Privacy Policy m1cuci — Our Commitment to Protecting Your Personal Data

1 Introduction and Scope of This Policy

M1cuci takes the privacy and data security of every member seriously. This Privacy Policy is written to transparently and clearly explain how we collect, store, use and protect the information you provide when registering and using the m1cuci platform.

This policy applies to all users of the m1cuci website at https://m1cuci.onl, including those browsing without registering, active registered members, and any individual interacting with our platform through any related device or channel. By continuing to use the platform after reading this policy, you confirm that you understand and agree to how we handle your data.

We are committed to full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection standards in the online gaming industry. Should any changes be made to this policy, members will be notified via a prominent notice on the website.

2 Types of Personal Data We Collect

M1cuci collects your personal information through several means — directly when you register or update your account, and automatically through your use of our platform. The following are the categories of data we collect:

Data You Provide Directly

• Registration information: Full name, email address, phone number, date of birth and password.
• Identity verification (KYC) information: A copy of your identity card or passport, a verification selfie, and proof of residential address.
• Financial information: Bank account number, account holder name and e-wallet details registered for deposit and withdrawal purposes.
• Communications: Any messages, complaints or enquiries you submit to our support team.

Automatically Collected Data

• Technical data: IP address, browser type, operating system, screen resolution and device information.
• Usage data: Pages visited, session duration, games played, betting history and login times.
• Cookie data: Session cookies, preference cookies and unique device identifiers for security and user experience purposes.
• Location data: General location information based on IP address for geographic compliance and account security purposes.

3 How We Use Your Data

Every piece of information we collect is used for specific and lawful purposes. m1cuci does not use your data beyond the scope stated below without obtaining your consent first:

• Account management: Creating, verifying and maintaining your member account, including secure login processes and two-factor authentication.
• Transaction processing: Processing deposits, withdrawals and any financial transactions related to your account efficiently and securely.
• KYC and AML compliance: Meeting legal requirements related to identity verification and anti-money laundering imposed on licensed gaming platforms.
• Platform security: Detecting and preventing fraud, multi-account usage, bot activity and any attempts to exploit the platform's systems.
• Customer support: Responding to enquiries, resolving complaints and providing technical assistance to members more effectively.
• Service improvement: Analysing usage patterns to improve platform design, game performance and the overall user experience.
• Marketing communications: Sending promotional offers, bonuses and platform updates — only to members who have agreed to receive such communications.
• Responsible gaming: Monitoring betting patterns to identify members who may need assistance and offering appropriate self-control tools.

4 Data Sharing & Disclosure

M1cuci does not sell or rent your personal data to any party for commercial purposes. However, there are limited situations where we need to share your information with carefully selected third parties:

Third-Party Service Providers

We work with service partners who help us operate the platform, including payment service providers (FPX, Touch 'n Go, GrabPay, Boost), licensed game software providers, cloud service providers and identity verification companies. All partners are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Legal Requirements and Compliance

M1cuci may be required to disclose your information to the relevant authorities if mandated by law, court order, or in the context of an official investigation into financial fraud, money laundering or other criminal activity. We will always endeavour to notify you of any such disclosure unless prohibited by law from doing so.

Business Transfer

If m1cuci is involved in any merger, acquisition or asset transfer, members' personal data may be transferred as part of that transaction. We will ensure the receiving party upholds privacy protection standards equivalent to or higher than our own.

5 Data Security and Protection

We continuously invest in the latest security infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

• Data encryption in transit: All communications between your browser and m1cuci servers use TLS 1.3 protocol with 256-bit encryption.
• Encryption of stored data: Sensitive data such as financial information and KYC documents are stored in encrypted format using advanced encryption algorithms.
• Internal access controls: Access to member data within our internal systems is restricted to authorised personnel only, with a full audit log maintained for every access made.
• Two-factor authentication (2FA): Our login system supports two-factor authentication for an added layer of security on member accounts.
• Continuous monitoring: Our cyber threat monitoring system operates around the clock to detect and respond to any suspicious activity promptly.
• Regular security testing: The m1cuci platform undergoes regular penetration testing and security audits conducted by independent security experts.

While we take all reasonable precautions, no digital security system can be guaranteed to be one hundred percent threat-free. We encourage members to take personal security measures as well, such as using strong, unique passwords and not sharing login credentials with others.

6 Cookies and Tracking Technologies

M1cuci uses cookies and similar tracking technologies to enhance the user experience, ensure account security and understand platform usage patterns. There are several types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Preference cookies: Saving your preference settings such as interface language and display preferences so you do not need to reconfigure them each time you visit the platform.
• Analytics cookies: Helping us understand how members use the platform — which pages are most popular, how long sessions last and where members may encounter difficulties. This data is used solely to improve the platform.
• Security cookies: Used to detect suspicious login attempts, identify new devices, and protect your account from unauthorised access.

You can manage your cookie settings through your browser preferences. Please note, however, that disabling certain cookies may affect the full functionality of the m1cuci platform, particularly cookies related to security and session authentication.

7 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding the personal data we hold about you. m1cuci fully respects these rights:

To exercise any of the rights above, please contact our data protection team via our support email. We will process your request within 14 working days from the date of receipt.

8 Data Retention Period

M1cuci retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy, or as required by applicable law. Our general retention guidelines are as follows:

• Active account data: Retained for as long as your account is active and for a defined period after account closure for record-keeping and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years after the transaction date, in accordance with accounting and anti-money laundering (AML) legal requirements.
• KYC documents: Retained for a minimum of 5 years after account closure or the date of last verification, whichever is later.
• Support communication logs: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Cookie and analytics data: Generally retained for no more than 24 months from the date of collection.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

9 Children's Privacy

The m1cuci platform is exclusively for individuals aged 18 and above only. We do not knowingly collect or store any personal information from individuals under the age of 18.

If we discover that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that information from our systems and close the account in question. If you believe a minor has registered an account on our platform, please contact us immediately so we can take appropriate action.

10 Changes to This Privacy Policy

M1cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform operations. Any changes made will be published on this page with the latest "Last updated" date.

For changes deemed material — meaning changes that significantly affect how we handle your data — we will provide clearer notice, either via a pop-up on the platform or an email to the address registered to your account. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns or wish to exercise your data protection rights, the m1cuci data protection team (DPO) is here to help:

• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 14 working days for personal data requests; 1–3 hours for general enquiries via live chat.
• Language: Bahasa Malaysia and English.

You may also refer to the FAQ for a quick response, or visit the Responsible Gaming for more information on how we use your data for member protection purposes. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory body.