Privacy & Security

Privacy Policy 99cuci – Your Personal Data Protection

Your privacy is our priority. This document transparently explains how 99cuci collects, stores, uses, and protects your personal information in accordance with Malaysia's Personal Data Protection Act 2010.

Updated: 1 January 2026  |  Version 2.5

Our Commitment

Why Your Data Is Safe with 99cuci

We invest in the latest security infrastructure to ensure that every piece of information you share with us remains private and protected.

256-bit SSL Encryption

All data transmitted between your device and 99cuci's servers is protected with banking-grade 256-bit SSL encryption. No third party can intercept your information during transmission.

PDPA 2010 Compliance

99cuci fully complies with Malaysia's Personal Data Protection Act 2010. We ensure all data processing is carried out lawfully, transparently, and responsibly in accordance with local legislation.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, multi-layer authentication, and 24/7 monitoring by our experienced IT security team.

No Data Sales

We do not sell, rent, or share your personal information with third-party advertisers or data brokers. Your data is used solely to enhance your experience on the 99cuci platform.

Full Control in Your Hands

You have the right to access, correct, or request the deletion of your personal data at any time. Requests are straightforward to submit and are handled by our team within 14 business days.

Data Breach Notice

In the event of any security incident involving your data, we will notify you and the relevant authorities within 72 hours in line with industry best practices.

1 Introduction

Welcome to the official Privacy Policy page of 99cuci. We, 99cuci ("Platform", "We", "Company"), take the privacy and security of every member's personal data very seriously.

This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the 99cuci website, mobile app, and all related services. This document also outlines your rights as a data owner and how to exercise them.

By registering or continuing to use the 99cuci platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

Legal Basis: 99cuci complies with Malaysia's Personal Data Protection Act (PDPA) 2010 as the primary legislation governing personal data processing in the country. We are committed to ensuring all our data processing operations fully meet the requirements of this law.

2 Information We Collect

We collect various types of information depending on your interactions with the 99cuci platform. Below are the main categories of data we process:

2.1 Information You Provide Directly

  • Identity Information: Full name, date of birth, MyKad or passport number
  • Contact Information: Mobile phone number, email address
  • Account Information: Username, password (stored in unreadable hashed form)
  • KYC Verification Documents: Copies of identification documents, proof of address, and relevant financial documents
  • Financial Information: Bank account number, e-wallet details for deposit and withdrawal purposes

2.2 Information Collected Automatically

  • Technical Data: IP address, device type, operating system, web browser type
  • Usage Data: Pages visited, time spent, buttons clicked, navigation patterns
  • Gaming Data: Betting history, game results, active session duration
  • Location Data: General location based on IP address for legal compliance purposes
Data Category Example Primary Purpose
Identity Name, MyKad, date of birth KYC verification & fraud prevention
Contact Email, phone Communications & security notices
Financial Bank account number, e-wallet Deposit & withdrawal processing
Technical IP, device, browser Platform security & analytics
Games Betting history, wins Regulatory compliance & responsible gaming

Important Note: We do not collect unnecessary or sensitive information such as biometric data, medical information, or religious beliefs, unless required by applicable law.

3 How We Use Your Data

Every piece of information we collect is used for lawful and transparent purposes. We do not process your data for unrelated purposes without your consent.

3.1 Platform Operations

  • Creating and managing your member account
  • Processing deposits, withdrawals, and financial transactions securely
  • Providing access to all games and platform features
  • Maintaining records of your transactions and game history

3.2 Security & Compliance

  • Conducting KYC (Know Your Customer) checks as required by law
  • Identifying and preventing fraud, money laundering, and illegal activities
  • Ensuring compliance with PDPA 2010 and relevant gambling regulations
  • Enforcing the minimum age requirement of 18 years for all members

3.3 Service Improvement

  • Analysing usage patterns to improve the interface and user experience
  • Developing new features based on user feedback and behaviour
  • Resolving technical issues and monitoring platform performance

3.4 Communication & Marketing

With your consent, we send information about promotions, new bonuses, and platform updates. You can unsubscribe from marketing notifications at any time via the unsubscribe link in our emails or through your account settings.

Your Controls: You can manage your communication preferences at any time through the "Notification Settings" section in your account. This will not affect important security and account transaction notices.

4 Sharing Information With Third Parties

99cuci does not sell or rent your personal data to any party. However, there are limited situations where we share information with trusted third parties:

4.1 Service Providers

We work with third-party service providers that help operate our platform, including:

  • Payment Processors: FPX, Touch 'n Go eWallet, GrabPay, and local banks to process financial transactions
  • KYC Providers: Licensed third-party identity verification services
  • Game Providers: Licensed casino and slot game development company
  • Cloud Services: Server infrastructure and data storage providers compliant with ISO 27001 standards

All our service providers are required to sign strict data protection agreements and are only permitted to use your data for the specific purposes defined.

4.2 Legal Requirements

We may disclose your information to authorities where required by law, including in cases of:

  • Compliance with court orders or valid warrants
  • Cooperation with financial crime investigations
  • Reporting suspicious activity to the Financial Intelligence Unit (UPEN)

Our Guarantee: In all data sharing situations, we ensure only the minimum necessary information is shared, and all recipient parties are bound by confidentiality obligations as stringent as our own standards.

5 Cookies & Tracking Technologies

99cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

5.1 Cookie Types

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve our services.
  • Functional Cookies: Saving your preferences such as language, time zone, and display settings.
  • Analytics Cookies: Helping us understand overall usage patterns for product development decisions.

5.2 Managing Cookies

You can control and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the 99cuci platform. You can access the cookie preferences panel via the "Privacy Settings" link at the bottom of our website.

Cookie Duration: Session cookies are deleted automatically when you close your browser. Persistent cookies are stored for 30 to 365 days depending on their type and function, before expiring automatically.

6 Data Storage & Deletion

6.1 Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. Generally:

  • Active Account Data: Retained for the duration your account is active and for 7 years after account closure to meet financial audit requirements
  • Transaction Records: Retained for a minimum of 7 years in accordance with the Companies Act and financial regulations
  • KYC Documents: Retained for 7 years after the business relationship ends in accordance with anti-money laundering legislation
  • Technical Logs: Retained for 90 days for security and troubleshooting purposes
  • Marketing Data: Retained until you withdraw consent or request deletion

6.2 Data Deletion

When your data is no longer needed, or when you request its deletion (and there is no legal obligation to retain it), we will securely delete or anonymise it using methods that ensure it cannot be recovered.

Important Exceptions: Even if you request data deletion, we may need to retain certain data if it is required to comply with legal obligations, resolve pending disputes, or enforce our agreements.

7 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data. We are committed to processing every request within 14 business days.

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any information that is inaccurate or incomplete.

Right to Erasure

Request deletion of your data, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Request restriction of your data processing in certain situations.

How to Submit a Request: Submit a written request to our email at [email protected] with the subject line "Personal Data Rights Request". Include your account number and request type to speed up processing.

8 Data Security

We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

8.1 Technical Security Measures

  • 256-bit SSL/TLS end-to-end encryption for all data transmissions
  • Passwords are stored using the strong bcrypt cryptographic hashing algorithm
  • Two-factor authentication (2FA) is available for all member accounts
  • Web application firewall (WAF) and intrusion detection system (IDS) active 24/7
  • Penetration testing is conducted regularly by independent security experts
  • Automatic data backup with encryption across geographically separate locations

8.2 Organisational Security Measures

  • Access to personal data is restricted to staff who require it to perform their duties only (principle of least privilege)
  • All staff undergo regular data security and privacy training
  • Confidentiality agreements are mandatory for all staff and contractors
  • Internal security audits are conducted quarterly

Report a Security Issue: If you notice any security vulnerabilities or suspicious activity on your account, please contact our security team immediately at [email protected]. We take every report seriously and will investigate within 24 hours.

9 Third-Party Links & Services

The 99cuci platform may contain links to third-party websites or services such as game providers or payment processors. We would like to clarify the following important points:

  • This Privacy Policy applies to the 99cuci platform only
  • We are not responsible for the privacy practices of any third-party websites or services
  • Each third-party provider has its own privacy policy that you should review separately
  • Game providers integrated into our platform undergo a privacy compliance review by our team before being permitted to operate

Tip: When you leave the 99cuci platform and access third-party services, we recommend reading their privacy policy before providing any personal information.

10 Changes to This Privacy Policy

99cuci reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made:

  • The "Updated" date at the top of this page will be changed
  • A notice will be prominently displayed on the platform's main page for at least 14 days
  • For significant changes, we will send an email notice to your registered address
  • In-app notices on the 99cuci mobile app will also be displayed

Continued use of the 99cuci platform after the effective date of any changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

11 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

Official Email
Subject: "Privacy Request"
Live Chat
Available 24/7
Response within 2 minutes
Help Center
FAQs & guides

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex complaints, we will provide a progress update within 14 business days.

Complaints to Regulatory Authorities: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my or contact their official complaints hotline.

Trusted & Secure Platform

Ready to Play with Peace of Mind?

Your data is protected. Your gameplay is secure. Join millions of 99cuci members enjoying a responsible and trusted online gaming experience.

256-bit SSL Encrypted
PDPA 2010 Compliance
Data Not Sold
24/7 Support
Bahasa Melayu