Your privacy matters to cuci22. This Policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights you hold over your information.
Effective Date: 1 January 2026Six core principles that govern how cuci22 handles every member's personal data.
All personal data held by cuci22 is stored on encrypted servers with access controls restricted to authorised personnel only. Transmission is protected by 256-bit SSL encryption across all platform connections.
cuci22 collects personal data only for specified, explicit, and legitimate purposes. Data collected for KYC verification is not used for unrelated marketing activities. Each data type has a defined purpose and retention period.
cuci22 members have the right to access, correct, and request deletion of personal data held about them, subject to legal retention obligations. Requests are processed within 30 days of receipt via live chat or email.
Personal data is shared only with vetted third-party service providers who process it under contractual data protection obligations. cuci22 does not sell member data to advertisers or data brokers under any circumstances.
Personal data is retained only for as long as necessary for its stated purpose or as required under regulatory and licensing obligations. Data is securely deleted or anonymised once the retention period expires.
cuci22 does not engage in unsolicited cold outreach using member contact details. Marketing communications are sent only where the member has provided explicit consent, with a clear unsubscribe option in every message.
This Privacy Policy ("Policy") describes how cuci22 ("cuci22", "we", "us", "our"), the operator of the online gaming platform accessible at cuci22.asia, collects, uses, stores, shares, and protects personal information about registered members and visitors ("you", "your"). By using the cuci22 platform or creating an account, you acknowledge that you have read and understood this Policy.
1.1 cuci22 is the data controller responsible for personal data collected through the cuci22.asia platform. cuci22 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is conducted lawfully and in accordance with applicable data protection principles.
1.2 For data protection enquiries, members may contact cuci22 via the live chat support function available on the platform or via the email address stated in Section 13 of this Policy.
cuci22 collects personal data in the following categories:
Full legal name, date of birth, gender, residential address, nationality, and government-issued identification document details (e.g., Malaysian IC / MyKad number, passport number). This data is collected during account registration and KYC verification.
Email address and mobile telephone number. Collected at registration and used for account communications, transaction notifications, and where consent has been given, marketing communications.
Payment method details including e-wallet identifiers (Touch n Go eWallet, Boost), bank account numbers (for FPX transactions with Maybank, CIMB, Public Bank), card details (Visa/Mastercard — tokenised and not stored in full), and cryptocurrency wallet addresses. Full payment credentials are handled by PCI-DSS compliant payment processors.
Records of all deposits, withdrawals, game activity, bets placed, and outcomes. This data supports account management, dispute resolution, and regulatory compliance obligations.
IP address, device type, browser type and version, operating system, session timestamps, pages visited, and click-path data. Collected automatically via server logs and cookies.
Records of live chat transcripts, support emails, and other communications between you and cuci22 support or compliance teams.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity, Contact |
| KYC identity verification and age verification | Identity, Document images |
| Processing deposits and withdrawals | Identity, Financial, Transaction |
| Fraud prevention and AML compliance | Identity, Financial, Technical, Transaction |
| Customer support and dispute resolution | Identity, Transaction, Communications |
| Platform security and abuse prevention | Technical, Transaction |
| Regulatory reporting obligations | Identity, Financial, Transaction |
| Marketing communications (with consent) | Contact |
| Platform improvement and analytics | Technical, Usage (anonymised) |
4.1 Contract Performance. Processing necessary to register your account, operate your membership, and fulfil deposit, withdrawal, and gaming service obligations.
4.2 Legal Obligation. Processing required to comply with applicable anti-money laundering regulations, licensing conditions, and identity verification requirements imposed by cuci22's licensing authority.
4.3 Legitimate Interests. Processing necessary for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your data protection rights.
4.4 Consent. Marketing communications and non-essential cookies are processed on the basis of your explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.
5.1 cuci22 uses cookies and similar technologies to operate the platform, maintain session state, prevent fraud, and analyse usage patterns. Cookies are categorised as follows:
5.2 You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the cuci22 platform.
6.1 cuci22 does not sell, rent, or trade personal data to third parties for commercial purposes. Data is shared only in the following circumstances:
6.2 All third-party processors are required to implement appropriate technical and organisational security measures and are prohibited from using cuci22 member data for their own commercial purposes.
7.1 cuci22 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligations:
7.2 Upon expiry of the applicable retention period, personal data is securely deleted from cuci22 systems or irreversibly anonymised where deletion is technically impractical.
8.1 cuci22 implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
8.2 In the event of a personal data breach that poses a risk to member rights and freedoms, cuci22 will notify affected members without undue delay and will report to its licensing authority in accordance with applicable requirements.
9.1 Subject to applicable law and cuci22's legal retention obligations, you hold the following rights in respect of personal data cuci22 holds about you:
9.2 To exercise any of the above rights, contact cuci22 via live chat support or the email address in Section 13. Requests will be responded to within thirty (30) calendar days. cuci22 may request identity verification before actioning data subject requests.
10.1 The cuci22 platform is strictly for individuals aged 21 years and above. cuci22 does not knowingly collect personal data from any person under the age of 21. If cuci22 becomes aware that personal data has been collected from a person under 21 without verified parental consent, such data will be deleted immediately and the associated account closed.
10.2 21+ Age verification through KYC document submission is mandatory on all accounts. If you are aware of a minor accessing the cuci22 platform, please notify cuci22 support immediately.
11.1 cuci22 may transfer personal data to servers or third-party processors located outside Malaysia in connection with the operation of the platform. Such transfers are made only where adequate data protection safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses.
11.2 By using the cuci22 platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described herein.
12.1 cuci22 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered members via email and/or prominent platform notice prior to the change taking effect. The effective date at the top of this Policy reflects the date of the most recent revision.
12.2 Continued use of the cuci22 platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and contact cuci22 to close your account.
For any privacy-related enquiries, requests to exercise your data rights, or to report a data concern, please contact cuci22 through the following channels:
cuci22 is committed to resolving all data protection concerns promptly and transparently.
Join Malaysian players from Kuala Lumpur, Penang, Johor Bahru and beyond — your privacy is protected by the same standards we apply to your account security. Play with confidence.