999cuci Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected by 999cuci ("we," "us," "the Platform") through the website at 999cuci.win, its related sub-pages, and any services, features, or content accessible through the platform. This Policy should be read in conjunction with the 999cuci Terms & Conditions.

We take our data protection obligations seriously. The 999cuci platform is designed for adults aged 21 and above, based in or accessing the platform from Malaysia and other permitted jurisdictions. All personal data processing described in this Policy is conducted in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and relevant international standards where applicable.

2 Data Controller

For the purposes of applicable data protection law, 999cuci is the data controller in respect of personal data collected through the platform. As data controller, 999cuci determines the purposes and means by which your personal data is processed. If you have any questions about how 999cuci processes your data, you may contact us using the details provided in Section 15 of this Policy.

3 Personal Data We Collect

Depending on how you interact with the 999cuci platform, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and copies of government-issued identity documents submitted during account verification (e.g., MyKad, passport);
• Contact Data: Email address, Malaysian mobile phone number, and residential address;
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account details for Maybank, CIMB, Public Bank, Hong Leong, or GrabPay), deposit amounts, withdrawal requests, and transaction histories;
• Account Data: Username, encrypted password, account preferences, VIP tier status, loyalty point balance, and bonus history;
• Gaming Data: Game session records, bet histories, game outcomes, and session durations across all 999cuci game categories including slots, live casino, table games, and sportsbook;
• Technical Data: IP address, browser type and version, device type, operating system, time zone, and session identifiers;
• Usage Data: Pages visited, navigation paths through the platform, features accessed, and interaction with on-platform content;
• Communications Data: Records of correspondence with 999cuci support staff via live chat, email, or other support channels.

4 How We Collect Your Data

999cuci collects personal data through the following means:

• Direct collection: Data you provide when registering a 999cuci account, completing identity verification, making a deposit, submitting a withdrawal request, or contacting support;
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, and server logs as you browse and interact with the 999cuci platform;
• Third-party sources: Data received from payment processors (e.g., Touch n Go eWallet, Boost, GrabPay), identity verification service providers, and fraud prevention services as part of our account onboarding and security processes.

5 How We Use Your Personal Data

999cuci processes your personal data for the following purposes:

• To create, verify, and administer your 999cuci player account;
• To process deposits and withdrawals through your selected Malaysian payment method;
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulatory obligations;
• To deliver personalised game recommendations, promotional offers, and VIP programme communications to eligible players;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities on the platform;
• To operate and improve the technical performance, security, and user experience of the 999cuci platform;
• To enforce the 999cuci Terms & Conditions and Responsible Gaming Policy;
• To comply with applicable Malaysian law, regulatory requirements, and lawful requests from competent authorities;
• To respond to support enquiries, complaints, and dispute resolution requests.

6 Legal Basis for Processing

Under applicable data protection law, 999cuci processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the 999cuci Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory obligations under Malaysian law and applicable international standards;
• Legitimate interests: Processing conducted for 999cuci's legitimate interests in fraud prevention, platform security, and improving services, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing purposes where you have provided explicit consent. You may withdraw marketing consent at any time by contacting 999cuci support.

7 Data Sharing & Disclosure

999cuci does not sell your personal data to third parties. We may share your data with the following categories of recipients solely as necessary for the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, and cryptocurrency gateway operators (USDT TRC20) for the processing of deposits and withdrawals;
• Game providers: Certified third-party game studios (e.g., PG Soft, Pragmatic Play, Spadegaming) who receive gameplay session data necessary for game delivery and audit purposes;
• Identity verification providers: Third-party KYC service providers who assist in verifying player identity documents in compliance with AML obligations;
• Regulatory authorities: Malaysian regulatory bodies or law enforcement agencies where 999cuci is legally obligated to disclose information;
• IT service providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under binding data processing agreements.

All third-party service providers engaged by 999cuci are contractually bound to process personal data only for specified, lawful purposes and to implement appropriate security measures.

8 International Data Transfers

Some of 999cuci's service providers operate infrastructure outside Malaysia. Where your personal data is transferred to or processed in a jurisdiction outside Malaysia, 999cuci ensures that appropriate safeguards are in place — including contractual data transfer agreements incorporating standard data protection clauses — to protect your data to a standard equivalent to that required under the Malaysian PDPA and applicable international data protection principles.

9 Data Retention

999cuci retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure to comply with AML record-keeping obligations;
• Transaction and financial records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements;
• Technical and usage data is retained for up to twenty-four (24) months for security, fraud detection, and platform improvement purposes.

Where retention is no longer required for lawful purposes, 999cuci will securely delete or anonymise your personal data.

10 Cookies & Tracking Technologies

The 999cuci platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your login session, remember your preferences, and gather analytical data about platform performance. Categories of cookies used include:

• Strictly necessary cookies: Required for platform functionality including session management and security. These cannot be disabled;
• Analytical cookies: Used to understand how players navigate and interact with the 999cuci platform for improvement purposes;
• Preference cookies: Used to remember your language, display settings, and other platform preferences between sessions.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 999cuci platform.

11 Your Data Rights

Subject to applicable Malaysian data protection law, you have the following rights in relation to the personal data that 999cuci holds about you:

• Right of access: The right to request a copy of the personal data 999cuci holds about you;
• Right to correction: The right to request correction of inaccurate or incomplete personal data;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: The right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe your data rights have been infringed.

To exercise any of the above rights, please contact 999cuci support using the details in Section 15. We aim to respond to all data rights requests within thirty (30) calendar days.

12 Children's Privacy

The 999cuci platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the platform, please contact us immediately at the address provided in Section 15.

13 Security Measures

999cuci implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999cuci platform;
• Encrypted storage of sensitive data including passwords (stored as salted hashes) and financial identifiers;
• Two-factor authentication (2FA) available to all account holders as an additional access control layer;
• Regular security audits and penetration testing of platform infrastructure;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.

Whilst 999cuci takes all reasonable precautions, no system is entirely immune to security risks. You are encouraged to use 999cuci's 2FA feature and to report any suspected security incidents to our support team immediately.

14 Changes to This Privacy Policy

999cuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Where amendments are material, we will endeavour to notify registered players via email or an in-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the 999cuci platform following any update constitutes your acceptance of the revised Policy.

15 Contact Us

For any privacy-related enquiries, data rights requests, or concerns regarding this Policy, please contact the 999cuci data protection team via:

• Live chat: Available 24/7 through the 999cuci platform
• Email: [email protected] (plain text — not a clickable link)

We aim to respond to all privacy enquiries within ten (10) business days, and formal data rights requests within thirty (30) calendar days as required by applicable law.