Privacy Policy 10cuci — Your Personal Data Protection is Our Priority

10cuci ("we", "Platform") is an online gaming platform operator committed to protecting the privacy of every user who uses our services. This Privacy Policy applies to all information collected through the 10cuci website, mobile app, and any related communication channels.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. This means we only collect data that is strictly necessary, use it solely for the stated purposes, and do not retain it longer than required.

This policy clearly outlines:

• What personal data we collect from you.
• Why we need it and how it is used.
• Who that data may be shared with and under what circumstances.
• Your rights regarding that data and how to exercise them.

We collect personal data from you in several ways — directly when you register or interact with the platform, and indirectly through technologies such as cookies while you use our services.

We does not collect sensitive data such as your religious beliefs, ethnicity, political opinions, or health records. If you voluntarily disclose such information while communicating with us, it will not be recorded or processed.

Every piece of data we collect has a clear and lawful purpose. We do not use your data for purposes not stated in this policy without obtaining additional consent from you.

• Account management: Processing registrations, verifying identity through KYC, and managing your account day-to-day including settings, limits, and preferences.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately in accordance with your instructions.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and suspicious activity on the platform.
• Customer support: Addressing enquiries, resolving complaints, and providing technical assistance more effectively when we understand your account context.
• Legal compliance: Meeting reporting and compliance obligations to regulatory bodies, judicial authorities, or other applicable legal requirements.
• Platform improvements: Analysing usage patterns in aggregate (not individually) to improve user experience, identify technical issues, and develop new features.
• Marketing communications: Sending information about promotions, bonuses, and new offers — only if you have consented to receive them, and you may unsubscribe at any time.

10cuci does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

• Payment providers: Transaction information required to process your deposits and withdrawals is shared with payment providers such as FPX, Touch 'n Go, and GrabPay. These providers are subject to their own privacy policies and security standards.
• Game software providers: Minimum technical data required to operate the games you play may be processed by the relevant game software provider. This does not include your personal identity information.
• Authorities and regulatory bodies: When required by law, court order, or direction from a legitimate authority, we will disclose the necessary data. We will not disclose more than what is required.
• Technical service providers: Companies providing technical infrastructure such as cloud computing, cybersecurity, and analytics may process your data as part of their services to us, subject to strict confidentiality agreements.

Protecting your data is a technical and organisational investment we take seriously. The following are the layers of protection we have in place:

• End-to-end encryption: All communications between your device and 10cuci servers are secured with SSL/TLS 256-bit encryption — the same standard used by internationally accredited banking institutions.
• Strict access controls: User data is only accessible by staff with a specific need to carry out their duties. All access is logged and audited on a regular basis.
• Secure password storage: Your password is never stored in plain text. We use one-way cryptographic hashing, which ensures your actual password cannot be recovered by anyone — including the 10cuci team.
• Continuous threat monitoring: Our security system monitors suspicious activity in real time and takes immediate action when threats are detected.
• Regular penetration testing: We conduct regular security testing to identify and patch any vulnerabilities before they can be exploited.

While we take all reasonable measures, no system can guarantee 100% security against all threats. Should any security incident involving your data occur, we will notify you promptly and take appropriate remedial steps.

Under Malaysia's PDPA and the best privacy practices we uphold, you have the following rights regarding the personal data we hold:

The 10cuci platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as secure login, maintaining active sessions, and preventing session fraud. They cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your settings such as language preference, display layout, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how users interact with our platform in aggregate. This data is used to improve platform design and performance, not to identify individuals.
• Security Cookies: Used to detect and prevent suspicious activity, including attacks such as cross-site request forgery (CSRF) and unauthorized login attempts.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or experience of using the 10cuci platform.

We do not retain your personal data longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and the original purpose of data collection.

• Active account data: Retained for as long as your account is active and for a defined period after account closure for legal compliance and resolution of any disputes that may arise.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records and anti-money laundering (AML).
• KYC records and identity verification: Retained for the period specified by the relevant regulatory body, typically 5 years after the end of the business relationship.
• Customer support communication logs: Retained for 2 years to allow reference should any related issues arise that require historical context.
• Cookie and analytics data: Session data is deleted when you log out. Aggregated analytics data is retained longer but contains no personally identifiable information.

Once the retention period has expired or the data is no longer needed, we will securely delete or destroy it using methods that prevent recovery.

10cuci reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features we introduce.

When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice within the platform upon your next login to inform you of the changes.
• For significantly material changes that affect your rights, we will send a notification to the email address registered to your account.

Continued use of the 10cuci platform after changes take effect is considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account in accordance with the procedure set out in our Terms and Conditions.

If you have any questions, concerns or complaints about how we handle your personal data, we encourage you to contact us directly — we are ready to clarify and resolve any issues promptly and transparently.

Ways to reach us:

• In-platform Live Chat: The fastest way to get an immediate response. Our support team operates 24/7 and can assist in Bahasa Melayu.
• Email: Send your written enquiry to [email protected]. We will respond within 2 business days.
• Account settings section: For data-related requests such as access, correction, or deletion, you can initiate the process directly from the settings panel in your account.