13cuci Privacy Policy – Our Protection Commitment Your Personal Information

13cuci ("we", "the platform") is an online entertainment platform operating exclusively for the Malaysian market. We understand that your trust in us depends not only on the quality of the games and services we offer, but also on how we handle the personal information you entrust to us.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (Act 709), the principal law governing the collection and use of personal data in Malaysia. We are committed to ensuring that every aspect of how we handle your data complies with the provisions of this law and relevant international data protection standards.

This document forms part of the overall agreement between you and 13cuci, together with Terms & Conditions our platform. It is important that you read and understand both documents before registering for or using any 13cuci services.

13cuci collects only the data necessary to provide the services you request and to ensure the platform operates safely and fairly. The following are the categories of data we collect:

Basic Personal Data:

• Full name as shown on your official Malaysian identity document
• An active Malaysian phone number
• Valid email address
• Date of birth (for age verification, minimum 18 years old)
• National identity card number (MyKad) or passport number for KYC purposes

Financial Data:

• E-wallet account numbers (Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost) registered for deposits and withdrawals
• Malaysian bank account details for FPX transactions, including Maybank2u and CIMB Clicks
• Records of deposit and withdrawal transactions in Malaysian Ringgit (RM)
• Betting history and gaming activity on the platform

Technical Data:

• The IP address of the device used to access the platform
• Device type, operating system, and web browser
• Access timestamps and activity logs on the platform
• Cookie data and session identifiers
• General geographic location based on IP address (country/region)

Your personal data is collected through various methods as you interact with the 13cuci platform:

• Account Registration: Basic data such as your name, phone number, and email address is collected directly when you fill in the registration form.
• KYC Verification: Identity documents such as MyKad or passport are collected when you undergo identity verification, particularly prior to processing large withdrawal amounts.
• Financial Transactions: Payment method details and transaction records are collected automatically each time you make a deposit or withdrawal via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, or FPX.
• Platform Usage: Technical data such as IP addresses, device types, and activity logs are collected automatically as you browse and use the 13cuci platform.
• Cookies and Tracking Technologies: We use session cookies and persistent cookies to enhance the user experience and analyse platform usage patterns on an aggregate basis.
• Communication with Support: Any communications you send to the 13cuci customer support team via live chat or email will be stored as part of your account records.

13cuci uses your personal data solely for purposes related to the provision and improvement of our platform services. Below are the specific purposes for each type of data use:

• Account Management: To create, verify, and manage your member account, including the login process and two-factor security authentication.
• Transaction Processing: To securely process deposits and withdrawals via your preferred Malaysian local payment methods, and to maintain financial records required for legal compliance.
• Identity Verification (KYC): To verify that every member meets the minimum age requirement of 18 years and to prevent identity fraud or money laundering.
• Platform Security: To detect and prevent fraudulent activity, hacking attempts, multi-account usage, or behaviour that violates our terms of use.
• Customer Support: To enable the 13cuci support team to provide effective assistance whenever you encounter any issues with your account or transactions.
• Service Communications: To send important notifications related to your account — such as deposit confirmations, withdrawal approvals, or security alerts — via email or SMS.
• Platform Improvements: To analyse usage patterns in aggregate in order to improve the interface quality, speed, and overall experience of the 13cuci platform.
• Marketing Communications: To send information about relevant promotions, bonuses, and special offers — only if you have given consent to receive such communications. You may withdraw this consent at any time.

13cuci does not sell, rent, or commercialise members' personal data to any third party for marketing or any other purposes unrelated to the provision of platform services.

That said, there are limited situations where 13cuci may need to share your data with certain parties:

• Licensed Payment Providers: Data required to process transactions (such as e-wallet or FPX details) is shared with licensed payment providers that comply with PCI DSS security standards. This information is used solely for payment processing purposes.
• Technical Service Providers: A small number of third-party technical service providers may have limited access to your data in the context of hosting, cybersecurity, or platform analytics services. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: 13cuci may disclose personal data to relevant authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or courts where required by law, court order, or valid regulatory process.
• Fraud Prevention: In cases involving identity fraud, money laundering, or financial crime, 13cuci reserves the right to share the required information with law enforcement authorities.

In all of the situations above, 13cuci ensures that only the minimum necessary data is shared, and all receiving parties are bound by equivalent data protection obligations.

The security of members' personal and financial data is 13cuci's top technical priority. We continuously invest in security infrastructure to ensure your data is protected against all threats.

Technical Security Measures We Use:

• 256-bit SSL Encryption: All communications between your web browser and 13cuci's servers are encrypted using 256-bit TLS/SSL protocol — the same security standard used by major banking institutions in Malaysia.
• Stored Data Encryption: Sensitive data such as passwords and financial information is stored in databases with additional encryption. Passwords are never stored in plain text.
• Threat Detection System: The 13cuci platform is equipped with a security monitoring system that operates 24 hours a day to detect and prevent any unauthorised access attempts, cyberattacks, or suspicious activity.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their accounts for an added layer of security beyond their regular password.
• Internal Access Controls: Access to member personal data within 13cuci's internal systems is restricted and governed by a strict need-to-know basis. Staff with access are subject to data security training and binding confidentiality agreements.
• Regular Security Audits: 13cuci's security infrastructure undergoes periodic independent third-party audits to identify and address any potential vulnerabilities.

13cuci retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

• Active Account Data: For as long as your account remains active with 13cuci, the personal data associated with that account will be retained and kept up to date.
• After Account Closure: When your account is closed voluntarily or by 13cuci, certain data will be retained for the minimum period required by law — including financial records, which must be kept for at least 7 years in accordance with Malaysia's accounting and tax requirements.
• Fraud Detection Records: Data related to fraud investigations or terms violations may be retained for an extended period where required for legal purposes or platform protection.
• Technical Logs: Technical activity and access logs are retained for a maximum of 90 days, after which they are automatically deleted unless there is a security or legal requirement to retain them for longer.
• Communication Data: Communication records with the customer support team are retained for 24 months from the date of the last interaction.

Once the designated retention period has elapsed, your data will be securely deleted from our systems using industry-standard data deletion methods.

Under the Personal Data Protection Act 2010 (Act 709) of Malaysia and 13cuci's privacy policy, you have the following rights regarding your personal data:

All data rights requests will be processed within 21 business days. 13cuci reserves the right to decline requests that are found to interfere with legal data retention requirements or ongoing fraud investigations.

The 13cuci platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. They cannot be disabled as they are essential for the platform to operate correctly.
• Preference Cookies: These cookies store your preferences such as language, display settings, and marketing choices so they do not need to be reconfigured each time you visit.
• Analytics Cookies: We use analytics cookies to understand how members use our platform in aggregate — such as which pages are visited most frequently and how long typical sessions last. This data is used to improve the platform and is not linked to any specific individual.
• Security Cookies: These cookies help our fraud detection system identify suspicious sessions or unauthorised access attempts.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of the 13cuci platform. For more information on managing cookies, refer to your web browser's help documentation.

The 13cuci platform does not contain links to third-party websites unrelated to our services. All content and links within the platform lead exclusively to internal 13cuci pages.

For payment processing, you will interact with the payment interfaces of third-party providers such as Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or your bank's FPX system. Your interactions with these payment interfaces are governed by the respective payment provider's own privacy policy, which is separate from 13cuci's Privacy Policy.

13cuci is not responsible for the privacy practices of third-party payment providers, although we only work with providers that are licensed and meet the security standards set by Bank Negara Malaysia.

13cuci reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data handling practices, current legal requirements, or platform service improvements.

Any material amendments — that is, changes that significantly affect how we handle your data — will be communicated to members via their registered email address or a prominent notice within the platform before the changes take effect. Amendments that are purely technical or editorial in nature may not be actively notified.

It is your responsibility to review this page periodically. The date of the last update is always displayed at the top of this document. Continued use of the 13cuci platform following any amendments constitutes acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding how 13cuci handles your personal data, we encourage you to contact us directly before escalating to any external authority.

• Privacy Email: privacy@13cuci.com – for all enquiries relating to personal data, data access requests, or privacy complaints.
• General Customer Support: support@13cuci.com – for account issues and general enquiries.
• Live Chat: Available 24 hours a day, 7 days a week through the 13cuci platform for immediate assistance.

All privacy complaints received will be thoroughly investigated, and you will receive a response within 14 business days. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body appointed under the Personal Data Protection Act 2010 (Act 709).