Privacy Policy

This Privacy Policy ("Policy") is published by vip2cuci ("the Platform", "We", "Us", "Our"), the operator of the online gaming and sports betting platform accessible at https://vip2cuci.cam. This Policy describes how we collect, process, store, share, and protect personal data relating to individuals who access or use our Platform, whether as registered Players, prospective registrants, or general website visitors.

vip2cuci operates under international gaming licensing and is committed to responsible, lawful, and transparent data processing. This Policy is drafted in accordance with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) framework and Malaysian personal data protection considerations.

By accessing the vip2cuci Platform, creating a Player Account, or submitting personal information through any channel on our site, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, identification number, contact details, financial information, device identifiers, and behavioural data where such data can be used to identify an individual directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means vip2cuci, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of vip2cuci under a data processing agreement, including payment service providers and identity verification partners.
• "Data Subject" means any natural person whose Personal Data is processed by vip2cuci — including registered Players, website visitors, and support contact initiators.
• "Consent" means freely given, specific, informed, and unambiguous agreement by the Data Subject to the processing of their Personal Data for a specified purpose.
• "KYC" means Know Your Customer — the identity and address verification process required of all Players prior to withdrawal processing, conducted in accordance with anti-money laundering obligations.
• "Cookie" means a small text file placed on a user's device by a website server for purposes including session management, preference storage, and anonymised usage analytics.

vip2cuci collects Personal Data through multiple points of interaction: account registration, KYC submission, deposits and withdrawals, gameplay activity, customer support communications, and general website browsing. The categories of data we collect are as follows:

3.1 Registration & Account Data

Collected when you create a Player Account on the Platform:

3.2 Identity Verification (KYC) Data

Collected during the mandatory KYC verification process prior to withdrawal processing:

3.3 Financial Transaction Data

Collected in connection with deposits, withdrawals, and bonus transactions:

3.4 Gaming Activity Data

Generated automatically as you interact with Platform Services:

3.5 Technical & Device Data

Collected automatically from your device and browser session:

3.6 Communications Data

Collected when you contact our customer support team:

vip2cuci processes Personal Data for the following specific and documented purposes:

1. Account Creation and Management: To register your Player Account, authenticate your identity at login, maintain your account preferences, and provide access to Platform Services.
2. Identity Verification (KYC): To fulfil our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under our international gaming licence, including age verification to enforce our 21+ restriction.
3. Payment Processing: To facilitate deposits, process withdrawal requests, reconcile transactions, and detect and prevent fraudulent payment activity.
4. Platform Operations and Security: To monitor Platform usage, detect unusual or suspicious activity, enforce our Terms & Conditions, prevent prohibited conduct (including multi-accounting and bonus abuse), and maintain the technical security of the Platform.
5. Customer Support: To respond to enquiries, resolve disputes, provide technical assistance, and maintain a record of support interactions for quality and accountability purposes.
6. Responsible Gambling: To monitor gaming patterns for indicators of problem gambling behaviour, enforce self-exclusion orders, apply deposit and loss limits, and provide appropriate responsible gambling interventions where required.
7. Legal and Regulatory Compliance: To comply with applicable laws, regulations, gaming licence conditions, court orders, and lawful requests from regulatory and law enforcement authorities.
8. Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience, and product development.
9. Communications: To send transactional notifications (deposit confirmations, withdrawal approvals, security alerts), system maintenance notices, and, where you have given consent, promotional communications about vip2cuci offers and features.

vip2cuci does not use automated decision-making processes that produce legal or similarly significant effects in relation to individual Players without human oversight, except in limited fraud detection contexts where automated flag triggers are always reviewed by a member of our compliance team before action is taken.

vip2cuci relies on the following legal bases to process your Personal Data lawfully:

• Contract Performance: Processing of registration data, KYC data, financial transaction data, and gaming activity data is necessary for the performance of our contract with you as a registered Player on the Platform.
• Legal Obligation: Processing for KYC/AML compliance, record-keeping obligations under our gaming licence, and responses to lawful regulatory or judicial requests is required by law.
• Legitimate Interests: Processing for fraud prevention, Platform security, abuse detection, and Platform improvement is carried out on the basis of vip2cuci's legitimate business interests, balanced against your privacy rights. We conduct proportionality assessments for processing in this category.
• Consent: Processing for the purpose of sending promotional communications and for non-essential analytics cookies is conducted on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

vip2cuci does not sell, rent, or trade your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: To process deposits and withdrawals, we share necessary transaction data with our contracted payment processing partners, including providers facilitating Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and cryptocurrency transactions. These providers act as Data Processors under formal data processing agreements and are contractually prohibited from using your data for any purpose other than payment facilitation.
• Identity Verification Partners: To conduct KYC verification, we share identity documents and personal information with contracted third-party verification services. These services process data solely for verification purposes and are subject to strict data handling obligations.
• Game and Technology Providers: Some gaming activity data (game session identifiers, bet outcomes) may be shared with our licensed game providers for the purpose of game delivery, dispute resolution, and audit trail maintenance. Player names and financial details are not shared with game providers.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to gaming licensing authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so under our licensing obligations or by court order.
• Professional Advisors: We may share Personal Data with legal counsel, auditors, or compliance consultants in connection with the operation and oversight of our Platform, subject to confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of business operations involving vip2cuci, Player data may be transferred to a successor entity, subject to the same privacy protections set out in this Policy.

vip2cuci uses cookies and similar tracking technologies to provide, maintain, and improve Platform functionality. The categories of cookies we use are as follows:

vip2cuci does not use advertising or third-party tracking cookies. No cross-site profile building or behavioural advertising takes place through the Platform. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect Platform functionality.

vip2cuci retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to mandatory retention obligations under applicable law and our gaming licence conditions.

• Active Account Data: Retained for the duration of your Player Account plus five (5) years following account closure, in compliance with our AML/CTF record-keeping obligations.
• KYC Documentation: Retained for five (5) years from the date of verification, or five (5) years from account closure, whichever is later. This retention period is mandatory under international AML frameworks applicable to licensed gaming operators.
• Financial Transaction Records: Retained for five (5) years from the date of the transaction, consistent with standard financial record-keeping obligations for licensed gaming operators.
• Customer Support Communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until you withdraw your consent, plus one (1) year following withdrawal as an audit record of consent and withdrawal.
• Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely, as it cannot be linked to individual Data Subjects.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period plus five (5) years, to maintain an auditable record of the exclusion and prevent re-registration during the exclusion period.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that ensures permanent non-identification. Deletion requests submitted before the expiry of mandatory retention periods will be assessed individually, and data subject to legal hold will not be deleted until the obligation expires.

vip2cuci employs a layered, defence-in-depth approach to data security. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and vip2cuci servers is encrypted using TLS 1.2 or higher (256-bit encryption). HTTPS is enforced across all Platform pages.
• Encryption at rest: Sensitive personal data stored on our systems, including KYC documents and payment references, is encrypted at rest using AES-256 standard encryption.
• Password security: Account passwords are stored exclusively as cryptographic hashes using a secure, salted hashing algorithm. vip2cuci personnel cannot access or recover your plaintext password under any circumstances.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with data access undergo background checks and are bound by confidentiality obligations.
• Penetration testing: Our Platform undergoes regular security assessments and penetration testing by qualified third-party security professionals.
• Incident response: We maintain a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify affected individuals and relevant authorities in accordance with applicable regulatory timelines.

As a Data Subject, you have the following rights in relation to your Personal Data held by vip2cuci. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14.

We will not charge a fee for reasonable access or rights requests. For manifestly unfounded or excessive requests, we reserve the right to charge a reasonable administrative fee or decline to act, with written explanation.

As an internationally licensed platform serving Malaysian players, vip2cuci may transfer Personal Data to servers, service providers, or operational entities located outside Malaysia. Such transfers may include data hosted in data centres in Southeast Asia, Europe, or other regions where our contracted technology and service providers operate.

Where Personal Data is transferred to jurisdictions that do not provide an equivalent level of data protection to that applicable in Malaysia, vip2cuci implements appropriate safeguards, including:

• Contractual clauses requiring the recipient to process data in accordance with standards equivalent to those applicable to vip2cuci;
• Selection of service providers that are certified under recognised international data security frameworks; and
• Limitation of transferred data to the minimum necessary for the contracted service purpose.

By using the vip2cuci Platform, you acknowledge that your Personal Data may be processed outside your country of residence in accordance with the safeguards described in this Policy.

The vip2cuci Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. Our age verification procedures, conducted during the KYC process, are specifically designed to prevent underage individuals from accessing Platform Services.

If vip2cuci becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately close the relevant Account, delete all associated Personal Data, and take steps to prevent re-registration by the same individual.

vip2cuci reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, operational practices, or the range of services offered on the Platform. All amendments will be posted on this page with a revised "Last Updated" date.

Where amendments are material — meaning they significantly alter the nature, scope, or basis on which we process your Personal Data — vip2cuci will provide notice to registered Players via an in-platform notification upon next login, with a minimum of seven (7) days' notice prior to the amendment taking effect.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you should cease using the Platform and contact our support team to arrange Account closure, following which your Personal Data will be retained only as required by mandatory obligations.

vip2cuci has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations and handling data subject requests. For any query, concern, or formal request relating to this Privacy Policy or the processing of your Personal Data, please contact us through the channels below.

All data-related communications are handled with strict confidentiality. We aim to acknowledge all data subject requests within five (5) business days and to provide a substantive response within thirty (30) calendar days, or within such extended period as may be required for complex requests (with notice to you within the initial 30-day window).

• Email — Data Protection Enquiries: [email protected] (Subject line: "Data Protection Request — [Your Username]")
• Live Chat: Available 24/7 on the vip2cuci Platform. For formal DPO requests, please request escalation to the Data Protection team.
• Languages: Data subject requests may be submitted in English, Bahasa Melayu, or Mandarin Chinese. Formal legal correspondence must be in English.