cucu100 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how cucu100 ("cucu100", "we", "us", "our"), the operator of the online gaming platform at cucu100.net, collects, processes, stores, and protects the personal data of users ("you", "your") who access or use the cucu100 platform and associated services.

cucu100 operates under an international gaming licence from a recognised offshore regulatory jurisdiction. As part of our licensing obligations, cucu100 is required to implement data protection measures that meet or exceed the standards applicable under our regulatory framework. We also voluntarily align our data practices with internationally recognised privacy principles, including those reflected in the Malaysian Personal Data Protection Act 2010 (PDPA) to the extent applicable to our operations.

This Policy was last updated in June 2026. By accessing or using the cucu100 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not consent, you must cease using the platform.

2. Personal Data We Collect

2.1 Registration Data

When you create a cucu100 account, we collect the following information: full legal name, date of birth, email address, chosen username, and the country and city of your residence (e.g., Kuala Lumpur, Johor Bahru, Penang, Petaling Jaya, or other Malaysian locations).

2.2 Identity Verification (KYC) Data

To comply with our regulatory obligations and to verify your eligibility to use the platform, cucu100 may collect copies of your identity documents, which may include: Malaysian Identity Card (MyKad), passport or other government-issued photo ID, proof of residential address (utility bill, bank statement), and documentation relating to source of funds where required for larger transactions.

2.3 Financial Data

cucu100 collects data relating to deposits and withdrawals processed through your account, including transaction amounts, timestamps, and the payment method identifiers associated with each transaction (e.g., partial e-wallet account numbers, bank names). cucu100 does not store full payment card numbers or banking credentials — these are processed directly by our licensed payment service providers.

2.4 Gaming Activity Data

We collect detailed records of your gaming activity on the cucu100 platform, including game sessions played, bet amounts, wagering history, win/loss records, bonus usage, and session durations. This data is retained for regulatory compliance, responsible gaming monitoring, and dispute resolution purposes.

2.5 Technical & Device Data

cucu100 automatically collects technical information when you access the platform, including: IP address, browser type and version, device type and operating system, screen resolution, session timestamps, and referring URLs. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

When you contact cucu100's customer support team, we retain records of your communications, including live chat transcripts, email correspondence, and any attachments submitted. These records are used to resolve disputes and improve our support services.

3. How We Collect Your Data

cucu100 collects personal data through the following mechanisms:

• Directly from you — information you provide during registration, KYC verification, payment processing, support interactions, or promotional participation
• Automatically — technical and device data collected through cookies, server logs, and session tracking when you access the platform
• From third parties — identity verification data from KYC service providers; payment transaction data from licensed payment service providers; fraud and risk signals from our fraud detection partners

4. Purpose of Processing Your Personal Data

cucu100 processes your personal data for the following purposes:

• To create, maintain, and administer your cucu100 account
• To verify your identity and age eligibility (21+) in accordance with our regulatory obligations
• To process deposits and withdrawals through your chosen Malaysian payment methods
• To operate, deliver, and improve the gaming services on the cucu100 platform
• To detect and prevent fraud, money laundering, and other prohibited activity
• To monitor gaming activity for responsible gaming indicators and to apply protective measures where appropriate
• To provide customer support and resolve disputes
• To send transactional communications (account confirmations, transaction receipts, security alerts)
• To send promotional communications where you have provided your consent
• To comply with legal, regulatory, and licensing obligations
• To analyse platform usage and improve product features and user experience

5. Legal Basis for Processing

cucu100 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the services you have contracted with us by registering on cucu100, including account management, payment processing, and game delivery
• Legal obligation — processing required to comply with applicable laws and our regulatory licensing obligations, including KYC, anti-money laundering procedures, and data retention requirements
• Legitimate interests — processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights
• Consent — processing based on your explicit consent, including the sending of promotional marketing communications. You may withdraw your consent at any time by contacting our support team

6. Sharing Your Personal Data

cucu100 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers — to process your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted Malaysian payment methods
• KYC and identity verification providers — to verify your identity and age eligibility as required by our regulatory obligations
• Game software providers — licensed studios and RNG providers who supply the games on the cucu100 platform may receive anonymised game session data for integrity monitoring purposes
• Fraud detection and security providers — to identify and prevent fraudulent account activity and protect platform integrity
• Regulatory and licensing authorities — we may be required to disclose certain player data to our licensing authority and to law enforcement agencies in response to lawful requests
• Professional advisers — legal, accounting, and auditing professionals who are bound by professional confidentiality obligations

All third-party service providers engaged by cucu100 are contractually required to process personal data only for the purposes for which it was shared and to maintain appropriate security standards.

7. Cookies and Tracking Technologies

7.1 Types of Cookies Used

cucu100 uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly necessary cookies — essential for the operation of the platform, including maintaining your login session, managing your account state, and processing secure transactions. These cannot be disabled without impairing platform functionality.
• Analytics cookies — used to collect aggregated, anonymised data on how users interact with the cucu100 platform, which pages are visited, and how long sessions last. This data helps us improve the platform experience.
• Preference cookies — used to remember your platform settings and preferences, such as language or display choices, between sessions.
• Marketing cookies — used where you have provided consent, to serve relevant cucu100 promotions and to measure the effectiveness of marketing campaigns.

7.2 Managing Cookies

You may control and manage cookies through your web browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the cucu100 platform, including logging in and processing transactions. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

cucu100 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data — retained for the duration of your active account relationship with cucu100, and for a minimum of 5 years following account closure, in accordance with our regulatory obligations
• KYC and identity verification documents — retained for a minimum of 5 years from the date of verification, or longer if required by applicable law
• Transaction and financial records — retained for a minimum of 5 years from the date of each transaction, as required by anti-money laundering regulations
• Gaming activity records — retained for a minimum of 3 years from the date of each session for dispute resolution and responsible gaming monitoring purposes
• Support communications — retained for 2 years from the date of the interaction

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with cucu100's data deletion procedures.

9. Data Security

cucu100 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cucu100 platform
• Hashing and salting of all stored passwords — your password is never stored in plain text
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for cucu100 administrative systems
• Continuous monitoring for suspicious access patterns and automated security alerts
• Regular security assessments and penetration testing of platform infrastructure

While cucu100 implements industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, cucu100 will notify affected users and relevant authorities in accordance with applicable legal requirements.

10. Your Data Rights

Subject to applicable legal and regulatory limitations, you have the following rights in relation to your personal data held by cucu100:

• Right of access — you may request a copy of the personal data cucu100 holds about you
• Right of rectification — you may request correction of inaccurate or incomplete personal data
• Right of erasure — you may request deletion of your personal data, subject to our legal and regulatory retention obligations
• Right to restrict processing — you may request that we limit the processing of your personal data in certain circumstances
• Right to data portability — you may request a machine-readable copy of certain personal data you have provided to cucu100
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact cucu100's support team. We will respond to all valid requests within a reasonable timeframe. We may need to verify your identity before processing your request.

11. Children's Privacy

The cucu100 platform is strictly intended for individuals aged 21 years and older. cucu100 does not knowingly collect personal data from individuals under the age of 21. If cucu100 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. If you believe that a person under the age of 21 has registered on the cucu100 platform, please notify our support team immediately.

12. International Data Transfers

cucu100 operates under an international gaming licence and its technical infrastructure may be hosted in data centres located outside Malaysia. Where personal data is transferred outside Malaysia, cucu100 ensures that appropriate safeguards are in place to protect your data in accordance with applicable privacy standards. These safeguards may include contractual data protection clauses with service providers and the selection of data processing partners in jurisdictions with adequate data protection frameworks.

13. Third-Party Links

The cucu100 platform may contain references to the products and services of third-party game software providers and payment processors. This Privacy Policy applies solely to the cucu100 platform and its direct data processing activities. cucu100 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your cucu100 account.

14. Amendments to This Policy

cucu100 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our regulatory obligations, or our data processing practices. Material changes will be communicated to registered users via the email address on file no less than 14 days before the amended Policy takes effect. The current version of this Policy, including its effective date, is always accessible on this page. Your continued use of the cucu100 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or cucu100's handling of your personal data, please contact our Data Protection team via our 24/7 live support chat on the platform, or by email at: [email protected]

Please include "Privacy Request" in the subject line of any email query and provide your registered cucu100 username to help us locate and process your request promptly.