12cuci Privacy Policy – Your Personal Data Protection

12cuci takes seriously its responsibility to protect every member's personal data. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry standards on data protection and user privacy.

This Privacy Policy is written in clear, plain language — not filled with confusing legal jargon — because we believe every member deserves to know exactly how their information is handled. We do not sell, rent, or trade your personal data to any third party for marketing purposes without your consent.

As a platform serving over 500,000 members across Malaysia, we understand the importance of trust. Data protection is more than compliance — it is the foundation of our relationship with every player. Every system, process, and decision we make treats your privacy as a priority.

We only collect data that is strictly necessary to provide and improve our services. Below is a summary of the types of data collected:

2.1 Directly Provided Data

This includes all information you provide when registering an account, submitting KYC documents, contacting customer support, or filling out any form on the platform. You are responsible for ensuring that all information provided is accurate and up to date.

2.2 Automatically Collected Data

When you use the 12cuci platform, our systems automatically record certain technical information such as your IP address, browser type and version, device operating system, pages visited, and session duration. This data is used solely for security, fraud detection, and user experience improvement purposes.

2.3 Data from Third Parties

In certain situations, we may receive data from trusted service partners, such as identity verification providers or fraud prevention agencies, for the purpose of verifying information you provide during the KYC process.

Every use of your personal data has a clear legal basis. We use your data for the following purposes:

• Account Management: Create and manage your account, process registrations, and maintain accurate member records.
• Transaction Processing: Handle deposits, withdrawals, and all financial transactions securely and on time.
• Identity Verification (KYC): Fulfil compliance obligations by verifying member identities and ensuring the platform is not misused.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and suspicious activity.
• Service Communications: Send important account notifications, system updates, security alerts, and responses to support inquiries.
• Product Improvement: Analyse aggregate usage patterns to improve platform performance, enhance the user interface, and develop new features.
• Legal Compliance: Meet all reporting and compliance obligations required by relevant authorities.
• Marketing Communications: Send relevant promotional offers and bonus information — only to members who have consented to such communications.

12cuci does not sell your personal data. However, in the course of operating the platform, we share data with selected parties under limited and controlled circumstances:

4.1 Third-Party Service Providers

We work with trusted service providers including payment processors, identity verification providers, and cloud computing infrastructure. All third parties are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

We may be required to disclose your personal data to government authorities, regulatory bodies, or law enforcement when required to do so by law, court order, or valid regulatory requirement. In such situations, we will endeavour to notify you in advance unless prohibited by law.

4.3 Business Transfers

Should 12cuci be involved in any merger, acquisition, or sale of assets, members' personal data may be transferred as part of the business assets. You will be notified in advance and the level of data protection will not be reduced.

We continually invest in security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is protected with the highest industry-standard encryption.
• Stored Data Encryption: Sensitive data such as bank information and KYC documents are stored in encrypted format within secured databases.
• Two-Factor Authentication (2FA): An additional layer of protection for account login, available and encouraged for all members.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Regular Penetration Testing: We conduct regular security audits and penetration testing through independent third parties to identify and address any vulnerabilities.
• Internal Access Controls: Access to members' personal data on our end is restricted to staff who genuinely need it and is protected by role-based access controls.

12cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functionality such as maintaining Login sessions and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve website functionality and performance.
• Functional Cookies: Remember your preferences and settings such as preferred currency and display preferences for a more personalised experience.
• Analytics Cookies: Helps us understand aggregate traffic patterns and user behaviour for continuous improvement purposes.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. For the best experience, we recommend allowing cookies in your browser when using 12cuci.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

12cuci retains your personal data only for as long as necessary to fulfill the original purpose of collection or as required by applicable law.

• Active Account Data: Retained for the duration your account is active and for a reasonable period thereafter to address any disputes that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian tax and financial laws.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
• Communication Logs: Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data & Logs: System logs and technical data are typically retained for 12 months before being automatically deleted.

When data is no longer needed, it will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

As 12cuci operates as a global online platform, your personal data may be processed or stored on servers located outside Malaysia. In all cases of international data transfers, we ensure that:

• The recipient country or region provides a level of data protection equivalent to or higher than that required under Malaysian law.
• Contractually binding data protection agreements have been established with all data recipients outside Malaysia.
• All data transfers comply with the Personal Data Protection Act 2010 and guidelines issued by the Personal Data Protection Commissioner of Malaysia.

12cuci reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or updated platform features. The "Last Updated" date at the top of this document will always reflect the current version.

For significant amendments, we will notify you via in-platform notification or email to your registered address at least 14 days before the changes take effect. Continued use of the 12cuci platform after any amendment's effective date constitutes your acceptance of the updated Privacy Policy.

We recommend you review this page periodically. Previous versions of this Privacy Policy are available upon request by contacting our support team.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact us through the following channels:

• Privacy Email: [email protected] (displayed as text only)
• Live Chat: Available 24/7 via the chat icon on the platform
• Response Time: We are committed to responding to all privacy-related inquiries within 30 business days

For issues related to responsible wagering and account management, please visit the Responsible Gaming us. For other frequently asked questions, the FAQ we may have the answer you are looking for.