666cuci Privacy Policy – Member Personal Data Protection

This Privacy Policy explains in detail how 666cuci collects, uses, stores, shares, and protects your personal information when you use our platform, website, mobile app, and related services. By registering an account or continuing to use 666cuci's services, you agree to the practices described in this policy.

We understand that your trust is our most valuable asset. That is why we are committed to handling your personal data to the highest standards — not merely to meet legal requirements, but because we genuinely respect the privacy of every 666cuci member.

666cuci collects several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the information we may collect:

We only collect information that is strictly necessary to provide a safe, fair, and responsible service. We do not collect sensitive information such as health data, religious beliefs, or political views unless you voluntarily disclose such information in your communications with us.

Your personal data is collected through various channels as you interact with the 666cuci ecosystem:

• Account Registration: Information you provide when registering a new account at 666cuci, including your name, email, phone number, and date of birth.
• KYC Process: Identity documents and selfies you upload for identity verification before your first withdrawal is processed.
• Financial Transactions: Payment details collected when you make a deposit or withdrawal via FPX, DuitNow, Touch 'n Go eWallet, or GrabPay.
• Platform Usage: Data collected automatically via cookies, server logs, and tracking technologies as you browse our website or use our app.
• Customer Support: Information you share when contacting the 666cuci support team via live chat, email, or other communication channels.
• Third-Party Partners: In some cases, we receive information from identity verification partners or payment service providers to ensure the accuracy of your data.

Every piece of data we collect has a clear and legitimate purpose. 666cuci uses your personal information for the following purposes:

• Account Management: Creating, verifying, and managing your member account, including the login process, password reset, and two-factor authentication (2FA).
• Transaction Processing: Processing deposits, withdrawals, and fund transfers securely and efficiently according to your chosen payment method.
• Identity Verification (KYC): Verifying your age and identity to comply with legal requirements and prevent use of the platform by ineligible individuals.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account misuse, and unauthorised access to our platform.
• Service Improvement: Analysing usage patterns to improve platform design, technical performance, and the overall user experience.
• Service Communications: Sending important notifications relating to your account, transactions, policy changes, and security updates that cannot be disabled.
• Marketing (with consent): Sending promotional offers, bonuses, and new game information — only if you have given explicit consent to receive marketing communications.
• Responsible Gaming: Monitoring gameplay patterns to identify early warning signs of gambling-related issues and offering appropriate support tools.
• Legal Compliance: Meeting reporting obligations to the relevant authorities when required by law.

We will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

666cuci does not sell, rent, or trade your personal data. However, in the course of normal business operations, we may share your information with the following categories of parties:

• Payment Service Providers: Financial institutions, banks, and eWallet providers required to securely process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game Service Providers: Casino, sports, and fish shooting game software providers that require minimal data to operate games on our platform.
• Identity Verification Service Providers: Third-party KYC partners who assist us in verifying your identity documents. They are required to comply with strict data protection standards.
• Technology Infrastructure Providers: Cloud computing and cybersecurity companies that support the technical operations of our platform.
• Legal Authorities: Law enforcement agencies, courts, or regulatory bodies when we are required to do so by applicable law.

Protecting your personal data is the absolute priority of 666cuci. We implement comprehensive technical and organisational security layers to prevent unauthorised access, disclosure, alteration, or destruction of your data:

• Transit Encryption: All communications between your browser or app and the 666cuci servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Storage Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted at rest using AES-256.
• Strict Access Controls: Only verified 666cuci staff with a clear work requirement are permitted to access member personal data. All access is logged and audited.
• Real-Time Monitoring: Our threat detection system operates 24 hours a day to identify and respond to any suspicious activity involving member data.
• Regular Security Testing: We conduct regular penetration testing and security audits carried out by independent cybersecurity firms.
• Incident Response Plan: 666cuci maintains a clear incident response procedure. In the event of a material data breach, affected members will be notified within 72 hours.

666cuci retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration of your active account and for at least 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years following a transaction, in line with applicable financial and tax legal requirements.
• KYC Documents: Retained for the period prescribed by applicable anti-money laundering legislation, typically 5–7 years.
• Support Communication Logs: Retained for 2 years after case resolution for quality control and dispute settlement purposes.
• Marketing Data: Deleted or anonymised within 30 days of you withdrawing your marketing consent.
• Technical Data & Logs: Retained for a maximum of 12 months, then automatically anonymised or deleted.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

666cuci uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect core functionality of the 666cuci platform. We do not use third-party cookies for external advertising outside the 666cuci ecosystem.

As a 666cuci member, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights without unnecessary complexity:

As part of 666cuci's global platform operations, your personal data may be processed or stored on servers located outside Malaysia. Any such transfer is carried out with adequate safeguards in place:

• Transfers are made only to countries or entities with a level of data protection equivalent to or higher than Malaysia's standards.
• Implementation of recognized Standard Contractual Clauses to ensure continuous data protection within the recipient's jurisdiction.
• A data transfer impact assessment is conducted before any new transfer is implemented.
• Binding data processing agreements with all international providers that handle 666cuci member data.

You have the right to request further information about the safeguards used for international data transfers by contacting our support team.

The 666cuci platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. If you believe a child has provided us with personal data without parental or guardian consent, please contact us immediately.

Any account found to have been registered by an underage individual will be closed immediately, and all related data will be deleted from our systems in accordance with our secure deletion procedures.

666cuci reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this policy.
• Sending email notifications to all registered members at least 14 days before changes take effect.
• Displaying a prominent notice on the 666cuci platform homepage for at least 7 days.
• In cases of highly significant changes, we may request your fresh consent before continuing to process your data.

Continued use of the 666cuci platform after the effective date of any changes will be considered acceptance of the updated terms. You are encouraged to review this policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the 666cuci Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Target Response Time: 1–3 business days for general inquiries; 14 days for formal data rights requests