This Privacy Policy explains how cucicuci collects, uses, stores, and protects your personal data. We are committed to handling your information responsibly and transparently, in compliance with applicable data protection standards.
cucicuci ("cucicuci", "we", "us", "our") operates the online gaming platform accessible at cucicuci.win and through associated mobile applications (collectively, the "Platform"). cucicuci is an online gaming brand operating under international gaming authority licensing.
This Privacy Policy ("Policy") describes how cucicuci collects, uses, discloses, and safeguards personal data provided by or collected about users of the Platform ("Members", "you"). It applies to all personal data processed in connection with your use of cucicuci, regardless of how you access the Platform — whether through a web browser on your phone in Kuala Lumpur, the cucicuci Android app on a device in Penang, or any other access method.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. Terms not defined in this Policy have the meanings given in the Terms & Conditions.
By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
cucicuci collects the following categories of personal data about you:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile number, residential address | Account communication, OTP delivery, withdrawal confirmation |
| Financial Data | Payment method details (e-wallet IDs, bank account references), transaction history, deposit and withdrawal amounts | Payment processing, anti-money laundering compliance, withdrawal processing |
| Technical Data | IP address, device type, operating system, browser type, session tokens | Platform security, fraud detection, login authentication |
| Usage Data | Games played, bets placed, session duration, pages visited, feature interactions | Responsible gaming monitoring, platform improvement, personalisation |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer service, dispute resolution, quality assurance |
| KYC Documents | Copies of MyKad, passport, utility bills, bank statements submitted for verification | Identity verification, regulatory compliance, fraud prevention |
cucicuci does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions, except where required by applicable law or our regulatory obligations.
cucicuci collects personal data through the following means:
cucicuci processes your personal data for the following purposes:
cucicuci processes your personal data on the following legal grounds:
cucicuci shares personal data with third-party service providers who assist in operating the Platform, including payment processors (FPX, Touch n Go, Boost, cryptocurrency processors), KYC verification services, IT infrastructure providers, customer support software providers, and fraud detection systems. All such providers are contractually bound to process data only as directed by cucicuci and to maintain appropriate security standards.
Certain personal data (such as username, account ID, and game session data) is shared with licensed gaming software providers (including slot, live casino, and sports betting platform providers) to the extent necessary to deliver the relevant gaming services.
cucicuci may disclose personal data to regulatory authorities, licensing bodies, and law enforcement agencies where required by applicable law, court order, or our licensing conditions. This includes mandatory reporting under AML regulations.
cucicuci does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing is strictly limited to the purposes described in this Policy.
cucicuci retains personal data for the following periods:
Data is securely deleted or anonymised upon expiry of applicable retention periods. Where data must be retained beyond the primary use period solely for legal compliance, it will be stored in a restricted-access archive and will not be used for any other purpose.
cucicuci implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:
No electronic transmission over the internet is completely secure. While cucicuci takes all commercially reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, cucicuci will notify you as required by applicable law.
cucicuci uses cookies and similar tracking technologies on the Platform for the following purposes:
You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access your cucicuci account or place bets, but may affect personalisation features.
Subject to applicable law and certain exceptions related to our regulatory obligations, you have the following rights in relation to your personal data held by cucicuci:
To exercise any of these rights, contact cucicuci at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days. We may need to verify your identity before processing the request.
cucicuci does not knowingly collect personal data from persons under the age of 21. The Platform is strictly for adult players aged 21 and above. All registration processes include an age declaration, and cucicuci conducts age verification as part of the KYC process before processing withdrawals.
If cucicuci discovers or has reason to believe that a registered account belongs to a person under 21, the account will be closed immediately, all pending withdrawals will be suspended pending investigation, and any personal data collected in connection with the underage account will be deleted in accordance with our data retention schedule, except where retention is required by law.
If you are a parent or guardian and believe your child has accessed the cucicuci Platform without authorisation, please contact our support team immediately at [email protected].
cucicuci operates under international gaming authority licensing and may process or store personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, cucicuci implements appropriate safeguards to ensure that the data receives a level of protection consistent with applicable privacy standards, including through contractual arrangements with data processors and sub-processors.
Specifically, personal data shared with KYC verification services, gaming software providers, and cloud infrastructure providers may be processed outside Malaysia. cucicuci takes reasonable steps to ensure that all such international transfers are subject to appropriate data processing agreements.
cucicuci reserves the right to update this Privacy Policy at any time. Material changes will be notified to active Members via email or a prominent notice on the Platform before the changes take effect. The "Last updated" date at the top of this page indicates the date of the most recent revision.
Your continued use of the Platform following notification of a material change constitutes your acknowledgement of the updated Policy. If you do not agree with the updated Policy, you should close your account before the changes take effect.
For any privacy-related questions, data rights requests, or concerns about how cucicuci handles your personal data, please contact us through the following channels:
Live Chat Support: Available 24/7 after login at cucicuci.win — fastest response for urgent matters
Email: [email protected] — for formal data rights requests, include "Privacy / Data Rights" in the subject line
Response Time: Data rights requests will be acknowledged within 5 business days and responded to within 30 days
cucicuci will not respond to privacy enquiries submitted through channels other than those listed above. Please do not send sensitive account information such as passwords or full payment details over email.
Our privacy commitments translate into concrete technical and operational measures — not just policy language.
All personal and financial data transmitted between your device and cucicuci servers is protected by 256-bit SSL encryption — the same standard used by Malaysian banks like Maybank and CIMB for their online banking portals.
cucicuci does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data is used exclusively to operate your account and comply with our regulatory obligations.
cucicuci provides clear mechanisms to access, correct, and request deletion of your personal data. Data rights requests are handled within 30 days by a dedicated team — not an automated system.
Personal data is not kept indefinitely. cucicuci applies defined retention schedules — data is deleted or anonymised when it is no longer needed, subject only to mandatory regulatory retention requirements.
cucicuci staff access to personal data is governed by strict role-based controls. Only personnel with a legitimate operational need for specific data categories can access them — and all access is logged.
Data handling at cucicuci is designed to meet the requirements of our international gaming authority licensing, including AML obligations, KYC standards, and responsible gaming data requirements — obligations that create enforceable accountability.
Now that you understand how cucicuci handles your data, sign in to your account or download the app to enjoy Malaysia's most complete online gaming platform. 21+ only.
🔞 cucicuci is strictly for players aged 21 and above. Please gamble responsibly.