Your Personal Information Protection at m2cuci

1. Information We Collect

m2cuci collects two main categories of information from players:

Information You Provide Directly

• Full name as shown on your MyKad or valid identification document.
• Date of birth — for age verification purposes (players must be 21 years of age or older).
• Active email address and mobile phone number.
• Account password in encrypted form — we do not store passwords in plain text.
• Payment method information such as e-wallet account numbers (Touch 'n Go, Boost), DuitNow details, FPX online banking information or crypto wallet addresses (USDT, BTC, ETH) for the purpose of processing deposits and withdrawals.
• Any identity verification documents you upload during the KYC (Know Your Customer) process.

Information Collected Automatically

• IP address and the type of internet browser you use.
• Login session records including time, date and location of access.
• Behavioural data on the website such as pages visited, time spent on the site and games played.
• Device information including operating system and language settings.
• Transaction data covering deposit history, withdrawals, betting activity and records of wins and losses.

2. How We Use Your Information

The information collected is used solely for legitimate purposes related to the operation of the m2cuci platform, namely:

• Creating and managing player accounts and verifying your identity.
• Processing deposits and withdrawals accurately and securely through your chosen payment methods.
• Complying with legal obligations under our international licensing, including anti-money laundering (AML) requirements and KYC obligations.
• Providing more effective and personalised 24/7 customer support in Malay and English.
• Sending important notifications related to your account such as transaction confirmations, security updates and policy changes.
• Analysing usage patterns to improve the user experience and enhance our services.
• Detecting and preventing fraudulent activity, account misuse and cybersecurity threats.
• Promoting responsible gambling, including monitoring for signs of problem gambling.

3. Sharing Information with Third Parties

m2cuci does not sell your personal information. However, in the following limited situations, we may share information with trusted parties:

• Payment Processors: Information required to process your transactions is shared securely with payment service providers such as the FPX gateway, Touch 'n Go, Boost and relevant crypto exchanges.
• Game Software Providers: Minimum game data required to deliver the gaming experience is shared with game software providers that work with m2cuci.
• Regulatory Bodies: When required by law or licensing authorities, we will disclose the requested information within the scope defined by the relevant official order or directive.
• Technical Service Providers: Providers of technical infrastructure, cloud computing and cybersecurity services who are bound by strict confidentiality agreements.

All these third parties are required to protect your information and are not permitted to use it for any purpose other than what has been specified in their service agreements with m2cuci.

4. Use of Cookies and Tracking Technologies

The m2cuci website uses cookies and similar tracking technologies for the following purposes:

• Essential Cookies: Required for basic website functions such as maintaining your login session and ensuring transaction security.
• Performance Cookies: Collect information about how you use our website to help us improve the platform's performance and responsiveness.
• Functional Cookies: Remember your preferences and settings such as your chosen language to provide a more personalised experience.
• Analytics Cookies: Help us understand traffic patterns and how players interact with our website for continuous improvement purposes.

You can manage cookie settings through your internet browser. Please note that disabling essential cookies may affect the functionality of the m2cuci website.

5. Personal Information Security

We implement various technical and organisational measures to protect your personal information from unauthorised access, modification, disclosure or destruction:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your browser and our servers.
• Passwords are stored in an unreadable hashed format — we do not have access to your original password.
• Two-factor authentication (2FA) is available as an additional security layer for your account.
• 24/7 security monitoring to detect and address any suspicious activity promptly.
• Strict internal access controls — only specific personnel with a legitimate work need may access player personal data.
• Regular security audits by internal and independent external cybersecurity teams.

While we take all reasonable measures, no security system is perfect. We encourage you to also play your part in keeping your account secure by using a strong password and not sharing your login details.

6. Your Rights Regarding Personal Data

As an m2cuci player, you have the following rights in relation to your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right of Rectification: You may request a correction if the information we hold is inaccurate or out of date.
• Right to Erasure: In certain circumstances, you may request that your personal information be deleted, subject to record-keeping obligations set by the licensing authority.
• Right to Restriction of Processing: You may request that we restrict the processing of your data while a dispute is being resolved.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Data Portability: You may request that your data be provided in a machine-readable format.

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will process your request promptly.

7. Data Retention Period

m2cuci retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by law and our international licensing obligations. Generally:

• Account and transaction records are retained for the period specified by the licensing authority and AML requirements.
• Login data and security activity logs are retained for a reasonable period for the purpose of security incident investigations.
• KYC documents are retained for the minimum period required by the relevant authorities.

Once the required retention period has ended, your information will be securely deleted or anonymised.

8. International Data Transfers

As m2cuci operates under an international licence, your personal information may be processed or stored on servers located outside Malaysia. In such situations, we ensure:

• Data transfers are carried out with protections equivalent to or greater than current requirements.
• Appropriate data transfer agreements are in place with all recipient parties in other countries.
• Only countries or entities with adequate or appropriate data protection standards are selected as data storage destinations.

9. Changes to This Privacy Policy

m2cuci reserves the right to update or modify this Privacy Policy at any time. When significant changes are made:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest change.
• A clear notice will be displayed on the website's main page for a reasonable period.
• Registered players will be notified by email of changes that directly affect their privacy rights.

Continued use of the m2cuci platform after changes to the Privacy Policy take effect will be considered acceptance of the updated terms.

10. Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or m2cuci's management of your personal data, please contact us:

• Via live chat available 24/7 on the m2cuci website.
• Via our support email: [email protected]

Our support team, fluent in Malay and English, is ready to assist you with any privacy and data security enquiries.