Privacy Policy

§ 01 Introduction

cuci711 ("we", "us", "our", "the Company") operates the online casino and sports betting Platform accessible at cuci711.cam (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy sets out in clear and accessible terms the categories of personal data we collect from you, the purposes for which we process that data, the legal grounds on which processing is based, how long we retain data, the third parties with whom we may share it, and the rights you have as a data subject.

cuci711 serves a primarily Malaysian player base, with significant communities in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the wider Klang Valley region. We support local payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank. Where personal data relating to payment transactions is processed in connection with these methods, such processing is conducted in accordance with the data governance requirements of the relevant payment partners.

This Privacy Policy should be read in conjunction with our Terms & Conditions and any supplementary notices provided at the point of data collection.

§ 02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, identification number, location data, contact details, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. cuci711 is the Data Controller in respect of data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of cuci711 in accordance with cuci711's instructions and this Privacy Policy.
• "Player" / "you" means any individual who accesses or uses the cuci711 Platform, whether registered or otherwise.
• "Sensitive Personal Data" means categories of Personal Data requiring heightened protection, including but not limited to financial data, identity documents, and data relating to gambling behaviour.
• "Platform" means the cuci711 website (cuci711.cam), mobile application, and all associated digital services.

§ 03 Data Controller

cuci711 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, cuci711 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with applicable data protection legislation.

Where cuci711 engages third-party service providers to process Personal Data on its behalf (for example, payment processors, identity verification providers, or cloud infrastructure services), such third parties act as Data Processors and are contractually bound to process data only on cuci711's instructions, to maintain appropriate security measures, and to comply with applicable data protection obligations.

For all data protection enquiries, please refer to the contact details provided in Section 16 of this Policy.

§ 04 Data We Collect

cuci711 collects and processes the following categories of Personal Data in connection with the operation of the Platform:

4.1 Identity Data

• Full legal name as appearing on official identification documents
• Date of birth
• National identity card number (MyKad) or passport number
• Photographs of government-issued identity documents submitted during KYC
• Selfie photographs submitted for identity verification purposes

4.2 Contact Data

• Registered email address
• Mobile phone number
• Residential address (including city and postcode)

4.3 Financial Data

• Payment method details (e.g. e-wallet account reference, bank account name/number where provided)
• Transaction history including deposits, withdrawals, and bonus credits
• Source of funds information provided during enhanced due diligence checks

4.4 Account & Gaming Data

• Username and account credentials (passwords stored in hashed, salted format only — never in plain text)
• Game and betting activity, including wager amounts, game types, session duration, and outcomes
• Bonus claims and wagering history
• Responsible gambling settings (deposit limits, self-exclusion status, cooling-off periods)

4.5 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device identifiers, operating system, browser type and version
• Session logs including login timestamps, pages visited, and features accessed
• Cookies and similar tracking technology data (see Section 11)

4.6 Communications Data

• Records of communications with our support team via live chat, email, or any other channel
• Support tickets, complaints, and dispute records
• Marketing preference settings and communication opt-in / opt-out records

§ 05 How We Collect Personal Data

cuci711 collects Personal Data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access the Platform
• Third-party sources: Identity verification and fraud prevention data from authorised third-party KYC and AML service providers; payment transaction data from payment processing partners including e-wallet providers and Malaysian banking institutions
• Public sources: Publicly available information used for identity verification, fraud prevention, and regulatory compliance purposes

§ 06 Purposes & Legal Basis for Processing

The table below summarises the primary purposes for which cuci711 processes your Personal Data and the corresponding legal basis for each:

§ 07 Data Sharing & Disclosure

cuci711 does not sell, rent, or trade your Personal Data to third parties. We may, however, share your Personal Data with the following categories of recipients where necessary and in accordance with applicable law:

7.1 Payment Processors & Financial Institutions

We share necessary transaction and identity data with payment processors supporting our accepted payment methods, including e-wallet providers (Touch 'n Go, Boost, GrabPay), Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), and DuitNow/FPX infrastructure providers. Such sharing is strictly limited to what is necessary to process your transactions.

7.2 Identity Verification & KYC Providers

We work with authorised third-party identity verification and KYC service providers to verify your identity and comply with our anti-money laundering obligations. These providers receive only the data necessary to perform verification and are contractually obligated to maintain strict data security standards.

7.3 Regulatory Authorities & Law Enforcement

cuci711 may be required by law, court order, or regulatory directive to disclose Personal Data to competent authorities including our licensing authority, financial intelligence units, or law enforcement agencies. We will always seek to minimise the scope of such disclosures to the minimum required by law.

7.4 Technology & Infrastructure Providers

We use third-party cloud infrastructure, hosting, and technology service providers to operate the Platform. These providers process data on our behalf as Data Processors and are bound by data processing agreements requiring them to maintain appropriate security measures and process data only on our instructions.

7.5 Game Studios

Where necessary for the delivery of game services, limited technical data (such as session tokens and bet identifiers) may be shared with our licensed game studio partners. Personal identity data is not shared with game studios without your explicit consent.

§ 08 International Data Transfers

As an internationally operated platform, cuci711 may transfer your Personal Data to countries outside Malaysia for processing and storage, including jurisdictions where our technology infrastructure, game studio partners, or KYC service providers are located.

Where such transfers occur, cuci711 takes appropriate steps to ensure that your Personal Data receives an adequate level of protection, including by:

• Transferring data only to recipients in countries with recognised adequate data protection standards
• Using contractual safeguards, including data processing agreements incorporating internationally recognised standard contractual clauses where appropriate
• Requiring all international Data Processors to implement technical and organisational security measures equivalent to those cuci711 maintains

§ 09 Data Retention

cuci711 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active Account plus a minimum of 5 years following Account closure, to satisfy anti-money laundering record-keeping obligations
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction in accordance with AML and gaming licence requirements
• KYC Documentation: Retained for the duration of your Account plus 5 years following closure or the last transaction, whichever is later
• Customer Support Communications: Retained for 3 years from the date of the last communication unless the matter relates to an ongoing dispute or regulatory inquiry
• Marketing Preferences & Consent Records: Retained for the duration of your Account, and for 3 years following Account closure or withdrawal of consent
• Technical & Log Data: Retained for 12 months for security monitoring and fraud prevention purposes

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

§ 10 Security Measures

cuci711 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Passwords are stored using industry-standard bcrypt hashing with salt — never in plain text
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication
• Penetration Testing: Our Platform and infrastructure undergo regular third-party security assessments and penetration testing
• Intrusion Detection: Automated monitoring systems detect and alert on anomalous access patterns and potential security incidents in real time
• Data Segregation: Player funds and financial data are held in systems segregated from operational systems
• Incident Response: cuci711 maintains a documented data breach incident response procedure. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities as required by applicable law

§ 11 Cookies & Tracking Technologies

cuci711 uses cookies and similar tracking technologies on the Platform to deliver essential functionality, improve user experience, and gather aggregated analytics. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are required for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing identifiers. No consent is required for strictly necessary cookies as they are essential to the operation of the Platform.

11.2 Functional Cookies

Functional cookies remember your preferences and settings, such as language preferences, display settings, and your responsible gambling configuration. Disabling these cookies may affect your Platform experience.

11.3 Analytics Cookies

With your consent, cuci711 uses analytics cookies to collect aggregated, anonymised information about how players use the Platform. This data helps us understand usage patterns, identify technical issues, and improve our services. This information is not used to identify individual users.

11.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse, delete, or accept specific categories of cookies. Please note that disabling certain cookies may affect the availability of some features on the Platform. As cuci711 does not link to third-party advertising networks, you will not encounter third-party advertising cookies on our Platform.

§ 12 Your Data Subject Rights

As a data subject, you have the following rights with respect to your Personal Data processed by cuci711. These rights may be subject to certain legal limitations, particularly where processing is required for regulatory compliance or fraud prevention purposes.

To exercise any of these rights, please submit a written request to our support team via live chat or email (see Section 16). We will acknowledge your request within 5 business days and aim to respond fully within 30 days. We may need to verify your identity before processing a data subject rights request.

§ 13 Children's Privacy

The cuci711 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If we discover or have reason to believe that an Account has been registered by or on behalf of an individual under 21, we will immediately suspend the Account, initiate identity verification, and if underage use is confirmed, permanently close the Account and delete all associated Personal Data to the extent permitted by law.

If you are a parent or guardian and believe that a minor under your care has registered an Account on the cuci711 Platform, please contact our support team immediately.

§ 14 Third-Party Links & Services

The cuci711 Platform does not contain links to third-party websites or services beyond those necessary for payment processing and identity verification. cuci711 is not responsible for the privacy practices or data protection standards of any third-party service providers or payment partners. We encourage you to review the privacy notices of any third-party services with which you interact in connection with your cuci711 Account.

§ 15 Policy Amendments

cuci711 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. Where changes are material, we will notify registered Players by posting a prominent notice on the Platform and, where appropriate, by direct communication to your registered email address, providing a reasonable period of notice before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acceptance of the revised terms.

§ 16 Contact & Complaints

For all data protection enquiries, subject access requests, or to exercise any of your rights under this Privacy Policy, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the cuci711 Platform — the fastest way to reach us
• Email: [email protected] — please include "Data Protection" in the subject line

We will acknowledge receipt of your request within 5 business days and aim to provide a substantive response within 30 days. Where a request is complex or where we receive a large volume of requests, we may extend this period by a further 30 days and will notify you accordingly.

If you are dissatisfied with our response to a data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction or to our gaming licence regulatory authority.