Privacy Policy cuci50 – Your Data Protection

01 Introduction

This Privacy Policy is published by cuci50 ("we", "Platform") and applies to all users who access or register at cuci50.org. This document explains in detail how we collect, use, store, share and protect your personal data, as well as your rights in relation to that information.

By registering an account or continuing to use the cuci50 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us for further assistance.

02 Personal Data We Collect

Cuci50 collects your personal data through several channels — directly from you during registration, automatically as you use the platform, and in certain situations from trusted third-party sources. The following are the categories of data we collect:

Data Categories	Example Information	Resources
Identity Data	Full name, date of birth, identification card number, gender	You (during registration & KYC)
Contact Data	Email address, phone number, residential address	You (during registration)
Financial Data	Bank account number, bank name, deposit & withdrawal records	You & payment processors
Technical Data	IP address, device type, operating system, browser, cookies	Automatic (during use)
Activity Data	Game history, betting logs, bonus transaction records	Automatic (during use)
KYC Data	MyKad copy, passport, proof of address, selfie photo	You (during verification)

03 Purpose of Data Collection

Every piece of data we collect has a clear and legitimate purpose. cuci50 does not collect data for purposes unrelated to platform operations. The following are the primary purposes for which your data is used:

• Account management: To securely register, verify, and manage your platform account.
• Transaction processing: To process deposits, withdrawals, and all financial activities related to your account.
• Identity verification (KYC): To comply with anti-money laundering (AML) regulatory requirements and verify your identity to protect platform security.
• Customer support: To respond to enquiries, resolve complaints, and provide you with effective technical assistance.
• Platform improvements: To analyse aggregated usage patterns in order to improve the performance, security, and user experience of the cuci50 platform.
• Fraud prevention: To detect and prevent any fraudulent activity, abuse, or security threats that could affect you or the platform.
• Marketing communications: To send you cuci50 offers, promotions, and the latest news, subject to your communication preferences.

04 Legal Basis for Data Processing

Cuci50 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

• Your consent: For marketing communications and any optional processing, we rely on the explicit consent you have provided.
• Contract fulfilment: Processing required to deliver the services you have requested, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable Malaysian law, including KYC and AML requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement purposes, where our interests do not override your fundamental rights.

05 Data Sharing With Third Parties

Cuci50 does not sell or rent your personal data to any party. However, in the course of platform operations, we may share your data with the following categories of third parties, and only to the extent necessary:

• Payment processors and financial institutions: To securely facilitate your deposits, withdrawals, and financial transactions through supported banking channels and e-wallets.
• Technology service providers: Includes server hosts, analytics providers, and cybersecurity services that help us operate the platform, subject to strict data protection agreements.
• Game providers: Game session information required by authorised game providers to ensure the integrity and fairness of your gameplay.
• Regulatory authorities and law enforcement: When required by Malaysian law or a valid court order, we are obligated to disclose the relevant information.

06 Cookies and Tracking Technologies

Cuci50 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
• Performance cookies: Collects information on how you use the platform to help us identify and resolve performance issues.
• Functional cookies: Stores your preferences such as language and display settings to deliver a more personalised experience.
• Analytics cookies: Helps us understand traffic patterns and platform usage in aggregate, non-personally identifiable form.

You can manage your cookie settings through your internet browser. Please note, however, that disabling certain cookies may affect the functionality of the cuci50 platform.

07 Data Retention Period

Cuci50 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active on cuci50, plus any legally mandated period following account closure.
• Financial transaction records: Retained for a minimum of seven years in compliance with Malaysian financial and tax legal requirements.
• KYC documents: Retained for five years after the business relationship ends, in accordance with applicable AML requirements.
• Technical log data: Typically retained for 90 days for security and troubleshooting purposes.
• Customer support communications: Retained for three years after the resolution of the related matter.

Once data is no longer required, cuci50 will securely delete or anonymise it in accordance with industry best practices.

08 Data Security

Protecting your personal data is cuci50's top priority. We implement multiple layers of technical and operational security controls to keep your data safe from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmissions between the platform and your device.
• Encryption of sensitive data stored in databases using industry-standard encryption algorithms.
• Strict role-based access controls — only authorised staff can access your personal data, and only to the extent required for their duties.
• 24/7 security monitoring with an automated intrusion detection system capable of identifying and responding to threats in real time.
• Regular security audits and penetration testing by independent third parties to identify and address any vulnerabilities.
• A comprehensive data incident response plan to ensure any security breach is addressed swiftly and effectively.

09 Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by cuci50. We are committed to respecting and facilitating the exercise of these rights:

• Right to access: You have the right to request a copy of the personal data we hold about you.
• Right to rectify: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request that we delete your personal data.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to restrict processing: You may request that we restrict how we process your data in certain circumstances.
• Right to data portability: You have the right to receive a copy of your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within thirty business days.

10 Privacy Policy Amendments

Cuci50 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. Any material changes will be communicated to you via in-platform notifications or your registered email before the changes take effect.

You are encouraged to review this page periodically. Your continued use of the cuci50 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy.