📌 Summary: mycuci collects personal data to operate your account, process payments, comply with anti-money-laundering obligations, and improve the platform. We do not sell your personal data to third parties. You have the right to access, correct, and request deletion of your data. This Policy applies to all players on the mycuci platform, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and across Malaysia.
1 Introduction
mycuci ("mycuci", "we", "us", "our") is committed to protecting the privacy of all users of the mycuci online gaming platform, accessible at mycuci.net ("Platform"). This Privacy Policy ("Policy") describes how mycuci collects, uses, discloses, stores, and protects personal information provided by or collected about users ("Player", "you", "your") in connection with the use of the Platform.
By registering a Player Account or otherwise accessing the mycuci Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
2 Data Controller
For the purposes of applicable data protection law, the data controller responsible for your personal data is mycuci, the operator of the mycuci.net Platform. Questions regarding this Policy or the handling of your personal data may be directed to mycuci via the contact email address published in the footer of this website.
3 Personal Data We Collect
mycuci collects the following categories of personal data from Players:
- Registration Data: Full legal name, date of birth, email address, phone number, country and city of residence, and chosen username.
- Identity Verification (KYC) Data: Government-issued photo identification (e.g., MyKad, passport), proof of address, and, where required, documentation evidencing source of funds. This data is collected as part of our anti-money-laundering compliance obligations.
- Financial Data: Payment method details used for deposits and withdrawals, including e-wallet account references (Touch 'n Go eWallet, Boost, GrabPay), bank account identifiers (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses (USDT TRC20). Full payment card numbers are never stored on mycuci systems.
- Gaming Activity Data: Bet history, game session data, win and loss records, bonus usage, and transaction history within the Platform.
- Technical Data: IP address, device type, operating system, browser type and version, session timestamps, and cookies. This data is collected automatically when you access the Platform.
- Communications Data: Records of support interactions, complaints, feedback, and any other correspondence between you and mycuci.
- Responsible Gaming Data: Any self-exclusion requests, deposit limit settings, and session controls you configure, which are retained to enforce your responsible gaming preferences.
4 How We Use Your Personal Data
mycuci uses your personal data for the following purposes:
- Account Management: To create, maintain, and operate your Player Account, including authentication and security.
- Payment Processing: To process deposits, withdrawals, and refunds through the payment methods you have registered on the Platform.
- Legal & Regulatory Compliance: To fulfil anti-money-laundering (AML), know-your-customer (KYC), and age verification obligations under applicable gaming regulatory frameworks. This is a legal requirement and cannot be waived.
- Platform Operation & Improvement: To deliver, maintain, troubleshoot, and improve the mycuci Platform, including game functionality, payment systems, and user interface.
- Responsible Gaming: To enforce self-exclusion requests, deposit limits, and other responsible gaming controls you have activated, and to identify patterns that may indicate problem gambling behaviour.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, collusion, money laundering, and other prohibited conduct on the Platform.
- Customer Support: To respond to your support requests, complaints, and enquiries.
- Marketing: To send promotional communications about mycuci bonuses, new games, and platform updates, where you have provided consent or where permitted under applicable law. See Section 11 for opt-out information.
- Analytics: To analyse aggregated, anonymised usage patterns to understand how the Platform is used and to make product improvements.
5 Legal Basis for Processing
mycuci processes your personal data on the following legal bases:
- Contract Performance: Processing necessary to provide the services described in the mycuci Terms & Conditions — including account management, payment processing, and game operation.
- Legal Obligation: Processing required to comply with AML, KYC, age verification, and gaming regulatory requirements.
- Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement, where such interests are not overridden by your fundamental rights.
- Consent: Processing for direct marketing communications, where your consent has been obtained at registration or subsequently. You may withdraw consent at any time.
6 Data Sharing & Disclosure
mycuci does not sell, rent, or trade your personal data to any third party for commercial purposes.
mycuci may share your personal data with the following categories of recipients in the circumstances described:
- Game Providers: Third-party game providers whose titles are made available on the mycuci Platform (e.g., Pragmatic Play, PG Soft) may receive limited technical data necessary to deliver game functionality. These providers are contractually prohibited from using such data for any purpose beyond game delivery.
- Payment Processors: Financial institutions and e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay, and banking partners) receive payment-related data to the extent necessary to process your transactions.
- Identity Verification Services: Third-party KYC and AML service providers engaged to verify your identity and screen against sanctions and politically exposed person (PEP) lists.
- Regulatory & Law Enforcement Authorities: mycuci may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts where compelled by applicable law or in connection with the investigation of fraud, money laundering, or other criminal activity.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of mycuci's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.
7 Cookies & Tracking Technologies
The mycuci Platform uses cookies and similar tracking technologies to operate and improve the service. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality.
- Functional Cookies: Remember your preferences such as language settings and responsible gaming limits you have configured.
- Analytics Cookies: Collect aggregated, anonymised data about how the Platform is used, enabling mycuci to identify areas for improvement. No personally identifiable information is collected via analytics cookies.
- Marketing Cookies: Used to present relevant promotional content within the Platform. Marketing cookies are only set where you have provided consent.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the mycuci Platform, including logging in and accessing your account.
8 Data Retention
mycuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with mycuci and thereafter as required by applicable legal and regulatory obligations. Specific retention periods include:
- Account & Transaction Data: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
- KYC Documents: Retained for a minimum of five (5) years from the date of collection or the date of last transaction, whichever is later.
- Support Communications: Retained for three (3) years from the date of the communication.
- Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance record-keeping.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised.
9 Data Security
mycuci implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the mycuci Platform;
- Encryption at rest for sensitive data stored on mycuci servers;
- Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
- Regular security assessments and penetration testing of Platform infrastructure;
- Two-factor authentication (2FA) available for all Player Accounts.
Despite these measures, no internet transmission is completely secure. You are responsible for maintaining the confidentiality of your login credentials. Notify mycuci support immediately if you suspect unauthorised access to your account.
10 Your Data Rights
Subject to applicable data protection law, you have the following rights in relation to your personal data held by mycuci:
- Right of Access: Request a copy of the personal data mycuci holds about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations (for example, AML records cannot be deleted on request).
- Right to Restriction: Request that mycuci restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: Request a copy of data you have provided to mycuci in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests, including profiling for marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact mycuci using the support email address listed in the footer of this website. mycuci will respond to rights requests within 30 days.
11 Marketing Communications
With your consent, mycuci may send you promotional emails and in-Platform notifications about bonuses, new game releases, sportsbook promotions, and platform updates. You may opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link in any marketing email received from mycuci; or
- Updating your communication preferences in your mycuci Account Settings; or
- Contacting mycuci support to request removal from marketing lists.
Opting out of marketing communications does not affect the delivery of transactional communications related to your account (e.g., withdrawal confirmations, security alerts).
12 Minors
21+ The mycuci Platform is strictly for adults aged 21 and above. mycuci does not knowingly collect personal data from persons under the age of 21.
If mycuci becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all funds forfeited, and the personal data deleted in accordance with applicable law. If you believe that a minor has created an account on mycuci, please contact support immediately.
13 Changes to This Privacy Policy
mycuci reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, the Platform, or applicable law. Material changes will be communicated to Players via the registered email address or via a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page indicates when the Policy was most recently revised. Continued use of the mycuci Platform following notification of changes constitutes acceptance of the revised Policy.
14 Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the mycuci data team using the support email address displayed in the footer of this website. We aim to respond to all data-related enquiries within 5 business days and to fully resolve rights requests within 30 days of receipt.