Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by 1000cuci ("we", "us", "our", "the Operator", "the Platform"), the operator of the online gaming and sports betting services accessible at https://1000cuci.cam ("the Website"). The Policy describes how 1000cuci collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Website and its associated services ("you", "the User", "the Player").

1000cuci is committed to protecting the privacy of all Users in accordance with applicable data protection frameworks under international licensing standards. Our approach to data privacy is grounded in the principles of purpose limitation, data minimisation, storage limitation, accuracy, integrity, confidentiality, and accountability.

By registering an account, accessing the Website, or using any feature of the 1000cuci platform — including placing wagers, making deposits via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, or any other supported payment channel — you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Personal Data We Collect

1000cuci collects only the personal data that is necessary for the lawful provision of its Services, compliance with applicable licensing obligations, and the delivery of a safe, functional platform experience. The categories of personal data we collect include the following:

3.1 Account Registration Data

When you create an account on 1000cuci, we collect:

• Full legal name
• Date of birth (for age verification — users must be 21 years or older)
• Residential address, including city (e.g. Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address and mobile phone number
• Chosen username and encrypted account credentials
• Preferred language and currency preferences

3.2 Identity Verification (KYC) Data

To fulfil our age verification and anti-money laundering obligations under our international operating licence, we collect the following KYC documentation from all Players seeking to make withdrawals:

• Scanned or photographed copy of a valid Malaysian national identity document (MyKad, Driver's License, or Passport)
• Proof of residential address dated within the preceding three months (utility bill, bank statement, or tenancy agreement)
• Selfie photograph holding the submitted identity document
• Where required for source-of-funds verification: payment method confirmation such as a screenshot of a Maybank, CIMB, or Touch 'n Go eWallet transaction

3.3 Financial Transaction Data

We maintain records of all financial transactions processed through your 1000cuci account, including:

• Deposit amounts, timestamps, and associated payment method identifiers (e.g. last four digits of a bank card, or e-wallet account reference)
• Withdrawal requests, amounts, processing times, and destination payment method references
• Bonus credit allocations, wagering records, and promotion participation history
• Currency denomination (primarily MYR / Malaysian Ringgit) and any applicable conversion data for cryptocurrency deposits

3.4 Gaming Activity Data

We collect detailed records of your activity on the 1000cuci platform for operational, regulatory, and responsible gambling purposes. This includes game session logs, wager amounts and outcomes, sports betting market selections, live casino table participation records, and session duration timestamps.

3.5 Technical & Device Data

When you access the Website, we automatically collect certain technical data including:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Referring URL and on-site navigation path
• Session duration and page interaction metrics
• Cookie identifiers and similar tracking technologies (see Section 10)

3.6 Customer Support Communications

When you contact 1000cuci via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and the resolution outcome — for quality assurance, dispute resolution, and compliance purposes.

How We Collect Personal Data

1000cuci collects personal data through the following means:

Purposes of Data Processing

1000cuci processes your personal data only for specific, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:

• Account management: creating and maintaining your 1000cuci player account, verifying your identity and age, and managing account security settings.
• Service delivery: enabling you to access and use all features of the Platform, including gaming, betting, deposits, and withdrawals.
• Payment processing: facilitating deposits and withdrawals via supported Malaysian payment methods and cryptocurrency channels.
• Regulatory compliance: fulfilling age verification, KYC, and anti-money laundering obligations required under our international operating licence.
• Responsible gambling: monitoring gaming activity to identify patterns that may indicate problem gambling behaviour, and administering responsible gambling tools such as deposit limits and self-exclusion.
• Customer support: responding to your enquiries, resolving disputes, and providing technical assistance in English, Bahasa Melayu, and Mandarin.
• Platform improvement: analysing aggregated usage data to improve Platform performance, user experience, and game catalogue curation.
• Marketing communications: sending you relevant promotional offers and platform updates, where you have provided consent and where applicable opt-out mechanisms are available.
• Fraud prevention: detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, and money laundering.
• Legal obligations: complying with applicable legal requirements, regulatory requests, or court orders affecting the Operator.

Legal Basis for Processing

1000cuci relies on the following legal grounds for processing your personal data, which reflect internationally recognised data protection principles:

• Contractual necessity: processing required to fulfil our obligations under the agreement formed when you register a 1000cuci account — including delivering gaming services, processing payments, and providing customer support.
• Legal obligation: processing required to comply with our regulatory and licensing duties, including KYC verification and AML record-keeping obligations.
• Legitimate interests: processing necessary for the Operator's legitimate business interests — such as fraud detection, platform security, and aggregated analytics — where those interests are not overridden by your fundamental rights.
• Consent: processing for optional purposes such as marketing communications, where you have provided freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time.

Data Sharing & Disclosure

1000cuci does not sell your personal data to third parties. We do not share your personal data with external organisations for their own independent marketing purposes. Your data is disclosed to third parties only in the following limited and necessary circumstances:

• Payment service providers: transaction data is shared with Malaysian payment processors — including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Connect — solely for the purpose of executing your requested financial transactions.
• KYC and identity verification providers: identity document data is shared with licensed third-party verification providers operating under data processing agreements that bind them to equivalent data protection standards.
• Cloud infrastructure and hosting providers: Platform data is hosted on secure third-party cloud infrastructure. These providers act as data processors under contractual obligations and do not have access to your data for any purpose other than providing infrastructure services.
• Fraud prevention and AML services: limited data may be shared with fraud prevention networks and AML compliance tools to detect and prevent financial crime.
• Legal and regulatory authorities: where required by a valid legal obligation, court order, or regulatory request, the Operator may disclose personal data to relevant authorities. We will, where legally permissible, notify you of such requests.
• Corporate transactions: in the event of a merger, acquisition, or sale of the Operator's business assets, your personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

Data Retention

1000cuci retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

At the end of the applicable retention period, personal data is securely destroyed or anonymised in accordance with our internal data lifecycle procedures. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

1000cuci implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the 1000cuci platform.
• Encryption at rest for sensitive personal data and KYC documentation stored on our servers.
• Strict role-based access controls ensuring that only authorised personnel with a verified operational need can access identifiable player data.
• Two-factor authentication (2FA) availability for all Player accounts, and mandatory 2FA for internal administrative access to player data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Segregated player fund accounts to ensure financial data is isolated from operational systems.
• Documented incident response procedures for containing and reporting data security breaches in accordance with applicable notification requirements.

Cookies & Tracking Technologies

The 1000cuci Website uses cookies and similar tracking technologies to operate correctly, remember your preferences, and collect analytical data that helps us improve the platform experience. By continuing to use the Website, you consent to the use of cookies as described in this section.

10.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the Website to function. These include session authentication cookies that keep you logged in during a gaming session. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language setting (English, Bahasa Melayu, or Mandarin), preferred currency display (MYR), and responsible gambling settings such as deposit limits you have set.
• Analytical cookies: Collect anonymised data on how visitors use the Website — including pages visited, session duration, and interaction patterns — to help us identify areas for improvement. Data from analytical cookies is processed at an aggregate level and does not identify individual users.
• Security cookies: Used to detect fraud, bot traffic, and suspicious access patterns. These protect your account and the integrity of the platform.

10.2 Managing Cookies

You may control or delete cookies through your browser settings. Instructions for managing cookies are available in the help documentation of all major browsers. Please note that disabling certain cookies — particularly strictly necessary cookies — may impair or prevent your access to core platform features including account login and gameplay.

Your Data Rights

Subject to applicable law and the operational requirements of our regulatory obligations, you hold the following rights in relation to your personal data processed by 1000cuci. To exercise any of these rights, please contact us using the details in Section 15.

We aim to respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and its reasons. Requests submitted via email to [email protected] should include the subject line "Data Rights Request — [Your Account Reference]" to ensure prompt routing to our compliance team.

Minors & Age Policy

The 1000cuci Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21, and registration by a minor constitutes a material breach of our Terms and Conditions.

Our KYC verification process is specifically designed to confirm that all Players meet the minimum age requirement before withdrawal eligibility is granted. Where the Operator identifies or has reasonable grounds to suspect that a Player is under 21, the account will be suspended immediately, any real-money balance returned to the verified payment method where technically possible, and all gaming activity during the underage period voided.

Any personal data collected from an individual subsequently identified as being under the age of 21 will be deleted from our systems in accordance with our data lifecycle procedures, subject only to the retention of records necessary to document the underage registration and our response to it.

International Data Transfers

As an online platform operating under international licensing, 1000cuci may transfer personal data to service providers and infrastructure partners located in countries outside Malaysia. Such transfers are necessary for the operation of the Platform and the delivery of its Services.

Where personal data is transferred internationally, 1000cuci takes appropriate steps to ensure that the data receives a level of protection equivalent to the standards described in this Policy. This may include the use of contractual data transfer mechanisms, adequacy determinations, or binding corporate rules with receiving entities.

By using the 1000cuci Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Malaysia in connection with the operational requirements of the Platform.

Changes to This Privacy Policy

1000cuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Users via the email address associated with their account and/or display a prominent notice on the Website.

The updated Policy will become effective on the date specified in the notification. Continued use of the Platform after the effective date constitutes acknowledgement of the updated Policy. If you do not agree to the amended terms, you may request account closure by contacting our support team.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage Users to review this Policy periodically to stay informed of how 1000cuci handles personal data.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how 1000cuci is handling your personal data, please contact us through the following channels. Support is available in English, Bahasa Melayu, and Mandarin.

For formal data rights requests or privacy complaints, please email [email protected] with the subject line "Privacy Request – [Your Account Reference]". We will acknowledge your request within 5 business days and aim to resolve it fully within 30 calendar days.