Privacy Policy

Introduction

m2cuci ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all users who access and interact with our website at https://m2cuci.cam and any associated services (collectively, "the Platform"). This Privacy Policy ("Policy") explains in clear terms what personal data we collect, the purposes for which we process it, the legal bases upon which we rely, and the rights you hold in relation to your data.

This Policy applies to all persons who visit, register on, or otherwise use the m2cuci platform, including registered players, persons browsing without an account, and former account holders whose data we continue to retain for regulatory compliance purposes.

By accessing the Platform or creating an account with m2cuci, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you should cease use of the Platform immediately.

Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, financial information, and online identifiers.
• "Data Controller" means m2cuci, the entity that determines the purposes and means of the processing of Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of m2cuci pursuant to a written agreement and under the Operator's documented instructions.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, and destruction.
• "Consent" means freely given, specific, informed, and unambiguous agreement by the data subject to the processing of their Personal Data for a stated purpose.
• "Cookie" means a small text file placed on a user's device by a web server for the purpose of maintaining session state, storing preferences, or collecting analytical data.
• "KYC" means Know Your Customer — the identity and document verification process required of registered players to comply with anti-money laundering and regulatory obligations.

Data We Collect

m2cuci collects Personal Data through several means — directly from you during registration and account use, automatically through your interaction with the Platform, and in some cases from third-party verification service providers. The categories of data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name as per Malaysian MyKad, Passport, or other government-issued identity document
• Date of birth and age verification confirmation
• Residential address (including city, state, and postcode within Malaysia)
• Email address and Malaysian mobile phone number
• Username and encrypted password
• Copies of identity documents submitted during KYC verification

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts (in MYR), dates, times, and payment method used
• Bank account details, e-wallet identifiers, or other payment method reference information for verified withdrawal accounts
• Bonus claims, wagering activity history, and promotional participation records
• Source of funds documentation where provided for compliance purposes

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Pages visited on the Platform, click patterns, session duration, and navigation paths
• Login timestamps, geographic region (derived from IP), and device fingerprint data
• Game activity logs including bets placed, games played, outcomes, and session data

3.4 Communications Data

• Records of live chat conversations with m2cuci support staff
• Email correspondence with our support team at [email protected]
• Responses to surveys, feedback forms, or promotional communications where you have participated voluntarily

Legal Basis for Processing

m2cuci processes your Personal Data only where a valid legal basis exists. The primary legal grounds upon which we rely are as follows:

Data Processing Purposes

The Personal Data collected by m2cuci is used for the following specific purposes:

5.1 Account Management

To create, maintain, and administer your player account; to verify your identity and age in accordance with our 21+ policy; to process your login and session activity; and to communicate with you regarding account status, security alerts, and support requests.

5.2 Payment Processing

To facilitate deposits and withdrawals via supported Malaysian payment methods, including Maybank, CIMB Bank, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. Financial data is shared with payment processors solely to the extent required to execute the requested transaction.

5.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct. This includes the use of automated risk-scoring systems that analyse transaction patterns and login behaviour to flag anomalies for manual review.

5.4 Regulatory Compliance

To fulfil obligations under applicable anti-money laundering regulations, age verification requirements, and any reporting obligations to relevant authorities. Where required by law, m2cuci may disclose Personal Data to Malaysian law enforcement agencies, regulatory bodies, or courts without prior notice to the data subject.

5.5 Responsible Gambling

To monitor player activity for signs of problem gambling behaviour, enforce voluntary deposit limits or self-exclusion requests, and contact players where our responsible gambling assessment indicates that outreach is warranted. This processing is carried out in the legitimate interests of player welfare.

5.6 Platform Improvement

To analyse aggregated, anonymised usage data to improve the design, functionality, and performance of the m2cuci platform. Where individual-level data is used for this purpose, it is processed under our legitimate interests and subject to appropriate safeguards.

5.7 Marketing Communications

Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via email. You may opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism included in each communication.

Data Sharing & Disclosure

m2cuci does not sell, rent, or license your Personal Data to third parties for their own commercial or marketing purposes. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary:

6.1 Payment Service Providers

We share financial data with payment processors and banking partners — including operators of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank infrastructure — solely for the purpose of processing your requested transactions. These providers are contractually bound to process data only for payment purposes.

6.2 Identity Verification Providers

Where automated or third-party KYC tools are used, relevant identity data may be shared with licensed identity verification service providers. Such providers are engaged under data processing agreements and are not permitted to retain or use your data beyond the verification purpose.

6.3 Legal & Regulatory Authorities

m2cuci may disclose Personal Data to Malaysian law enforcement agencies, courts, regulatory bodies, or other governmental authorities where required or permitted by applicable law, including in response to a valid legal order, subpoena, or regulatory request.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the m2cuci business, Personal Data held by the Operator may be transferred to the acquiring entity as part of the transaction. You will be notified via the email address on record if any such transfer results in a material change to the way your Personal Data is processed.

Cookies & Tracking Technologies

m2cuci uses cookies and similar tracking technologies on the Platform to ensure its proper operation, personalise your experience, and gather analytical insights. The categories of cookies we use are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preference, and ensure that security features operate as intended. These cookies cannot be disabled without affecting core platform functionality.

7.2 Analytical & Performance Cookies

We use first-party analytical tools to understand how players navigate the Platform — which pages attract the most visits, where users encounter difficulty, and how long sessions typically last. This data is used in aggregate form to improve platform design and performance.

7.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method or notification settings — so that you do not have to reconfigure them on each visit. These cookies enhance convenience but are not essential to core functionality.

7.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the m2cuci Platform. m2cuci does not deploy advertising cookies or share cookie data with third-party advertising networks.

Data Security

m2cuci implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the m2cuci Platform.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms. m2cuci staff cannot view your password in plain text.
• Role-based access controls ensuring that only personnel with a documented operational need can access personally identifiable data.
• Regular security assessments, penetration testing, and vulnerability scanning of our infrastructure.
• Secure, access-controlled server environments with continuous monitoring for suspicious activity.
• Staff training on data protection obligations and incident response procedures.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, m2cuci will notify affected players and relevant authorities in accordance with applicable legal requirements and within the timeframes prescribed by law.

Data Retention

m2cuci retains Personal Data for as long as your account remains active and for such additional periods as are required by law or legitimate business necessity. Our general retention approach is as follows:

• Active Accounts: Personal Data is retained for the full duration of your account's active status, and for a period of up to five (5) years following account closure.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction to meet anti-money laundering regulatory requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the completion of verification or account closure, whichever is later.
• Support Communications: Live chat logs and email correspondence are retained for up to two (2) years from the date of the communication, unless a longer retention period is required by an ongoing dispute or investigation.
• Marketing Data: Where you have consented to marketing communications, your contact details for this purpose will be retained until you withdraw consent or request erasure.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised, whichever is more operationally appropriate.

User Rights

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your Personal Data held by m2cuci:

10.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you, together with information about how and why we process it. We will respond to verified access requests within thirty (30) days.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account profile. For changes to core identity data, please contact [email protected] with supporting documentation.

10.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Please note that this right is subject to overriding legal retention obligations — we cannot delete data that we are legally required to retain.

10.4 Right to Restrict Processing

You may request that we restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested or where you object to processing based on legitimate interests.

10.5 Right to Object

Where we process your Personal Data on the basis of legitimate interests, you have the right to object to such processing. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

10.6 Right to Withdraw Consent

Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact our Data Support team at [email protected]. We will acknowledge your request promptly and respond within the applicable statutory timeframe. We may need to verify your identity before acting on any request.

Minors & Age Policy

The m2cuci Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you are prohibited from using this Platform or providing any Personal Data to us.

Where m2cuci discovers or has reasonable grounds to believe that a player is under the age of 21, we will immediately suspend the relevant account, initiate an investigation, and delete any Personal Data collected from that individual to the extent permitted by law. Any funds deposited by an underage player may be returned at our discretion following investigation.

Third-Party Services

The m2cuci Platform may reference third-party service providers — such as payment processors and identity verification tools — whose own privacy policies govern the handling of any data processed directly by those providers. m2cuci is not responsible for the privacy practices of third-party providers, and we encourage you to review their respective privacy policies where relevant.

All third-party providers engaged by m2cuci who process Personal Data on our behalf do so under the terms of a written data processing agreement that requires them to implement appropriate security measures, process data only on documented instructions, and not to use Personal Data for their own independent purposes.

International Data Transfers

m2cuci primarily processes Personal Data within Malaysia and in jurisdictions where our contracted service providers maintain secure data infrastructure. Where Personal Data is transferred outside of Malaysia — for example, to cloud infrastructure providers or identity verification services operating internationally — such transfers are carried out subject to appropriate contractual safeguards designed to ensure that your data receives a level of protection equivalent to that required under applicable Malaysian data protection standards.

By using the m2cuci Platform and providing your Personal Data, you acknowledge and consent to the potential transfer of your data to jurisdictions outside Malaysia where our third-party service providers are located, subject always to the safeguards described in this section.

Policy Amendments

m2cuci reserves the right to amend, update, or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change the basis on which we share data — we will endeavour to provide advance notice to registered players via email or a prominent notice on the Platform.

The date on which this Policy was most recently revised is displayed at the top of this page. Your continued use of the m2cuci Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you must cease use of the Platform and may request account closure by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by m2cuci, please contact our support team through any of the following channels:

• Email: [email protected] — response within 4 hours for general queries; up to 30 days for formal data rights requests.
• Live Chat: Available 24/7 through the m2cuci Platform interface.
• Subject Line Guidance: For data rights requests, please include "DATA RIGHTS REQUEST" in your email subject line to ensure your request is directed to the appropriate team promptly.

When submitting a data-related request, please provide your registered username and, where applicable, the email address associated with your account. We may require you to verify your identity before we are able to action your request. This is to protect your data from being disclosed to or amended by unauthorised parties.