Privacy Policy 77cuci — Malaysia Player Data Protection

Welcome to the 77cuci Privacy Policy. This document explains in detail how the 77cuci platform ("us", "Platform", or "77cuci") collects, uses, stores, protects, and in certain circumstances discloses your personal information when you register, access, or use any services offered through our official website at 77cuci.vu.

Your privacy is our priority. We understand that Malaysian players expect a high level of trust and transparency from the platforms they use, especially when sensitive financial and personal information is involved. That is why we have written this policy in plain language, free from confusing legal jargon.

By using the 77cuci platform — whether via web browser or mobile app — you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team for assistance with safely closing your account.

77cuci collects your personal data through several channels. Below is a summary table of data types, their sources, and the purposes of collection:

We never collect credit card numbers directly. All payments are processed through licensed third-party payment providers that comply with PCI-DSS security standards. 77cuci only receives confirmation that a transaction was successful, not your full card details.

Every piece of data we collect has a specific and legitimate purpose. We do not collect data for vague or unnecessary reasons. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying, and managing your player account, including secure login and password recovery.
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and securely through your preferred payment methods such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• KYC Verification: Complying with legal requirements related to anti-money laundering (AML) and verifying player identity to protect all parties.
• Service provision: Enabling you to access all games, promotions, VIP programmes, and other platform features seamlessly.
• Customer support: Resolving complaints, enquiries, and technical issues more efficiently based on your account records.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting platform integrity from abuse.
• Experience personalisation: Tailoring game recommendations, promotional offers, and communications based on your preferences and playing habits (you can opt out at any time).
• Platform communications: Sending important account notifications, security updates, and relevant promotional information via email or SMS.
• Legal compliance: Complying with court orders, law enforcement agency requests, or applicable regulatory obligations.

77cuci does not sell, rent, or trade your personal data to any party for marketing purposes. However, there are limited situations where we may need to share your information with trusted third parties:

• Payment service provider: Entities such as banks, e-wallet operators, and payment processors that require minimum transaction information to process your deposits and withdrawals.
• Game software provider: Licensed game content providers who may receive anonymised game data for the purposes of game operation and licensing compliance.
• KYC service provider: Third-party identity verification companies used to validate your documents in order to meet AML/KYC requirements.
• Technology infrastructure provider: Cloud computing and hosting services that store your data in a protected environment governed by strict confidentiality agreements.
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts when required by a valid legal order or to protect public safety.

All third parties we work with are bound by data protection agreements that require them to store your information securely and use it only for permitted purposes. We do not allow third parties to use your data for their own interests.

Data security is an ongoing investment for 77cuci. We implement multiple layers of technical and organisational security controls to protect your data from unauthorised access, loss, destruction, or accidental disclosure:

• Encryption in transit: TLS 1.3 protocol is used for all communications between your device and our servers, ensuring no data can be intercepted in transit.
• Encryption at rest: Sensitive data such as identity information and financial details is encrypted using AES-256 in our databases.
• Internal access controls: The principle of least privilege applies — each staff member can only access the data necessary for their specific role.
• Two-factor authentication (2FA): All internal administrator accounts are protected with two-factor authentication to prevent unauthorised access even in the event of a compromised password.
• 24/7 Security Monitoring: An automated monitoring system operates continuously to detect suspicious activity, intrusion attempts, and traffic anomalies in real time.
• Regular penetration testing: 77cuci conducts regular security audits through independent cybersecurity firms to identify and patch vulnerabilities before they can be exploited.
• Secure data backup: Automatic data backups are performed at regular intervals and stored at separate locations that are equally protected with encryption.

While we take all reasonable precautions, no security system is entirely perfect. In the event of a data breach affecting your information, we will notify you within the required timeframe and take immediate steps to mitigate the risk.

77cuci uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting anonymous information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve performance.
• Functional Cookies: Remembering your preferences such as language, region, and display settings so you don't have to reset them on every visit.
• Analytics Cookies: We use internal analytics tools to understand usage patterns on an aggregated basis. This data is used to make data-driven decisions about new features and platform improvements.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect platform functionality. For guidance on managing cookies in popular browsers, refer to your browser's documentation.

77cuci does not use third-party cookies for targeted advertising or to sell your behavioral profile to advertising networks.

Under applicable data protection laws, you have several important rights regarding the personal data held by 77cuci. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact our privacy team via the support email at [email protected]. Please specify the right you wish to exercise and provide sufficient information for us to verify your identity before processing the request.

77cuci does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal or business requirements:

• Active account data: Retained for the duration your account remains active on the platform.
• Financial transaction records: Stored for a minimum of 7 years after the transaction date in line with Malaysia's taxation and AML legal requirements.
• KYC Documents: Stored for a minimum of 5 years after account closure or the date of last verification, whichever is later, to comply with AML regulations.
• Support communication logs: Stored for 3 years for reference and dispute resolution purposes.
• Analytics and usage data: Anonymised data is retained indefinitely for platform improvement purposes; identifiable data is deleted after 2 years from the date of collection.
• Inactive account: Accounts that have been inactive for more than 12 months will receive a notification. After a certain period, data may be anonymized or deleted in accordance with established procedures.

Once the retention period expires, your personal data will be securely deleted or fully anonymised so that it can no longer be associated with you.

The 77cuci platform is for individuals aged 21 and above only. We do not knowingly collect or process personal data from individuals under the age of majority. If you believe that someone under the age of 21 has registered an account on our platform, please contact our support team immediately.

When we become aware that data has been collected from a minor without our knowledge, we will take immediate steps to:

• Closing the account immediately.
• Deleting all related data from our systems.
• Returning any deposits made to the original payment method.
• Reporting the incident to the relevant authorities if required.

We also support protective measures for individuals vulnerable to gambling-related issues. Information on available self-control tools can be found on the Responsible Gaming us.

77cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate operational reasons. Any amendments will be communicated to you through the following means:

• An email notification to your registered address at least 14 days before changes take effect for significant amendments.
• A banner notification within the platform will appear during your next login session.
• Update date "Updated" at the top of this page.

It is your responsibility to check this page periodically. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the amendment takes effect.

If you have any questions, concerns, or complaints regarding how 77cuci handles your personal data, or wish to exercise any of your privacy rights, please contact our privacy team:

• Privacy Email: [email protected]
• Target Response Time: Within 5 business days for general enquiries; 14 business days for formal data rights requests.
• Supported Languages: Malay and English.

When contacting us regarding privacy matters, please include your username or registered email address, the type of request or enquiry, and sufficient details for us to understand your issue. This helps us process your request more quickly and accurately.

We are committed to handling every privacy complaint seriously and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory body.