Data Protection & Privacy
At cuci12, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your own information.
We collect only the personal data necessary to operate your account, process transactions, comply with KYC requirements, and improve the cuci12 platform experience for Malaysian players.
Your data is used to manage your account, process deposits and withdrawals via Malaysian payment methods, deliver support, comply with our licensing obligations, and send relevant communications.
We do not sell your personal data. Data is shared only with trusted service providers (payment processors, KYC partners, game suppliers) under strict data processing agreements.
cuci12 applies 256-bit SSL encryption, secure server infrastructure, and access controls to protect your personal data from unauthorised access, disclosure, or misuse at all times.
You have the right to access, correct, and request deletion of your personal data. You may also object to certain processing activities and withdraw consent where processing is consent-based.
cuci12 uses cookies and similar technologies to keep you logged in, remember your preferences, and analyse Platform usage. You can manage cookie preferences through your browser settings.
The cards above are a plain-language summary for convenience only. The full legally binding Privacy Policy is set out in the numbered sections below.
This Privacy Policy ("Policy") is issued by cuci12 ("the Platform", "we", "us", or "our") and applies to all personal data collected, processed, stored, and used in connection with the cuci12 website at https://cuci12.cam and all associated services, including sports betting, live casino, slot games, promotional features, customer support, and account management (collectively, the "Services").
cuci12 is committed to handling your personal data with respect, transparency, and in compliance with applicable data protection standards under our international gaming licence. We recognise that players accessing cuci12 from across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — have a reasonable expectation of privacy, and we take that expectation seriously.
By registering an account on cuci12, accessing the Platform, or otherwise using our Services, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.
In this Policy, the following terms shall have the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, payment details, IP address, and device identifiers. |
| "Data Controller" | cuci12 — the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of cuci12 pursuant to a written data processing agreement. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "KYC Data" | Identity verification documents and associated information submitted by a User to satisfy Know Your Customer obligations, including government-issued ID, proof of address, and selfie photographs. |
| "Cookies" | Small text files placed on a User's device by the Platform to facilitate session management, preference storage, and analytics. |
| "User" | Any individual who accesses, browses, or holds a registered account on the cuci12 Platform. |
cuci12 collects Personal Data in several ways: directly from you when you register or interact with the Platform, automatically when you use the Services, and from third-party partners such as payment processors and KYC verification providers.
cuci12 processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of each processing activity:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations to you under the Account Agreement — including account management, payment processing, KYC verification, and customer support. |
| Legal Obligation | Processing required to comply with applicable anti-money laundering, fraud prevention, and gaming licence obligations, including mandatory identity verification and transaction monitoring. |
| Legitimate Interests | Processing for fraud detection, platform security, business analytics, responsible gambling monitoring, and service improvement — where our legitimate interests do not override your fundamental privacy rights. |
| Consent | Processing for marketing communications and non-essential cookies — where you have provided explicit, freely given, and revocable consent. |
cuci12 uses your Personal Data for the following purposes, each of which is tied to the legal bases set out in Section 4:
cuci12 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under binding data protection obligations:
cuci12 may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are under a legal obligation to do so, or where we reasonably believe that disclosure is necessary to prevent or detect a crime, comply with a court order, or fulfil our obligations under our gaming licence.
In the event of a merger, acquisition, restructuring, or sale of all or part of cuci12's business assets, your Personal Data may be transferred to the relevant successor entity, subject to the same data protection standards described in this Policy.
As an internationally licensed Platform, cuci12's technical infrastructure and third-party service providers may be located in jurisdictions outside of Malaysia. When your Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection as your home country, cuci12 will take appropriate safeguards to ensure that your data remains protected, including:
By using the cuci12 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia as described in this Section.
cuci12 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account + 5 years following Account closure, as required under gaming licence obligations. |
| KYC and identity verification documents | Duration of Account + 5 years following Account closure, or longer where required by anti-money laundering regulations. |
| Transaction and payment records | Duration of Account + 7 years following the transaction date, for financial record-keeping and audit purposes. |
| Betting and game history | Duration of Account + 5 years, for dispute resolution and regulatory purposes. |
| Customer support communications | 3 years from the date of the communication, for quality assurance and dispute resolution. |
| Cookie and analytics data | As specified in your browser settings and our Cookie Policy; session cookies expire upon browser closure; persistent cookies as per individual cookie expiry dates. |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents recovery or re-identification.
cuci12 uses cookies and similar tracking technologies on the Platform to deliver certain functionality, improve the user experience, and analyse how the Platform is used. By continuing to use the Platform with your browser set to accept cookies, you consent to our use of cookies as described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the Platform to function — including login session management, security tokens, and access control. Cannot be disabled without affecting Platform functionality. | Session / up to 30 days |
| Functional Cookies | Remember your preferences such as language settings, preferred payment methods, and notification preferences to personalise your experience. | Up to 12 months |
| Analytics Cookies | Collect aggregated, anonymised data about how users navigate and use the Platform to identify improvement opportunities and measure feature performance. | Up to 24 months |
| Security Cookies | Detect and prevent fraudulent activity, bot activity, and suspicious login attempts by tracking session integrity and device fingerprinting signals. | Session / up to 90 days |
You can manage or disable cookies through your browser's settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling essential cookies will impair your ability to log in and use the core functions of the cuci12 Platform.
cuci12 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
Despite our best efforts, no method of data transmission or storage is completely secure. In the unlikely event of a data breach affecting your Personal Data, cuci12 will notify affected users and relevant regulatory authorities in accordance with applicable obligations.
Subject to applicable law and certain conditions, you have the following rights with respect to your Personal Data held by cuci12. To exercise any of these rights, please contact us as described in Section 15.
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your Account or our records.
Request deletion of your Personal Data where there is no legitimate basis for continued processing, subject to our legal retention obligations.
Request that we limit how we use your Personal Data in certain circumstances, such as while a dispute is being resolved.
Object to processing activities based on our legitimate interests, including direct marketing and certain analytics activities.
Receive your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
We will respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this to 60 days with notice. We reserve the right to decline requests that are manifestly unfounded, repetitive, or where fulfilling the request would conflict with our legal retention obligations (such as KYC and anti-money laundering record-keeping requirements).
The cuci12 Platform is strictly intended for use by persons aged 21 years and above only. We do not knowingly collect Personal Data from any person under the age of 21. If we discover that an Account has been registered by or on behalf of a person under 21, we will immediately close the Account, delete all associated Personal Data (except where we are required to retain it for anti-fraud or regulatory purposes), and forfeit any associated balance in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a person under 21 has provided Personal Data to cuci12, please contact us immediately at the details provided in Section 15 so that we can investigate and take appropriate action.
The cuci12 Platform may contain references to third-party services such as payment providers (Maybank, CIMB, Touch 'n Go eWallet, DuitNow, and others). These third-party services have their own privacy policies, which are independent of this Policy. cuci12 is not responsible for the privacy practices or data handling of any third-party service, and we encourage you to review the relevant privacy policies of any third-party service before submitting personal information to them.
Our inclusion of references to third-party payment brands does not constitute an endorsement of their data practices, and cuci12 accepts no liability for any data handling by those third parties in their capacity as independent data controllers.
cuci12 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where we hold your email address, by sending an email notification to the address registered to your Account.
The "Last Updated" date at the top of this page will be revised whenever this Policy is amended. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not accept any amended Policy, you must cease using the Platform and request Account closure.
We encourage you to review this Privacy Policy periodically to remain informed of how cuci12 is protecting your Personal Data.
If you wish to exercise any of your data rights under Section 11, have a question or concern about how cuci12 handles your Personal Data, wish to withdraw consent for marketing communications, or need to report a suspected data security incident, please contact us using the details below.
For questions about our Terms of Service, please visit our Terms & Conditions page. For information about responsible gambling tools and self-exclusion, please visit our Responsible Gambling page.
Our support team is available 24/7 to help with any privacy-related queries or data rights requests. You can also visit our FAQ for quick answers to common questions.
🔞 For players aged 21 and above only. Gambling involves risk. Play responsibly. See our Responsible Gambling page for tools and support.