Privacy Policy
Platform 2cuci Malaysia

1 Introduction

2cuci ("we", "Platform", "website") take our responsibility to protect user privacy seriously. This Privacy Policy clearly explains the types of personal data we collect, the purposes of collection, how it is stored, and the rights available to you as a user of our platform.

The 2cuci platform operates entirely in a digital environment and provides online gaming services to users in Malaysia. In delivering these services, we need to process certain personal data — and we do so with full integrity and responsibility.

This Policy applies to all users accessing the website 2cuci, registering an account, making deposits or withdrawals, using customer support services, or interacting with any feature of our platform in any way.

2 Personal Data We Collect

We only collect data that is strictly necessary to operate the platform securely and deliver the best experience to our users. The following are the categories of data we collect:

2.1 Registration & Identity Data

• Full name as stated in your identity document.
• Identity card number (MyKad) for the KYC verification process.
• Date of birth to verify that you are at least 18 years of age.
• An active email address for account communications.
• Mobile phone number for two-factor authentication and notifications.
• Password (stored in hashed form — we do not store passwords in plain text).

2.2 Financial & Transaction Data

• Bank account number or e-wallet registered for deposits and withdrawals.
• Account holder name for ownership verification.
• Records of all deposit and withdrawal transactions including date, time, and amount.
• Information related to the payment method used (FPX, DuitNow, TNG, Boost, GrabPay).

2.3 KYC & Verification Data

• Scan or photo of your identity document (MyKad).
• A recent bank statement as proof of address and account ownership.
• A selfie or personal photo (if requested during the advanced verification process).

2.4 Technical & Usage Data

• IP address and device location information.
• Device type, operating system, and web browser used.
• Login and logout records including date and time.
• In-platform gaming activity, betting records, and transaction history.
• Session data and cookies for functional and security purposes.

3 How We Use Your Data

All data we collect is used for legitimate and transparent purposes. We do not use your data for any purpose other than those stated below:

• Identity verification: To verify your account during registration and the KYC process, ensuring the platform remains free from fraud and money laundering.
• Transaction processing: To process deposits, withdrawals, and all financial transactions accurately and securely.
• Account security: To detect suspicious login attempts and unusual activity, and to send you security alerts.
• Customer support: To enable our support team to resolve your issues more quickly and effectively based on your account records.
• Legal compliance: To fulfil legal obligations under PDPA 2010, anti-money laundering regulations, and other regulatory requirements.
• Platform improvements: To analyse usage patterns in aggregate (not individually) in order to improve platform performance and user experience.
• Service communication: To send important notifications related to your account, transactions, and policy updates via email or SMS.
• Responsible gaming: To monitor gaming patterns and provide support to users who may need assistance with gambling control.

4 Data Sharing With Third Parties

Your privacy is our priority. 2cuci not share, sell, or disclose your personal data to third parties except in the following limited and lawful circumstances:

4.1 Payment Service Providers

We share the necessary transaction information with the payment providers we use — such as banks, FPX operators, DuitNow, Touch 'n Go, Boost, and GrabPay — solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and are not permitted to use your data for any other purpose.

4.2 Game Providers

Our gaming platform uses third-party game software providers. Minimal game session information may be shared with these providers for technical purposes only. Game providers do not have access to your financial information or full identity details.

4.3 Legal Requirements

We may be required to disclose your personal data to relevant authorities when ordered by a court, required by law, or in the course of a legitimate financial crime investigation. In such situations, we disclose only the minimum information necessary.

5 Data Storage & Security

We take serious technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

5.1 Security Infrastructure

• 256-bit SSL Encryption for all data transmissions between your browser and our servers.
• Static data encryption for all sensitive records in the database.
• Multi-layer firewall and intrusion detection systems (IDS/IPS).
• Two-factor authentication (2FA) available to all member accounts.
• 24/7 Security Monitoring by our internal IT team and automated systems.
• Regular data backups with full encryption at a separate location.

5.2 Data Retention Period

Your personal data is retained for as long as your account is active and for any additional period required by law following account closure. Generally:

• Financial transaction records are retained for a minimum of 7 years for legal compliance purposes.
• KYC documents are retained for 5 years after account closure.
• Activity logs and game records are retained for 3 years.
• Technical data such as IP logs is retained for 12 months.

5.3 Storage Location

2cuci user data is stored in data centres located in the Asian region. We ensure all storage locations comply with industry-accepted security standards and are subject to strict data processing agreements.

6 Cookies & Tracking Technologies

Website 2cuci use cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better user experience.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Functional Cookies: Stores user preferences such as preferred language and display settings for a better experience.
• Analytics Cookies: Collects aggregated usage data to help us understand how users interact with the platform and make improvements.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

6.2 Managing Cookies

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and prevent you from logging in or using certain features properly.

7 Your Rights Under PDPA

As a platform user 2cuci and subject to the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any data we hold is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data, subject to any legal obligations that prevent immediate deletion.
• Right to Restriction: You may request that we restrict the processing of your data under certain circumstances, such as while a dispute about data accuracy is ongoing.
• Right to Object: You may object to the processing of your data for specific purposes that are not required by law.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within 14 working days and may require identity verification before processing any requests related to sensitive data.

8 Children's Data Protection

Platform 2cuci is an online gaming website that intended for individuals aged 18 and above only. We do not knowingly collect personal data from minors.

We perform age verification during the registration and KYC process to ensure all users meet the minimum age requirement. Should we discover that a minor's data has been collected unintentionally, we will promptly delete that data and close the associated account.

9 Links to Third-Party Websites

Platform 2cuci may contain links or integrations with third-party services such as game providers or payment providers. Please note that this privacy policy applies solely to the 2cuci platform itself.

When you access third-party services through our platform, you are subject to those third parties' own privacy policies. We encourage you to read the privacy policy of each service you use separately. 2cuci not responsible for the privacy practices of such third parties.

10 Privacy Policy Amendments

2cuci reserves the right to update or modify this Privacy Policy from time to time in line with changes in law, industry practices, or platform improvements. You will be notified of any significant amendments via:

• Email notifications sent to the address registered to your account.
• A clear notice on the platform's home page or account section.
• Update the "Last Updated" date shown at the top of this document.

Continued platform use 2cuci after the effective date of the amendment will be considered as acceptance of the updated terms. You are encouraged to review this page periodically to stay informed of how we handle your data.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us: