888cuci Privacy Policy – Member Personal Data Protection

01 Introduction & Scope of Privacy Policy

888cuci ("we", "Platform", "company") values the privacy of every member who uses our services. This Privacy Policy applies to all personal information collected through the 888cuci website, mobile app, and any other official communication channels we operate.

This document was drafted to meet the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practice standards in data management. By registering for or using the 888cuci platform, you acknowledge that you have read, understood, and fully agreed to the terms of this Privacy Policy.

If you do not agree with any provision in this policy, we recommend that you discontinue use of the 888cuci platform and contact our support team for further assistance.

02 Types of Information We Collect

To provide a safe, orderly, and legally compliant service, 888cuci collects several categories of information from members. Below is a detailed table of the data types we collect and their purposes:

We may also automatically collect information through cookie and analytics technology as you browse our platform. This information is used in aggregate and does not personally identify you unless combined with your account data.

03 How We Use Your Personal Data

Every piece of information collected by 888cuci is used for a clear and legitimate purpose. We will not use your data for any purpose not stated in this Privacy Policy without obtaining your consent first.

The primary purposes for which your personal data is used include:

• Account management — Creating and maintaining your account, verifying your identity, and ensuring login security.
• Transaction processing — Processing deposits, withdrawals, and bonus payments securely and accurately.
• Legal compliance — Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements as mandated by law.
• Platform Security — Detecting and preventing fraud, unauthorized access, and account abuse.
• Customer Support — Responding to inquiries, resolving complaints, and providing technical assistance.
• Service improvement — Analyzing usage patterns to improve platform features and user experience.
• Responsible gaming — Monitoring wagering patterns to identify members who may need support and early intervention.
• Marketing communications — Sending relevant promotional information, bonuses, and special offers (with your consent only).

The lawful basis we use to process your data depends on the purpose of processing — whether based on consent, contractual necessity, legal obligation, or the legitimate interests of 888cuci.

04 Information Sharing & Disclosure

888cuci respects the confidentiality of your information and does not disclose members' personal data to outside parties indiscriminately. However, in certain legitimate situations, we may share your information with the following parties:

• Contracted service providers — Such as payment gateway providers, licensed gaming platforms, and cloud computing service providers that help operate our platform. All such providers are bound by strict confidentiality agreements.
• Relevant authorities — We will disclose required information to law enforcement agencies, regulatory bodies, or courts when mandated by Malaysian law.
• Identity verification authority — For KYC purposes, your verification information may be cross-checked against recognized and trusted third-party databases.
• Business partners — Only in the context of delivering the services you use, and never for third-party marketing purposes without your consent.

In every instance of data sharing, we ensure that the recipient applies the same level of protection as our own security standards, enforced through valid data processing agreements.

05 Cookies & Tracking Technologies

888cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies — Gathering information about how you use the platform (e.g., most frequently visited pages) to help us improve our services.
• Functional Cookies — Storing your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics Cookies — Used by approved third-party analytics tools to understand usage patterns in aggregate, without any personal identification.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the 888cuci platform. Please note that disabling essential cookies will prevent you from accessing your account.

06 Security & Data Protection

888cuci continuously invests in advanced cybersecurity infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we implement include:

• End-to-end encryption using TLS 1.3 protocol for all data communications between client and server.
• Encryption of data at rest using AES-256 encryption for all sensitive records in our database.
• Two-factor authentication (2FA) available for all member accounts and is strongly recommended as an additional layer of protection.
• 24/7 security monitoring by an experienced in-house information security team.
• Penetration testing periodically by independent third-party security firms to identify and patch system vulnerabilities.
• Role-based access control (RBAC) ensuring that only staff who require access to specific data are permitted to do so.

While we take all reasonable steps to protect your data, please note that no security system can be guaranteed to be completely foolproof. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

07 Data Retention & Transfer

888cuci retains your personal data for as long as your account is active or as required for service purposes and legal compliance. The following are our general data retention guidelines:

• Active account data — Retained for as long as your account is active and for a reasonable period following account closure.
• Financial transaction records — Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
• KYC and compliance records — Retained for 5 to 7 years after the business relationship ends, in accordance with AML requirements.
• Customer support communication logs — Retained for 3 years for reference and dispute resolution purposes.
• Analytics and system log data — Retained for 12 to 24 months depending on the data type.

Once the designated retention period expires, your personal data will be securely deleted or anonymized using methods that ensure the data cannot be recovered.

For cross-border data transfers, 888cuci ensures that any transfer of data outside Malaysia is carried out with equivalent protection through recognised mechanisms such as standard data protection contracts or transfers to countries with adequate data protection standards.

08 Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have important rights regarding your personal data. 888cuci is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, you may contact our Data Protection team through the channels listed in Section 12. We will process your request within 30 days of receipt.

09 Children's Privacy

The 888cuci platform is intended exclusively for adult users of legal age 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered with 888cuci are urged to contact us immediately.

10 Third-Party Links & Services

The 888cuci platform integrates services from trusted third-party providers, including licensed game providers, payment gateways, and customer support systems. Each provider has its own privacy policy governing your interactions with their systems.

888cuci is not responsible for the privacy practices or content of third-party websites or services that may be accessible through our platform. We encourage you to review the privacy policies of those providers before submitting any personal information directly to them.

All third-party partners we work with are carefully vetted based on their security track record and privacy compliance. Binding contracts ensure they handle your data to standards equivalent to our own.

11 Privacy Policy Amendments & Updates

888cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our services, legal requirements, or current industry practices. Any material changes will be communicated to you via:

• An in-account notification will be sent upon your next login.
• Email notification to your registered address if the changes materially affect your rights.
• Updates are effective as of the "Last Updated" date shown at the top of this page.

Continued use of the 888cuci platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. If you do not agree with the amendments, you may close your account and request data deletion as outlined in Section 8.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the 888cuci Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Response time: Within 3 business days for general enquiries; 30 days for formal data subject rights requests.
• Supported languages: Malay and English.

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights under the PDPA have been violated. However, we encourage you to contact us first so we can address your concerns directly.