Privacy Policy — 10cuci

1Scope & Data Controller

This Privacy Policy ("Policy") applies to all personal data processed by 10cuci ("the Company", "we", "us", or "our") in connection with the operation of the online gaming platform accessible at https://10cuci.com ("the Platform") and any related services, applications, or communications. 10cuci acts as the data controller in respect of personal data collected from registered users ("Players") and visitors of the Platform.

This Policy is to be read in conjunction with the 10cuci Terms & Conditions. Defined terms used herein carry the same meaning as in the Terms & Conditions unless otherwise specified. Where this Policy conflicts with any jurisdiction-specific data protection legislation applicable to you, 10cuci will comply with the more protective standard to the extent reasonably practicable.

2Personal Data We Collect

10cuci collects personal data from you through various means, depending on your level of interaction with the Platform. The categories of data collected are set out below.

2.1 Registration Data

When you create a 10cuci account, we collect: full legal name, date of birth, email address, Malaysian mobile phone number, and your chosen username. This data is necessary to create and identify your account.

2.2 KYC Verification Data

To comply with anti-money laundering obligations and international gaming authority requirements, 10cuci collects identity verification documents including government-issued photo identification (such as Malaysian NRIC or passport), proof of address, and payment method verification documents. These documents are processed through secure, certified KYC systems.

2.3 Financial Data

We collect records of all financial transactions conducted through your 10cuci account, including deposit amounts, withdrawal requests, payment method identifiers (e.g., masked bank account numbers, eWallet account identifiers), and transaction timestamps. We do not store full payment card numbers on our servers.

2.4 Gaming Activity Data

10cuci records all gaming sessions, bets placed, outcomes, game preferences, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

2.5 Technical & Device Data

We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device identifiers, referring URLs, session duration, and page interaction data. This data helps us maintain Platform security, detect fraud, and improve the user experience for Malaysian players.

2.6 Communications Data

Records of your communications with 10cuci, including live chat transcripts, support emails, and any complaints submitted through the Platform, are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3How We Use Your Personal Data

4Legal Basis for Processing

10cuci processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required to comply with anti-money laundering regulations, gaming licence conditions, and other applicable legal requirements under international gaming authority oversight.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics that does not override your fundamental data protection rights.
• Consent: Processing for direct marketing communications, where you have provided express consent during registration or through account settings. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5Data Sharing & Third-Party Disclosure

10cuci does not sell or rent your personal data to third parties. We may share personal data with the following categories of recipients in the circumstances described:

• Payment processors and banking partners: Financial data is shared with payment service providers (including FPX, Touch 'n Go eWallet operator, Boost, and relevant banking partners such as Maybank, CIMB Bank, and Public Bank) strictly to the extent necessary to process your transactions.
• KYC and identity verification providers: Identity documents and related data are processed by certified third-party KYC service providers under strict data processing agreements.
• Game software providers: Limited technical session data may be shared with our licensed game providers (e.g., Pragmatic Play, Evolution Gaming) as required for the delivery of their gaming services, subject to their own data protection obligations.
• Regulatory authorities: 10cuci will disclose personal data to gaming regulatory authorities, law enforcement agencies, or courts when legally required or when we have a good-faith belief that disclosure is necessary to protect our legal rights or prevent illegal activity.
• Fraud prevention networks: Where fraud or money laundering is suspected, relevant data may be shared with industry fraud prevention bodies and law enforcement agencies in accordance with applicable legal obligations.

All third-party service providers who process personal data on 10cuci's behalf are required to implement appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than the contracted service.

6Cookies & Tracking Technologies

10cuci uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, remembered usernames (if enabled), and display preferences to personalise your experience on the 10cuci Platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how Players use the Platform. This data helps 10cuci identify technical issues, improve navigation, and understand which game categories are most popular among Malaysian players. No personally identifiable information is transmitted via analytics cookies.
• Marketing cookies: Used only where you have provided consent, to track referrals from affiliate partners and to measure the effectiveness of our promotional campaigns. These can be declined without affecting your use of the Platform.

You may manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to your 10cuci account.

7Data Retention

10cuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and KYC data: Retained for a minimum of five years following account closure, as required under applicable anti-money laundering regulations and gaming licence conditions.
• Transaction records: Retained for a minimum of seven years for financial audit and regulatory compliance purposes.
• Gaming activity records: Retained for five years following account closure or the last gaming session, whichever is later.
• Support communications: Retained for three years from the date of the interaction unless subject to an ongoing dispute or regulatory inquiry.
• Marketing preferences and consent records: Retained for three years from the last consent event or the date of withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8Your Data Rights

As a data subject, you have the following rights in relation to the personal data held by 10cuci. To exercise any of these rights, please contact our support team via live chat or email as set out in Section 13.

• Right of access: You may request a copy of the personal data 10cuci holds about you, together with information about how it is processed.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data held about you. You may also update your account details directly through the Platform's account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that 10cuci cannot delete data it is legally required to retain.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to object: You may object to processing based on our legitimate interests. You may also object to direct marketing at any time.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10cuci will respond to all data rights requests within 14 business days. In complex cases, this may be extended by a further 30 days, in which case you will be notified of the extension and the reason for the delay.

9Data Security

10cuci implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the Platform and user devices.
• Encryption of sensitive data fields at rest, including password hashes (using industry-standard bcrypt or equivalent) and payment identifiers.
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated operational need.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security firms.
• Incident response procedures providing for prompt notification of material data breaches to affected users and relevant regulatory authorities in accordance with applicable requirements.

While 10cuci employs commercially reasonable security standards, no online platform can guarantee absolute immunity from all security threats. You are encouraged to use a strong, unique password for your 10cuci account and to notify us immediately of any suspected unauthorised access.

10Children & Minors

The 10cuci Platform is strictly intended for adults aged 21 years and above. 21+ We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process for all accounts. If 10cuci becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete such data and close the associated account. If you believe a minor has created an account on the Platform, please contact our support team immediately.

11Cross-Border Data Transfers

10cuci's primary data processing infrastructure is located in data centres serving the Southeast Asian region. Where personal data is transferred to service providers located outside of Malaysia — for example, to international game software providers, cloud infrastructure partners, or certified KYC processing firms — 10cuci ensures that such transfers are subject to appropriate safeguards, which may include contractual data protection clauses equivalent to applicable data protection standards. By using the 10cuci Platform, you acknowledge and consent to such cross-border transfers where necessary for the provision of services.

12Updates to This Privacy Policy

10cuci may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or gaming authority requirements. Material changes will be communicated to registered Players via email notification to the address on file and/or a prominent notice on the Platform. The updated Policy will take effect immediately upon publication at https://10cuci.com/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

13Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests, or concerns about how 10cuci handles your personal data, please contact our support team through the following channels:

10cuci will acknowledge all formal privacy requests within 2 business days and will provide a substantive response within 14 business days, extendable to 44 business days for complex requests.