Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by mycuci1 (hereinafter "mycuci1", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users (hereinafter "User", "Member", "you") of the mycuci1 online gaming platform accessible at https://mycuci1.cam and any associated interfaces or services.

mycuci1 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that privacy is a fundamental right, and this Policy has been designed to give you a clear and honest account of our data practices.

This Policy should be read in conjunction with mycuci1's Terms & Conditions and Responsible Gambling Policy. By registering an account or using any Services on the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue your use of the Platform and contact our support team to request account closure.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, payment information, IP address, and device identifiers.
• "Data Controller" — mycuci1, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third-party entity that processes personal data on behalf of mycuci1 strictly in accordance with our documented instructions and this Policy.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer; the mandatory identity and age verification process conducted by mycuci1 prior to processing withdrawal requests.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, analytics, and personalised user experience.
• "Sensitive Personal Data" — a sub-category of personal data warranting heightened protection, including identification documents, financial account details, and biometric data submitted during KYC verification.

mycuci1 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data collected and their primary purposes:

mycuci1 collects personal data through the following means:

4.1 Direct Submission

Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions and surveys.

4.2 Automated Collection

Technical and usage data collected automatically as you interact with the Platform, including IP address, device identifiers, browser type, session data, and game activity logs. This collection occurs via server logs, session tracking technologies, and first-party analytics tools.

4.3 Third-Party Sources

In limited circumstances, we may receive personal data from third-party sources to supplement our records, including:

• Payment service providers (including Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank) who confirm transaction status and associated account details.
• Identity verification service providers engaged to assist with KYC document validation.
• Anti-fraud and anti-money laundering screening services used to verify account integrity and detect suspicious activity.

mycuci1 processes personal data on the following legal bases, depending on the nature of each processing activity:

1. Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted on registration — including account management, transaction processing, and platform access.
2. Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, KYC identity verification mandates, and record-keeping obligations imposed by applicable law.
3. Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring, abuse detection, and improvement of the Platform's services — where such interests are not overridden by your fundamental data protection rights.
4. Consent: Processing for direct marketing communications and personalised promotional offers, where you have provided explicit, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

mycuci1 uses the personal data we collect for the following purposes:

• Account administration — creating, managing, and maintaining your mycuci1 account, including processing deposits and withdrawals in MYR.
• Identity and age verification — conducting mandatory KYC verification to confirm you are at least 21 years of age and to verify your identity as required by our operational and compliance obligations.
• Fraud and AML prevention — monitoring account activity for indicators of fraudulent conduct, money laundering, collusion, or other prohibited behaviour as defined in our Terms & Conditions.
• Responsible gambling monitoring — analysing usage patterns to identify signs of problem gambling behaviour and, where appropriate, proactively reaching out to players to offer support tools.
• Customer support — responding to inquiries, resolving disputes, and processing complaints submitted via live chat or email.
• Platform improvement — analysing aggregated and anonymised usage data to identify areas for improvement, optimise game performance, and enhance the overall player experience.
• Marketing communications — sending promotional offers, bonus announcements, and news updates to Members who have provided explicit consent. You may opt out at any time via your account preferences or by contacting support.
• Legal and regulatory compliance — meeting record-keeping, reporting, and audit requirements imposed by applicable law.

mycuci1 does not sell, rent, or otherwise transfer your personal data to third parties for their independent commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment processors and e-wallet providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Visa/Mastercard networks, strictly to facilitate the processing of your MYR transactions.
• Identity verification providers — third-party KYC service providers engaged to validate the authenticity of identity documents submitted during the verification process.
• Fraud prevention and AML screening services — specialist providers who assist in identifying and preventing fraudulent activity and money laundering.
• Technology service providers — cloud hosting, data storage, security monitoring, and analytics partners who process data as Data Processors on our behalf and under binding contractual obligations consistent with this Policy.
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or lawful governmental request. mycuci1 will notify affected users of such requests to the extent permissible by law.

All third-party service providers engaged by mycuci1 are subject to binding data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data solely in accordance with our documented instructions.

mycuci1 uses first-party cookies and similar tracking technologies on the Platform. These technologies serve essential functional purposes and, where you have provided consent, analytical and personalisation purposes.

8.1 Essential Cookies

Strictly necessary for the Platform to function. These cookies enable core features such as user authentication, session management, and security protections. They cannot be disabled without rendering the Platform non-functional. No consent is required for essential cookies.

8.2 Analytical Cookies

Used to collect aggregated, anonymised data about how Members navigate and interact with the Platform, enabling us to identify technical issues and improve the overall user experience. These cookies are activated only with your explicit consent.

8.3 Preference Cookies

Store your Platform preferences — such as language settings, interface configurations, and last-visited game categories — to deliver a personalised experience across sessions. Activated with your consent.

mycuci1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention principles apply:

• Active account data — retained for the duration of the active account relationship and for a period of five (5) years following account closure, consistent with AML record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years from the date of account closure or last transaction, as required by applicable regulations.
• Transaction records — retained for a minimum of five (5) years to satisfy financial record-keeping obligations and facilitate dispute resolution.
• Support communications — retained for two (2) years from the date of the last interaction, or longer where required for ongoing dispute resolution.
• Marketing consent records — retained for the duration of your consent and for an additional three (3) years to demonstrate compliance with applicable law.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with any individual.

mycuci1 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of sensitive personal data and KYC documents at rest.
• Two-factor authentication (2FA) options for account access.
• Real-time fraud detection and anomaly monitoring systems.
• Role-based access controls limiting internal staff access to personal data strictly on a need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Documented incident response procedures for managing personal data breaches.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. Members are encouraged to use strong, unique passwords, enable 2FA where available, and notify mycuci1 support immediately upon suspecting any unauthorised access to their account.

Subject to applicable law, you hold the following rights with respect to your personal data held by mycuci1. Requests may be submitted via our 24/7 live chat or to our support email address. mycuci1 will respond to all valid requests within 30 days.

To exercise any of the above rights, please contact our support team via live chat or at the email address provided in Section 14. We may request proof of identity before processing your request to safeguard against unauthorised access to your data.

The mycuci1 Platform is strictly intended for individuals aged 21 years and above. mycuci1 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is conducted as part of the mandatory KYC process on all registered accounts before any withdrawal is processed. In the event that mycuci1 discovers that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the relevant account, delete all associated personal data, and return any deposited funds in accordance with our Terms & Conditions.

If you have reason to believe that a person under the age of 21 has registered an account on mycuci1, please contact our support team immediately via live chat or email.

mycuci1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. The most recent version of this Policy will always be accessible on the Platform, with the effective date prominently displayed at the top of the page.

Where proposed amendments materially affect your privacy rights or the manner in which we handle your personal data, mycuci1 will notify registered Members via in-platform notification or email to your registered address prior to the changes taking effect, where reasonably practicable.

Continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, please discontinue use of the Platform and contact our support team to discuss account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the manner in which mycuci1 handles your personal data — including requests to exercise your data rights under Section 11 — please contact us through the following channels:

mycuci1 takes all privacy inquiries seriously. Where your request is particularly complex or you have submitted multiple requests simultaneously, we will notify you of the extended timeframe required and keep you informed of progress throughout.