356cuci Privacy Policy

Last Updated: 12 June 2026

This Privacy Policy ("Policy") is issued by 356cuci ("Company", "we", "us", "our"), the operator of the online gaming platform at 356cuci.org. This Policy explains how we collect, use, store, and protect personal data relating to persons who access or use the 356cuci Platform ("Players", "you").

This Policy should be read in conjunction with the 356cuci Terms & Conditions, which govern your use of the Platform. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

1. Introduction & Scope

This Policy applies to all personal data processed by 356cuci in connection with the operation of the 356cuci Platform, including data collected through the website at 356cuci.org, the mobile web interface, customer support communications, payment processing, and marketing activities. It applies to all Players regardless of the jurisdiction from which the Platform is accessed.

356cuci is committed to handling personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. Where applicable, we also comply with the Personal Data Protection Act 2010 of Malaysia (PDPA 2010).

2. Data Controller

For the purposes of data protection law, 356cuci is the data controller in respect of personal data collected through the Platform. Enquiries regarding this Policy or data processing activities should be directed to our customer support team via the contact details set out in Section 16 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create a 356cuci Account, we collect your full legal name, date of birth, email address, mobile number, and preferred currency. This data is necessary to create and manage your Account and to perform age verification as required by our operating guidelines.

3.2 Identity Verification Data

To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, 356cuci may request copies of government-issued identification documents (such as a Malaysian MyKad or passport), proof of residential address, and evidence of payment method ownership. This data is processed solely for compliance verification purposes.

3.3 Financial & Transaction Data

We collect records of all deposit and withdrawal transactions processed through your 356cuci Account, including transaction amounts in MYR, timestamps, payment method identifiers (e.g., masked bank account numbers, e-wallet reference IDs for Touch n Go eWallet or Boost), and transaction status. We do not store full payment card numbers on our systems.

3.4 Gameplay Data

356cuci records all gaming activity on the Platform, including game titles played, bet amounts, outcomes, session durations, and bonus utilisation. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data

When you access the 356cuci Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

We retain records of all communications between you and the 356cuci customer support team, including live chat transcripts and email correspondence. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Data

356cuci collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey;
• Automatically — through cookies, session tokens, and server logs when you browse or interact with the 356cuci Platform;
• From third parties — from payment processors confirming transaction completion, from KYC verification providers confirming identity document authenticity, and from fraud prevention services flagging suspicious activity patterns.

5. Legal Basis for Processing

356cuci processes personal data on the following legal bases:

• Performance of a contract — processing necessary to create and manage your Account, process deposits and withdrawals, and provide access to games;
• Legal obligation — processing required to comply with AML regulations, KYC requirements, tax obligations, and regulatory reporting duties;
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming programme management, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications and non-essential analytics cookies, where your consent has been expressly obtained and may be withdrawn at any time.

6. How We Use Your Data

356cuci uses your personal data for the following purposes:

• Creating, verifying, and managing your 356cuci Account;
• Processing MYR deposits and withdrawals via approved Malaysian payment channels;
• Conducting mandatory KYC and AML checks as required by our operating licences;
• Detecting and preventing fraud, money laundering, and other prohibited conduct on the Platform;
• Monitoring gameplay for responsible gaming indicators and intervening proactively where problem gambling behaviour is detected;
• Resolving disputes relating to game outcomes, bet settlements, and payment transactions;
• Improving Platform performance, user experience, and game content selection based on aggregated usage analytics;
• Sending service communications, including account notifications, security alerts, and product updates;
• Sending promotional communications where you have opted in to marketing from 356cuci;
• Meeting our obligations to regulators, law enforcement agencies, and courts where legally required.

7. Sharing Your Data

356cuci does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients in the circumstances described:

7.1 Payment Processors

Transaction data is shared with your payment service provider (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or FPX) to the extent necessary to process your deposit or withdrawal request. These providers operate under their own privacy policies and are independently regulated.

7.2 KYC & Fraud Prevention Providers

Identity verification data and device fingerprint data may be shared with third-party KYC verification services and fraud detection platforms engaged by 356cuci. These providers process data solely on 356cuci's instructions under binding data processing agreements.

7.3 Regulatory Authorities

356cuci may be required to disclose personal data, transaction records, or gameplay history to gaming regulators, financial intelligence units, law enforcement agencies, or courts pursuant to a legally valid request, court order, or statutory obligation. 356cuci will notify affected Players of such disclosures where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving 356cuci, Player personal data held by the Company may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations. Affected Players will be notified in advance where practicable.

8. International Data Transfers

356cuci may process or store personal data in jurisdictions outside Malaysia where our service providers are located. Where data is transferred internationally, 356cuci implements appropriate safeguards including contractual clauses modelled on internationally recognised data protection standards to ensure that transferred data receives a level of protection consistent with this Policy.

9. Data Retention

356cuci retains personal data for the following periods:

• Account data: For the duration of the active Account plus a minimum of five (5) years following Account closure, as required for gaming regulatory compliance;
• Transaction records: Seven (7) years from the date of each transaction, as required for AML record-keeping purposes;
• KYC documents: Five (5) years from Account closure or from the date of the last relevant transaction, whichever is later;
• Customer support records: Three (3) years from the date of the relevant communication;
• Marketing consent records: Until consent is withdrawn, plus a reasonable period thereafter to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data must be retained for competing legal obligations beyond these periods, it will be held in a restricted access archive until deletion is permissible.

10. Cookies & Tracking Technologies

356cuci uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Session tokens required for login authentication and Platform functionality. These cannot be disabled without preventing use of the Platform;
• Performance & Analytics Cookies: Aggregate usage data to understand how Players interact with Platform features. These are activated only where consent has been obtained;
• Fraud Detection Tokens: Device fingerprinting data used to identify unusual login patterns and protect your 356cuci Account from unauthorised access. These operate as part of our legitimate security interest;
• Preference Cookies: Remembering your language, display settings, and game lobby filters between sessions.

You may manage cookie settings through your browser preferences. Blocking strictly necessary cookies will impair Platform functionality, including the 356cuci Login process. 356cuci does not use advertising tracking cookies or share cookie data with advertising networks.

11. Your Rights

Subject to applicable law and the overriding requirements of our AML and regulatory obligations, you have the following rights in relation to your personal data held by 356cuci:

• Right of Access: Request a copy of the personal data 356cuci holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where processing is no longer necessary, subject to our retention obligations;
• Right to Restrict Processing: Request that processing of your data be limited while a dispute or complaint is under review;
• Right to Data Portability: Receive a copy of your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to Object: Object to processing based on legitimate interests, including profiling for responsible gaming monitoring;
• Right to Withdraw Consent: Withdraw marketing consent or analytics cookie consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact 356cuci customer support via live chat or email. We will respond within thirty (30) days. Identity verification may be required before processing data access or deletion requests.

12. Marketing Communications

356cuci may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special offers where you have opted in to receiving such communications during registration or subsequently via your account preferences. You may withdraw marketing consent at any time by updating your communication preferences within your 356cuci Account settings or by contacting customer support. Withdrawal of marketing consent will not affect your ability to continue using the Platform.

13. Children's Privacy

The 356cuci Platform is strictly for persons aged 21 and above. 356cuci does not knowingly collect personal data from persons under 21. If you believe that a minor has created a 356cuci Account, please contact our customer support team immediately. Upon confirmation, the account will be suspended, all personal data associated with it will be deleted, and any funds will be dealt with in accordance with our Terms & Conditions and applicable law.

14. Security Measures

356cuci implements the following technical and organisational security measures to protect personal data:

• AES-256 encryption for all data stored on 356cuci servers;
• TLS 1.3 encryption for all data transmitted between your device and 356cuci systems;
• Role-based access controls limiting personal data access to authorised personnel only;
• Regular penetration testing and security audits conducted by independent third parties;
• Automated intrusion detection and anomalous login alerting on all account access events;
• Mandatory two-factor authentication for all 356cuci administrative system access.

Despite these measures, no internet-based platform can guarantee absolute security. If you suspect that your 356cuci Account has been compromised, please change your password immediately and contact our 24/7 support team.

15. Changes to This Policy

356cuci may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational structure. Material changes will be communicated to registered Players via their registered email address at least seven (7) days before the updated Policy takes effect. The "Last Updated" date at the top of this Policy will be revised with each update. Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

16. Contact & Complaints

For any privacy-related queries, requests to exercise data rights, or concerns about 356cuci's data processing practices, please contact us via:

• Live Chat: Available 24/7 from within your logged-in 356cuci Account — average response under 3 minutes.
• Email: [email protected] — responses within 24 hours. Mark the subject line as "Privacy Request" for expedited handling.

If you are not satisfied with our response to a privacy complaint, you may refer the matter to the relevant data protection authority in your jurisdiction. For Malaysian residents, the relevant authority is the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital, Malaysia.