Introduction
This Privacy Policy ("Policy") describes how cuci2vip ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("User", "Player", "you") who access or use the cuci2vip website at https://cuci2vip.cam and all associated services, applications, and content.
cuci2vip operates as an online gaming and sports betting platform serving users primarily in Malaysia and accessible to users in other permitted jurisdictions. In the course of providing our services — including account registration, identity verification, payment processing, game delivery, and customer support — we necessarily collect and process personal data about our Players.
This Policy is issued in compliance with applicable data protection legislation and international standards for online gaming operators. By registering an Account on cuci2vip and continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly, including name, identification number, contact details, financial information, or online identifiers.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, deletion, or any combination thereof.
- "Data Controller" — cuci2vip, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" — a third party that processes Personal Data on behalf of cuci2vip, under a binding data processing agreement and strictly in accordance with cuci2vip's instructions.
- "Consent" — a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a specified purpose.
- "KYC" — Know Your Customer: the identity verification and document authentication process applied to all Players prior to the processing of withdrawal requests.
- "Cookie" — a small text file placed on a User's device by the Platform's web server, used to retain session information and facilitate certain functionality.
Data We Collect
cuci2vip collects Personal Data from you at various points during your interaction with the Platform. The categories of Personal Data we collect are described below:
cuci2vip does not collect Special Category Personal Data (such as health, racial, or religious data) except where strictly required for responsible gambling assessments, in which case such data is handled with the highest level of protection and is not used for any other purpose.
Legal Basis for Processing
cuci2vip processes your Personal Data only where we have a lawful basis to do so. The legal bases applicable to our processing activities are as follows:
- Contractual Necessity: Processing is necessary to fulfil the agreement between you and cuci2vip — including account registration, game delivery, payment processing, and customer support — and cannot be reasonably performed without it.
- Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and responsible gambling requirements imposed by our licensing authority.
- Legitimate Interests: Processing is necessary for cuci2vip's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — provided these interests do not override your fundamental data rights.
- Consent: Where we rely on consent as our legal basis — for example, for the sending of promotional communications — you may withdraw that consent at any time by contacting our support team or adjusting your Account preferences, without affecting the lawfulness of processing carried out prior to withdrawal.
How We Use Your Data
cuci2vip uses your Personal Data for the following specific purposes, each of which is tied to a corresponding lawful basis described in Section 4:
- Account Registration & Management: To create and maintain your Account, authenticate your identity, and manage your Account settings and preferences.
- KYC & Identity Verification: To verify your identity, age (21+ minimum), and payment method ownership before processing withdrawals — in compliance with our regulatory obligations.
- Payment Processing: To facilitate deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency channels (BTC, ETH, USDT, BNB).
- Game Delivery & Personalisation: To provide access to the cuci2vip game library, record gaming activity for session management, and personalise your gaming experience where applicable.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible Gambling Monitoring: To monitor gaming patterns for signs of problem gambling behaviour and to apply Responsible Gambling Tools — including deposit limits, self-exclusion, and cooling-off periods — where appropriate.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
- Legal & Regulatory Compliance: To meet our obligations under applicable laws, including the retention of transaction records and the reporting of suspicious activity to relevant authorities where legally required.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purposes of improving the Platform's performance, user experience, and security posture.
- Marketing Communications (with consent): To send you promotional offers, bonus notifications, and platform updates, where you have provided explicit consent. You may opt out at any time.
Data Sharing & Disclosure
cuci2vip does not sell or rent your Personal Data to any third party. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data processing obligations:
| Recipient Category | Purpose of Sharing | Basis |
|---|---|---|
| Payment Service Providers | Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, and cryptocurrency networks. | Contractual necessity |
| KYC & Identity Verification Partners | Third-party KYC service providers that verify identity documents and perform liveness checks on behalf of cuci2vip. | Legal obligation & contract |
| Fraud Prevention & AML Services | Specialist providers that screen transactions for fraud patterns, structuring, and money laundering indicators. | Legitimate interest & legal obligation |
| Game Content Providers | Game studios and platform aggregators that power the cuci2vip game library may receive minimal session data necessary to deliver game functionality. | Contractual necessity |
| IT & Infrastructure Providers | Cloud hosting, database management, and cybersecurity service providers operating the technical infrastructure underlying the Platform. | Legitimate interest |
| Regulatory & Law Enforcement Authorities | Where required by applicable law, court order, or regulatory mandate — including suspicious transaction reporting to relevant Malaysian or international authorities. | Legal obligation |
Data Retention
cuci2vip retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply:
- Active Account Data: Retained for the duration of your Account's active status on the Platform.
- KYC Documentation: Retained for a minimum of 5 years following Account closure, in accordance with anti-money laundering regulatory requirements.
- Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, consistent with applicable financial record-keeping obligations.
- Customer Support Records: Retained for 3 years from the date of the final communication, unless the matter is subject to ongoing legal proceedings.
- Marketing Consent Records: Retained until you withdraw your consent or for a maximum of 3 years from the date of last interaction, whichever is earlier.
- Technical Logs & IP Records: Retained for up to 12 months for security monitoring and fraud detection purposes.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.
Data Security
cuci2vip implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- Transport Encryption: All data transmitted between your device and the cuci2vip Platform is encrypted using 256-bit SSL/TLS protocols, preventing interception by unauthorised third parties.
- Data Encryption at Rest: Sensitive Personal Data stored in our databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to Personal Data within cuci2vip's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
- Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: cuci2vip maintains a documented data breach incident response procedure. In the event of a confirmed personal data breach that presents a risk to affected users, we will notify impacted Players and relevant authorities within the timeframes required by applicable law.
Cookies & Tracking Technologies
cuci2vip uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your web browser when you visit our website. We use the following categories of cookies:
- Strictly Necessary Cookies: Essential to the operation of the Platform, including maintaining your login session, enabling game functionality, and facilitating secure payment flows. These cookies cannot be disabled without materially affecting the Platform's functionality.
- Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how Players interact with the Platform — including which pages are visited most frequently and how long users spend on each page. This information is used solely to improve the Platform's user experience.
- Functional Cookies: Used to remember your preferences, such as your preferred language or display settings, to provide a more personalised experience on return visits.
- Security Cookies: Used to detect and prevent fraudulent access attempts, automated bot activity, and other security threats.
cuci2vip does not use third-party advertising cookies or tracking technologies designed to build a profile of your browsing behaviour across other websites for advertising purposes. Most web browsers allow you to manage cookie preferences through browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform.
International Data Transfers
cuci2vip operates with infrastructure and third-party service providers located in multiple countries. As a result, your Personal Data may be transferred to, stored in, and processed in jurisdictions outside Malaysia. Where such transfers occur, cuci2vip ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable data protection laws, including:
- Data processing agreements with receiving parties that include binding contractual clauses protecting the rights of Malaysian data subjects.
- Transfer only to jurisdictions that provide an adequate level of data protection, as assessed by relevant regulatory standards.
- Technical security measures — including encryption in transit and at rest — that apply regardless of the jurisdiction in which data is processed.
Your Rights as a Data Subject
As a user of cuci2vip and a data subject under applicable data protection principles, you hold the following rights with respect to your Personal Data processed by cuci2vip. To exercise any of these rights, please contact our Data Privacy team at [email protected]:
cuci2vip will respond to all valid data subject requests within 30 calendar days of receipt. In certain cases — particularly where requests are complex or numerous — we may extend this period by a further 30 days, with prior notification to you. Please note that some rights may be limited where cuci2vip is required to retain data under a legal obligation (for example, AML-related KYC records).
Minors & Age Policy
cuci2vip strictly enforces a minimum age requirement of 21 years for all Account registrations and gambling activities on the Platform. The Platform is not directed at, designed for, or intended to attract persons under the age of 21.
If you have reason to believe that a minor has registered an Account on cuci2vip, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.
Policy Amendments
cuci2vip reserves the right to update or amend this Privacy Policy at any time, in response to changes in applicable law, our data processing practices, or the services offered on the Platform. Material changes to this Policy will be communicated to registered Players via an in-platform notification upon login and, where appropriate, by email to the address registered on the Account.
The date of the most recent revision is indicated at the top of this page under "Last Updated". We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.
Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or cuci2vip's handling of your Personal Data, please contact our Data Privacy team using the details below. We are committed to addressing all privacy enquiries promptly and transparently.