Privacy Policy cuci4 — Malaysia User Data Protection

Cuci4 ("we", "Platform") is committed to the privacy of every user who entrusts us with their personal information. This Privacy Policy explains in detail how we collect, use, store, protect, and occasionally share your personal information when you use the cuci4.app website, the cuci4 mobile app, and all related services.

This policy applies to all users who register an account at cuci4, visitors who browse our website without registering, and any individual who interacts with our platform through any channel, including live chat, support email, and cuci4's official social media.

We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices for data protection. If you have any questions about how we handle your data, our Data Protection Officer (DPO) team is always available to assist.

Cuci4 only collects information that is strictly necessary to provide a safe, seamless, and responsible service. The following are the categories of information we collect:

A. Information You Provide Directly

• Full name, date of birth, and gender upon account registration
• Email address and mobile number
• Current residential address in Malaysia
• Identity verification information (KYC) such as MyKad number or passport
• Registered payment method details (bank account number, eWallet)
• Any information you share when contacting our customer support

B. Information Collected Automatically

• IP address and approximate geolocation information
• Device type, operating system, and browser version used
• Access log data including pages visited, access times, and session duration
• Gaming activity, betting history, and financial transactions on the platform
• Cookie and similar tracking technology data (see Section 5)

C. Information from Third Parties

• Identity verification via approved KYC service providers
• Payment information verified by licensed payment processors
• Information related to the affiliate bonus programme (where applicable)

All collected information is used responsibly and only for legitimate purposes. We use your data for the following purposes:

Cuci4 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

Cuci4 prioritizes the confidentiality of your data. We do not sell, rent, or disclose your personal information to third parties except in limited and legitimate situations as follows:

• Licensed Payment Processors: Transaction information that must be shared with partner banks, FPX processors, or eWallet providers to securely process deposits and withdrawals.
• KYC Service Provider: Identity verification documents are shared solely with approved KYC agencies to verify your identity in compliance with legal requirements.
• Game Software Provider: Minimum technical data required by game providers to ensure a smooth and fair gaming experience.
• Statutory Authority: Information required by Malaysian law to be submitted to authorities such as Bank Negara Malaysia, the Financial Intelligence Unit, or the Companies Commission of Malaysia when required.
• Anonymous Analytics Providers: Fully anonymized usage data is used for platform improvement purposes, with no information that can personally identify you.

Cuci4 uses cookies and similar technologies to enhance the user experience, maintain login session security, and understand how users interact with our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preference memory. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous data on how users interact with the platform to help us identify and resolve technical issues.
• Functional Cookies: Saves your preferences such as interface language and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand user flows and the effectiveness of platform features for continuous improvement.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the cuci4 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Cuci4 continuously invests in the latest cybersecurity infrastructure to ensure your data is always protected. The security measures we implement encompass multiple layers of protection:

• Military-Grade Encryption: SSL/TLS 256-bit protects all communications between your device and cuci4 servers.
• Integrated Database: Data is stored in a segregated server environment with strict role-based access controls.
• 24/7 Monitoring: Our threat detection system monitors suspicious activity around the clock and automatically responds to intrusion attempts.
• Regular Penetration Testing: We conduct independent security assessments (penetration testing) every quarter to identify and address vulnerabilities.
• Secure Data Backup: Data backups are performed automatically and stored at separate locations with full encryption.
• Staff Training: All staff who handle user data undergo regular information security training.

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data held by cuci4:

To exercise any of the above rights, you may contact our Data Protection Officer via email at [email protected]. We will process your request within 30 working days and provide a written response.

Cuci4 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration of your active account and for 7 years after account closure for AML compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian accounting and financial law requirements.
• KYC Documents: Retained for the duration of the active account and 5 years after account closure.
• Customer Support Logs: Retained for 2 years for quality control and complaint resolution purposes.
• Cookie & Session Data: Session cookies are deleted when you close your browser; persistent cookies are deleted after 12 months.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

Cuci4 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service expansions. Any material changes will be communicated to you via:

• Clear notice on the platform's homepage at least 14 days before changes take effect
• Email to your registered email address with a summary of key changes
• In-app notifications on the cuci4 mobile app (if you have enabled notifications)

Continued use of the cuci4 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. The "Updated" date at the top of this document always reflects the latest version. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how cuci4 handles your personal data, please do not hesitate to contact us. We are committed to addressing every privacy inquiry thoroughly and within a reasonable timeframe.