Encryption at Rest and in Transit
All KYC documents and sensitive financial records are encrypted at rest. All Platform communications use SSL encryption to protect data in transit between your device and cuci99 servers.
Data & Privacy
Privacy Policy
cuci99 is committed to handling your personal information responsibly and transparently. This Privacy Policy explains what data we collect, why we collect it, how it is used and what rights you hold as a registered user on our Platform.
LAST UPDATED: 2026
No data sold to third parties
KYC documents encrypted at rest
MYR transactions processed locally
21+ age verification enforced
Right to access your data
Secure SSL connections
01 Introduction
This Privacy Policy ("Policy") describes the information practices of cuci99 ("cuci99", "Platform", "we", "us" or "our"), as operated through the website located at https://cuci99.cam. The Policy applies to all personal data collected from visitors, registered users and Players who access or use any cuci99 service.
cuci99 takes data protection seriously. We are committed to ensuring that any personal information you provide — whether during account registration, payment processing, KYC verification or general Platform use — is handled with appropriate care, kept secure and used only for the purposes described in this Policy.
By registering a cuci99 account, depositing funds or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the practices set out in this Policy, please discontinue use of the Platform immediately.
This Policy applies to all cuci99 users including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia.
02 Definitions
In this Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and device identifiers.
- "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
- "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, cuci99 is the Data Controller.
- "Data Processor" — a third party that processes Personal Data on behalf of cuci99 under a contractual obligation and subject to this Policy's standards.
- "KYC" — Know Your Customer identity verification procedures used to confirm the identity, age and payment ownership of registered Players.
- "Cookies" — small text files placed on your device by the Platform for the purposes of session management, analytics and preference storage.
- "User" or "Player" — any individual who visits, registers on or uses the cuci99 Platform.
- "MYR" — Malaysian Ringgit, the primary transaction currency of the Platform.
03 Data We Collect
cuci99 collects Personal Data through several channels and for distinct operational purposes. The following table summarises the main categories of data collected, the context in which they arise and their primary use:
| Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full name Date of birth IC / Passport number | Account registration, KYC verification |
| Contact Data | Email address Phone number City / State | Registration, support correspondence |
| Financial Data | Bank account details e-wallet IDs Transaction records | Deposits, withdrawals, payment verification |
| Technical Data | IP address Device type Browser version Session data | Automatic Platform access logging |
| Usage Data | Game history Betting records Deposit frequency | Platform activity, responsible gambling monitoring |
| KYC Documents | Identity card scans Proof of address Payment screenshots | Mandatory identity and age verification |
3.1 Data You Provide Directly
You provide data directly when you register an account, submit KYC documents, initiate deposits or withdrawals, contact support or respond to promotional communications.
3.2 Data Collected Automatically
Technical and Usage Data is collected automatically when you access the Platform. This includes IP address, device identifiers, browser type, operating system, pages visited and session duration. This data helps cuci99 maintain platform stability, detect fraud and improve the user experience.
3.3 Data from Payment Partners
Where you use Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong, cuci99 may receive transaction reference data and payment confirmation records from those providers for reconciliation and fraud prevention purposes.
04 Data Processing
cuci99 processes your Personal Data for the following specific purposes:
4.1 Account Administration
Identity, contact and login data is used to create and maintain your cuci99 account, verify your identity, authenticate your access and manage account settings. This processing is necessary for the performance of our service agreement with you.
4.2 Payment Processing
Financial data is processed to execute deposit and withdrawal transactions in MYR, reconcile account balances, detect suspicious payment activity and comply with anti-money laundering obligations. Payment data is handled through verified Malaysian payment partners subject to their own applicable data standards.
4.3 KYC and Age Verification
cuci99 strictly enforces a 21+ age requirement. Identity documents and date-of-birth information are processed exclusively for age verification, identity authentication and compliance with applicable KYC standards. KYC document files are stored with encryption and access is restricted to authorised personnel only.
4.4 Responsible Gambling Monitoring
Usage and financial data may be reviewed to identify patterns consistent with problem gambling behaviour, such as rapidly increasing deposit frequency, session length anomalies or rapid loss sequences. This monitoring is conducted in the Player's interest and in accordance with our responsible gambling commitments. See our Responsible Gambling page for further information.
4.5 Fraud Prevention and Security
Technical and transaction data is used to detect and prevent fraudulent activity, unauthorised account access, duplicate account creation, bonus abuse and other prohibited conduct as defined in our Terms and Conditions.
4.6 Platform Improvement
Aggregated and anonymised usage data is used to analyse Platform performance, understand player behaviour trends and inform content and feature development decisions. This analysis does not identify individual users.
4.7 Communications
Contact data is used to send transactional communications, including account notifications, deposit confirmations, withdrawal status updates and support responses. Where you have explicitly opted in, contact data may also be used to communicate relevant promotional offers. You may withdraw marketing consent at any time by contacting support.
05 Legal Basis for Processing
cuci99 processes Personal Data on the following legal grounds:
- Contractual necessity — Processing required to create your account, execute transactions and deliver the core Platform service.
- Legal obligation — Processing required to comply with applicable KYC, anti-money laundering and age verification obligations under the Platform's operating framework.
- Legitimate interest — Processing undertaken for fraud prevention, platform security, responsible gambling monitoring and aggregated analytics, where these interests do not override your fundamental rights.
- Consent — Processing for optional marketing communications, where you have provided explicit, freely given consent that may be withdrawn at any time.
06 Data Sharing
cuci99 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. Data is shared only in the following limited and controlled circumstances:
6.1 Payment Service Providers
Transaction data is shared with Malaysian payment partners — including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong — to the extent strictly necessary to process your deposit or withdrawal instruction.
6.2 Identity Verification Partners
KYC and identity document data may be processed by authorised third-party verification service providers engaged by cuci99. Such providers operate under strict contractual data processing agreements and are not permitted to use your data for any purpose beyond the scope of identity verification.
6.3 Technology and Infrastructure
Platform hosting, database management and security services may involve third-party technology providers. These providers act as Data Processors and are bound by data processing agreements consistent with the standards set out in this Policy.
6.4 Legal Disclosure
cuci99 may disclose Personal Data where required to do so by applicable law, court order or the direction of a competent regulatory authority. In such circumstances, cuci99 will disclose only the minimum data required to fulfil the legal obligation.
cuci99 will never share your Personal Data with advertisers, data brokers or unrelated commercial third parties for marketing or profiling purposes.
07 Data Retention
cuci99 retains Personal Data for as long as is reasonably necessary to fulfil the purposes for which it was collected, subject to the following retention principles:
- Account data is retained for the duration of the active account relationship and for a period thereafter as may be required to satisfy applicable compliance, legal or dispute resolution obligations.
- KYC documents are retained in accordance with applicable anti-money laundering record-keeping requirements for the relevant jurisdiction, typically a minimum of five years from the date of the last transaction.
- Transaction records are retained for audit, compliance and dispute resolution purposes for a minimum of five years following each transaction.
- Technical and usage logs are retained for a shorter period in line with operational and security monitoring requirements.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
08 Data Security
cuci99 implements appropriate technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- Encrypted HTTPS connections for all Platform communications.
- Encryption at rest for sensitive data categories including KYC documents and financial records.
- Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis.
- Regular security assessments and vulnerability reviews of Platform infrastructure.
- Session timeout controls and multi-step authentication options for account access.
While cuci99 takes data security seriously, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying cuci99 immediately if you suspect any unauthorised access to your account.
Never share your cuci99 password or one-time security code with any person, including anyone claiming to be cuci99 support staff. cuci99 will never ask for your password.
10 User Rights
Subject to applicable data protection law and the limitations arising from cuci99's legal compliance obligations, registered Platform users hold the following rights in relation to their Personal Data:
10.1 Right of Access
You have the right to request a copy of the Personal Data cuci99 holds about you, together with information about how it is being processed.
10.2 Right of Rectification
You have the right to request correction of any inaccurate or incomplete Personal Data held by cuci99. Note that corrections to KYC-verified information will require re-submission of supporting documentation.
10.3 Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and where no overriding legal retention obligation applies. cuci99 may be required to retain certain data, particularly KYC and transaction records, for the retention periods described in Section 7 of this Policy.
10.4 Right to Restrict Processing
In certain circumstances you may request that cuci99 restrict the processing of your Personal Data, for example while a correction request is being verified.
10.5 Right to Withdraw Consent
Where processing is based on your consent — primarily marketing communications — you may withdraw that consent at any time by contacting cuci99 support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
10.6 Exercising Your Rights
To exercise any of the rights described above, please contact cuci99 using the contact details in Section 14. We will respond to all legitimate requests within a reasonable time period. We may request identity verification before processing any data subject request.
cuci99 will not charge a fee for processing routine data rights requests. Where a request is manifestly unfounded or excessive, a reasonable administrative fee may apply.
11 Minors
The cuci99 Platform is strictly intended for adults aged 21 years and above. cuci99 does not knowingly collect, store or process the Personal Data of individuals under the age of 21.
If cuci99 becomes aware that an account has been registered by or on behalf of a person under 21 years of age, that account will be suspended immediately, all associated balances may be withheld pending investigation, and any personal data will be deleted in accordance with applicable data protection obligations.
If you believe that a minor has provided Personal Data to cuci99, please notify us immediately at the contact details in Section 14 so that appropriate action can be taken without delay.
12 International Data Transfers
cuci99 operates as an internationally licensed Platform. In the course of providing services to Malaysian users, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia, including the jurisdiction in which cuci99 holds its operating licence.
Where such transfers occur, cuci99 takes reasonable steps to ensure that your data is afforded an equivalent level of protection to that described in this Policy, including by implementing contractual safeguards with any recipient party. By using the Platform, you acknowledge and consent to the international transfer of your Personal Data for the purposes described in this Policy.
13 Policy Amendments
cuci99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, Platform functionality or data processing practices. The revised Policy will be published on this page with an updated effective date.
For material changes that significantly affect how your data is processed, cuci99 may provide additional advance notice through in-platform messaging or email notification to registered Players. Your continued use of the Platform following publication of any updated Privacy Policy constitutes acceptance of the revised terms.
We encourage you to review this page periodically to stay informed about cuci99's current data practices.
14 Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or need to report a privacy concern, please contact the cuci99 support team through the following channel:
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Response Language: English
Subject Line: PRIVACY REQUEST — [your username]
Please include your registered account username, a clear description of your request and any relevant reference numbers to allow us to respond as efficiently as possible.
What this Policy protects
Our Core Privacy Commitments
These six commitments summarise how cuci99 approaches data responsibility for every Malaysian player on the Platform.
No Data Sold
cuci99 does not sell, rent or trade your personal information to advertisers, data brokers or unrelated third parties. Your data is used exclusively to operate your account and deliver the Platform service.
Controlled KYC Access
Identity documents submitted for KYC verification are stored securely with restricted access, used only for age and identity confirmation and handled in line with applicable anti-money laundering record-keeping obligations.
Your Data Rights
You have rights to access, correct, restrict or request deletion of your Personal Data. cuci99 will process all legitimate data rights requests promptly and will not charge routine fees for standard requests.
Zero Tolerance for Minors
cuci99 enforces the 21+ age requirement through KYC verification. Any account identified as belonging to an underage individual will be suspended and associated personal data will be deleted promptly.
Malaysian Payment Privacy
Payment data shared with Malaysian partners — including DuitNow, FPX, Maybank, CIMB, Public Bank and Touch 'n Go eWallet — is limited to what is strictly required to process each transaction and is not used for unrelated purposes.
Explore cuci99
Privacy Questions? We Are Here.
Our 24/7 support team is ready to help with data access requests, privacy concerns or any account matter. You can also read our full Terms and Conditions or visit the homepage to explore what cuci99 has to offer Malaysian players.
For players aged 21 and above only. Play responsibly.