Mrcuci88 Privacy Policy – Personal Data Protection for Malaysian Players

Mrcuci88 ("we", "the platform", or "mrcuci88.click") is the data controller responsible for processing the personal information of players who register and use our online casino platform. This Privacy Policy applies to all users of the mrcuci88 platform based in Malaysia.

We understand that your trust is our most valuable asset. Malaysians today are increasingly aware of their data privacy rights — and rightly so. We fully support this awareness and want to make sure you know exactly what happens to your information when you entrust it to us by joining the mrcuci88 platform.

This Privacy Policy covers:

• The types of personal information we collect from mrcuci88 players.
• The purpose and legal basis for processing that data.
• Parties that may receive or access your data within a limited and permitted context.
• The security measures we take to protect your data.
• Your rights as a data owner and how to exercise them.

Mrcuci88 collects your personal information through three main channels: information you provide directly, information generated automatically as you use the platform, and in limited cases, information from legitimate third-party sources.

Information you provide directly:

• During registration: Full name, Malaysian mobile number, email address, date of birth, and account password.
• During identity verification (KYC): A copy of your MyKad or passport, a selfie for facial verification, and proof of address such as a utility bill or bank statement.
• During financial transactions: Information related to the payment methods you use — including the phone number linked to your Touch 'n Go eWallet or GrabPay, your DuitNow ID, or the FPX details required to process your deposits and withdrawals.
• When contacting support: The content of your communications with the mrcuci88 support team, including chat logs, emails, and call records where applicable.

Automatically collected information:

• IP address and approximate location information derived from IP.
• Device type, operating system, browser version, and other technical specifications.
• Gaming activity history, including games played, bets placed, wins and losses, as well as the time and duration of each gaming session on mrcuci88.
• Complete financial transaction logs including deposits, withdrawals, and bonus history.
• Cookie data and tracking technologies as described in section 8 of this document.

Mrcuci88 uses collected personal information solely for legitimate purposes that are directly related to providing our online casino services to Malaysian players. Below is a summary of how data is used:

Mrcuci88 does not use players' personal data for any purpose outside the list above without first obtaining fresh consent from you.

Every personal data processing activity carried out by mrcuci88 is grounded in at least one valid legal basis, as follows, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: When you register a mrcuci88 account and agree to this Privacy Policy, you give your consent for us to process your data for the stated purposes. You may withdraw this consent at any time, though doing so may affect our ability to continue providing services to you.
• Contract Performance: Much of our data processing is necessary to fulfil the contractual obligations between mrcuci88 and you as a player — for example, processing a RM50 deposit you make via DuitNow, or crediting winnings to your account after a baccarat session.
• Legal Obligation: Certain data processing activities — particularly those related to KYC and anti-money laundering prevention — are legal obligations that mrcuci88 must comply with and has no discretion to opt out of.
• Legitimate Interest: mrcuci88 processes certain data on the basis of the platform's legitimate interests — specifically to prevent fraud, maintain system security, and improve the user experience — provided these interests do not override your fundamental right to privacy.

Mrcuci88 does not sell, rent, or trade players' personal information to any third party for marketing or commercial purposes. However, there are limited situations where we need to share data with third parties in order to provide our services to you:

• Payment Service Providers: To process your deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), we are required to share the minimum necessary transaction data with the relevant payment gateway. These providers maintain their own privacy and security policies and are subject to international payment security standards (PCI DSS).
• Game Providers: Game providers that operate Live Casino and RNG games within the mrcuci88 platform may receive the minimum session data required to run the games correctly. This data does not include payment information or players' full identity details.
• Regulatory Authorities: mrcuci88 may be required to disclose player data to Malaysian regulatory authorities or law enforcement agencies where there is a valid court order, a criminal investigation, or applicable legal compliance requirements such as AML (Anti-Money Laundering) procedures.
• Analytics & Security Services: We use selected third-party analytics tools to help detect fraud and improve the performance of the mrcuci88 platform. Data used for this purpose is anonymised or pseudonymised wherever possible.

All third parties who receive mrcuci88 player data are contractually obligated to protect that data to a standard at least equivalent to our own, and may only use it for the specific purposes authorised.

Mrcuci88 continually invests in high-grade security infrastructure to ensure our players' personal data remains protected at all times. The technical and organisational security measures we have implemented include:

• Data Encryption in Transit: All communications between your browser or app and mrcuci88 servers are protected by TLS 1.3 with 256-bit SSL certificates. This ensures that no data can be intercepted or read while in transit over the internet.
• Data Encryption at Rest: Sensitive data stored in the mrcuci88 database — including identity information and financial details — is encrypted using the AES-256 algorithm, ensuring the data remains unreadable even in the event of a physical server breach.
• Multi-Layered Access Control: Access to mrcuci88 internal systems containing player data is granted only to staff who require it to carry out their job responsibilities. Every access event is automatically logged and audited.
• Two-Factor Authentication: All mrcuci88 internal systems require two-factor authentication for access. Players are also encouraged to enable 2FA on their accounts via the security settings.
• 24/7 Security Monitoring: mrcuci88's cybersecurity team monitors all system activity around the clock using real-time threat detection tools, enabling us to identify and respond to any security threat before it can impact our players.
• Regular Security Testing: mrcuci88 conducts regular penetration testing and security audits by independent security specialists to identify and address any vulnerabilities in our systems before they can be exploited.

While we take all reasonable steps to protect your data, no system is 100% immune to the ever-evolving landscape of cyber threats. We are committed to notifying affected players within a reasonable timeframe should any material data breach involving their personal information occur.

Mrcuci88 retains players' personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your mrcuci88 account remains active, all associated data is retained to enable continuous service delivery, settle transactions, and meet ongoing legal obligations.
• Data After Account Closure: After an account is closed at your request or by mrcuci88, certain data may be retained for an additional period depending on the following requirements:
  • Financial and transaction records: minimum 7 years, in compliance with Malaysian tax and AML legislation.
  • KYC documents (identity verification): minimum 5 years after account closure.
  • Customer support communication logs: 3 years.
  • Security log data: 2 years.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent or request deletion, whichever comes first.

Once the retention period has lapsed, data that is no longer required will be securely deleted or anonymised in accordance with mrcuci88's established data disposal procedures.

Mrcuci88 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how players use our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core mrcuci88 platform functions such as maintaining your login session, saving language preferences, and securing transactions. These cookies cannot be disabled without seriously affecting platform functionality.
• Performance Cookies: Collects information on how players use the mrcuci88 platform — including pages visited, time spent, and any errors encountered. This data is used in aggregate form to improve the performance and user experience of our platform.
• Functional Cookies: Allows the mrcuci88 platform to remember your preferences — such as favourite games, display settings, and other choices — to deliver a more personalised experience.
• Analytics Cookies: Helps us understand general usage patterns to improve the platform. Data is processed in anonymised form and cannot be used to directly identify individual players.

You can manage your cookie preferences through your device's browser settings. However, disabling essential cookies may affect the functionality of the mrcuci88 platform and your gaming experience. For more information on managing cookies in your browser, please refer to the help documentation for the browser you are using.

As a mrcuci88 player, you have important rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 and our privacy policy:

Mrcuci88 maintains an absolute zero-tolerance policy against the use of our platform by minors. Our platform is designed exclusively for adults aged 18 and above.

• Mrcuci88 does not knowingly collect or process any personal data from individuals under the age of 18.
• If we become aware or confirm that personal data belonging to a child or minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.
• Parents or guardians who believe their child may have registered an account with mrcuci88 should contact us immediately at support@mrcuci88.click so that appropriate action can be taken without delay.

Mrcuci88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle data.

When material amendments are made to this Privacy Policy:

• The "Updated" date at the top of this document will be revised to reflect the latest version.
• A notice of significant changes will be displayed on the mrcuci88 platform upon your next login.
• For highly material changes that significantly affect your privacy rights, we will send a notification to the email address registered to your account.

Continued use of the mrcuci88 platform after an amendment takes effect constitutes acceptance of the updated policy. We encourage all players to review this page periodically.

If you have any questions, concerns, or complaints regarding how mrcuci88 handles your personal data, or if you wish to exercise any of the privacy rights described in this policy, we welcome you to get in touch with us.

• Data Protection Email: support@mrcuci88.click — please include "Data Privacy Inquiry" in the subject line.
• Live Chat: Available 24/7 within the mrcuci88 platform — select the "Privacy & Data" category when starting a chat session.
• Response Time: Data privacy enquiries will be responded to within 5 to 10 business days. More complex requests, such as full data access, may take up to 30 business days.

If you are not satisfied with how mrcuci88 has handled your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.