🔒 Official Data Protection Policy

Privacy Policy cuci22 – Our Commitment to Protecting Malaysian Players' Data

At cuci22, your privacy is more than a legal obligation — it is a core value we uphold every day. This page clearly and transparently explains how we collect, use, store, and protect the personal information of all cuci22 members in Malaysia.

Updated: January 2026  |  Bahasa Melayu (ms-MY)
SSL
256-bit Encrypted
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysian Legal Compliance

Cuci22's Six Privacy Commitments to You

The concrete commitments we make to protect the personal information of every player in Malaysia

256-Bit SSL Encryption at All Times

All data you send to and from the cuci22 platform — including registration details, deposit information via Touch 'n Go or DuitNow, and gaming history — is encrypted using 256-bit SSL. This is the same encryption standard used by Maybank2u and CIMB Clicks, meaning no third party can intercept or read your information in transit.

Your Data Is Never Sold

Cuci22 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your name, phone number, email address, and financial information belong solely to you. We use your data only to deliver the services you directly request.

Financial Data Strictly Protected

Your payment information — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX — is processed through a secure, PCI-DSS certified payment gateway. cuci22 does not store your full bank account numbers or card details on our servers. All financial transactions are encrypted and securely recorded for audit compliance.

Your Privacy Controls Are in Your Hands

You have full control over your personal data at cuci22. Through your account settings, you can update your profile information, manage communication preferences, request a copy of the data we hold about you, or request deletion of your data. All requests will be processed within 14 business days by the cuci22 privacy team.

Compliance with Malaysia's PDPA

Cuci22 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means the collection, processing, and storage of your data adheres to all relevant Malaysian legal requirements. We have appointed a Data Protection Officer (DPO) who is responsible for ensuring ongoing compliance with the PDPA and international privacy standards.

No Spam, No Harassment

Cuci22 only sends you marketing communications if you have given explicit consent during registration or subsequently through your account settings. You can opt out of cuci22 promotional emails or messages at any time — simply click the "unsubscribe" button or contact our support team. Important account-related communications such as deposit confirmations will still be sent.

Why This Privacy Policy Matters to You as a cuci22 Player

When you register an account on cuci22 and start playing — whether it's slots from Pragmatic Play, live baccarat from Evolution Gaming, or Sports Betting on Malaysia Super League matches — you naturally share certain personal information with us. This is unavoidable in the context of a responsible online casino platform, as identity verification and payment processing require specific data. The important question you should be asking is: what happens to that information once it has been shared with cuci22?

The answer is right here on this page. The cuci22 Privacy Policy is not merely a legal document written to satisfy compliance requirements — it is an honest, straightforward account of our actual privacy practices. We have written it in plain language that all Malaysian players can understand, rather than in confusing legal jargon, because we believe you deserve to know exactly what happens to your data.

Cuci22 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing how companies in Malaysia handle users' personal data. We also align with more stringent international privacy standards, including the principles of the European General Data Protection Regulation (GDPR), to ensure the highest level of protection for all our users regardless of where they are in Malaysia.

1

Introduction and Scope of This Privacy Policy

This Privacy Policy is published and operated by cuci22 ("we", "Platform", or "cuci22"), the operator of an online casino and Sports Betting platform at cuci22.run. This policy applies to all individuals who use the cuci22 platform, including website visitors, prospective members, registered members, and former members.

This policy explains how cuci22 collects, stores, processes, uses and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws.

Your Consent: By registering a cuci22 account or continuing to use the platform after changes to this policy are published, you agree to the data collection and usage practices described in this document. If you do not agree, please contact us or discontinue use of the platform.

2

Personal Data We Collect

Cuci22 collects your personal data through two main channels: information you provide directly to us, and data collected automatically as you use the platform.

Data you provide directly:

  • Registration information: full name, date of birth, MyKad number, mobile phone number, email address and password.
  • Profile information: preferred username, language preferences, and personal account settings.
  • KYC documents: a copy of your MyKad, recent bank statement, or e-wallet statement as proof of identity and payment method.
  • Payment information: e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account details for FPX, Maybank2u, and CIMB Clicks.
  • Communications: messages you send to the cuci22 support team via live chat or email.

Automatically collected data:

  • IP address and geolocation data (state or city within Malaysia).
  • Device information: device type, operating system, phone model, screen resolution.
  • Browser information: browser type, version, and language settings.
  • Usage data: pages visited, session duration, games played, and betting patterns.
  • Cookie data and related tracking technologies (explained further in Section 6).
Data Category Specific Examples How It Is Collected Requirements
Identity Full name, MyKad number, date of birth Registration / KYC Mandatory
Contact Email address, phone number Registration Mandatory
Finance E-wallet accounts, FPX Deposit / Withdrawal Mandatory
Technical IP address, device type, browser Automatic Features
Usage Games played, bets placed Automatic Features
Marketing Communication preferences, campaign responses Your consent Preferences
3

How We Use Your Personal Data

Cuci22 uses your personal data only for legitimate and necessary purposes. We do not process your data for anything unrelated to the services you use. The primary purposes are as follows:

  • Account management: Creating, verifying, and managing your cuci22 account, including secure login processes.
  • Identity verification (KYC): Verifying that you meet the age eligibility requirement (21+) and ensuring compliance with anti-money laundering laws.
  • Payment processing: Verifying and processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks.
  • Service delivery: Gives you access to all games on cuci22 — slots, live casino, poker, Sports Betting including the Malaysia Super League and EPL, cricket, e-sports and game shows.
  • Customer support: Responding to enquiries and resolving issues you have raised with the cuci22 support team.
  • Platform security: Detecting and preventing fraud, hacking, bonus abuse, and suspicious activity.
  • Legal compliance: Fulfilling legal obligations under Malaysia's PDPA and related regulations.
  • Service improvements: Analyzing platform usage patterns to improve the user experience (data is analyzed in aggregate and is never used to profile individual users).
  • Marketing communications: Sending information about promotions, bonuses, and platform updates — only where you have given your consent.

Data Minimisation Principle: cuci22 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to deliver our services.

4

Sharing Your Data with Third Parties

Cuci22 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are specific situations where sharing data is necessary to provide services to you:

  • Payment service providers: Required transaction information is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions to process your deposits and withdrawals.
  • Licensed game providers: Minimum necessary technical data is shared with game providers such as Evolution Gaming, Pragmatic Play and PG Soft for game delivery and dispute resolution purposes.
  • Technology service providers: Vendors that support the operation of cuci22's platform infrastructure — including server hosting, platform analytics and cybersecurity services. All vendors are bound by strict confidentiality agreements.
  • Relevant authorities: Information required by law will be disclosed to Malaysian authorities such as the police, courts, or the Inland Revenue Board when lawfully ordered.
  • Fraud prevention: Information may be shared with identity verification services or anti-fraud agencies in cases of suspected fraud or money laundering.

Important: All third parties that receive your data through cuci22 are bound by data processing agreements that require them to protect your information to the same standards as cuci22. They are not permitted to use your data for any purpose other than what is specified in their agreement with us.

5

Security & Data Protection

Cuci22 implements a range of technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or accidental disclosure. The key security measures we have in place are:

  • 256-bit SSL/TLS Encryption for all data transmitted between your browser and cuci22's servers.
  • Data encryption at rest — all personal data stored in the cuci22 database is encrypted using the AES-256 algorithm.
  • Two-factor authentication (2FA) available to all accounts — we strongly encourage all cuci22 members to enable 2FA for stronger account security.
  • 24/7 security monitoring by cuci22's cybersecurity team, who monitor for signs of intrusion or unusual activity.
  • Regular security testing including penetration testing and independent security audits.
  • Role-based access control (RBAC) — cuci22 staff can only access the data specifically required for their individual roles.
  • Incident response procedures — cuci22 has a tested incident response plan in place to address any security breaches promptly.

In the event of a data breach that materially affects your personal data, cuci22 is committed to notifying you within 72 hours of becoming aware of it, in line with international data protection best practices. We will also report the incident to the relevant authorities in Malaysia as required under applicable law.

6

Cookies and Tracking Technologies

Cuci22 uses cookies and similar tracking technologies to enhance your gaming experience on the platform. Below are the types of cookies we use:

  • Session cookies: Required to maintain your login session. These cookies are automatically deleted when you close your browser and cannot be disabled without affecting the platform's core functionality.
  • Preference cookies: Saves your preferences such as interface language and display settings, allowing the cuci22 platform to remember your choices between sessions.
  • Analytics cookies: Helping us understand how players use the platform — the most frequently visited pages, the most-played games, and technical issues that need to be resolved. This data is analyzed in aggregate and is not used to identify individuals.
  • Security cookies: Used to detect suspicious activity, protect against CSRF attacks, and ensure the security of your account.

You can manage your cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the cuci22 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the help documentation provided by your respective browser.

cuci22 does not use third-party cookies for advertising or cross-site tracking. The cookies we use are solely for platform functionality.

7

Data Retention and Deletion

Cuci22 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required under applicable Malaysian law. Our data retention policy is as follows:

  • Active account data: Retained for as long as your cuci22 account remains active and registered.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation.
  • KYC documents: Retained for 5 years after account closure, in accordance with anti-money laundering legal requirements.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Aggregated analytics data: Retained indefinitely in a non-personally identifiable form for platform improvement purposes.

Once the applicable retention period has expired, cuci22 will securely delete or anonymize your data so that it can no longer be linked to you personally. The deletion process follows industry-standard methods for secure and irreversible data removal.

If you request the closure of your cuci22 account, your personal data will be deleted or anonymized within 30 days, except for data that must be retained to meet legal obligations such as financial records and KYC documents.

8

Your Rights as a cuci22 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and cuci22's internal policies, you have the following rights regarding your personal data:

👁️
Right of Access
You have the right to request a copy of all personal data that cuci22 holds about you. Requests will be processed within 14 business days.
✏️
Right to Rectification
If your personal data held by cuci22 is inaccurate or out of date, you have the right to request an immediate correction. Basic profile updates can be made directly through your account settings.
🗑️
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal retention obligations. Requests are processed within 30 days.
⛔
Right to Object to Processing
You may object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
📦
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another platform should you wish to do so.
🔕
Right to Withdraw Consent
You may withdraw your consent to data processing for marketing purposes at any time through your account settings or by contacting cuci22 support.

To exercise any of the rights above, contact the cuci22 privacy team by email at support@cuci22.run or via 24/7 live chat. Please include your account number and the specific right you wish to exercise. We will verify your identity before processing any data-related request.

9

Financial and Payment Data

As cuci22 involves financial transactions, the protection of your financial data is held to a higher standard. Here is how we specifically handle your financial information:

  • Cuci22 does not store full bank account numbers or credit or debit card details on our servers. All transactions are processed through PCI-DSS certified third-party payment gateways.
  • For e-wallets such as Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow — we only store the phone number or account ID associated with your e-wallet account for the purposes of processing and verifying withdrawals.
  • For FPX payments via Maybank2u or CIMB Clicks — we do not store your online banking login credentials. You log in directly to your bank's portal during the transaction.
  • All transaction records — deposits and withdrawals — are securely stored and encrypted for audit purposes, dispute resolution and compliance with Malaysian financial regulations.
  • Financial transaction data is shared with tax authorities or law enforcement only when lawfully ordered by a Malaysian court or the relevant regulatory body.

Security Notice: cuci22 will never ask for your e-wallet password, online banking password, or OTP code through any communication channel. If you receive such a request, do not comply and report it to the cuci22 security team immediately.

10

Changes to This Privacy Policy

Cuci22 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, the technologies we use, legal requirements, or other operational reasons. Whenever we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displaying a prominent notice on the cuci22 homepage for at least 14 days after the changes are published.
  • Sending email notifications to all registered members with an active email address for significant changes.

Continued use of the cuci22 platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you should stop using the platform and contact us to request account closure.

Contact the cuci22 Privacy Officer: For any questions, concerns or requests regarding this Privacy Policy or your privacy rights, please contact us by email at support@cuci22.run or via 24/7 live chat on the cuci22 platform. Our Bahasa Malaysia-speaking team is ready to assist you.

Your Data Is Safe at cuci22 – Join Us Today

Now you know exactly how cuci22 protects your privacy. Register a free account, play with peace of mind knowing your data is secured by 256-bit SSL, and enjoy over 500 top games with cuci22.

Data protected with 256-bit SSL Malaysia PDPA Compliance No sale of data to third parties

FAQ – cuci22 Privacy Policy

The most frequently asked questions by Malaysian players about privacy at cuci22

Not at all. cuci22 does not sell, rent, or disclose your personal data to any advertiser or third party for marketing or commercial purposes. Your data is only shared with parties directly involved in delivering cuci22's services to you — such as payment providers for processing deposits via Touch 'n Go or DuitNow, and game suppliers like Evolution Gaming or Pragmatic Play. All such parties are bound by strict confidentiality agreements with cuci22.

cuci22 does not store sensitive bank card details or e-wallet account passwords on our servers. All transactions are processed through third-party payment gateways certified to PCI-DSS — the international data security standard for the payment card industry. For e-wallets such as Touch 'n Go, GrabPay, and DuitNow, transactions are completed directly within your secure e-wallet app. cuci22 only receives confirmation that a payment was successful — not your account details.

Yes, you have the right to request the deletion of your personal data. Contact the cuci22 privacy team by email at support@cuci22.run or via live chat. Requests will be processed within 30 days. Please note that certain data may need to be retained to meet legal obligations — for example, financial transaction records must be kept for 7 years under Malaysian financial law. In such cases, the data will be isolated and used solely for legal compliance purposes.

When you close your cuci22 account, your personal data will be deleted or anonymised within 30 days, except for data we are legally required to retain, such as financial transaction records (7 years) and KYC documents (5 years). Data retained for legal compliance purposes will be strictly access-controlled and will not be used for any purpose other than meeting those obligations. You will receive an email confirmation once the deletion process is complete.

Yes, cuci22 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). The PDPA is the primary law governing how companies in Malaysia collect, process, and store users' personal data. In addition to the PDPA, cuci22 also adheres to stricter international privacy standards to ensure the best possible protection for Malaysian users. We have appointed a Data Protection Officer (DPO) responsible for overseeing ongoing compliance with all applicable legal requirements.

You can easily opt out of receiving promotional emails or notifications from cuci22 in several ways: (1) Click the "Unsubscribe" link at the bottom of any cuci22 promotional email; (2) Log in to your cuci22 account, go to Account Settings, and disable the "Receive marketing communications" option; or (3) Contact the cuci22 support team via live chat and request to be removed from the promotional mailing list. Please note that even after opting out of promotional emails, you will still receive important transactional emails such as deposit confirmations, withdrawal updates, and account security information.
Contact cuci22's Privacy Officer

For any questions, concerns, or requests regarding your personal data at cuci22 — including requests to access, correct, or delete your personal data — please contact our privacy team by email at support@cuci22.run or via the live chat function on the cuci22 platform, which operates 24 hours a day, 7 days a week in Bahasa Melayu. All privacy-related requests will receive a response within 3 business days and will be resolved within 14 business days. For information about Terms & Conditions or Responsible Gaming, please visit the relevant page.

256-bit SSL
PDPA Compliance
No Data Sales
24/7 BM Support
Secure Payments
Licensed & Audited
Bahasa Melayu