databases for the purpose of preventing financial crime and protecting players.
• Legal and Regulatory Authorities: mycuci2 will disclose personal data to law enforcement agencies, regulators, or other public authorities where required to do so by applicable law, court order, or regulatory directive.

All third-party service providers who receive personal data from mycuci2 are contractually bound to process that data only for the specified purpose, to implement appropriate security measures, and not to use the data for any secondary purpose without mycuci2's authorisation.

mycuci2 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active Player Account plus a period of five (5) years following account closure, to support AML compliance, audit trails, and dispute resolution.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to support regulatory reporting and financial audit obligations.
• Gaming Activity Logs: Retained for three (3) years from the date of each session for operational, responsible gambling, and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of the last communication to support quality assurance and complaint resolution.
• Marketing Consent Records: Retained for three (3) years from the date consent was last given or withdrawn, to maintain an auditable record of your marketing preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mycuci2's data deletion procedures.

mycuci2 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session, and improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, login authentication tokens, and security cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language, display options, and responsible gambling limit configurations.
• Analytical Cookies: Used to collect aggregated data about how players use the Platform, including page visit frequency, navigation paths, and feature engagement, to help us improve the Platform's performance and usability.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login patterns by identifying recognised devices and session anomalies.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. A detailed cookie list is available upon request from our support team.

mycuci2 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmissions between your device and mycuci2's servers are protected using 256-bit SSL/TLS encryption.
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted using industry-standard algorithms when stored on our servers.
• Access Controls: Access to personal data within mycuci2 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular review.
• Penetration Testing: mycuci2's platform and infrastructure undergo regular penetration testing and security audits conducted by independent security professionals.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified promptly in accordance with applicable notification obligations.

Notwithstanding these measures, no method of data transmission or storage can be guaranteed to be 100% secure. mycuci2 cannot guarantee the absolute security of data transmitted over the internet but takes all commercially reasonable steps to protect it.

As a Data Subject, you hold the following rights in respect of your personal data held by mycuci2. Requests to exercise these rights should be submitted to our support team and will be handled within thirty (30) days of receipt of a verified request.

mycuci2 is strictly an adult gaming platform. Access to and use of the Platform is prohibited for individuals under the age of 21 years. mycuci2 does not knowingly collect, store, or process the personal data of minors.

During the registration process, Players are required to confirm that they are 21 years of age or above. Additionally, KYC verification requires submission of identity documents that confirm date of birth. Where verification reveals that an Account holder is under 21, the Account will be immediately closed, any funds returned net of applicable deductions, and the minor's data removed in accordance with our data deletion procedures.

If you believe that a minor has registered on the Platform or that we may have inadvertently collected personal data relating to an individual under 21, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

mycuci2 operates internationally and may transfer personal data to countries other than Malaysia in connection with cloud hosting, payment processing, and service delivery infrastructure. Where personal data is transferred internationally, mycuci2 ensures that appropriate safeguards are in place to maintain the equivalent level of protection required under applicable data protection standards.

Such safeguards may include contractual data transfer agreements incorporating standard data protection clauses, transfer to countries that have been assessed as providing an adequate level of data protection, or other legally recognised mechanisms appropriate to the transfer.

Players based in Malaysia whose data is transferred internationally may request further information about the specific safeguards in place by contacting our support team.

mycuci2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. The effective date of the most current version is indicated at the top of this page.

Where changes are material — such as a new category of data being collected or a new purpose for which existing data is processed — mycuci2 will provide notice to Players via email prior to the changes taking effect. For non-material updates (such as clarifications of existing language), the updated Policy will be posted on the Platform without prior individual notification.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this Policy, you should cease using the Platform and request Account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about the way mycuci2 handles your personal data, please contact our support team through the channels below. Note that email addresses are displayed as plain text only and are not clickable links.