Privacy Policy cuci288 — Your Data, Our Responsibility

Cuci288 is an online entertainment platform operating for players in Malaysia. In the context of this Privacy Policy, references to "cuci288," "we," or "the platform" refer to the entity operating the cuci288.com website and all related services.

This cuci288 Privacy Policy applies to:

• All individuals who have registered and hold an active cuci288 account.
• Visitors browsing the cuci288 website without registering an account.
• Individuals who contact the cuci288 support team through any communication channel.
• Participants in any cuci288 promotional programme, contest, or marketing activity.

Cuci288 only collects personal data necessary for platform operations, legal compliance, and improving the user experience. Below is a summary of the data we collect and the purposes for which it is used:

Cuci288 collects users' personal data through several different methods. It's important that you understand each of these methods so you know when and how your data is collected.

• Account Registration: When you register a cuci288 account, you voluntarily provide your identity and contact information. This is the most direct form of data collection, and you have full control over the information you submit.
• KYC Verification Process: To comply with anti-money laundering (AML) requirements and consumer protection regulations, we may request identity verification documents such as a copy of your MyKad or passport, as well as proof of address when required.
• Platform Usage: Every interaction you have on the cuci288 platform — including games played, bets placed, and time spent — is automatically recorded by our system for security and service improvement purposes.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow QR, or FPX, transaction details including the amount and date are automatically recorded.
• Support Communications: Every time you contact the cuci288 support team via live chat or email, the content of that conversation is stored for quality control and dispute resolution purposes.
• Cookie Technology: The cuci288 website uses cookies and similar tracking technologies to collect technical and browsing behaviour data. Further details on cookies are explained in Section 7.

Cuci288 uses collected personal data solely for legitimate, stated purposes. We never use your data for anything unrelated to platform operations without your explicit consent.

• Account Management: Creating, maintaining, and securing your cuci288 account — including processing logins, password resets, and profile updates.
• Transaction Processing: Processing deposits and withdrawals securely and efficiently through your chosen payment method, such as Touch 'n Go eWallet, GrabPay, DuitNow, or FPX.
• Legal Compliance: Meeting legal obligations under PDPA 2010, Malaysia's AML regulations, and applicable financial reporting requirements.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, duplicate accounts, and bonus abuse on the cuci288 platform.
• Customer Support: Providing you with relevant technical assistance and support based on your account history and previously reported issues.
• Personalised Experience: Personalising game recommendations, promotions, and platform content based on your preferences and playing habits on cuci288.
• Marketing Communications: Sending you information about cuci288 promotions, bonuses, and the latest offers via email or SMS — only if you have consented to receive such communications.
• Platform Improvements: Analysing aggregated and anonymised data to understand how users interact with the cuci288 platform and improve the overall experience.

Cuci288 does not sell, rent, or disclose users' personal data to any third party for their own marketing purposes. However, in the normal course of platform operations, there are certain situations where your data may need to be shared with trusted parties:

• Payment Service Providers: Required transaction information is shared solely with your chosen payment provider (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) for the purpose of processing your transaction. They are bound by strict confidentiality agreements.
• Game Software Providers: Usernames and game session data are shared with game providers who operate specific games on the cuci288 platform to ensure smooth gameplay.
• Competent Authorities: cuci288 will disclose personal data to Malaysian authorities when required by law, court order, or a legitimate financial crime investigation.
• Analytics Services: Aggregated and anonymised technical data is shared with analytics service providers to help us understand platform usage patterns and improve cuci288's services.

Cuci288 invests seriously in data security infrastructure to ensure your personal information is always protected. The security measures we implement span technical, operational, and organisational levels.

• 256-bit SSL Encryption: All data transmitted between your browser and cuci288's servers is encrypted using TLS 1.3 with 256-bit encryption keys — the same standard used by leading banking institutions.
• Two-Factor Authentication (2FA): cuci288 supports two-factor authentication for user accounts to add an extra layer of security against unauthorised access.
• Secure Servers: User data is stored in data centres protected by round-the-clock physical security, biometric access controls, and real-time threat monitoring systems.
• Regular Security Audits: cuci288 conducts regular penetration testing and security audits carried out by accredited independent cybersecurity firms.
• Internal Access Controls: Access to user data within cuci288 is governed by a need-to-know principle — only staff who require access to perform a specific role are permitted.
• Suspicious Activity Monitoring: cuci288's automated monitoring system continuously tracks unusual login activity and will temporarily lock an account if a threat is detected.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. In the event of a data breach affecting your personal data, cuci288 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

The cuci288 website uses cookies — small text files stored on your device — and similar tracking technologies to enhance functionality and user experience. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for basic website functions such as login authentication, session security, and language preferences. Without them, the cuci288 platform will not function properly. These cookies cannot be disabled.
• Functional Cookies: Allows the cuci288 platform to remember your preferences such as saved username, favourite game types, and display settings. These cookies significantly enhance ease of use.
• Analytics Cookies: Helps cuci288 understand how users interact with the platform — most visited pages, time spent, and navigation paths. All analytics data is anonymised.
• Marketing Cookies: Used to display promotions and offers relevant to your interests. You may opt out of marketing cookies through your browser settings without affecting the core functionality of the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our commitment to best-in-class privacy practices, you have the following rights regarding your personal data held by cuci288:

Cuci288 retains users' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: For as long as your cuci288 account remains active, plus 6 years following account closure, to meet financial record-keeping and legal requirements.
• Financial Transaction Records: Minimum 7 years from the date of transaction in accordance with Malaysia's Companies Act requirements and applicable financial regulations.
• KYC & Identity Verification Records: 5 years after the business relationship ends, or longer if required by AML obligations.
• Customer Support Records: 3 years from the date of last interaction for reference and dispute resolution purposes.
• Analytics Cookie Data: Between 30 days and 24 months depending on the cookie type — anonymised technical data may be retained longer for platform improvement purposes.
• Marketing Communications Data: Until you withdraw your consent or request deletion, with a maximum period of 3 years from your last interaction.

Once the retention period expires, cuci288 will securely delete or anonymise the data so it can no longer be linked to your identity. Data deletion is carried out under strict security protocols to ensure no unauthorised recovery is possible.

If you have any questions, concerns, or requests regarding the cuci288 Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is ready to assist you and will respond in a clear and professional manner.

You may contact the cuci288 Data Protection Officer (DPO) through the following channels:

• Email: support@cuci288.com — for written enquiries that require an official record
• Live Chat: Available 24/7 on the cuci288 platform for immediate enquiries
• Target Response Time: 3 business days for general enquiries; 30 business days for formal user rights requests

If you are unsatisfied with the response you receive from cuci288, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) through their official channels.