Privacy Policy 22cuci – Your Personal Data Protection

1 Introduction

22cuci ("we", "the platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the 22cuci website and mobile app.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. By registering an account or using our platform, you agree to the terms of this Privacy Policy.

2 Types of Data We Collect

We only collect data that is genuinely necessary to provide you with a safe, fair and efficient service. The categories of data we collect are as follows:

3 How We Collect Data

Your personal data is collected through various channels depending on how you interact with our platform:

• Account Registration: Information you provide during the registration process, including your name, email and phone number.
• KYC Verification: Identity documents you upload for account verification and legal compliance purposes.
• Financial Transactions: Details related to deposits and withdrawals you make on the platform.
• Platform Usage: Data generated automatically when you browse our website or use our mobile app.
• Support Communications: Any information you share while interacting with our customer support team.
• Cookies and Similar Technologies: Session tracking, preference and analytics data collected automatically via cookies.

We may also receive information about you from trusted third parties such as identity verification service providers and fraud prevention agencies for platform security purposes.

4 Purpose of Data Use

22cuci uses your personal data for lawful and transparent purposes. We will not use your data for any purpose beyond those stated below without obtaining your consent first:

• Creating and managing your member account securely.
• Processing deposits, withdrawals and all financial transactions accurately.
• Conducting identity verification (KYC) and anti-money laundering (AML) checks.
• Detecting and preventing fraud, account misuse and unlawful activity.
• Providing effective customer support whenever you need assistance.
• Sending important notifications related to your account, transactions and security.
• Personalising your gaming experience and delivering relevant promotional recommendations.
• Complying with applicable legal and regulatory obligations.
• Improving platform performance, user interface and service quality.

5 Data Sharing with Third Parties

Your privacy is our responsibility. 22cuci only shares your personal data in limited situations and with trusted parties:

• Payment Providers: Information required to securely process your deposit and withdrawal transactions.
• Game Providers: Minimum data required by game software providers to deliver a smooth gaming experience.
• KYC Services: Identity verification details submitted to certified verification providers for compliance purposes.
• Legal Authorities: We will disclose information when required by law, court order or enforcement directive.
• Infrastructure Providers: Technical service providers such as cloud computing services, bound by strict confidentiality agreements.

All third parties with whom we share data are contractually obligated to protect your information and use it only for agreed purposes. They are not permitted to use your data for their own marketing purposes.

6 Personal Data Security

We continuously invest in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we have in place include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Data encryption at rest on servers using AES-256 encryption algorithm.
• Layered access controls with two-factor authentication for all internal staff accessing the system.
• Continuous 24/7 security monitoring with an automated intrusion detection system.
• Regular security audits by certified independent auditors.
• Automatic data backups stored at separate, geographically distinct secure locations.
• Mandatory cybersecurity training program for all 22cuci staff.

7 Data Retention Period

22cuci retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. The following are general guidelines for our retention periods:

• Active Account Data: Retained for the duration your account is active and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of seven years in line with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Security Logs: Retained for 90 days for security incident investigation purposes.
• Support Communication Data: Retained for three years for customer service reference.

Once the retention period expires, your data will be permanently deleted or anonymised using secure, irreversible procedures.

8 Your Rights as a Data Subject

Under Malaysia's PDPA and our commitment to your privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our customer support team. We will process your request within 14 business days.

9 Cookies and Tracking Technologies

22cuci uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, sessions and security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language and display theme for a more convenient experience.
• Analytics Cookies: Helping us understand how members use the platform for continuous improvement. This data is collected in non-personally identifiable form.
• Performance Cookies: Monitoring response times and platform performance to ensure a smooth experience.

You can manage your cookie settings through your browser settings. Please note that disabling certain cookies may affect platform functionality.

10 Links to Third-Party Services

The 22cuci platform may contain links or integrations with third-party services such as game providers and payment platforms. Please note that:

• Our Privacy Policy applies to the 22cuci platform only.
• Once you leave our platform, the privacy policy of the respective website will apply.
• We are not responsible for the privacy practices of third parties, even where technical integration exists.
• We encourage you to read the privacy policy of every third-party service you use.

All third-party providers integrated with the 22cuci platform have undergone security assessments and are bound by data protection agreements. We only work with providers that meet our security standards.

11 Changes to the Privacy Policy

22cuci reserves the right to update this Privacy Policy from time to time to reflect changes in our services, legal requirements or industry best practices. When material changes are made:

• A notice of changes will be prominently displayed on this page along with the update date.
• Members will be notified via email or in-app notification of any significant changes.
• Continued use of the platform after a change notice is considered acceptance of the revised policy.
• If you disagree with any changes made, you have the right to close your account at no charge.

12 Contact Us About Privacy

If you have any questions, concerns or complaints about how we handle your personal data, we're here to help. Our privacy and data protection team can be reached through the following channels:

• Live Chat: Available on the 22cuci platform or mobile app — response within 5 minutes.
• Email: [email protected] (text display only — not clickable)
• FAQ: Visit page FAQ for quick answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related enquiries within 48 business hours. For formal complaints, we will provide a case reference and keep you updated on the progress of our investigation.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant supervisory authority.