7cuci Privacy Policy – How We Protect Malaysian Players' Personal Data

1. Introduction & 7cuci's Privacy Commitment

7cuci ("we", "our platform") is the data controller responsible for processing your personal data in connection with your use of our online gaming platform. We take privacy and data security extremely seriously, as we understand that your personal information is a trust placed in us.

This Privacy Policy has been drafted to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects the genuine commitment of 7cuci to handle your personal data in a responsible, transparent, and secure manner. We want you to have a clear understanding of what we do with your information so that you can make informed decisions about using our platform.

This Privacy Policy applies to all information we collect through the 7cuci, our mobile app, any communications between you and us, and any other services we offer to members in Malaysia. Please read this document carefully and contact us at [email protected] if you have any questions.

2. Types of Personal Data We Collect

7cuci collects various categories of personal data depending on your interactions with our platform. Below are the main categories of data we collect:

Any data you provide to us must be accurate, complete, and up to date. You are responsible for updating your information should any changes occur by contacting the 7cuci or through your account settings.

3. How We Collect Your Personal Data

7cuci collects your personal data through the following methods:

• Account Registration: When you complete the registration form on the 7cuci, you provide your basic identification and contact information directly to us.
• Identity Verification (KYC): When you undergo the KYC process required to verify your identity, you may be asked to upload a copy of a valid identification document such as your MyKad or Passport.
• Financial Transactions: Each time you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the relevant transaction details are recorded in our system.
• Platform Usage: Technical and behavioural gameplay data is collected automatically when you use the platform 7cuci — this includes information about the games you play, your session duration and betting patterns.
• Communications with Us: When you contact customer support 7cuci via live chat, email or WhatsApp, the contents of those communications are retained for record-keeping and service improvement purposes.
• Cookies & Similar Technologies: Website and app 7cuci uses cookies and similar tracking technologies to collect usage data and enhance your experience. More details on this can be found in Section 9.

We never purchase or obtain your personal data from third-party data brokers or unauthorised external sources. All data we hold is obtained directly from your interactions with the 7cuci.

4. Purposes for Processing Your Personal Data

7cuci processes your personal data on a valid legal basis and only for the purposes stated below. We will not process your data for any other purpose without first obtaining your consent:

• Account Management: Creating, verifying, and managing your member account at 7cuci, including mandatory KYC processes.
• Service Provision: Processing deposits and withdrawals, enabling access to games, and ensuring a seamless gaming experience on our platform.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering (AML), and any other suspicious activities that may compromise platform security 7cuci and its members.
• Legal Compliance: Fulfilling the legal obligations imposed on us under Malaysian law, including reporting requirements to the relevant authorities where necessary.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to members 7cuci.
• Platform Improvement: Analysing usage patterns to improve platform features, the games collection and the overall user experience.
• Marketing Communications: Sending you information about promotions, bonuses and special offers — subject to the marketing communication preferences you have set in your account. You may opt out of marketing communications at any time.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate support to members who need it.

5. Sharing Data with Third Parties

7cuci does not sell, rent or commercialise your personal data to any third party. However, in certain limited and legitimate circumstances, we may need to share your data with the following parties:

• Payment Service Providers: E-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX providers such as Maybank2u and CIMB Clicks receive the information necessary to process your financial transactions. They are bound by strict confidentiality agreements and their own privacy policies.
• Game Providers: Game developers whose titles are available on the 7cuci may receive aggregated game statistics that cannot be used to identify you personally.
• Malaysian Authorities: Where required by law, court order, or directive from a competent authority in Malaysia, including Bank Negara Malaysia, the Financial Intelligence Unit (ULFAS), and law enforcement authorities.
• Audit & Compliance Companies: Independent auditors engaged to verify the accuracy of our RNG systems and the compliance of our privacy practices may access the data required solely for audit purposes.

All third parties that receive your data from 7cuci are required to handle that data to a standard of protection at least equivalent to what we have set out in this Privacy Policy.

6. Data Retention & Deletion Period

7cuci does not store your personal data indefinitely. We set different retention periods for different categories of data based on business requirements, legal obligations, and the principle of data minimisation:

• Active Account Data: Retained for as long as your account remains active at 7cuci plus a 5-year retention period following account closure, in accordance with Malaysia's AML requirements and financial regulations.
• Financial Transaction Data: Retained for 7 years from the date of transaction in accordance with Malaysian tax and financial legal requirements.
• Technical Log Data: Retained for 12 months for security purposes and technical troubleshooting.
• Support Communication Data: Retained for 3 years from the date of last communication for reference and service improvement purposes.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

Once the designated retention period has lapsed, your personal data will be securely deleted using methods that ensure it cannot be recovered. If you wish to request early deletion prior to the end of the retention period, please refer to Section 8 regarding your rights as a data subject.

7. Data Security Measures at 7cuci

7cuci continually invests in robust security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Transmission Encryption: All communications between your device and the 7cuci protected with TLS 1.3 protocol and 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.
• Storage Encryption: Sensitive data stored in our databases is encrypted using AES-256, including financial information and identity documents.
• Strict Access Controls: Access to members' personal data is restricted to 7cuci who require that access solely to carry out their job responsibilities, based on the principle of "least privilege".
• 24/7 Security Monitoring: Threat detection systems and security monitoring operate around the clock to identify and respond to any security threats promptly.
• Regular Security Testing: 7cuci conducting regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): Available and recommended for all members to add an extra layer of protection to their accounts.

8. Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and best-practice data protection standards, you as a member 7cuci has the following rights regarding your personal data:

To exercise any of the rights outlined above, please contact us by email at [email protected] with the subject line "Personal Data Rights Request", along with your full name and registered phone number. We will process your request within 10 business days and requires identity verification beforehand to ensure the security of your data.

Please note that these rights are not absolute — in certain situations, we may need to decline or limit your request where conflicting legal obligations exist. In such cases, we will explain the reasons for the refusal to you.

9. Use of Cookies and Tracking Technologies

Website and app 7cuci uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

You may manage your cookie preferences through your web browser settings or via the cookie management panel available on the 7cuci. However, disabling essential cookies may affect the core functionality of our platform.

10. Children's Privacy Protection

Platform 7cuci is intended exclusively for individuals aged 18 years and above only. We do not knowingly collect or process personal data from children under the age of 18.

7cuci employs age verification technology and KYC processes to ensure only eligible individuals can access our platform. However, we also rely on parents and guardians to monitor their children's online activities and take appropriate precautionary measures.

11. Amendments to This Privacy Policy

7cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our systems. We will notify you of any significant changes through:

• Email notifications sent to your registered email address
• In-platform notifications when you are logged into your account 7cuci
• Display a clear notice on the main page of our privacy policy

The date of the latest update is always displayed at the top of this document. Your continued use of the 7cuci after the changes take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your data.

To review previous versions of this Privacy Policy, please contact us at [email protected] and we will provide the relevant copy upon reasonable request.

12. Contact 7cuci's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 7cuci handles your personal data, please contact our Data Privacy Officer through the following channels:

• Dedicated Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the platform 7cuci
• Email Response Time: Less than 1 hour on business days for urgent privacy matters
• Language of Communication: Bahasa Melayu and English

We encourage you to contact us directly before filing a complaint with the relevant authorities. However, if you believe we have failed to meet our obligations under the PDPA 2010, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.