Mcuci Privacy Policy — Player Data Security in Malaysia

1 Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how mcuci ("we", "Platform") collects, uses, discloses, and protects your personal information when you access or use the mcuci platform — including the website, mobile app, and all related services.

By registering for or using the mcuci platform, you agree to the collection and use of information as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform.

Mcuci complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and is committed to ensuring your personal data is processed lawfully, fairly, and transparently in accordance with the principles set out in the Act.

2 Personal Data We Collect

Mcuci only collects data necessary to provide platform services safely and effectively. The following are the categories of data collected:

3 How mcuci Uses Your Data

Collected personal data is used solely for the following purposes:

• Account management: Create and manage your account, including the login process, identity verification, and profile updates.
• Transaction processing: Verify and process deposits, withdrawals, and all financial transactions on the platform.
• Platform security: Detect and prevent fraud, money laundering, unauthorised access, and other suspicious activities.
• Legal compliance: Fulfil KYC, AML (Anti-Money Laundering) obligations, and reporting requirements set out by applicable laws.
• Service communications: Send account-related notifications, transaction updates, security alerts, and customer support responses.
• Platform improvement: Analyse usage patterns to improve the functionality, design, and performance of the mcuci platform.
• Relevant promotions: With your consent, to send information about promotions, bonuses, and offers that may interest you.

Mcuci does not use your data for any purpose not stated here without first obtaining your additional consent.

4 Data Sharing with Third Parties

Mcuci does not sell or rent your personal data to any party. However, we may share data in limited circumstances as follows:

• Payment service providers: Data required to process financial transactions is shared with providers that comply with PCI DSS security standards.
• Identity verification providers: KYC data is shared with recognised third-party verification services to confirm member identity authenticity.
• Game providers: Session information required to run games is shared with game providers such as PG Soft and Evolution Gaming.
• Legal authorities: When required by law or court order, mcuci will disclose the requested data to the relevant authorities.
• Business transfers: In the event of a business merger or acquisition, user data may be transferred as part of the business assets, subject to the same privacy protections.

All third parties with whom we share data are required to comply with data protection policies equally as stringent as those practiced by mcuci itself.

5 Data Security & Encryption

The security of your personal data is mcuci's top priority. We implement multiple layers of technical and organizational protection to keep your data safe:

• 256-bit SSL encryption: All communication between your browser and mcuci servers is protected by TLS 1.3 — the latest encryption standard available.
• Data encryption at rest: Sensitive personal data stored in the mcuci database is encrypted using AES-256 algorithms.
• Strict access controls: Only authorised staff with a legitimate business need may access players' personal data.
• Regular security audits: mcuci's infrastructure undergoes regular independent penetration testing and security audits to identify and address vulnerabilities.
• 24/7 monitoring: Real-time monitoring systems automatically detect any suspicious access attempts or security anomalies.

6 Data Retention Period

Mcuci retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal obligations:

• Active account data: Retained for the duration your account remains active and for the post-closure period as required by financial compliance laws.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Security logs: Retained for 90 days for investigation purposes in the event of a security incident.
• Analytics data: De-identified usage data is retained for a longer period for platform analytics purposes.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to you.

7 Cookies & Tracking Technologies

Mcuci uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device.

Types of cookies used by mcuci:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Save your settings such as preferred language and display preferences for a more personalised experience.
• Analytics Cookies: Collect information on how players use the platform to help us understand and improve the user experience. All data is processed in aggregate.
• Security Cookies: Helps the fraud detection system identify suspicious access patterns.

You may manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect certain platform functions.

8 Your Rights as a User

As an mcuci player, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010:

9 Children's Privacy

The mcuci platform is strictly for adult users aged 18 and above. mcuci does not intentionally collect, process, or store personal data from anyone under the age of 18.

If we find that personal data of a minor under 18 has been collected without proper age verification, we will promptly delete that information and close the associated account. Any wins or deposits linked to an underage account will be handled in accordance with the platform's Terms and Conditions.

If you believe that someone under the age of 18 has registered an account on the mcuci platform, please notify us immediately via customer support.

10 Amendments to the Privacy Policy

Mcuci reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in user data protection.

Any significant amendments will be notified to all registered members via email or in-platform notification at least 14 days before taking effect. The "Last Updated" date at the top of this page will always reflect the latest version of the Policy.

We encourage you to review this page periodically. Continued use of the mcuci platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy.

11 How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mcuci, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the mcuci platform — the fastest way to get a response.
• Support Email: [email protected] — for more detailed written enquiries. We aim to respond within 24 hours on business days.
• FAQ Section: Answers to the most frequently asked questions are available at FAQ page us.

When contacting us regarding privacy matters, please include your account username and a clear description of your request so we can process it promptly and accurately.