Introduction
cuci10 ("we", "us", "our", or "cuci10") operates the online platform accessible at cuci10.cam ("Platform"). This Privacy Policy describes the types of personal data we collect from users ("you", "User", "Player") when you access or use the Platform, the purposes for which that data is processed, and your rights with respect to that data.
This Policy applies to all users of the cuci10 Platform, including registered account holders, visitors browsing the website without an account, and users who interact with cuci10 via support channels. By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy.
This Policy should be read alongside the cuci10 Terms & Conditions, which govern the overall conditions of Platform use. This Policy forms part of the broader agreement between cuci10 and each User.
Definitions
The following terms carry the meanings defined below throughout this Privacy Policy:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly.
- "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
- "Data Controller" means cuci10, the entity that determines the purposes and means of Processing Personal Data collected via the Platform.
- "Data Processor" means any third-party service provider that Processes Personal Data on behalf of cuci10 under a contractual arrangement.
- "Consent" means a freely given, specific, informed and unambiguous indication by you that you agree to the Processing of your Personal Data for a stated purpose.
- "Cookie" means a small text file stored on your device by the Platform for session management, analytics or functionality purposes.
- "KYC" means Know Your Customer procedures, including identity and age verification, required to operate a compliant gambling platform.
Data We Collect
cuci10 collects Personal Data through several channels, including account registration, KYC submissions, payment transactions, platform usage and voluntary communications with our support team. The categories of data we collect are described below.
3.1 Registration and Account Data
When you create a cuci10 Account, we collect:
- Full legal name and date of birth
- Residential address — including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam), postcode and state
- Email address and, where provided, a contact telephone number
- Username and encrypted password
- Account preferences and communication settings
3.2 Identity Verification (KYC) Data
To fulfil our regulatory obligations, we may collect:
- Copies of government-issued photo identification (e.g., Malaysian MyKad, driver's licence or passport)
- Proof of residential address (e.g., utility bill or bank statement issued within three months)
- Selfie photographs holding identification, where required
- Payment method ownership documentation
3.3 Financial and Transaction Data
When you make deposits or request withdrawals in MYR via supported payment methods — including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay — we record:
- Transaction amounts, dates and reference numbers
- Payment method identifiers (e.g., masked account numbers or eWallet IDs) — full payment credentials are not stored by cuci10
- Deposit limits set by the User
- Withdrawal requests and processing status
3.4 Usage and Technical Data
Automatically collected data when you access the Platform includes:
- IP address and approximate geolocation
- Device type, operating system and browser version
- Pages visited, session duration and navigation path
- Game activity logs and wagering history
- Login timestamps and session identifiers
3.5 Communications Data
When you contact cuci10 support or interact via any communication channel, we collect the content of your messages, your contact details and a record of the interaction for audit and quality purposes.
Data Processing
cuci10 processes your Personal Data for the following defined purposes. We do not process data for purposes incompatible with those listed here without your prior consent or a lawful justification.
| Purpose | Data Category | Basis |
|---|---|---|
| Account creation and management | Registration data | Contract performance |
| Identity and age verification (KYC) | KYC documents | Legal obligation |
| Payment processing | Financial & transaction data | Contract performance |
| Fraud prevention and security | All categories | Legitimate interest |
| Regulatory compliance and AML | KYC, transaction data | Legal obligation |
| Platform performance analytics | Usage and technical data | Legitimate interest |
| Customer support | Communications data | Contract performance |
| Responsible gambling monitoring | Usage and wagering data | Legal obligation / legitimate interest |
| Marketing communications (opt-in) | Registration, preferences | Consent |
Legal Basis for Processing
cuci10 processes your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:
- Contract performance: Processing is necessary to fulfil our contractual obligations to you, including operating your Account, processing transactions and providing the Services described in the Terms & Conditions.
- Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations and responsible gambling mandates.
- Legitimate interests: Processing is necessary for purposes of fraud prevention, platform security, abuse detection and improving service quality, where those interests are not overridden by your rights.
- Consent: Where you have provided explicit consent — such as opting in to receive marketing communications — we process data on that basis. Consent may be withdrawn at any time by updating your Account communication preferences.
Data Sharing and Disclosure
cuci10 does not sell, rent or trade your Personal Data to third parties. We may share your data in the following limited circumstances:
6.1 Service Providers
We engage trusted third-party Data Processors to support platform operations, including payment processing partners (such as those facilitating DuitNow, FPX and eWallet transactions), KYC verification providers, cloud hosting services, analytics platforms and customer support tools. These providers are contractually required to process data only as instructed by cuci10 and to maintain appropriate security standards.
6.2 Regulatory and Legal Authorities
cuci10 may be required to disclose Personal Data to regulatory bodies, law enforcement agencies or courts in response to lawful requests, court orders or where disclosure is necessary to comply with applicable legal obligations, including anti-money laundering regulations.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets involving cuci10, Personal Data held by us may be transferred to the relevant successor entity, subject to equivalent data protection commitments.
Data Retention
cuci10 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. Retention periods are governed by the following principles:
- Account data is retained for the duration of the active Account relationship and for a period following Account closure as required by applicable anti-money laundering, tax and gambling regulation obligations.
- KYC documentation is retained for the minimum period mandated by applicable regulation, typically five years following the end of the business relationship.
- Transaction records are retained to satisfy financial reporting and regulatory audit requirements.
- Support communications are retained for a reasonable period to facilitate dispute resolution and service quality review.
When data is no longer required, cuci10 will delete or securely anonymise it in accordance with our internal data disposal procedures.
Data Security
cuci10 implements technical and organisational measures designed to protect your Personal Data against unauthorised access, loss, alteration or disclosure. Our security measures include:
- HTTPS encryption across all Platform pages and API communications
- Encrypted storage of passwords using industry-standard hashing algorithms
- Restricted internal access to Personal Data on a need-to-know basis
- Regular review of security controls and access logs
- Contractual data security requirements imposed on all Data Processors
While cuci10 applies rigorous security practices, no online transmission or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying cuci10 promptly if you suspect unauthorised Account access.
User Rights
Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your Personal Data held by cuci10:
10.1 Right of Access
You may request a copy of the Personal Data cuci10 holds about you, together with information about how it is used and with whom it is shared.
10.2 Right to Rectification
If your Personal Data is inaccurate or incomplete, you may request that we correct or update it. You may also update certain registration details directly within your Account portal.
10.3 Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
10.4 Right to Restrict Processing
In certain circumstances, you may request that we restrict Processing of your Personal Data while a dispute or verification matter is being resolved.
10.5 Right to Data Portability
Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used and machine-readable format.
10.6 Right to Withdraw Consent
Where Processing is based on consent — for example, receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact cuci10 using the details in Section 14. We will respond to verified requests within a reasonable timeframe in accordance with applicable law.
Minors and Age Restriction
The cuci10 Platform is strictly intended for adults aged 21 years and above. cuci10 does not knowingly collect or process Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated Account.
If you believe a minor has provided Personal Data to cuci10, please contact us immediately at [email protected] so that appropriate action can be taken.
Third-Party Links
The cuci10 Platform does not contain links to third-party websites for commercial or promotional purposes. Where technical or payment service integrations involve third-party interfaces — such as bank portals accessed during FPX or DuitNow transactions — those third-party environments are governed by their own separate privacy policies. cuci10 is not responsible for the data practices of third-party services accessed outside the cuci10.cam domain.
Policy Amendments
cuci10 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated "Last updated" date. Where changes significantly affect how we process your data, cuci10 may notify registered users via their registered email address.
Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, you must discontinue use of the Platform and request Account closure.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how cuci10 handles your Personal Data, please contact our support team. All written enquiries are handled in English and will receive a response within two business days where possible.
Website email: [email protected]
Please include your registered Account username and a concise description of your request or concern to help us respond efficiently. For data deletion or access requests, identity verification may be required before we can action your request.