Cuci 7 Privacy Policy – Personal Data Protection for Malaysian Players

1Definition & Scope of cuci 7's Privacy Policy

This Privacy Policy describes the privacy practices cuci 7 — the online casino and Sports Betting platform accessible at cuci7.best — regarding how we collect, use, disclose, transfer, and store information that you provide to us or that we collect through your use of the platform.

In this document, "personal data" refers to any information that can be used to identify you directly or indirectly, including but not limited to your name, email address, phone number, financial information and platform usage pattern data. "We", "cuci 7" and "platform" refer to the services provided through cuci7.best and all associated channels.

This policy applies to all users who register an account, visit the cuci 7 website, use the cuci 7 mobile app (where available), contact our support team, or interact with the platform in any other way. It does not apply to third-party websites you may access via links from the cuci 7 platform.

2Types of Personal Data We Collect

Cuci 7 collects various types of information depending on how you interact with our platform. Below are the main categories of data we collect:

We only collect data that is strictly necessary for the purposes stated in this policy. We do not collect sensitive categories of personal data such as health information, religious beliefs or political views, unless specifically required by applicable law.

3How cuci 7 Uses Your Personal Data

The personal data we collect is used solely for the purposes stated below — we will not use your data for any other purpose without notifying you in advance:

• Account management — registration, identity verification, maintenance and security of your cuci 7 account.
• Transaction processing — handling deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX, as well as processing your winnings withdrawals in Malaysian Ringgit (MYR).
• Provision of gaming services — ensuring you can access slots, Live Casino, football betting (Malaysia Super League, EPL and more), e-sports and Virtual Sports with a seamless, personalised experience.
• Security & fraud prevention — to identify and investigate suspicious activity, money laundering, duplicate accounts and breaches of the terms of use.
• Legal compliance — to meet Malaysia's PDPA requirements, anti-money laundering (AML), know-your-customer (KYC) obligations, and reporting requirements to relevant authorities where mandated.
• Customer support — enabling cuci 7's 24/7 Malay-language support team to assist you with account, transaction or gaming enquiries.
• Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and reaching out to users who may need additional support or protection.
• Platform improvement — analysing usage patterns on an aggregate basis (not individually) to improve the user experience, platform performance and cuci 7's game offering.
• Service communications — to send important notifications relating to your account, transactions, changes to terms or critical security information.

4Legal Basis for Data Processing

Cuci 7 only processes your personal data where there is a valid legal basis to do so under Malaysia's PDPA and applicable data protection principles. The bases we rely on are:

• Consent — you have given explicit consent to the processing of your personal data for one or more specific purposes by accepting the Terms & Conditions and this Privacy Policy when registering your cuci 7 account.
• Contract performance — processing is necessary to fulfil the agreement you have entered into with cuci 7, including the provision of gaming services and the processing of your financial transactions.
• Legal obligations — processing is necessary to comply with legal obligations binding on cuci 7, including KYC and AML requirements and reporting to relevant authorities.
• Legitimate interests — processing is necessary for the legitimate interests pursued by cuci 7, such as fraud prevention, platform security and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.

You have the right to withdraw your consent at any time for processing that relies on consent as its legal basis. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

5Data Sharing with Third Parties

Cuci 7 does not sell, rent or disclose users' personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share data with the following categories of third parties under limited and controlled circumstances:

• Payment providers — local Malaysian payment processors such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX banks, to facilitate deposits and withdrawals in MYR. Data sharing is limited strictly to the information required to process each transaction.
• Game software providers — game development companies that supply the slots, Live Casino and other games available on cuci 7 may receive the session data required to run those games. This data does not include personally identifiable information that these providers can use independently.
• Technical service providers — third-party companies that provide infrastructure, cloud hosting, analytics or cybersecurity services supporting cuci 7's operations. All such providers are bound by data protection agreements that prohibit the use of cuci 7 user data for any other purpose.
• Legal authorities — cuci 7 will disclose personal data to the police, courts, Bank Negara Malaysia, the Financial Intelligence Unit or other relevant authorities where required by law, court order or for legitimate criminal investigation purposes.

6Cookies & Tracking Technologies

The cuci 7 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how users interact with our platform. Below are the types of cookies we use:

• Essential cookies — required for core platform operations, including login sessions, account security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies — stores user preferences such as interface language, display settings, and the last-accessed game selection to deliver a more personalised experience.
• Analytics cookies — collects aggregated information on how users interact with the platform to help us improve its design, performance, and content. Analytics data cannot be used to identify individual users.
• Security cookies — used to detect suspicious login attempts, automated bots and potentially fraudulent activity that could compromise user account security.

You can manage your cookie settings through your internet browser. However, disabling essential cookies may affect your ability to fully use certain cuci 7 platform features, including login and transaction processing. For instructions on how to disable cookies in your browser, please refer to your browser's help documentation.

7cuci 7 Data Security Measures

Cuci 7 implements a range of technical and organisational measures to protect users' personal data against unauthorised access, disclosure, alteration or destruction. The key security measures we have in place include:

• Encryption in transit — all data transmitted between your device and cuci 7's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Storage encryption — sensitive data stored in the cuci 7 database, including financial information and identity verification documents, is encrypted at rest using industry-standard encryption.
• Internal access controls — internal access to user data within the cuci 7 organisation is governed by a need-to-know principle, with comprehensive audit logs maintained for all data access.
• Two-factor authentication — cuci 7 staff who require access to systems containing user data must use two-factor authentication (2FA) for all system logins.
• Regular security testing — the cuci 7 platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and address potential vulnerabilities.
• Real-time threat monitoring — cuci 7's security monitoring system operates 24/7 to detect and respond to cyber threats, intrusion attempts, and anomalous activity in real time.

While we take all reasonable steps to protect your data, no security system can guarantee absolute protection. You also play an important role in keeping your data safe — always use a strong, unique password for your cuci 7 account and never share your login credentials with anyone.

8Personal Data Retention Period

Cuci 7 retains users' personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required under applicable Malaysian law. The following are our data retention guidelines by category:

• Active account data — retained for as long as your account remains active and has not been formally closed.
• Closed account data — stored to the minimum necessary 5 years after the account closure date, to meet PDPA, AML and other Malaysian legal compliance requirements.
• Financial transaction records — stored to the minimum necessary 7 years in accordance with applicable Malaysian financial and accounting legal requirements.
• Customer support communication logs — retained for 2 years from the date of communication for service reference purposes and resolution of any disputes that may arise.
• Analytics cookie data — aggregated data with no individual identifiers may be retained for longer periods for trend analysis and platform improvement purposes.

When your personal data is no longer needed and there is no legal obligation to retain it, cuci 7 will securely delete or anonymise that data using industry-approved disposal procedures.

9Your Personal Data Rights

Under Malaysia's PDPA and cuci 7's Privacy Policy, you have the following rights in relation to the personal data we hold about you:

• Right to access — you have the right to request a copy of the personal data cuci 7 holds about you.
• Right to Rectification — you have the right to request correction of any personal data that is inaccurate or out of date.
• Right to erasure — under certain circumstances, you have the right to request the deletion of your personal data when it is no longer required for its original purpose or when you withdraw your consent.
• Right to restrict processing — you have the right to request that cuci 7 restrict the processing of your personal data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to object — you have the right to object to the processing of your personal data for specific purposes, including processing based on legitimate interests.
• Right to data portability — you have the right to receive the personal data you provided to cuci 7 in a machine-readable format and transfer it to another service provider.
• Right to withdraw consent — you may withdraw consent for data processing based on the consent ground at any time.

To exercise any of the rights above, please contact the cuci 7 privacy team by email at support@cuci7.best with the subject line "Personal Data Rights Request". We will process your request within 14 working days from the date a complete request is received. We may require identity verification before processing your request.

10Privacy Policy Amendments

Cuci 7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we deliver our services. Any amendments will be published on this page with an updated "Last Updated" date displayed at the top.

For material changes that significantly affect your privacy rights, cuci 7 will make reasonable efforts to notify you via email to the address registered on your account, or through in-platform notifications, before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised policy.

We encourage you to check this page periodically to stay informed about how cuci 7 protects and manages your personal data. A history of privacy policy amendments is available on request through the cuci 7 support team.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding cuci 7's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Privacy email: support@cuci7.best (include the subject line "Data Privacy Enquiry" for priority handling)
• Live chat: Available on the cuci 7 platform, 24 hours a day in Bahasa Melayu
• WhatsApp: Reach the cuci 7 support team via WhatsApp, available 24/7

We aim to respond within 2 business days for all privacy-related enquiries. For formal requests concerning personal data rights (access, correction, deletion), the processing period is 14 working days from the date a complete request is received.

If you are not satisfied with cuci 7's response to your privacy complaint after the internal resolution process has been completed, you have the right to refer the complaint to Malaysia's Personal Data Protection Commissioner in accordance with procedures established by the Department of Personal Data Protection under the Ministry of Digital Malaysia.