123cuci Privacy Policy — How We Handle Your Data

Introduction

This Privacy Policy sets out how 123cuci collects, uses, stores, discloses, and protects personal information provided by players and website visitors. It applies to all data collected through the 123cuci website, player account, cashier and payment interfaces, customer support channels, bonus and promotional systems, and any other service offered under the 123cuci brand.

This policy forms part of the overall player agreement alongside the Terms & Conditions and the Responsible Gambling policy. Where terms used in this policy are defined in the Terms & Conditions, those definitions apply here as well.

Definitions

For this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, alone or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, restriction, or deletion.
• "Data Controller" means 123cuci, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of 123cuci under a contractual obligation.
• "Player" or "User" means a registered account holder or visitor to the 123cuci website.
• "KYC Data" means documents and information gathered to verify identity, age, address, payment ownership, and source of funds.
• "Special Category Data" means particularly sensitive personal information, such as financial hardship indicators related to responsible gambling assessments.

Personal Data We Collect

123cuci collects personal data through direct submission, automatic technical capture, and third-party sources where lawfully permitted. The principal categories are described below.

3.1 Registration Data

When you create a 123cuci account, we collect your full legal name, date of birth, residential address, email address, mobile number, preferred currency (MYR for Malaysian players), and chosen username. Accurate registration information is a condition of account eligibility.

3.2 Identity Verification (KYC) Data

To satisfy age verification, fraud prevention, and compliance obligations, we may collect copies of your Malaysian identity card (MyKad), passport, utility bills, bank statements, screenshots confirming e-wallet ownership (Touch 'n Go eWallet, Boost, GrabPay), and information about the source of funds deposited.

3.3 Financial Transaction Data

All deposit and withdrawal transactions are logged, including the payment method used (DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank online, or other accepted methods), transaction amounts in MYR, timestamps, masked account or wallet identifiers, and processing outcomes.

3.4 Gameplay and Betting Records

Your gaming activity on 123cuci is recorded, including game titles accessed, wagering amounts, round results, sports bets placed (including Liga Super Malaysia, EPL, UFC, and esports markets), session durations, and bonus utilisation history.

3.5 Technical and Device Data

When you access 123cuci, we automatically collect your IP address, device type, operating system, browser version, screen resolution, referral URL, and session identifiers. This data assists with security monitoring, fraud detection, and platform optimisation.

3.6 Support and Communications Data

Live chat transcripts, email correspondence, complaint records, dispute communications, and internal case notes generated during support interactions are stored as part of your account record.

3.7 Responsible Gambling Data

Where you use responsible gaming tools — such as deposit limits, cooling-off requests, or self-exclusion — we record these settings, the date applied, any changes requested, and relevant interaction logs. This category of data receives additional care given its sensitivity.

Lawful Basis for Processing

123cuci processes personal data only when a valid lawful basis exists. The applicable bases are:

• Contract performance: Processing necessary to provide the player account, accept deposits, settle bets, process withdrawals, and deliver all platform services you have signed up for.
• Legal and regulatory obligation: Processing required to meet anti-money laundering (AML) obligations, age verification requirements, fraud investigation duties, and record-keeping requirements under our international licence.
• Legitimate interests: Security monitoring, platform analytics, fraud prevention, responsible gambling oversight, and service improvement — balanced against player rights and expectations.
• Consent: Direct marketing communications (where you have opted in), optional cookies that are not strictly necessary, and any processing activity specifically identified to you at the point of collection for which we have asked and received your agreement.

Where processing is based on consent, you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

How We Use Your Personal Data

Personal data collected by 123cuci is used for the following purposes:

1. Account management — creating, maintaining, and administering your player account, processing login activity, and managing account settings.
2. Payment processing — receiving deposits through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer channels, and disbursing withdrawal requests to verified payout methods in MYR.
3. Identity and age verification — confirming that players are aged 21 or over before real-money access is granted, and completing ongoing KYC checks as required.
4. Game delivery and sports betting — providing casino games, live dealer tables, and sportsbook markets, recording outcomes, and settling wagers.
5. Fraud and security monitoring — detecting and investigating suspicious transactions, duplicate accounts, payment misuse, collusion, and system abuse.
6. Bonus and promotion management — administering welcome offers, reload bonuses, cashback schemes, wagering requirement tracking, and eligibility checks.
7. Responsible gambling management — enforcing deposit limits, cooling-off periods, self-exclusion settings, and monitoring patterns that may indicate harmful play.
8. Customer support — responding to live chat, email, and dispute correspondence, and maintaining resolution records.
9. Legal compliance — retaining records as required under applicable licensing terms, AML regulations, and judicial or regulatory requests.
10. Platform improvement — analysing aggregated usage data to identify technical issues, improve user experience, and develop new features.

Sharing and Disclosure

123cuci does not sell, rent, or commercially transfer personal data to unaffiliated third parties. Data sharing occurs only in the following circumstances:

6.1 Service Providers and Processors

We engage trusted third-party processors — including payment gateways, KYC verification services, game suppliers, fraud detection providers, cloud hosting partners, and customer support platforms — who access data solely to deliver services to 123cuci and who are contractually bound to maintain confidentiality and data security standards.

6.2 Legal and Regulatory Disclosure

Personal data may be disclosed to licensing authorities, law enforcement agencies, financial intelligence units, or courts where required by law, court order, or regulatory instruction. 123cuci will comply with such requirements while, where lawfully possible, notifying the affected player.

6.3 Fraud Prevention and AML Networks

Where credible evidence of fraud, money laundering, or account abuse exists, relevant information may be shared with industry fraud prevention services, payment networks, or competent authorities in accordance with applicable legal obligations.

6.4 Corporate Transactions

In the event of a corporate acquisition, restructuring, or asset transfer, player data may be transferred to a successor entity subject to equivalent privacy protections. Players will be notified of any material change in data controller at least 30 days in advance, where reasonably possible.

Data Retention Periods

123cuci retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law, licensing obligation, or legitimate dispute resolution need.

• Active account data — retained throughout the lifetime of the account and for a period of at least five years after permanent closure, to satisfy AML and licensing record-keeping obligations.
• Transaction records — financial records including MYR deposits, withdrawals, and bet settlements are retained for a minimum of six years after the date of the transaction.
• KYC documents — identity documents are retained for a minimum of five years after the end of the account relationship, or longer where required by law.
• Support correspondence — customer service records are retained for three years after resolution of the relevant matter.
• Responsible gambling records — self-exclusion and deposit limit records are retained for the duration of the exclusion plus five years, to prevent circumvention.
• Technical logs — IP and session logs are retained for up to 12 months for security and fraud analysis, after which they are anonymised or deleted.

After the applicable retention period expires, data is securely deleted or irreversibly anonymised in accordance with standard information security practices.

Security Measures

123cuci implements technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the 123cuci platform;
• encryption of sensitive stored data, including payment account identifiers and identity documents at rest;
• access controls that limit internal data access to staff with a verified operational need;
• multi-factor authentication options for player accounts;
• regular security assessments, vulnerability scanning, and penetration testing;
• incident response procedures to contain, investigate, and notify relevant parties in the event of a data security incident; and
• staff training on data protection obligations and handling of personal information.

Despite these measures, no data transmission or storage system is completely impenetrable. Players are encouraged to use strong, unique passwords and to notify 123cuci support immediately if they suspect their account has been accessed without authorisation.

Cookies and Tracking Technologies

123cuci uses cookies and similar tracking technologies to operate essential platform functions, remember session state, and analyse aggregate usage. The categories of cookies used are:

• Strictly necessary cookies — required for login sessions, account access, security tokens, and core platform functionality. These cannot be disabled without impairing platform use.
• Functional cookies — used to remember your preferences such as language, currency display, and session settings. Disabling these may reduce personalisation but will not prevent access.
• Analytics cookies — used to understand page visit patterns, feature usage, error frequency, and overall platform performance using aggregated, anonymised data. Consent is sought before placing non-essential analytics cookies.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent the platform from functioning correctly. 123cuci does not use third-party advertising cookies to serve targeted advertisements on external platforms.

Your Data Rights

Subject to applicable law and certain legal limitations, players whose personal data is processed by 123cuci may exercise the following rights:

• Right of access — to receive a copy of the personal data 123cuci holds about you and an explanation of how it is used.
• Right to rectification — to request correction of inaccurate or incomplete personal data. Where a correction affects KYC-verified details, supporting documentation may be required.
• Right to erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may require us to retain records for a specified minimum period.
• Right to restriction — to request that processing be suspended while the accuracy of data or the legitimacy of processing is investigated.
• Right to object — to object to processing carried out on the basis of legitimate interests where you have grounds relating to your particular situation.
• Right to data portability — to receive personal data you provided to 123cuci in a structured, commonly used, machine-readable format, where technically feasible.
• Right to withdraw consent — to withdraw consent for any processing activity that is consent-based, at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 123cuci support with a description of your request and sufficient information to verify your identity. We aim to respond to rights requests within 30 days. Complex or high-volume requests may require an extension, of which you will be informed.

Minors and Age Restriction

123cuci is strictly an adults-only platform. Registration and real-money gambling are permitted only for individuals aged 21 and above. We do not knowingly collect personal data from persons under 21 years old. Age verification is conducted as part of the registration and KYC process.

If we become aware that personal data has been collected from a person who is below the minimum age, that account will be immediately suspended and the data will be reviewed and managed in accordance with applicable law. If you believe a person under 21 has registered on 123cuci, please contact our support team immediately.

Updates to This Privacy Policy

123cuci may update this Privacy Policy periodically to reflect changes in data processing practices, applicable law, platform features, or regulatory guidance. The updated policy will be published on this page with a revised effective date. Material changes that significantly affect how player data is processed will be communicated to registered players through the platform or by email, where reasonably practicable, before taking effect.

Continued use of 123cuci following a notified update indicates acceptance of the revised policy. If you disagree with the revised terms, you may request account closure by contacting support.

Contact Us — Data Protection Enquiries

Questions, concerns, or requests relating to this Privacy Policy or the personal data 123cuci holds about you should be directed to our support team. For data rights requests, please include your registered username and a clear description of your enquiry.

Support email (plain text, not clickable): [email protected]

Live chat: Available 24 hours a day, 7 days a week. Priority response hours: 9 AM to 2 AM Malaysian Time (MYT) daily.

We aim to acknowledge all data-related enquiries within 48 hours and provide a substantive response within 30 days. Where a request requires additional time, you will be notified of the extension in advance.