kkcuci Privacy Policy

1. Introduction

1.1 kkcuci ("the Platform", "we", "us" or "our") is an English-language online entertainment platform serving Malaysian users aged 21 and above. The Platform provides online casino games, sports betting markets, live dealer products and related services accessible at https://kkcuci.cam.

1.2 This Privacy Policy ("Policy") sets out the basis on which kkcuci processes any personal data we collect from you or that you provide to us. It applies to all current and former registered users of the Platform, prospective users who visit the website without registering, and any individual who contacts kkcuci's support channels.

1.3 kkcuci is committed to processing personal data in a manner that respects the privacy of individuals and meets the standards expected of a responsible international online gaming operator serving the Malaysian market. This commitment is not merely a compliance exercise — it reflects how kkcuci is built and managed.

1.4 If you have any questions or concerns about this Policy or about kkcuci's data practices, please contact us as described in Section 15 below before providing any personal information.

2. Definitions

The following definitions apply throughout this Policy:

• "Account" — the personal registered account held by a Player on the kkcuci Platform.
• "Data Subject" — any identified or identifiable living individual whose personal data is processed by kkcuci, including registered Players and website visitors.
• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, device identifiers, IP address, payment details and account activity records.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, alteration, retrieval and deletion.
• "Third Party" — any entity other than the Data Subject and kkcuci, including payment processors, game studio operators, KYC verification providers and analytics service providers.
• "KYC" — Know Your Customer: the identity and payment-ownership verification process required before certain account actions, particularly withdrawals.
• "Cookies" — small data files placed on a user's device by a website to store and retrieve information about that user's browser session and preferences.

3. Data Controller

3.1 kkcuci acts as the data controller in respect of personal data collected through the Platform. As data controller, kkcuci determines the purposes and means of processing personal data associated with account registration, gaming activity, payment transactions and customer support.

3.2 Where kkcuci engages third-party service providers — such as payment gateways, identity verification providers or game studio operators — those parties process personal data as data processors acting under kkcuci's documented instructions and subject to contractual data protection obligations.

3.3 For all data-related enquiries, including requests to exercise your rights under Section 11, please contact kkcuci using the details provided in Section 15.

4. Personal Data We Collect

4.1 Registration and Account Data

When you register an Account on kkcuci, we collect the following information:

• Full legal name as it appears on your identity document;
• Date of birth (used to verify that you are at least 21 years of age);
• Email address and chosen username;
• Residential address (city, state and postcode at a minimum — commonly provided as a Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or other Malaysian address);
• Mobile phone number;
• Preferred currency (Malaysian Ringgit / MYR by default).

4.2 Identity Verification (KYC) Data

To comply with identity verification requirements and to protect against fraud, kkcuci may request:

• Copy of a valid government-issued identity document (Malaysian MyKad, passport or driving licence);
• Proof of residential address dated within the last three months;
• Evidence of ownership of payment methods used (e.g., screenshot of your Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong account showing your registered name).

4.3 Transaction and Activity Data

• Deposit and withdrawal records including amounts, timestamps, payment methods used and processing outcomes;
• Bonus claims, wagering activity, game session data and balance history;
• Support enquiry records and correspondence between you and the kkcuci support team.

4.4 Technical and Device Data

• IP address at the time of registration, login and significant account actions;
• Browser type and version, operating system, device type and screen resolution;
• Session duration, pages visited, navigation path and feature usage patterns;
• Cookies, local storage values and similar session identifiers.

4.5 Voluntarily Provided Data

Information you provide proactively, such as feedback submitted through the support channel, survey responses or communications sent to [email protected], is also retained and processed in accordance with this Policy.

5. Purpose and Legal Basis for Processing

5.1 kkcuci processes personal data only where a lawful basis for doing so exists. The following table summarises the principal processing activities and their associated lawful basis:

5.2 kkcuci will not use personal data for purposes that are incompatible with those stated above without first obtaining your explicit consent or otherwise identifying a new lawful basis and notifying you of the change.

6. Payment Data and Malaysian Payment Methods

6.1 kkcuci processes payment transactions denominated in Malaysian Ringgit (MYR / RM) through the following Malaysian-oriented payment channels, subject to current availability:

• Online Banking: Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect;
• E-Wallets: Touch 'n Go eWallet, Boost, GrabPay;
• Online Transfer: DuitNow, FPX (Financial Process Exchange).

6.2 Payment transactions are processed through contracted third-party payment gateways that operate under their own privacy policies and security standards. kkcuci shares only the minimum personal data necessary to complete or verify each transaction with these providers.

6.3 kkcuci does not store full card numbers, full bank account numbers or e-wallet login credentials. Payment identifiers (such as partial account references) may be retained in transaction logs for reconciliation and fraud-prevention purposes.

6.4 All payment accounts used for deposits or withdrawals on kkcuci must be registered in the Player's own name. Third-party payment arrangements are not permitted and trigger additional identity verification procedures.

7. Cookies and Tracking Technologies

7.1 What Cookies kkcuci Uses

kkcuci uses the following categories of cookies and similar technologies:

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies or selectively accept categories. Please note that disabling strictly necessary cookies will prevent kkcuci from functioning correctly, as session management depends on them.

Instructions for managing cookies in popular browsers are available in each browser's help documentation. kkcuci does not control third-party cookies set by game studios operating within the Platform's iframe-based game launcher.

8. Data Sharing and Disclosure

8.1 kkcuci does not sell, rent or trade personal data to any third party for their own marketing or commercial purposes. Data is shared only in the following circumstances:

8.2 Service Providers

kkcuci engages third-party providers who process personal data on our behalf under binding contractual data processing agreements. These providers include:

• Payment gateway operators and Malaysian banking integration partners;
• KYC and identity verification service providers;
• Platform infrastructure and hosting providers;
• Fraud detection and security monitoring services;
• Anonymised analytics service providers.

In all cases, these providers are permitted to process personal data solely for the purposes kkcuci specifies and are prohibited from using it for their own ends.

8.3 Game Studio Operators

Game content on kkcuci is supplied by licensed international studios. When you launch a game, a session token and anonymised identifiers may be transmitted to the relevant studio's server to initialise the game session. No name, email address or financial data is transmitted to game studios in ordinary operation.

8.4 Legal and Regulatory Disclosure

kkcuci may disclose personal data to law enforcement agencies, regulatory bodies or other authorised public authorities where we are legally compelled to do so, where disclosure is necessary to prevent fraud or financial crime, or where disclosure is necessary to protect the safety of individuals.

8.5 Business Transfers

In the event that kkcuci's business or a material part of its assets is acquired by a third party, personal data held in connection with the Platform may be transferred as part of that transaction. In such circumstances, the acquiring party would be required to honour the commitments in this Policy or notify affected users of any material changes.

9. Data Retention

9.1 kkcuci retains personal data only for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of the Account's active status and for a minimum of five years following permanent closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the relevant transaction.
• KYC documents: Retained for a minimum of five years following completion of the relevant verification or account closure, whichever is later.
• Support correspondence: Retained for three years following the resolution of the relevant matter.
• Analytics data: Retained in aggregated, anonymised form indefinitely; individual-level session data retained for up to 24 months.

9.2 When the applicable retention period expires, kkcuci will securely delete or irreversibly anonymise the relevant personal data unless further retention is required by a legal obligation that overrides this standard.

10. Security Measures

10.1 kkcuci implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and kkcuci's servers;
• Encryption at rest for sensitive personal data and KYC document stores;
• Role-based access controls limiting internal access to personal data to personnel with a documented operational need;
• Login anomaly detection to flag suspicious access attempts against Player Accounts;
• Regular internal security reviews of data handling processes.

10.2 While kkcuci takes these precautions seriously, no internet transmission or electronic storage method is completely secure. kkcuci cannot guarantee the absolute security of data transmitted to or stored on the Platform. Players are encouraged to use strong, unique passwords for their Accounts and to never share login credentials with any third party.

10.3 In the event of a data breach that poses a material risk to affected individuals, kkcuci will take prompt remediation steps and notify affected users in a timely manner via the email address registered to their Account.

11. Your Data Subject Rights

11.1 As a data subject, you hold the following rights in respect of personal data kkcuci processes about you. These rights are subject to applicable legal limitations and identity verification before kkcuci can act on any request:

Right of Access

You may request a copy of the personal data kkcuci holds about you. kkcuci will respond within a reasonable timeframe and will verify your identity before releasing any personal information.

Right to Rectification

If you believe that personal data kkcuci holds about you is inaccurate or incomplete, you may request correction. Minor corrections such as name spelling may be handled directly through Account settings or by contacting support.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the original processing purpose, where you have withdrawn consent and no other lawful basis exists, or where the data has been processed unlawfully. Please note that kkcuci may be required to retain certain data — particularly KYC records and transaction logs — to meet legal and regulatory obligations, notwithstanding a deletion request.

Right to Restrict Processing

You may request that kkcuci restrict active processing of your personal data while a rectification request is pending or while you contest the lawfulness of processing.

Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that kkcuci provide your personal data in a structured, commonly used machine-readable format.

Right to Object

You may object to processing based on kkcuci's legitimate interests. kkcuci will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based solely on your consent (such as receipt of promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact kkcuci using the details in Section 15. Requests will be acknowledged promptly and resolved within a reasonable period, typically within 30 days, subject to the complexity and number of outstanding requests.

12. Children and Minors

12.1 kkcuci's services are directed exclusively at adults aged 21 and above. The Platform employs age-verification measures during registration and KYC processes to identify and exclude underage users.

12.2 If kkcuci becomes aware that personal data has been collected from an individual under the age of 21 without appropriate consent, it will take immediate steps to delete that data and close the associated Account. Any balances associated with an underage Account will be handled in accordance with kkcuci's Terms and Conditions.

12.3 If you believe that a minor may have created an Account on kkcuci, please contact the support team immediately at [email protected] (plain text — not a clickable link).

13. International Data Transfers

13.1 kkcuci's primary user base is in Malaysia and its operational infrastructure is designed to serve the Malaysian market. However, some third-party service providers — including platform infrastructure, KYC verification and game studio partners — may be located in jurisdictions outside Malaysia.

13.2 Where personal data is transferred to a third-party processor in another jurisdiction, kkcuci takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements that impose obligations consistent with responsible international data handling standards.

13.3 By registering an Account on kkcuci, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia as described in this section, subject to the safeguards described above.

14. Amendments to This Policy

14.1 kkcuci reserves the right to update this Privacy Policy at any time. Revisions will be published on this page with an updated effective date. Where changes are material — such as the introduction of a new processing purpose, a new category of data collection or a change to data sharing arrangements — kkcuci will notify registered users via the email address associated with their Account.

14.2 Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revised version of this Policy, you should discontinue use of the Platform and may contact kkcuci to request Account closure.

14.3 We encourage you to review this Policy periodically to remain informed about how kkcuci protects your personal information. The date at the top of this page will always reflect when the most recent revision was made.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights described in Section 11, or wish to report a concern about how kkcuci handles personal data, please reach us through the following channels:

• Support email: [email protected] — displayed as plain text only; this address is not a clickable link.
• Live chat: Available 24 hours a day, 7 days a week via the Platform. Average response time: 3–5 minutes via live chat.

For formal data subject requests or legal correspondence regarding privacy matters, please contact us at the email address above and clearly identify your request in the subject line (e.g., "Data Access Request" or "Erasure Request"). kkcuci will verify your identity before processing any data subject request.

If you are not satisfied with how kkcuci has handled a privacy concern after raising it directly with us, you may seek independent guidance from a relevant data protection authority in your jurisdiction.