Privacy Policy

This Privacy Policy ("Policy") sets out how cuci918 ("we", "us", "our", "the Operator", "the Platform") collects, processes, stores, shares, and protects the personal data of users ("you", "Player", "User") who access or use the cuci918 website located at cuci918.cam and all associated services, including but not limited to online casino games, sports betting, live dealer gaming, e-wallet transactions, and customer support communications.

cuci918 is committed to handling all personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is designed to inform you of your rights and our obligations, and to ensure that you understand exactly what happens to your information when you use our Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. Where any inconsistency exists between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions apply:

cuci918 collects personal data across several categories, as set out in the table below. We collect only the data necessary to fulfil the purposes described in Section 5 of this Policy.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where directly relevant to responsible gambling assessments), or biometric data.

cuci918 collects personal data through the following primary channels:

• Account Registration: When you create a Player Account, you provide identity and contact information directly through the registration form.
• KYC Verification: When you submit identity documents (MyKad, passport, proof of address) in connection with a withdrawal request or a compliance-triggered review.
• Deposits and Withdrawals: When you initiate a payment transaction using Malaysian payment methods including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or USDT TRC20.
• Platform Usage: Automatically, through server logs, session analytics, and platform interaction tracking as you use the website.
• Cookies and Tracking Technologies: Via cookies and similar technologies placed on your device when you visit the cuci918 website. See Section 9 for full details.
• Customer Support: When you contact us via live chat or email, the content and metadata of those communications is retained.
• Third-Party Sources: In limited circumstances, from third-party identity verification providers engaged for KYC purposes, or from fraud and AML screening databases.

cuci918 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your Player Account, including authentication, password resets, and account settings management.
• Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, and to maintain accurate financial records of all transactions.
• Identity and Age Verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years before you are permitted to gamble on the Platform.
• Regulatory and Legal Compliance: To fulfil our obligations under the terms of our international gaming licence, including anti-money laundering (AML) screening, fraud detection, and Know Your Customer (KYC) procedures.
• Customer Support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and accountability purposes.
• Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour, administer self-exclusion requests, deposit limit settings, and other player-protection tools.
• Platform Security: To detect and prevent unauthorised access, fraud, account takeovers, and other security threats to the Platform and its users.
• Service Improvement: To analyse usage patterns, identify areas for improvement, and develop new features that better serve Malaysian players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time via your Account settings.

The Operator relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and the Operator — i.e., to provide the gaming and sports betting services you have registered to use.
• Legal Obligation: Processing is required to comply with our licensing obligations, anti-money laundering regulations, age verification requirements, and other applicable legal duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests — including fraud prevention, platform security, service analytics, and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by the above bases, we will request your explicit consent, including for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cuci918 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients strictly as necessary for the purposes described in this Policy:

• Payment Service Providers: Malaysian payment processors and e-wallet operators (including but not limited to providers of DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and FPX services) to facilitate deposit and withdrawal transactions. These providers process financial data as independent Data Controllers subject to their own privacy policies.
• Identity Verification Providers: Third-party KYC and anti-money laundering screening vendors engaged to assist with document verification, identity matching, and compliance checks.
• Technology and Infrastructure Providers: Cloud hosting, database, and software-as-a-service providers that process data on our behalf as Data Processors under binding contractual arrangements.
• Gaming Regulators and Licensing Authorities: Our licensing authority and any other competent regulatory body to which we are legally obligated to report or disclose player information.
• Law Enforcement and Government Authorities: Where required by law, court order, or a valid regulatory direction, we may disclose personal data to the relevant authorities.
• Professional Advisers: Legal, accounting, or audit firms engaged to provide professional services to the Operator, who are bound by professional confidentiality obligations.

Where data is transferred to third-party processors, we ensure that appropriate contractual safeguards are in place to protect your personal data and that processing is limited to the specific purpose for which the data is shared.

cuci918 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:

• Active Account Data: Retained for the full duration of your active account relationship with cuci918, plus a post-closure period required for legal and compliance purposes.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with standard anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the date on which the verification was completed, whichever is later.
• Customer Support Records: Retained for a period of three (3) years following the resolution of the relevant support interaction, or longer where required by an ongoing dispute or legal proceeding.
• Marketing Preferences and Consent Records: Retained for the duration of the marketing relationship and for a period of three (3) years following opt-out, to demonstrate compliance with consent requirements.
• Technical and Usage Data: Retained for a rolling period of up to twenty-four (24) months for analytical and security purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be attributed to an identified individual.

cuci918 uses cookies and similar tracking technologies (including web beacons and session storage) to enhance the functionality of the Platform, maintain your logged-in session, remember your preferences, and collect analytical data to improve our services.

The following categories of cookies are used on the cuci918 Platform:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. The Platform cannot function correctly without these cookies and they cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, display preferences, and remembered login details (where enabled). These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to collect aggregate, anonymised information about how players use the Platform — including which pages are visited most, average session duration, and navigation paths. This data helps us identify areas for improvement.
• Security Cookies: Used to detect and mitigate fraudulent activity, bot access, and account takeover attempts by tracking technical signals associated with session integrity.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or complete transactions. cuci918 does not use third-party advertising or behavioural targeting cookies.

cuci918 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the cuci918 servers is protected by industry-standard 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using industry-standard methods.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication: Available to all registered Players to add an additional layer of security to account access.
• Intrusion Detection and Monitoring: The Platform is monitored continuously for anomalous activity, unauthorised access attempts, and potential security incidents.
• Segregated Player Funds: Player balances are held in accounts segregated from the Operator's operational funds, protecting your money in the event of a business continuity issue.

Despite our best efforts, no security system is impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay in accordance with our obligations under applicable data protection frameworks.

If you believe your account has been compromised or suspect unauthorised access, please contact our support team immediately via live chat.

As a Data Subject, you have a number of rights in relation to the personal data that cuci918 holds about you. These rights are set out below. To exercise any of these rights, please contact us using the details provided in Section 15.

We will respond to all valid data rights requests within a reasonable timeframe, typically within thirty (30) calendar days of receipt. We may request proof of identity before processing a request to protect against unauthorised data access. Please note that some rights may be limited where processing is required to fulfil legal obligations or licensing requirements.

The cuci918 Platform integrates with a number of third-party services to deliver its full range of features to players. These include game content providers, payment gateway operators, identity verification services, and customer support tools. When you interact with features powered by third-party technology, those third parties may collect personal data about you in accordance with their own privacy policies.

cuci918 does not control the privacy practices of third-party services. However, we ensure that all third-party processors with whom we share personal data are bound by contractual data processing agreements that require them to handle your data in a manner consistent with applicable data protection standards.

The cuci918 Platform does not contain links to third-party websites for general browsing purposes. Payment method providers referenced on the Platform — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — are independent entities. Please refer to the respective privacy policies of those payment providers for information about how they handle your financial data.

cuci918 enforces a strict minimum age requirement of 21 years for all users of the Platform. We do not knowingly collect personal data from individuals under the age of 21. Registration on the Platform requires users to confirm that they meet the minimum age requirement, and age is verified as part of the KYC process.

If the Operator becomes aware or has reasonable grounds to believe that a Player Account has been registered by or on behalf of an individual under the age of 21, the account will be immediately suspended, all gameplay and betting activity will be reviewed, and any funds associated with the underage account will be returned to the depositing payment method following verification, net of any applicable processing fees.

cuci918 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, licensing requirements, or operational circumstances. When material changes are made to this Policy, we will notify active Players by email to their registered address at least fourteen (14) days before the changes take effect, where practicable.

The "Last updated" date at the top of this page reflects the date on which the most recent revision was published. We encourage you to review this Policy periodically to stay informed about how cuci918 protects your personal data. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

The current version of this Privacy Policy is always available at cuci918.cam/privacy-policy. Previous versions of this Policy are available on request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cuci918, please contact us using any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. For data rights requests, please state "Data Privacy Request" at the beginning of your message so it can be directed to the appropriate team.
• Email (non-clickable): [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.

For formal data rights requests (access, erasure, portability, etc.), please include your full registered name, email address associated with your Player Account, and a clear description of the right you wish to exercise. We will request proof of identity before processing your request to ensure your data is protected from unauthorised access.

We aim to acknowledge all privacy-related enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days of receiving a complete request.