cuci24 Privacy Policy

1. Introduction

cuci24 is committed to handling personal information responsibly and transparently. This Privacy Policy describes how cuci24 collects, uses, stores, shares, and protects personal data relating to players, prospective players, and visitors who interact with the cuci24 platform.

This policy applies to information collected through account registration, deposits, wagering, withdrawals, customer support interactions, use of responsible gambling tools, and browsing activity on cuci24 pages. It applies regardless of whether the access point is a desktop browser or a mobile device.

This policy must be read together with the cuci24 Terms & Conditions and Responsible Gambling information. Where specific data processing obligations arise from another cuci24 policy or from applicable legislation, those obligations are not reduced or excluded by this document.

2. Definitions

The following defined terms are used consistently throughout this policy:

• Personal Data — any information that identifies or is reasonably capable of identifying a living individual, including name, identity document number, email address, mobile number, IP address, device identifier, and financial account reference.
• Processing — any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• Data Subject — the individual to whom personal data relates; in the context of this policy, primarily a cuci24 player, registered user, or visitor.
• Third Party — an entity other than the data subject and cuci24 that receives or accesses personal data under this policy, including payment processors, identity verification services, fraud detection providers, and technology service partners.
• Sensitive Data — personal data that requires additional protection, such as information linked to identity documents, financial records, and responsible gambling circumstances.

3. Personal Data We Collect

3.1 Registration and Account Data

When a player creates a cuci24 account, cuci24 collects the information provided during registration, which may include full name, date of birth, residential address, email address, and mobile phone number. Additional details may be requested during the account lifecycle where verification requires it.

3.2 Identity Verification Data

cuci24 may request copies of identity documents, such as a Malaysian MyKad or passport, a recent utility bill, or another proof of address document, to confirm eligibility, verify identity before a withdrawal, or satisfy applicable compliance obligations.

3.3 Payment and Transaction Data

cuci24 records information related to deposits and withdrawals. This may include the payment method used, the transaction amount in MYR, the payment reference or identifier from the provider, and the date and time of each transaction. Specific sensitive account credentials, such as full bank account numbers or e-wallet passwords, are not stored by cuci24.

3.4 Gaming and Wagering Activity

cuci24 records wager details, game sessions, sports market selections, bet amounts, results, account balance movements, and responsible gambling tool settings. This data supports account management, dispute resolution, and responsible play monitoring.

3.5 Technical and Device Data

When a player accesses cuci24, the platform may automatically collect technical data including IP address, device type, operating system, browser type, session duration, navigation path, and connection time. This information is used to support security, stability, and fraud prevention.

3.6 Communications Data

Records of support interactions, including live chat transcripts, email exchanges, and submitted queries, are retained for a reasonable period to support quality management, dispute resolution, and account continuity.

4. Legal Basis for Processing

cuci24 processes personal data on one or more of the following legal grounds, depending on the purpose and nature of the activity:

• Contractual necessity — processing required to provide the services described in the cuci24 Terms & Conditions, including account setup, payment processing, game access, and support.
• Compliance with legal obligations — processing required to meet applicable anti-money laundering, fraud prevention, responsible gambling, and record-keeping obligations.
• Legitimate interests — processing undertaken to detect fraud, maintain platform security, prevent account misuse, and improve service quality, where those interests do not override the rights of data subjects.
• Consent — where cuci24 relies on consent for a specific processing activity, including optional communications preferences, consent may be withdrawn at any time without affecting prior lawful processing.

5. How cuci24 Uses Personal Data

Personal data collected by cuci24 is used for the following purposes:

• Registering and maintaining player accounts, including verifying eligibility and identity.
• Processing MYR deposits and withdrawals through supported Malaysian payment methods, including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrency networks.
• Delivering casino games, live dealer services, sports betting markets, lottery products, and associated platform features.
• Evaluating and administering bonus offers, promotions, and loyalty programme activity in accordance with the applicable terms.
• Providing customer support via live chat, email, or other available channels during published service hours.
• Monitoring transactions and account activity for fraud prevention, security assurance, and anti-money laundering compliance purposes.
• Operating responsible gambling controls, including deposit limit settings, cooling-off tools, and self-exclusion mechanisms.
• Maintaining audit records, resolving disputes, and defending or pursuing claims where legitimately required.
• Improving platform navigation, performance, and service quality through analysis of aggregated, anonymised data.

cuci24 does not use personal data to make automated decisions that produce significant effects on a player's legal position without providing an appropriate review mechanism.

6. Data Sharing and Disclosure

cuci24 may share personal data with selected third parties in the following circumstances:

6.1 Payment and Financial Service Providers

Payment processors and financial intermediaries involved in facilitating DuitNow, FPX, bank transfers, e-wallet transactions, and cryptocurrency deposits or withdrawals receive the minimum necessary data to complete those transactions securely.

6.2 Identity Verification and Fraud Prevention

Where cuci24 uses a third-party service to verify identity documents or screen transactions against fraud and sanctions databases, relevant data is shared with that provider under an appropriate data processing arrangement.

6.3 Technology and Infrastructure Partners

cuci24 may use external technology providers for hosting, security monitoring, communications delivery, and analytics. These providers access personal data only to deliver their contracted services and are required to maintain appropriate protections.

6.4 Legal and Regulatory Requirements

cuci24 may disclose personal data where required by a court order, lawful regulator request, applicable legislation, or other binding legal obligation. cuci24 will endeavour to notify the affected player unless prohibited from doing so.

7. Payment Data and Financial Information

cuci24 treats financial data with particular care. Payment references, transaction identifiers, bank confirmation codes, and DuitNow or FPX receipts are stored in connection with the player's account history for dispute resolution, withdrawal verification, and compliance record-keeping purposes.

Where a player deposits using a Malaysian bank account, the account name and partial reference may be captured to confirm payment ownership. E-wallet transaction identifiers from Touch 'n Go eWallet, Boost, or GrabPay serve a similar verification purpose. cuci24 does not store complete banking credentials, card details, or e-wallet PINs or passwords.

Cryptocurrency transaction identifiers, such as a blockchain transaction hash associated with a USDT or BTC deposit, may be retained to confirm receipt and facilitate withdrawal back to a verified wallet address.

8. Cookies and Tracking Technologies

cuci24 may use cookies and similar browser storage mechanisms to support session management, security, and performance analysis. A session cookie keeps a player signed in during an active session. Security cookies support fraud detection by recognising returning devices. Performance and analytics data may be collected in aggregated form to understand how players navigate the platform.

Players may adjust browser settings to limit or block cookies. Disabling all cookies may affect login persistence, session security, and certain platform features. cuci24 does not use tracking technologies to serve behavioural advertising through third-party networks.

9. Data Retention

cuci24 retains personal data for as long as it is necessary for the purposes described in this policy, or as required by applicable compliance and record-keeping obligations. The following general principles apply:

• Active account data is retained throughout the period the account remains open and active.
• Transaction and wagering records may be retained for a period consistent with financial and compliance requirements following account closure.
• Identity verification documents are retained for the minimum period required to satisfy applicable anti-money laundering and verification obligations.
• Support interaction records are retained for a reasonable period to support dispute resolution and quality management.
• Technical access logs may be retained for a shorter period unless an investigation requires them to be preserved further.

Upon expiry of the applicable retention period, cuci24 will delete or anonymise the relevant data unless a specific legal reason requires further retention.

10. Security Measures

cuci24 implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These include encrypted data transmission for account and payment pages, access controls limiting internal data access to staff with a genuine operational requirement, and monitoring processes intended to detect unusual account or system activity.

Despite these measures, no internet-based system is completely immune to risk. Players contribute to account security by maintaining a strong password, protecting one-time authentication codes, and notifying cuci24 promptly if unauthorised account activity is suspected. Players should sign out after each session when using a shared device or public connection.

cuci24 will take appropriate steps following any confirmed or suspected data security incident affecting player information, in accordance with applicable notification requirements.

11. Your Rights Over Personal Data

Subject to applicable requirements and verification of identity, players may exercise the following rights in respect of their personal data held by cuci24:

• Right of access — to obtain confirmation of whether cuci24 holds personal data about you and to receive a copy of that data.
• Right to rectification — to request correction of inaccurate or incomplete personal data associated with your account.
• Right to erasure — to request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations.
• Right to restriction — to request that processing of your personal data be limited while accuracy is contested, or while a legitimate interest objection is evaluated.
• Right to object — to object to processing based on legitimate interests where your particular circumstances justify that objection.
• Right to data portability — to request a copy of personal data provided by you to cuci24 in a structured, commonly used format where processing is based on consent or contract.

To exercise any of these rights, please contact cuci24 via the email address shown in Section 14 of this policy. cuci24 may request proof of identity before processing a rights request. cuci24 will respond within a reasonable timeframe consistent with applicable obligations.

12. Minors and Age Verification

cuci24 does not knowingly collect personal data from or provide services to persons under 21 years of age. Age verification is a standard element of the registration and withdrawal process.

If cuci24 identifies or receives reliable information indicating that an account is held or used by a person under 21, the account may be suspended immediately. Relevant records will be reviewed and, subject to applicable requirements, data associated with the underage use may be handled in accordance with appropriate legal and compliance obligations.

13. Changes to This Privacy Policy

cuci24 may update this Privacy Policy to reflect changes in law, regulatory guidance, platform services, data processing practices, or organisational structure. The revised policy will be published on this page with a note of the review date.

For material changes that significantly affect how personal data is processed, cuci24 may provide an additional platform or account notification. Players are encouraged to review this page periodically. Continued use of cuci24 following a policy update indicates acceptance of the current published version.

14. Contact and Privacy Queries

Questions, data rights requests, and privacy concerns may be submitted by contacting cuci24 customer support during published service hours of 8:00am to 12:00am MYT, seven days a week. Please include a clear description of your query and, for data rights requests, sufficient information to confirm your identity.

The cuci24 support email address is displayed below as plain text only:

[email protected]

cuci24 will acknowledge receipt of a data rights request and aim to provide a substantive response within a reasonable period. If a request cannot be fulfilled in full, cuci24 will explain the basis for any limitation.