Privacy Policy m1cuci —
Our Commitment to Your Data

1Introduction

M1cuci ("we", "Platform") operates a website and mobile app offering online gaming services to users in Malaysia. We understand that your personal data is a trust you place in us, and we take this responsibility seriously.

This Privacy Policy clearly outlines the types of information we collect when you use the m1cuci platform, how that information is used, who it may be shared with, and the steps we take to keep it secure. This document applies to all users who access our platform via the website, Android app, iOS app, or any other digital channel we operate.

This policy is to be read together with Terms and Conditions m1cuci. In the event of any conflict between these two documents regarding privacy, this Privacy Policy shall take precedence.

2Information We Collect

We collect various types of information depending on how you interact with our platform. Generally, this information falls into three main categories:

2.1 Information You Provide Directly

When you register an account or use our services, you provide information such as:

Information Type	Example	Primary Purposes
Personal Identity	Full name, date of birth, MyKad number	Identity verification (KYC)
Contact Information	Email address, phone number	Account Communications
Financial Information	Bank name, account number, e-wallet	Processing of deposits and withdrawals
Supporting Documents	MyKad copy, bank statement	Advanced KYC verification
Login Information	Username, password (encrypted)	Account Security

2.2 Information Collected Automatically

When you use our platform, the system automatically records certain technical information required to ensure the service operates correctly and securely:

• IP address and general location based on IP
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation patterns
• Transaction log and wagering activity information
• Login and logout timestamps

2.3 Information from Third Parties

In certain cases, we may receive information about you from trusted third parties, such as payment service providers (to verify transactions), third-party identity verification service providers, or legitimate promotional partners (when you participate in their campaigns).

3How We Use Your Data

Every piece of information we collect is used for specific and legitimate purposes. Below is the complete list of data usage purposes:

• Account Management: Creating and managing your account, processing registrations and verifying your identity through the established KYC process.
• Transaction Processing: Facilitating deposits, withdrawals and all other financial activities on the platform securely and efficiently.
• Service Provision: Ensuring all games, betting and platform features function as expected for you.
• Important Communications: Sending account notifications, transaction confirmations, security alerts and important platform updates.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and unauthorised access to your account.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian laws, including reporting requirements to relevant authorities.
• Platform Enhancement: Analysing usage patterns in aggregate (not individually) to improve user experience and platform performance.
• Customer Support: Resolving enquiries, complaints and technical issues you report to our team.
• Promotional Communications: Sending information about the latest bonuses and promotions — only if you have consented to receive them.

4Information Sharing with Third Parties

M1cuci does not sell or share your personal data with third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and lawful:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to help us operate the platform, including payment processors (FPX, DuitNow, Touch 'n Go, GrabPay, Boost), secure cloud infrastructure providers, licensed gaming software suppliers, and identity verification services. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

We may need to disclose your information to government authorities, regulatory bodies, or law enforcement agencies when required to do so by Malaysian law, a valid court order, or in the course of a financial crime investigation involving your account.

4.3 Platform Protection

In cases involving serious security threats, large-scale fraud attempts, or confirmed illegal activity, we reserve the right to share necessary information with relevant industry bodies to protect the integrity of the platform and other users.

5Personal Data Security

We continually invest in the latest security infrastructure to ensure your data remains protected at all times. Key security measures we employ include:

• Data in transit encryption: All communication between your device and the m1cuci servers is secured with the latest TLS 1.3 protocol.
• Data at rest encryption: Sensitive data such as financial information and verification documents are encrypted at rest using AES-256.
• Strict access control: Only authorised staff with a legitimate business need are permitted to access user data, and all access is logged and monitored.
• Regular security testing: Our platform undergoes regular penetration testing and security audits conducted by independent security experts.
• 24/7 threat monitoring: Our intrusion detection system operates around the clock to identify and respond to security threats promptly.
• Two-factor authentication (2FA): We offer two-factor authentication for all accounts to add an extra layer of protection.

6Cookies and Tracking Technologies

M1cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

7Your Rights as a User

Under applicable data protection laws, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact our data protection team via Live Chat in the app or by email at [email protected]. We will process your request within 14 business days.

8Data Retention and Deletion

M1cuci retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. General retention periods are as follows:

• Active account data: For the duration of your active account plus 6 years after account closure (for financial regulatory compliance).
• Transaction records: Minimum 7 years from the transaction date, as required by Malaysian financial laws.
• Security logs: 12 months from the record date, after which it will be automatically deleted.
• Support communication records: 3 years from the date of last interaction.
• Marketing data: Until you withdraw your consent or your account is terminated, whichever comes first.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

9Changes to This Privacy Policy

M1cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements. Whenever we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered users
• Displaying a clear notice on the platform's home page for 30 days following any changes

Continued use of the m1cuci platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure stated above.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

Our data protection team is ready to assist you at all times. We are committed to responding to all privacy-related enquiries within 3 business days. For more complex matters such as data access or deletion requests, our response time is within 14 business days.