Privacy Policy cuci1000 — Your Data, Our Responsibility

This Privacy Policy ("Policy") is published by cuci1000 ("Company", "we", "platform") and applies to all individuals who access or use the cuci1000 platform, including the website, mobile application and all related services ("Services"). This Policy describes how we collect, process, store, disclose and protect your personal information.

We are committed to protecting the privacy and security of your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. By using the cuci1000 platform, you acknowledge that you have read, understood and agreed to this Privacy Policy.

We reserve the right to update this Privacy Policy from time to time. You will be notified of any material changes via a notice on the platform or to your registered email address at least 7 days before the changes take effect. Continued use of the platform after such changes constitutes your acceptance of the updated Policy.

Cuci1000 collects various categories of information from players to enable us to provide a secure, efficient and personalised service. Below is a full breakdown of the data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, political views or religious beliefs unless required by law.

Cuci1000 uses the personal information collected for the following lawful and transparent purposes:

• Account Management: Registering, verifying and managing your player account, including the required KYC (Know Your Customer) process.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, and securely handling all withdrawal requests.
• Provision of Gaming Services: Enabling you to access slots, Live Casino, blackjack, Sports Betting on the Malaysia Super League, EPL, badminton, e-sports and all other games on the cuci1000 platform.
• Security & Fraud Prevention: To identify and prevent fraudulent activity, money laundering, account abuse and other security threats.
• Legal Compliance: Fulfilling legal compliance obligations, including anti-money laundering (AML) requirements and reporting suspicious activity to the relevant authorities.
• Service Communications: Sending important notifications relating to your account, transactions, security updates and policy changes.
• Marketing Consent: With your consent, to send you information about promotions, bonuses, special offers and new games at cuci1000. You may unsubscribe at any time.
• Platform Improvement: Analysing usage data to improve the performance, usability, and overall experience of the cuci1000 platform.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

We will only use your data for the purposes stated at the time of collection, or for compatible purposes. Should we need to use your data for a new and different purpose, we will notify you and obtain your consent beforehand.

Cuci1000 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010. Depending on the context, we rely on one or more of the following bases:

• Consent: You have given explicit consent for your data to be processed for specific purposes, such as receiving marketing communications.
• Contract: Processing is necessary to fulfil the contract between you and cuci1000 — for example, to process your deposits and withdrawals.
• Legal Obligation: Processing is required to fulfil our legal obligations, such as AML requirements and tax reporting.
• Legitimate Interest: Processing is necessary for the legitimate interests of cuci1000 or a third party, such as fraud prevention and network security — provided those interests do not override your fundamental rights.

Cuci1000 does not sell or trade players' personal data to any party. However, we may share information with the following parties under limited and controlled circumstances:

• Payment Service Providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay providers receive only the transaction data strictly necessary to process your payment. They are bound by strict confidentiality agreements.
• Licensed Game Providers: Gaming software companies that provide slots, live casino and other games receive the session data necessary to operate those games.
• IT Service Providers: Server hosting, cybersecurity, and analytics companies that help us operate the cuci1000 platform securely.
• Legal Authorities: Government agencies, regulatory bodies or law enforcement authorities when required by law or court order.
• Professional Advisors: Lawyers, accountants and auditors who are bound by strict professional confidentiality obligations.

All third parties that receive cuci1000 player data are required to protect it to a standard consistent with this Privacy Policy. We conduct due diligence on all data partners before any data sharing begins.

Cuci1000 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse or disclosure:

• Data Encryption: All sensitive data is stored in encrypted format using AES-256 standards. Data transmitted between our servers and your device is protected by TLS/SSL protocols.
• Access Control: Access to player data is restricted on a need-to-know basis following the principle of least privilege — only staff who require access to perform their specific duties are permitted.
• Two-Factor Authentication: cuci1000's internal systems are protected with two-factor authentication to prevent unauthorised access even in the event of a compromised password.
• Continuous Monitoring: Our 24/7 security monitoring system oversees all network activity to detect and respond to threats promptly.
• Regular Penetration Testing: cuci1000 conducts regular security assessments by independent third-party experts to identify and address system vulnerabilities.
• Data Backup: Player data is regularly backed up to secure, isolated locations to ensure data recovery in the event of a disaster.

Cuci1000 does not retain your personal data for longer than necessary for the stated purposes or as required by law. The following are our data retention guidelines:

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. Deletion is carried out using methods that meet recognised security standards.

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding the personal data we hold about you:

To submit any request regarding your data rights, please contact us at support@cuci1000.bet with the subject line "Personal Data Rights Request". We will respond within 14 working days. In complex cases, this period may be extended by up to 30 days with prior notice.

Cuci1000 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: To collect information on how you use the platform (pages visited, time spent) in order to help us improve performance and usability.
• Functional Cookies: Remembering your preferences, such as display settings and game choices, to deliver a more personalised experience.
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate to help us understand how the platform is being used.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. By continuing to use cuci1000, you agree to our use of cookies as described above.

In the course of operating the cuci1000 platform, your personal data may be transferred to and stored on servers located outside Malaysia. In all such cases, we ensure that appropriate safeguards are in place for those transfers:

• Data transfers are only carried out to destinations that offer an adequate level of data protection equivalent to Malaysia's PDPA.
• All service providers who receive our data are required to sign data processing agreements that meet the prescribed data protection standards.
• We continually review and monitor the data protection practices of all our service partners.

The cuci1000 platform is strictly for individuals aged 18 and above only. We do not knowingly collect, process or store personal data from individuals under the age of 18.

If we discover that we have inadvertently collected data from a minor, we will immediately take the following steps:

• Immediately delete all personal data relating to that individual.
• Closing the associated account.
• Returning any deposits made to the original payment method.

If you believe a minor has registered an account on cuci1000, please contact us immediately at support@cuci1000.bet so that we may take the appropriate action.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our privacy team via:

• Email: support@cuci1000.bet (Subject: Privacy Enquiry)
• Response Time: We aim to respond within 3–5 working days for general enquiries, and 14 working days for formal data rights requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in your jurisdiction.

This Privacy Policy is effective from 1 January 2026. Previous versions of this Privacy Policy are available upon request via our support email.