Privacy Policy

1.Introduction

1.1 2cuci takes the privacy of our players seriously. This Policy sets out in plain terms what personal data we collect from you, why we collect it, how we use it, with whom we may share it, and how we protect it.

1.2 2cuci operates under international gaming authority licensing, which imposes specific obligations on us with regard to data collection, identity verification, anti-money-laundering compliance, and responsible gaming monitoring. Some data processing by 2cuci is therefore mandatory under licensing conditions and cannot be opted out of by individual players.

1.3 This Policy applies to all registered 2cuci players, prospective players who browse the 2cuci platform without registering, and individuals who contact our customer support team. It applies regardless of the device or browser you use to access 2cuci.app.

1.4 Terms used but not defined in this Policy carry the meaning given to them in the 2cuci Terms & Conditions.

2.Data We Collect

2.1 Registration Data

When you create a 2cuci account, we collect: your full legal name, date of birth, Malaysian identity card number (MyKad) or passport number, email address, Malaysian mobile number, and residential address. This information is required to open your account and cannot be omitted.

2.2 KYC & Verification Documents

To comply with our international gaming authority licensing obligations, 2cuci requires identity verification before processing withdrawals. We may collect copies of: your MyKad or passport, a recent utility bill or bank statement as proof of address, and source-of-funds documentation. These documents are handled under strict data protection protocols and retained only for the period required by law.

2.3 Financial & Transaction Data

We record details of all deposits, withdrawals, and in-platform transfers made through your 2cuci wallet. This includes transaction dates, amounts in Malaysian Ringgit (RM), payment methods used (e.g. Touch n Go eWallet, Boost, Maybank, CIMB Bank, Public Bank), and transaction reference numbers. We do not store full payment card numbers.

2.4 Gameplay & Betting Data

2cuci records all gaming activity on your account, including bets placed, games played, outcomes, bonus activity, and session history. This data is used for regulatory compliance, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Technical & Device Data

When you access 2cuci.app, we automatically collect: your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session duration. This data is used for platform security, fraud prevention, and performance optimisation.

2.6 Communications Data

If you contact 2cuci's customer support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

2.7 Voluntary Data

From time to time you may voluntarily provide us with additional information, such as preferences, feedback, or survey responses. Provision of such data is optional and does not affect your access to the 2cuci platform.

3.How We Use Your Data

2cuci uses your personal data for the following purposes:

• Account administration: Creating, maintaining, and closing your 2cuci account; verifying your identity; communicating account-related notices.
• Service delivery: Processing deposits and withdrawals; providing access to casino games, sportsbook, and other platform features; managing bonuses and promotions.
• Legal and regulatory compliance: Meeting obligations under our international gaming authority licence, including anti-money-laundering (AML) screening, responsible gaming monitoring, and mandatory reporting to regulatory authorities.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account abuse, and unauthorised access.
• Customer support: Responding to your queries, resolving disputes, and improving support quality through interaction records.
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates by email or SMS — only where you have opted in to receive such communications. You may opt out at any time.

4.Legal Basis for Processing

4.1 2cuci processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you under the 2cuci Terms & Conditions, including account management, deposits, withdrawals, and game access.
• Legal obligation: Processing required to comply with our international gaming authority licensing conditions, AML regulations, and other applicable laws — including KYC verification and suspicious activity reporting.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.Data Sharing & Disclosure

5.1 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: Touch n Go eWallet, Boost, and Malaysian banking partners — to process your deposits and withdrawals. These providers process your payment data under their own privacy policies and applicable financial regulations.
• Game providers: Licensed game software providers whose titles are integrated into the 2cuci platform. Game providers receive only the data necessary to deliver the game and record its outcome.
• KYC and identity verification services: Accredited third-party identity verification providers who assist in confirming the authenticity of documents submitted during KYC verification.
• Fraud prevention and AML screening services: Third-party services that screen transactions and account activity for money-laundering indicators and fraudulent patterns, as required under our licensing conditions.
• Regulatory and licensing authorities: Our international gaming authority licensing body and other regulatory authorities may require us to disclose player data as part of compliance audits, investigations, or mandatory reporting obligations.
• Law enforcement: Where required by a valid legal order, warrant, or other lawful authority, 2cuci will disclose personal data to law enforcement agencies.
• Professional advisors: Legal, accounting, and auditing professionals who require access to personal data in the context of advising 2cuci — subject to professional confidentiality obligations.

5.2 Any third party with whom 2cuci shares personal data is contractually required to process that data only for the stated purpose and to maintain appropriate security standards.

6.Cookies & Tracking Technologies

6.1 2cuci uses cookies and similar tracking technologies on 2cuci.app. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure user experience.

6.2 We use the following categories of cookies:

• Essential cookies: Required for core platform functionality including session management, login authentication, and security. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings and game lobby layout to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players use 2cuci.app — page visits, session duration, game categories browsed. This data informs platform improvements.
• Security cookies: Used to detect and prevent fraud, including cross-site request forgery (CSRF) protection and suspicious login detection.

6.3 You may adjust your browser settings to refuse or delete non-essential cookies. Please note that disabling cookies beyond essential ones may affect the functionality of the 2cuci platform. Most Malaysian browsers — Chrome, Firefox, Safari, and Edge — provide cookie management settings in their Privacy or Security menus.

7.Data Security

7.1 2cuci implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 2cuci's servers
• Encryption of sensitive data fields at rest, including identity document data and payment references
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Regular security assessments and penetration testing of the 2cuci platform
• Two-factor authentication (2FA) available to all players and mandatory for administrative accounts
• Automated monitoring for suspicious login activity, including anomalous IP addresses and device fingerprints

7.2 While 2cuci takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own 2cuci login credentials.

7.3 In the event of a personal data breach that is likely to result in a risk to your rights, 2cuci will notify affected players and the relevant supervisory authority in accordance with our obligations under applicable data protection law and licensing requirements.

8.Data Retention

8.1 2cuci retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our regulatory and legal obligations:

• Account and registration data: Retained for a minimum of 5 years from the date of account closure.
• Transaction and financial records: Retained for a minimum of 7 years from the date of each transaction, in accordance with AML and financial reporting requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the completion of the most recent KYC verification, or longer if required by regulatory direction.
• Customer support communications: Retained for 3 years from the date of the interaction, except where the communication relates to a dispute or regulatory matter, in which case it is retained until resolution plus 2 years.
• Responsible gaming records: Self-exclusion requests and limit-setting history are retained for the duration of the restriction plus 5 years.

8.2 Where data is no longer required and no legal retention obligation applies, 2cuci will securely delete or anonymise it.

9.Your Rights

9.1 Subject to applicable law and the limitations described in this Policy, you have the following rights in relation to your personal data held by 2cuci:

• Right of access: You may request a copy of the personal data 2cuci holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update many details directly from your 2cuci account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations. Note that data subject to mandatory regulatory retention periods cannot be deleted until those periods expire.
• Right to restriction of processing: In certain circumstances, you may request that we restrict how we process your data while a dispute or query is being resolved.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests where you have grounds relating to your particular situation.

9.2 To exercise any of the above rights, contact 2cuci's support team via live chat or at [email protected]. We will respond to valid requests within 30 days. Identity verification will be required before any request is processed.

10.Children & Minors

10.1 If 2cuci becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage account will be voided.

10.2 If you believe that a minor may have registered a 2cuci account using false information, please contact our support team immediately at [email protected].

11.Third-Party Services

11.1 The 2cuci platform integrates third-party services including game software providers, payment processors, and analytics tools. These third parties may process personal data in accordance with their own privacy policies. 2cuci selects third-party partners with adequate data protection standards and requires them to process data only as directed by 2cuci.

11.2 This Policy does not extend to the privacy practices of third-party websites that may be linked from 2cuci.app. We encourage you to review the privacy policies of any third-party services you interact with.

12.Policy Updates

12.1 2cuci reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file at least 7 days before the changes take effect.

12.2 The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the 2cuci platform after an update takes effect constitutes your acknowledgment of the revised Policy.

13.Contact Us

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or 2cuci's handling of your personal data, please contact us:

13.2 For matters relating to our responsible gaming programme, including self-exclusion and limit-setting tools, please visit the Responsible Gaming page or contact our 24/7 support team directly.