At 999cuci, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have in relation to your information. Please read this document carefully before using the Platform.
Six core privacy principles that guide how 999cuci handles every piece of your personal data.
All personal data is stored with AES-256 encryption at rest and in transit.
We never sell, rent, or trade your personal data to third-party advertisers.
We only collect data that is strictly necessary for operating the Platform.
Every purpose for which your data is used is explicitly described in this Policy.
You retain the right to access, correct, and request deletion of your data.
Data is retained only for as long as required by law or operational necessity.
This Privacy Policy ("Policy") is issued by 999cuci ("we", "us", "our", "the Company") and applies to all users ("you", "User", "Player") of the 999cuci website and Platform located at https://999cuci.cam, including all associated services, features, promotions, and communications provided through the Platform.
We are committed to protecting the personal data of all individuals who interact with the 999cuci Platform — from players in Kuala Lumpur and Penang to members joining from across Malaysia. This Policy describes in clear and transparent terms what personal information we collect, the purposes for which it is processed, the legal grounds on which we rely, how long we retain it, with whom we share it, and what rights you hold over your own data.
This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which together constitute the full legal framework governing your use of the Platform.
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, email address, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For this Platform, 999cuci is the Data Controller. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a contractual arrangement (e.g., payment processors, KYC providers). |
| "KYC" | Know Your Customer — the identity and document verification process required under anti-money laundering and responsible gambling obligations. |
| "Cookies" | Small data files placed on your device by the Platform to store session, preference, and analytical data. |
| "Platform" | The 999cuci website, mobile-responsive interface, and all associated services at https://999cuci.cam. |
999cuci collects personal data across several categories, depending on how you interact with the Platform. The categories of data we collect are set out below:
We collect personal data through the following means:
999cuci processes your personal data for the following specific purposes:
| Purpose | Details |
|---|---|
| Account Management | Creating, maintaining, and administering your registered account, including processing password resets, account updates, and correspondence relating to your account. |
| Identity Verification | Confirming your identity and age (21+) through KYC procedures, and verifying the accuracy of account information at registration and on an ongoing basis. |
| Payment Processing | Facilitating deposits and withdrawals via Malaysian e-wallets, local banks, and cryptocurrency networks. Verifying that payment methods are registered in your name. |
| Fraud & AML Prevention | Detecting, investigating, and preventing fraudulent account activity, bonus abuse, money laundering, and other prohibited conduct. Reporting suspicious activity where legally required. |
| Responsible Gambling | Monitoring gameplay patterns to identify potential problem gambling behaviour. Enforcing self-exclusions, deposit limits, and session time limits you have set on your account. |
| Customer Support | Responding to your queries, resolving disputes, processing complaints, and maintaining records of communications for quality assurance and audit purposes. |
| Promotions & Loyalty | Calculating loyalty tier eligibility, processing birthday bonuses, managing referral rewards, and communicating relevant promotional offers to your registered email address. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, game selection, load times, and the overall user experience. |
| Legal Compliance | Meeting obligations under applicable anti-money laundering legislation, data retention requirements, and any lawful regulatory directives. |
999cuci processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
999cuci does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data in the following circumstances:
We engage trusted third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors (e-wallet providers, banks, cryptocurrency payment gateways), KYC and identity verification providers, customer support platform operators, and technical infrastructure providers. All processors are required to handle your data only as instructed and in accordance with applicable data protection obligations.
We may disclose personal data where required to do so by applicable law, regulation, court order, or the direction of a competent regulatory or law enforcement authority. Such disclosures will be limited strictly to what is legally required.
In the event of a merger, acquisition, restructuring, or sale of assets involving 999cuci, personal data held by the Platform may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data going forward.
Where required to prevent or investigate serious fraud or financial crime, we may share data with industry fraud prevention bodies or with other gambling operators who operate verified responsible gambling exclusion registers.
The 999cuci Platform uses cookies and similar tracking technologies to operate core functionality, analyse usage patterns, and maintain session security. The types of cookies used are described below:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impacting Platform functionality. |
| Functional | Remember your preferences (e.g., language settings, game display options) to provide a more personalised experience on return visits. |
| Analytical | Collect aggregated, anonymised data about how users navigate the Platform — page views, session durations, click paths — to support performance improvements. |
| Security | Used to detect and prevent fraudulent login attempts, suspicious device patterns, and automated bot activity on the Platform. |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may result in degraded functionality or inability to access certain parts of the Platform. We do not use third-party advertising or tracking cookies that report your browsing behaviour to external marketing platforms.
999cuci implements a layered approach to data security, incorporating technical, organisational, and procedural safeguards appropriate to the nature of the data we hold. Key security measures include:
While we take every reasonable measure to protect your data, no online system is completely immune to security risks. You are encouraged to use a strong, unique password for your 999cuci account and to enable two-factor authentication from your account security settings.
999cuci retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure |
| KYC / identity documents | Minimum 5 years from date of verification, per AML requirements |
| Financial transaction records | 7 years from date of transaction, per financial recordkeeping obligations |
| Gameplay and wagering data | Duration of account plus 2 years following account closure |
| Customer support communications | 3 years from date of last interaction |
| Session and access logs | 90 days, unless retained longer for security investigation purposes |
| Self-exclusion records | Duration of exclusion plus 5 years |
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where data is anonymised and can no longer be linked to an identifiable individual, it may be retained indefinitely for statistical and analytical purposes.
As a User of the 999cuci Platform, you hold the following rights in relation to your personal data. These rights may be exercised by submitting a written request to our support team using the contact details set out in Section 16 of this Policy.
Request a copy of the personal data we hold about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where retention is no longer legally required or justified.
Request that we limit the processing of your data in certain circumstances while a concern is under review.
Receive a structured, machine-readable copy of data you have directly provided to us, where technically feasible.
Object to processing of your data where we rely on legitimate interests as the legal basis, including objection to profiling.
Please note that certain rights may be limited where processing is necessary to comply with a legal obligation, where the data is required for the establishment, exercise, or defence of legal claims, or where the request would adversely affect the rights of third parties.
The 999cuci Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory part of the account registration and KYC process.
If we discover or have reason to believe that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, delete the data in question to the extent permitted by law, and take appropriate steps to prevent further access.
If you are a parent or guardian and believe that a minor has submitted personal data to 999cuci or has been using the Platform, please contact us immediately using the contact details in Section 16 so that we can investigate and take prompt action.
The 999cuci Platform integrates with a number of third-party service providers to deliver core functionality. These include payment processors such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banking institutions including Maybank, CIMB, Public Bank, and Hong Leong, as well as cryptocurrency gateway services for BTC, ETH, USDT, and BNB transactions.
Each of these third-party providers operates under its own privacy policy and data protection framework. 999cuci is not responsible for the data handling practices of third-party payment providers once your transaction data has been passed to their systems for processing. We encourage you to review the privacy policies of any payment provider you use in connection with your 999cuci account.
The 999cuci Platform does not contain links to external websites for general browsing purposes. Any third-party integrations are strictly functional in nature, relating to payment processing, identity verification, or platform infrastructure.
In certain circumstances, the operation of the 999cuci Platform may involve the transfer of your personal data to service providers or infrastructure partners located outside of Malaysia. Such transfers may occur in connection with cloud hosting, KYC verification, fraud detection, or customer support operations.
Where personal data is transferred internationally, 999cuci takes appropriate measures to ensure that your data continues to receive an adequate level of protection, consistent with the standards applied within Malaysia. This includes implementing contractual data transfer agreements with overseas processors that incorporate appropriate data protection clauses.
By using the 999cuci Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject at all times to the security and confidentiality obligations described in this Policy.
999cuci reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational procedures. All material updates to this Policy will be communicated to registered Users via the email address associated with their account, with a reasonable notice period prior to the changes taking effect.
The revised Policy will be published on this page with an updated "Last Updated" date at the top of the document. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the revised terms, you should discontinue your use of the Platform and may request account closure.
We encourage all Users to review this Policy periodically to stay informed of how their personal data is being protected and used.
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the 999cuci Data Privacy team using the following details:
Data rights requests and privacy-related enquiries should be submitted from the email address associated with your registered 999cuci account to facilitate identity verification. We will acknowledge receipt of your request within 72 hours and aim to provide a substantive response within 30 calendar days.
We've built 999cuci with your privacy and security at the foundation. If you have questions about your data, our support team is available around the clock. Ready to experience Malaysia's most trusted gaming platform?