Privacy Policy

1 Introduction

96cuci ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://96cuci.cam. This Privacy Policy sets out how 96cuci collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Player") who register for and use our services.

We are committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles. This policy applies to all players accessing 96cuci from Malaysia and other permitted jurisdictions, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities.

By creating an account on 96cuci or otherwise using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify an individual, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means 96cuci, the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means a third party that processes personal data on behalf of 96cuci, such as payment service providers or KYC verification vendors.
• "KYC" (Know Your Customer) means the identity verification process required prior to withdrawal, involving identity documents and proof of address.
• "Cookies" means small text files stored on your device when you access the Platform, used to maintain sessions and improve user experience.
• "Sensitive Personal Data" means data relating to identity documents, financial accounts, or information that could cause harm to an individual if disclosed.

3 Data We Collect

3.1 Information You Provide Directly

When you register, verify, or use your 96cuci account, you provide us with personal data that we need to deliver our services. This includes:

• Full legal name and date of birth
• Email address and contact number
• Residential address (including postcode and Malaysian state)
• Identity documents submitted for KYC purposes (Malaysian MyKad, Passport, or Driver's License)
• Proof of address documents (utility bills, bank statements)
• Selfie photographs submitted during identity verification
• Payment account details, including e-wallet identifiers and bank account numbers associated with withdrawals
• Communications sent to our customer support team

3.2 Information Collected Automatically

When you interact with the Platform, certain technical and behavioural data is collected automatically:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration and pages visited within the Platform
• Game history, betting patterns, and wagering activity
• Deposit and withdrawal transaction records
• Login timestamps and access frequency

3.3 Payment Data

When you deposit or withdraw via Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or RHB — transaction identifiers and payment reference numbers are collected. We do not store full bank account credentials or card numbers directly. Payment processing is handled by certified third-party payment processors who operate under their own data security standards.

4 How We Use Your Data

96cuci processes your personal data for the following purposes:

4.1 Account Management and Service Delivery

To create and maintain your Account, verify your identity, process deposits and withdrawals in MYR, resolve disputes, and provide access to all Platform features including sports betting, live casino, and slot games.

4.2 Regulatory Compliance and Anti-Fraud

To fulfil our obligations under anti-money laundering (AML) regulations, KYC requirements, and responsible gambling obligations — including age verification (21+ minimum), sanctions screening, and detection of prohibited conduct such as bonus abuse, account fraud, or bet manipulation.

4.3 Responsible Gambling Monitoring

To monitor player behaviour for indicators of problem gambling, enforce self-imposed deposit limits and self-exclusion requests, and fulfil our duty of care obligations to players who may be experiencing gambling-related harm.

4.4 Platform Improvement and Security

To analyse usage patterns, troubleshoot technical issues, detect and prevent unauthorised access, and improve the performance, reliability, and user experience of the Platform for all Malaysian players.

4.5 Customer Support

To process your queries, complaints, and requests submitted via live chat or email, and to maintain records of support interactions for quality assurance purposes.

4.6 Communications

To send you transactional notifications (account activity, withdrawal confirmations), security alerts, and where you have consented, promotional communications about bonuses, game launches, and sports events relevant to Malaysian players.

5 Legal Basis for Processing

96cuci processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to deliver the services you have contracted for by creating an Account on the Platform, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal requirements, including AML obligations, KYC mandates, and responsible gambling regulatory requirements imposed under our licensing framework.
• Legitimate Interests: Processing necessary for our legitimate interests, including fraud prevention, platform security, and responsible gambling monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. You may withdraw consent at any time via your Account settings or by contacting us.

6 Data Sharing & Disclosure

96cuci does not sell, rent, or trade your personal data to third parties for commercial gain. We may share your data in the following limited circumstances:

6.1 Payment Service Providers

Transaction data is shared with our certified Malaysian payment partners — including processors facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major bank integrations — solely for the purpose of processing your financial transactions. These providers are contractually obligated to protect your data.

6.2 KYC and Verification Partners

Identity documents submitted during KYC verification may be processed by third-party identity verification service providers operating under binding data processing agreements with 96cuci.

6.3 Regulatory and Law Enforcement Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 96cuci's assets, personal data held by the Platform may be transferred to the acquiring entity, subject to that entity's commitment to honour this Privacy Policy.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you access a website. They allow the Platform to recognise your device, maintain your session, and remember your preferences across visits.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You may control cookie settings through your browser preferences. Please note that disabling essential cookies will affect the functionality of the Platform and may prevent you from logging into your Account. Analytical and functional cookies may be disabled without affecting core Platform access.

8 Data Retention

96cuci retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in compliance with AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the cessation of the business relationship, as required under international AML standards.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping requirements.
• Support Correspondence: Retained for up to three (3) years following the resolution of the relevant enquiry.
• Marketing Consent Records: Retained for the duration of consent plus three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction protocols.

9 Data Security

96cuci implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form at rest.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis, with role-based access controls and audit logging.
• Two-Factor Authentication: Available to all players to protect Account access.
• Regular Security Assessments: Our infrastructure is subject to periodic security reviews and vulnerability testing.
• Incident Response: We maintain a data breach response protocol. In the event of a significant breach affecting your personal data, we will notify affected players as required by applicable law.

10 Your Rights

As a player on the 96cuci Platform, you have the following rights with respect to your personal data, subject to applicable legal limitations:

• Right of Access: You may request a copy of the personal data 96cuci holds about you at any time.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by 96cuci.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that 96cuci restricts processing of your personal data in certain circumstances.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request" and your full registered name and Account username. We will respond within 30 days of receiving a valid request.

11 Protection of Minors

96cuci strictly prohibits the use of its Platform by individuals under the age of 21 years. We do not knowingly collect, process, or retain personal data belonging to persons under the age of 21.

Age verification is a mandatory component of our KYC process. Where we discover that an Account has been registered by or on behalf of an individual under the minimum age, that Account will be immediately suspended, all balances withheld pending investigation, and the personal data in question will be handled in accordance with applicable law.

12 International Data Transfers

As an internationally operated platform serving Malaysian players, certain personal data processed by 96cuci may be transferred to and stored on servers located outside of Malaysia. Such transfers may also occur when we engage third-party service providers — such as KYC verification vendors or fraud detection services — that operate internationally.

Where personal data is transferred internationally, 96cuci takes appropriate measures to ensure an adequate level of data protection is maintained, including:

• Ensuring transfers are to jurisdictions with adequate data protection frameworks.
• Implementing standard contractual clauses or equivalent contractual protections with third-party recipients.
• Conducting due diligence on the data security practices of all third-party service providers prior to engagement.

13 Changes to This Privacy Policy

96cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify registered players via the email address associated with their Account where the changes are material and affect your rights or obligations.
• Display a prominent notice on the Platform for a minimum of 14 days following the effective date of the change.

Your continued use of the Platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to remain informed of how your personal data is being handled.

14 Contact Us

For any questions, requests, or concerns relating to this Privacy Policy, the handling of your personal data, or the exercise of your data subject rights, please contact our Data Protection team:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the Platform, including Malaysian public holidays. Our team responds within 2 minutes on average.
• Response Time: We aim to respond to all data protection enquiries within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the expected timeline.