I3cuci Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction and Scope of This Privacy Policy

This Privacy Policy is issued by i3cuci and applies to all users of our online betting platform accessible via i3cuci.click. This document explains how we, as the data controller, manage your personal data responsibly and transparently.

We are committed to ensuring that the personal data you share with i3cuci — whether during account registration, the deposit process via Touch 'n Go eWallet or GrabPay, or while you are playing slots and placing badminton bets — is processed in accordance with robust, internationally recognised data protection principles.

This policy should be read together with Terms & Conditions and page Responsible Gaming us. Together, these three documents form the complete framework of the agreement between you as a member and i3cuci as a platform.

2 Types of Personal Data We Collect

i3cuci collects various categories of personal data depending on how you interact with our platform. The main categories of data we collect are as follows:

Identity Data:

• Full name as shown on your identification document
• Malaysian Identity Card number (MyKad) or passport number — collected during the KYC (Know Your Customer) process
• Date of birth for age verification (18 and above)
• Malaysian residential address

Contact Data:

• An active Malaysian mobile phone number
• A valid and active email address
• The username you chose during registration

Technical & Usage Data:

• Your device's IP address at the time of login
• Web browser type and operating system
• Session data — login time, logout time, session duration
• History of pages visited within the platform i3cuci
• Cookie data and device identifiers

Financial & Transaction Data:

• Payment methods accepted — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Gaming history and Sports Betting records
• Current account balance

3 How We Use Your Personal Data

The personal data we collect is used solely for legitimate purposes directly related to the operation of our platform i3cuci. Those purposes are as follows:

• Account Management: To create and manage your member account, process your registration, and verify your identity through the required KYC process.
• Transaction Processing: Processing deposits via e-wallet and Malaysian FPX, executing winnings withdrawals to your account, and maintaining accurate financial records in MYR.
• Service Provision: Gives you access to all games and platform features i3cuci — slots, poker, Live Casino with real dealers, badminton betting, cricket, Malaysian Super League football, and real-time match odds.
• Customer Support: Resolving enquiries, complaints, and technical issues that you raise with our 24/7 support team.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and platform abuse.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) and KYC requirements.
• Platform Improvements: Analyzing usage patterns in aggregate (not at the individual level) to improve user experience, platform performance, and content relevance.
• Service Communications: Sending important notices about your account, changes to terms, relevant promotions, and security information via email or message.

i3cuci does not use your data for any purpose inconsistent with the original purpose of collection without first obtaining fresh consent from you.

4 Legal Basis for Data Processing

Every personal data processing activity carried out by i3cuci is supported by at least one valid legal basis. The bases we rely on are as follows:

• Contract Performance: Processing required to provide platform services i3cuci to you under the membership agreement you entered into at registration. This includes processing deposits, withdrawals, and account management.
• Legitimate Interest: Processing required for legitimate interests i3cuci such as fraud prevention, platform security, and service improvement — provided those interests do not override your fundamental rights and freedoms.
• Compliance with Legal Obligations: Processing required under applicable Malaysian law, including anti-money laundering requirements, KYC, and financial record-keeping obligations.
• Consent: For processing not covered by the bases above, we will obtain your explicit consent. You have the right to withdraw consent at any time without affecting the validity of any processing carried out prior to withdrawal.

5 Data Sharing and Disclosure to Third Parties

i3cuci does not sell, rent, or trade your personal data to any external party for their own marketing purposes. This is our absolute commitment to every member.

However, in the course of operating our platform, i3cuci may share your data with a limited category of third parties in the following circumstances:

• Payment Service Providers: Payment gateways that process e-wallet transactions (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX (Maybank2u, CIMB Clicks) require minimum transaction data to process your payments securely.
• Game Software Providers: Providers of slots, Live Casino, and poker platform software supplying the technology for i3cuci may receive the minimum technical data required to maintain continuity of gameplay.
• Cloud Service Providers: Data is stored on secure, certified cloud servers. These providers are subject to strict data processing agreements.
• Legal Authorities: i3cuci will disclose required data to competent authorities such as the police, MACC, or Bank Negara Malaysia when mandated by law or a valid court order.
• Consultants and Auditors: Legal advisors, accountants, and auditors engaged to carry out legitimate business functions, subject to binding confidentiality agreements.

6 Data Security Measures We Take

The security of your personal data is our highest priority i3cuci. We implement multiple layers of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the i3cuci are encrypted using SSL 256-bit standards — the same standard used by Malaysia's major banking institutions, including Maybank and CIMB.
• Encryption of Stored Data: Sensitive data stored in our database is encrypted using strong encryption algorithms to protect the data even when at rest.
• Two-Factor Authentication (2FA): We offer 2FA as an added security layer for your account. We encourage all members i3cuci to enable this feature.
• Continuous Security Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, and anomalies in login patterns.
• Strict Access Controls: Staff i3cuci are granted access only to the data they need to perform their respective duties — the principle of "least privilege" is strictly observed.
• Regular Backups: Data is backed up regularly to a secure, separate location to ensure swift recovery in the event of a system disruption.
• Security Testing: Platform i3cuci undergo regular penetration testing and security reviews by independent cybersecurity experts.

While we take every reasonable precaution, no security system is 100% impenetrable. You also play an important role in your own account security by keeping your password safe, avoiding unattended use of public devices, and enabling 2FA.

7 Use of Cookies and Tracking Technologies

Platform i3cuci uses cookies and similar tracking technologies to enhance your user experience and ensure that essential platform functions operate correctly.

Types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session management, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymised statistical data on how you use the platform — which pages are visited most, session duration, and errors encountered — to help us improve the user experience.
• Functional Cookies: Remembering your preferences — such as language, display settings, and login details (if you select "remember me") — to make repeat visits to the platform more convenient i3cuci.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the platform i3cuci. Your continued use of our platform after the cookie notice has been acknowledged is considered your consent to the use of cookies as described above.

8 Financial Transaction & Payment Data

Given that i3cuci involves financial transactions in Malaysian Ringgit (MYR), we take additional security measures to protect your financial data.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (including Maybank2u and CIMB Clicks), your e-wallet or banking account details are processed directly through a certified payment gateway. i3cuci does not store your bank account number, card number, or e-wallet password.

What we retain for record-keeping and compliance purposes includes:

• Transaction value in MYR
• Type of payment method used (e.g. Touch 'n Go, FPX)
• Transaction date and time
• Transaction reference number
• Transaction status (successful, failed, in progress)

These transaction records are retained to meet our legal obligations for financial record-keeping and to resolve any transaction disputes that may arise. This data is not shared with any party beyond those stated in Section 5 above.

9 Data Retention Period

i3cuci does not retain your personal data for longer than is necessary for the original purpose of collection, or as required by law.

Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration that your account remains active at i3cuci.
• Data After Account Closure: After account closure, core personal data is retained for a minimum of 5 years to meet anti-money laundering requirements and legal record-keeping obligations in Malaysia.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian accounting and taxation legal requirements.
• Security Logs: Access logs and security activity are retained for 12 months for the purpose of security incident investigation where required.
• Cookie Data: This depends on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies expire according to the duration set within each cookie.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

10 Your Rights Regarding Personal Data

As a member i3cuci, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. This request can be made by emailing support@i3cuci.click.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may request a correction. Basic profile information can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to any legal retention obligations we are required to comply with.
• Right to Object to Processing: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to its withdrawal.
• Right to Complain: If you are not satisfied with how i3cuci handles your data, you have the right to lodge a formal complaint with us or with the relevant data protection authority.

To exercise any of the rights above, please contact us at support@i3cuci.click, stating the right you wish to exercise along with your account details. We will process your request within 30 business days. In complex cases, this period may be extended to 60 days, with notice provided to you.

11 Data of Minors Under 18

Platform i3cuci is intended for individuals aged 18 and above. We do not knowingly collect or process personal data of children or minors under the age of 18.

If we discover that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will promptly take the following steps:

• Immediately suspend the account in question
• Delete all personal data associated with that individual
• Returning any remaining balance to the original payment method used

If you become aware that a minor has registered or is using the platform i3cuci, please notify us immediately at support@i3cuci.click so we can take the appropriate action.

12 Data Breaches and Notification Procedures

Although i3cuci take all reasonable security measures, we recognise that a data breach is a possibility we must be prepared to handle responsibly.

Our data breach response procedure is as follows:

• Detection & Assessment: Our security team monitors systems around the clock to detect any breach in the shortest possible time.
• Containment: Once a breach is detected, immediate steps are taken to contain the damage and prevent any further exposure of data.
• Notice to Affected Members: If a data breach is likely to result in a high risk to your rights and freedoms, we will notify you within 72 hours of detecting the breach. The notice will include: the nature of the breach, the data potentially affected, the steps we have taken, and recommended protective measures you can take.
• Reporting to Authorities: Material data breaches will be reported to the relevant authorities in accordance with applicable legal requirements.

While awaiting official notification, it is best practice for you to change your account password i3cuci regularly and ensure that the email address and phone number linked to your account are always up to date and active so you can receive any important security notices.

13 Amendments to This Privacy Policy

i3cuci reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or enhancements to the privacy protections we offer to Malaysian players.

When we make material changes to this Privacy Policy, we will:

• Updating the "Updated" date at the top of this document
• Displaying a clear notice within the platform i3cuci for a reasonable period following any amendment
• Sending email notices to the registered address for material amendments

Continued use of the platform i3cuci after an amendment is published will be considered your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to ensure you are always aware of the latest version of our policy.

14 Contact the i3cuci Privacy Officer

For any enquiries, concerns, or requests relating to your personal data and this Privacy Policy, please contact us through the following channels:

• Email: support@i3cuci.click (with the subject line "Privacy Enquiry")
• Live Chat: Available 24/7 within the platform i3cuci after login
• Response Time: Privacy enquiries are typically addressed within 2–5 business days

For formal requests relating to data rights such as access, rectification, or deletion, please send an email with the following details: your full name and account ID number i3cuci, the right you wish to exercise, and a brief description of your request. We may require identity verification before processing certain requests, for your own protection.