10cuci Privacy Policy

1. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "10cuci", "we", "us", "our" — the operator of the 10cuci platform at https://10cuci.net.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, either directly or in combination with other data.
• "User", "you", "your" — any individual who visits, registers on, or uses the 10cuci platform.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer; the identity and age verification process required before withdrawals are processed.
• "PDPA" — Malaysia's Personal Data Protection Act 2010 and its subsidiary legislation, which governs the processing of personal data in commercial transactions in Malaysia.

2. Data Controller

10cuci is the data controller responsible for the Personal Data described in this Privacy Policy. As data controller, 10cuci determines the purposes and means of processing your Personal Data. For all privacy-related enquiries, please contact us at the details provided in Section 15.

3. Personal Data We Collect

When you register and use the 10cuci platform, we may collect the following categories of Personal Data:

3.1 Identity & Contact Data

• Full legal name as per government-issued identification;
• Date of birth;
• Malaysian identification number (NRIC) or passport number (for non-citizens);
• Residential address;
• Email address;
• Malaysian mobile phone number.

3.2 Financial Data

• Payment method details (e-wallet identifiers, bank account numbers used for deposits or withdrawals);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used;
• Wagering history and account balance records.

3.3 Technical & Usage Data

• IP address and geolocation at login;
• Device type, operating system, and browser version;
• Session duration and activity logs;
• Game play history and betting patterns;
• Cookie identifiers and similar tracking technologies.

3.4 KYC Verification Documents

• Copies of government-issued photo identification (MyKad, passport, or driving licence);
• Proof of address documents where required;
• Selfie photographs submitted for liveness verification.

4. How We Collect Your Data

10cuci collects Personal Data through the following means:

• Direct submission: Information you provide when creating an account, completing KYC, making a deposit or withdrawal, or contacting customer support;
• Automated technologies: Cookies, session tokens, server logs, and analytics tools that record your interactions with the platform;
• Third-party sources: Identity verification providers, payment processors, and fraud prevention services that share data with us as part of contracted service delivery;
• Publicly available sources: Where permitted by law, we may supplement your data with information from public registers for fraud and AML screening purposes.

5. Purpose and Legal Basis for Processing

10cuci processes your Personal Data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of our contract with you;
• Age and identity verification (KYC) — necessary to comply with our legal obligations under applicable licensing and AML requirements;
• Payment processing and fraud prevention — necessary for the performance of our contract and for compliance with legal obligations;
• Responsible gaming enforcement — necessary to comply with regulatory requirements and to protect the vital interests of our users;
• Customer support — necessary for the performance of our contract and our legitimate interest in maintaining service quality;
• Marketing communications — based on your consent, which may be withdrawn at any time;
• Platform analytics and improvement — based on our legitimate interest in improving the platform for all users, provided this interest does not override your privacy rights.

6. Disclosure of Personal Data

6.1 10cuci does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes.

6.2 We may disclose your Personal Data to the following categories of recipients where necessary to deliver our services:

• Payment service providers (including Touch 'n Go, Boost, GrabPay, DuitNow, Maybank, CIMB, FPX operator) for the processing of deposits and withdrawals;
• KYC and identity verification providers for the purpose of age and identity confirmation prior to withdrawal;
• Game content providers who supply the games available on the 10cuci platform and who process wager data as part of game delivery;
• IT infrastructure and hosting providers who maintain the servers and systems on which 10cuci operates;
• Regulatory authorities and law enforcement agencies where disclosure is required by applicable law, court order, or regulatory direction;
• Fraud prevention and AML screening services for the purpose of detecting and preventing financial crime.

6.3 All third-party service providers engaged by 10cuci are required to process Personal Data solely for the contracted purpose and in accordance with confidentiality obligations no less stringent than those set out in this Privacy Policy.

7. International Data Transfers

7.1 Some of 10cuci's service providers operate outside of Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Malaysia's PDPA, 10cuci will implement appropriate safeguards, such as contractual data protection clauses, to ensure your data remains protected.

7.2 By registering an account and using the 10cuci platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia as described in this section.

8. Data Retention

8.1 10cuci retains Personal Data for as long as your Account remains active and for a further period after Account closure as required by applicable legal, regulatory, and audit obligations. As a general guide:

• Account and KYC data: retained for a minimum of 5 years following Account closure;
• Financial transaction records: retained for a minimum of 7 years in accordance with AML and financial record-keeping obligations;
• Marketing preference data: retained until you withdraw consent or request deletion, whichever is earlier;
• Technical and log data: retained for a maximum of 24 months unless required for an ongoing investigation or legal proceeding.

8.2 Following the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

9.1 10cuci uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for core Platform functionality, including maintaining your login session and preserving Account security settings. These cannot be disabled.
• Preference cookies: Used to remember your language, display settings, and other personalisation choices.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors interact with the Platform, enabling us to improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised access attempts.

9.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

10. Your Data Protection Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your Personal Data held by 10cuci:

• Right of access: Request a copy of the Personal Data we hold about you;
• Right of correction: Request correction of inaccurate or incomplete Personal Data;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing), withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: Object to processing carried out on the basis of our legitimate interests, subject to our ability to demonstrate compelling grounds that override your interests;
• Right to data portability: Request that certain data be provided to you in a structured, commonly used format where technically feasible;
• Right to erasure: Request deletion of your Personal Data, subject to our legal retention obligations.

To exercise any of the above rights, contact 10cuci support as described in Section 15. We will respond to verified requests within 30 calendar days.

11. Children's Privacy

11.1 The 10cuci Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21.

11.2 If we become aware that Personal Data has been collected from a person under 21, we will take immediate steps to delete that data and permanently close the associated Account.

11.3 If you believe a minor has registered an account on 10cuci, please contact our support team immediately at the contact details in Section 15.

12. Security Measures

12.1 10cuci implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers;
• Encryption at rest for sensitive data categories including KYC documents and financial records;
• Role-based access controls ensuring staff can only access Personal Data necessary for their job function;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Incident response procedures for prompt detection, containment, and notification of data breaches.

12.2 While 10cuci takes reasonable precautions to protect your data, no internet transmission is completely secure. You acknowledge this inherent risk when transmitting Personal Data over the internet.

13. Marketing Communications

13.1 With your consent, 10cuci may send you promotional materials about platform updates, new games, bonuses, and special offers via email and SMS.

13.2 You may unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email;
• Adjusting your communication preferences in Account Settings following 10cuci login; or
• Contacting our support team and requesting removal from marketing lists.

13.3 Opting out of marketing communications will not affect the delivery of transactional messages (e.g., deposit confirmations, withdrawal notifications, security alerts) which are necessary for Account operation.

14. Changes to This Privacy Policy

14.1 10cuci may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform functionality.

14.2 Where changes are material, we will notify registered users via email to the address on file and post a prominent notice on the Platform prior to the changes taking effect.

14.3 The date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

15. Contact & Complaints

For all privacy-related enquiries, data subject requests, or complaints, please contact the 10cuci Data Protection team:

Email: [email protected]

We aim to acknowledge all privacy requests within 3 business days and resolve them within 30 calendar days. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction or to our licensing authority's player complaint mechanism.