CuciKiss Privacy Policy for Malaysian Players

1Definitions and Scope

In this Privacy Policy, “personal data” means information that identifies a person or can reasonably be associated with an identifiable person. “Processing” includes collecting, recording, organising, reviewing, using, disclosing, securing, retaining and deleting information. “Services” means the CuciKiss website, player account, casino games, sportsbook, payment functions, promotions and support channels.

This Privacy Policy applies to information processed when you browse CuciKiss, open an account, complete KYC, deposit through Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, use a Malaysian bank account, place a wager or contact CuciKiss support.

2Information CuciKiss Collects

CuciKiss collects information necessary to administer accounts, protect payments, meet verification requirements and provide a stable gaming experience. The precise information collected depends on the services you use and the verification status of your CuciKiss account.

CuciKiss may also retain messages submitted through on-site live chat, account complaints, transaction enquiries and records relating to fraud prevention or self-exclusion. Please provide only information relevant to your request.

3How Personal Data Is Collected

Most information is collected directly from you when you register, verify your identity, configure account settings, make a payment or communicate with CuciKiss. Other information is generated automatically when you use CuciKiss, such as login timestamps, device records and betting transactions.

CuciKiss may receive limited information from payment providers, identity verification services, banks or e-wallet partners where necessary to confirm a transfer, investigate an incorrect payment or verify that a payment method belongs to the registered player. For example, CuciKiss may receive a transaction reference from Maybank, CIMB, Public Bank, Hong Leong, DuitNow or FPX.

4Purposes of Data Processing

CuciKiss may process personal data for the following purposes:

• creating, maintaining and securing a CuciKiss account;
• confirming that a player is aged 21 or above;
• performing identity, payment ownership and source-of-funds checks;
• processing MYR deposits, winnings and withdrawal requests;
• settling casino games, live dealer sessions and sports wagers;
• providing 24/7 support and resolving player complaints;
• detecting fraud, duplicate accounts, collusion and payment abuse;
• applying deposit limits, cooling-off periods and self-exclusion;
• improving CuciKiss website performance and service stability;
• administering eligible bonuses, cashback and VIP rewards; and
• meeting applicable legal, regulatory, audit or record-keeping obligations.

CuciKiss does not sell personal information. CuciKiss does not use a MyKad image or payment record for an unrelated advertising purpose.

5Legal and Operational Grounds

Depending on the activity and applicable requirements, CuciKiss may process information because it is necessary to provide requested services, fulfil the player agreement, comply with a legal obligation, protect legitimate security interests or act with the player's consent.

Where consent is the appropriate basis, you may withdraw it for future processing. Withdrawal does not affect processing already completed and may not apply where CuciKiss must preserve information for fraud prevention, payment reconciliation, self-exclusion enforcement or another lawful requirement.

6Payments and Financial Information

CuciKiss processes payment information to confirm deposits and send approved withdrawals. Full card or online banking credentials should never be entered into an ordinary CuciKiss support conversation. Payment providers may process information under their own security procedures when a player uses Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or a Malaysian bank transfer.

CuciKiss generally retains payment references, status records, amounts and ownership confirmation rather than unrestricted access credentials. Cryptocurrency deposits may create public blockchain records outside the direct control of CuciKiss.

7Disclosure of Personal Data

CuciKiss may disclose only the information reasonably required to carefully selected service providers that support identity verification, payment processing, hosting, cybersecurity, customer service, game settlement or professional advice. These recipients are expected to handle CuciKiss data securely and only for the authorised purpose.

CuciKiss may also disclose information where required by applicable law, a valid authority request or legal proceedings, or where disclosure is reasonably necessary to protect players, investigate fraud, enforce the Terms & Conditions or defend legal rights.

CuciKiss does not publish individual betting histories or reveal a player's identity in promotional materials without an appropriate basis. Jackpot or testimonial references should be anonymised unless the player has agreed to identification.

8Cookies and Technical Records

CuciKiss may use essential cookies and similar local technologies to keep a player signed in, preserve security settings, remember language preferences and maintain stable navigation. Technical records may also help CuciKiss identify repeated failed logins, unusual devices or malicious traffic.

Browser settings can usually remove or block cookies. However, disabling essential storage may prevent account login, payment functions or casino sessions from operating correctly. CuciKiss does not use technical information to bypass a player's security settings.

9Data Security

CuciKiss uses technical and organisational safeguards intended to protect personal data against unauthorised access, accidental loss, misuse or alteration. Measures may include encrypted connections, access controls, account monitoring, credential protection, restricted administrative privileges and secure backup procedures.

No internet system can be guaranteed completely secure. Players must use a strong, unique password and avoid sharing login codes. If you believe that your CuciKiss account has been accessed without permission, contact on-site support promptly and change your credentials.

If a data incident presents a material risk, CuciKiss will investigate, take reasonable containment steps and provide notices where required by applicable rules.

10Data Retention

CuciKiss retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods depend on the nature of the record, account status, payment history, dispute risk, security needs and applicable legal requirements.

Closing a CuciKiss account does not always result in immediate deletion. Transaction, KYC, self-exclusion and fraud-prevention records may need to be retained after closure. When information is no longer required, CuciKiss may securely delete it or anonymise it so that it no longer identifies the player.

11Your Privacy Rights

Subject to applicable law and verification of identity, you may ask CuciKiss for access to personal data associated with your account. You may also request correction of inaccurate or incomplete information and ask questions about how CuciKiss processes your records.

Depending on the circumstances, you may be able to object to particular processing, withdraw consent, request restriction or ask for deletion. These rights are not absolute. CuciKiss may retain information where required to complete a payment, investigate abuse, enforce self-exclusion, resolve a dispute or satisfy a lawful record-keeping obligation.

To protect privacy, CuciKiss may request identity confirmation before acting on a data request. CuciKiss aims to respond within a reasonable period and will explain if additional time or information is required.

12Responsible Gambling and Sensitive Records

CuciKiss may process information relating to deposit limits, cooling-off periods, self-exclusion and indicators of gambling-related harm. This information is used to apply player protection settings, prevent excluded persons from reopening accounts and support the CuciKiss responsible gambling programme.

Access to these records is limited to personnel who require the information for player protection, support, security or compliance work. Further information about available controls can be found on the Responsible Gambling page.

13Children and Age Verification

CuciKiss is not directed at children or persons under 21 years old. CuciKiss may request age-verification documents and suspend an account where age cannot be confirmed. If CuciKiss discovers that an ineligible minor has provided information, the account will be closed and the information handled in accordance with applicable requirements.

14International Processing

Some technology or game-service operations may involve processing outside Malaysia. Where personal data is transferred, CuciKiss seeks to use reasonable contractual, organisational and security measures appropriate to the information and service involved.

A transfer does not permit a provider to use CuciKiss player data for unrelated purposes. CuciKiss limits disclosures to information needed to deliver the relevant service.

15Policy Updates and Contact

CuciKiss may update this Privacy Policy to reflect changes in services, security practices, payment methods or applicable requirements. Material updates will be published on this page with a revised effective date. Players should review the CuciKiss Privacy Policy periodically.

Questions, correction requests and privacy concerns may be submitted through CuciKiss on-site live chat or by using the plain-text website email displayed in the footer. Please include enough information to identify the relevant account or transaction, but never send a password or one-time security code.

For general account guidance, visit the FAQ. CuciKiss will review reasonable privacy enquiries and may ask for identity verification before discussing protected account information.