Privacy Policy m2cuci — Data Protection Malaysian Players

1. Personal Data We Collect

1.1 m2cuci collects several categories of personal information to provide a safe, fair, and high-quality service to all players. Our core principle is to collect only what is truly necessary and nothing more.

Account Registration Information

When you register a new account at m2cuci, we collect basic information such as your full name, email address, mobile phone number, date of birth, and chosen password. This information is required to verify your identity and keep your account secure from unauthorised access.

KYC Verification Information

1.2 As part of the Know Your Customer (KYC) process required for your first fund withdrawal, we may request a copy of a valid identity card (MyKad) or passport, proof of current address such as a utility bill or bank statement not exceeding three months old, and proof of ownership of the payment method used for deposit. These documents are processed securely and stored in an encrypted environment.

Financial Transaction Data

1.3 Every deposit and withdrawal transaction you make through the m2cuci platform is recorded, including the amount, date, time, payment method used, and transaction status. These records are required to process payments correctly, resolve disputes, and meet financial reporting requirements.

Gaming Activity Data

1.4 The m2cuci platform records data related to your gaming activity, including games played, wagering amounts, wins, session duration, and usage patterns. This data is used to provide technical support, detect unusual activity, and support our Responsible Gaming programme.

Technical & Device Information

1.5 When you access the m2cuci platform, our systems automatically record your IP address, web browser type, device type and operating system, pages visited, access time, and other technical log data. This information is used solely for security purposes, technical troubleshooting, and platform performance improvements.

2. How We Use Your Data

2.1 m2cuci uses the personal data collected for various legitimate and necessary purposes, all aimed at delivering the best experience to you as our valued player.

2.2 We will not use your data for automated profiling purposes that materially affect your rights without notifying you in advance and, where required, obtaining your consent.

3. Data Sharing and Disclosure

3.1 m2cuci does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we may need to share your data with trusted parties:

• Payment Service Providers — To process deposits and withdrawals via DuitNow, FPX, TNG eWallet, Boost, GrabPay, and other methods, we share the minimum required transaction data with trusted payment service providers.
• Game Software Providers — Third-party game providers operating within the m2cuci platform may receive the technical data necessary to ensure games function correctly.
• Law Enforcement Authorities — We may be required to disclose data to relevant authorities such as law enforcement or judicial bodies when mandated by law or court order.
• Identity Verification Services — Third-party KYC service providers used to verify your identity documents during registration and your first withdrawal.

3.2 All third parties we work with are bound by strict confidentiality agreements and are required to comply with data security standards equal to or higher than those we apply ourselves.

4. Data Security and Protection

4.1 The security of your personal data is an absolute priority for m2cuci. We continuously invest in sophisticated security infrastructure to ensure your information is always protected against unauthorized access, alteration, or loss.

4.2 The technical security measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and m2cuci's servers.
• Data-at-rest encryption for all data stored in our databases.
• Two-factor authentication (2FA) for account access and critical operations.
• 24/7 security monitoring by a dedicated cybersecurity team.
• Regular penetration testing to identify and address any system vulnerabilities.
• Strict access controls ensure that only authorized personnel can access players' personal data.

4.3 While we take all reasonable precautions, no security system is completely impenetrable. In the event of any material data security breach, we are committed to notifying affected players and the relevant authorities within the timeframe required by law.

5. Cookies and Tracking Technologies

5.1 The m2cuci platform uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored in your web browser when you visit our site.

5.2 We use several categories of cookies:

• Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies — Help us understand how players use the platform so we can improve our services.
• Functional Cookies — Store your preferences such as language, display settings, and login details so you do not have to re-enter them each time.

5.3 You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the m2cuci platform and your gaming experience.

6. Retention Period and Data Deletion

6.1 m2cuci retains your personal data for as long as needed to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Generally:

• Active account data is retained for as long as your account remains active and for a period of 7 years after account closure for legal compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with financial and tax legal requirements.
• Technical access log data is retained for a period of 12 months for security and troubleshooting purposes.
• KYC documents are retained for as long as the account is active and for a period of 5 years after account closure.

6.2 Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be personally associated with you.

7. Your Rights as a Player

7.1 Under the Malaysia Personal Data Protection Act 2010 and international privacy standards, you have the following rights regarding your personal data that we hold:

• Right to Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — You have the right to request correction of any inaccurate or incomplete data we hold.
• Right to Erasure — You may request deletion of your personal data, subject to legal obligations that prevent us from doing so.
• Right to Object to Processing — You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent — Where data processing is based on your consent, you may withdraw that consent at any time.

7.2 To exercise any of the above rights, please contact the m2cuci support team via live chat on the platform. We will process your request and respond within 14 working days from the date the request is received.

8. Protection of Children's Data

8.1 The m2cuci platform is restricted to individuals aged 21 and above. We do not knowingly collect personal data from individuals below the stipulated minimum age.

8.2 If we discover that we have collected data from someone who does not meet the minimum age requirement, we will immediately delete that data and close the account in question. If you believe your child has registered an account on our platform, please contact us immediately.

9. Third-Party Links and Services

9.1 The m2cuci platform may contain links to third-party websites or services such as game providers or payment providers. These links are provided solely for your convenience and do not imply that we endorse or are responsible for the privacy practices of those parties.

9.2 When you use third-party services integrated with the m2cuci platform such as DuitNow or FPX, the respective provider's privacy policy also applies. We encourage you to read the privacy policies of those parties before using their services.

10. Contact Us Regarding Privacy

10.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the m2cuci support team is ready to assist you.

10.2 You can reach us via live chat available 24 hours a day, 7 days a week on the m2cuci platform, or through our support email. We are committed to responding to every privacy-related enquiry seriously and as promptly as possible.

10.3 If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority.