mcuci2 Privacy Policy

1. Who We Are

1.1 mcuci2 ("mcuci2", "we", "us", "our") is the operator of the online gaming platform accessible at mcuci2.app. mcuci2 is an international online gaming platform operating under a recognised gaming authority licence.

1.2 For the purposes of this Privacy Policy, mcuci2 is the data controller in respect of personal data collected from Players and visitors to the mcuci2 Platform. Any queries regarding our data practices may be directed to our support team using the contact details in Section 13.

2. Data We Collect

2.1 mcuci2 collects personal data in the following categories:

2.2 mcuci2 does not knowingly collect special category data (such as health data, biometric data, or racial/ethnic origin) unless specifically required by applicable law or gaming authority regulations.

3. How We Use Your Data

3.1 mcuci2 uses the personal data we collect for the following purposes:

• Account creation and management: to register your mcuci2 account, verify your identity, maintain your Player profile, and provide access to Platform features;
• Transaction processing: to process MYR deposits via Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and other supported payment methods, and to process withdrawal requests;
• KYC and AML compliance: to fulfil obligations under our gaming licence and applicable anti-money laundering regulations, including identity verification and source-of-funds checks;
• Platform operation and improvement: to deliver the Sportsbook, Live Casino, Slots, and Esports Betting products; to diagnose technical issues; and to improve Platform performance;
• Customer support: to respond to support requests and investigate complaints;
• Responsible gaming: to monitor player behaviour for indicators of problem gambling and to administer self-exclusion, deposit limit, and reality check tools;
• Marketing communications: to send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications;
• Fraud prevention and security: to detect and prevent fraudulent activity, unauthorised account access, and abuse of Platform terms.

3.2 mcuci2 will not use your personal data for any purpose that is materially different from those listed above without providing prior notice and, where required, obtaining your consent.

4. Legal Basis for Processing

4.1 mcuci2 processes personal data on the following legal bases:

• Contractual necessity: processing required to perform our obligations under the Player Account Agreement, including account registration, transaction processing, and platform access;
• Legal obligation: processing required to comply with gaming licence conditions, anti-money laundering regulations, and applicable data protection laws;
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights;
• Consent: processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting mcuci2 support.

5. Data Sharing & Disclosure

5.1 mcuci2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 We share personal data with the following categories of third parties, only to the extent necessary for the specified purpose:

• Payment processors: Malaysian payment infrastructure providers (including Touch 'n Go eWallet, Boost, DuitNow operators, FPX, Maybank2u, CIMB Clicks, and equivalent bank transfer services) to process deposits and withdrawals;
• Gaming software providers: game studios and live dealer operators (such as Evolution Gaming, Pragmatic Play, SA Gaming) who provide the casino and slots products accessible through the mcuci2 Platform;
• KYC and identity verification services: third-party verification providers engaged to conduct identity document checks in compliance with gaming licence requirements;
• IT infrastructure and security providers: cloud hosting, DDoS protection, and cybersecurity service providers who process technical data in the course of providing their services to mcuci2;
• Regulatory and law enforcement authorities: where required by our gaming licence, applicable law, or a valid legal order, mcuci2 will disclose personal data to competent authorities.

5.3 All third-party service providers engaged by mcuci2 are contractually required to process personal data only on mcuci2's instructions and to maintain appropriate security standards.

6. Cookies & Tracking Technologies

6.1 The mcuci2 Platform uses cookies and similar tracking technologies to maintain session state, authenticate logged-in users, and collect anonymous usage analytics. The categories of cookies used include:

• Strictly necessary cookies: essential for Platform functionality, including login session management and security. These cookies cannot be disabled.
• Performance cookies: used to collect anonymised data on how Players interact with the Platform, enabling mcuci2 to identify performance issues and improve user experience.
• Preference cookies: used to remember Player settings such as language preference and selected odds format across sessions.

6.2 mcuci2 does not use third-party advertising cookies or behavioural tracking cookies that profile Players across external websites.

6.3 You may configure your browser to refuse cookies; however, doing so may impair the functionality of the mcuci2 Platform, including the ability to remain logged in.

7. Data Retention

7.1 mcuci2 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: retained for a minimum of five (5) years from the date of account closure, in compliance with gaming licence and anti-money laundering regulatory obligations;
• KYC documentation: retained for a minimum of five (5) years from the date of last transaction or account closure;
• Communications records: retained for a minimum of two (2) years from the date of the communication;
• Technical and usage data: anonymised and retained in aggregated form for analytics purposes following account closure.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mcuci2's data destruction procedures.

8. Your Rights

8.1 Subject to applicable law and gaming regulatory requirements, you have the following rights in respect of your personal data held by mcuci2:

• Right of access: to request a copy of the personal data mcuci2 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data, subject to legal retention obligations;
• Right to restriction: to request that mcuci2 restricts the processing of your personal data in certain circumstances;
• Right to object: to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: to withdraw consent to marketing communications at any time, without affecting the lawfulness of processing prior to withdrawal.

8.2 To exercise any of the above rights, contact the mcuci2 support team via Live Chat or at the email address listed in Section 13. mcuci2 will respond to all verified requests within 30 days.

8.3 Please note that certain rights may be limited where processing is required for compliance with gaming licence obligations or anti-money laundering regulations that take precedence over individual data rights.

9. Data Security

9.1 mcuci2 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the Player's browser and mcuci2 servers;
• Encryption of sensitive data fields (including passwords, payment details, and identity document data) at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Intrusion detection systems monitoring for anomalous access patterns.

9.2 In the event of a personal data breach that is likely to result in high risk to affected individuals, mcuci2 will notify affected Players without undue delay and in accordance with applicable regulatory requirements.

10. Children's Privacy

10.1 The mcuci2 Platform is strictly intended for individuals aged 21 years and above. mcuci2 does not knowingly collect or process personal data from persons under the age of 21. Where mcuci2 becomes aware that personal data has been collected from an individual under 21, such data will be deleted promptly and the associated Account will be closed.

10.2 If you believe that mcuci2 has inadvertently collected data from a person under 21, please contact us immediately using the contact details in Section 13.

11. International Data Transfers

11.1 As an international online gaming platform, mcuci2 may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, mcuci2 ensures that appropriate safeguards are in place, including contractual data protection clauses with the receiving party consistent with the standards required by our gaming authority licence.

11.2 mcuci2 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

12. Amendments to This Policy

12.1 mcuci2 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Players via their registered email address and/or a prominent notice on the mcuci2 Platform no less than seven (7) days prior to the effective date of the change.

12.2 The current version of this Privacy Policy is always accessible on the mcuci2 Platform. The "Last Updated" date at the top of this document reflects when the most recent revision was made.

13. Contact & Complaints

For any queries, requests, or complaints regarding this Privacy Policy or mcuci2's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the mcuci2 Platform (3–5 minute average response)
• Email: [email protected]

mcuci2 will acknowledge all privacy-related requests within 5 business days and resolve them within 30 days. If you are not satisfied with mcuci2's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or gaming regulatory authority in the jurisdiction of your residence.