m2cuci Privacy Policy

1.Who We Are

1.1 m2cuci operates an online casino and sportsbook platform accessible at m2cuci.win, offering casino games, live dealer products, sports betting, and related entertainment services to eligible adult members.

1.2 For the purposes of this Policy, m2cuci is the data controller in respect of personal data collected directly from members and visitors through the Platform. Where m2cuci engages third-party processors to handle personal data on its behalf, m2cuci remains responsible for ensuring those processors apply appropriate data protection standards.

1.3 Questions regarding this Policy or requests to exercise your data rights may be directed to our support team via live chat or at the email address provided in Section 13.

2.Data We Collect

2.1 Registration Data. When you create an m2cuci account, we collect: full name, date of birth, email address, mobile number, preferred username, and your nominated payment method details for account verification purposes.

2.2 Identity Verification Data. In compliance with applicable anti-money laundering and know-your-customer requirements, we may collect copies of government-issued identity documents (e.g., Malaysian MyKad, passport), proof of address, and proof of payment method ownership. This data is collected and processed by our verification partners in accordance with their own privacy policies.

2.3 Transaction Data. We record all deposits, withdrawals, bonus credits, and betting activity associated with your account. This includes timestamps, amounts, payment method references, and game session data.

2.4 Device and Usage Data. When you access the Platform, we automatically collect certain technical data, including your IP address, browser type, operating system, device identifiers, session duration, pages visited, and in-platform interaction data. This data is used for security monitoring, fraud detection, and platform improvement.

2.5 Communications Data. If you contact m2cuci via live chat, email, or other channels, we retain records of those communications including the content and any attachments, to manage your query and maintain service quality records.

3.How We Use Your Data

3.1 m2cuci uses the personal data it collects for the following purposes:

• To create, manage, and maintain your m2cuci account;
• To process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, and other supported payment methods;
• To verify your identity in compliance with applicable anti-money laundering regulations;
• To deliver the casino, sportsbook, and live dealer services you have requested;
• To detect and prevent fraud, money laundering, and other prohibited conduct;
• To monitor compliance with our Terms & Conditions and responsible gaming obligations;
• To provide customer support and respond to queries and complaints;
• To send transactional communications, including deposit confirmations, withdrawal updates, and security alerts;
• To improve the Platform's performance, features, and user experience based on anonymised usage analytics;
• To comply with applicable legal and regulatory obligations.

3.2 Where m2cuci wishes to use your personal data for direct marketing purposes — such as sending promotional offers or notifying you of new games — we will seek your consent separately and provide a clear opt-out mechanism in every such communication. Marketing consent is not a condition of account registration.

4.Legal Basis for Processing

4.1 m2cuci processes personal data under the following legal bases:

• Contractual necessity: processing required to perform the contract between m2cuci and the member (e.g., account management, payment processing, service delivery);
• Legal obligation: processing required to comply with applicable anti-money laundering, know-your-customer, and other regulatory requirements;
• Legitimate interests: processing for fraud detection, security monitoring, and platform improvement, where such processing does not override the member's privacy rights;
• Consent: processing for direct marketing communications, where consent has been expressly provided and may be withdrawn at any time.

5.Data Sharing

5.1 m2cuci does not sell, rent, or trade personal data to third-party marketers or data brokers under any circumstances.

5.2 m2cuci may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other supported payment service providers, to the extent necessary to process transactions;
• Identity verification providers: third-party KYC/AML service providers who assist m2cuci in verifying member identities in compliance with regulatory obligations;
• Game providers: licensed game software providers who supply the casino, live dealer, and sportsbook products made available through the Platform may receive session data required to deliver those games;
• Technical service providers: hosting, security, analytics, and infrastructure partners who process data on m2cuci's behalf under strict data processing agreements;
• Legal and regulatory authorities: where disclosure is required by law, court order, or competent regulatory authority.

5.3 Where m2cuci engages third-party data processors, it requires those processors to maintain data protection standards consistent with this Policy and to use personal data only for the purpose for which it was shared.

6.Cookies and Tracking Technologies

6.1 The m2cuci Platform uses cookies and similar technologies to support its operation. The categories of cookies used are as follows:

• Strictly necessary cookies: required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Analytical cookies: used to collect anonymised data about how members interact with the Platform, to help us understand usage patterns and improve performance. No personally identifiable information is included in analytical data.
• Preference cookies: used to remember your language and display preferences between sessions.

6.2 m2cuci does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies on the Platform.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform.

7.Data Retention

7.1 m2cuci retains personal data for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. The following general retention periods apply:

• Account registration and identity verification data: retained for the duration of the account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering legislation;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Support communications: retained for three (3) years from the date of the communication;
• Technical and usage data: retained in anonymised or aggregated form for platform analytics purposes.

7.2 Where a member requests deletion of their personal data, m2cuci will action that request within a reasonable period, subject to any legal retention obligations that require continued storage of certain data categories.

8.Data Security

8.1 m2cuci implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between the member's device and m2cuci's servers;
• Encryption of sensitive data at rest, including payment method details and identity documents;
• Role-based access controls limiting access to personal data to authorised personnel only;
• Continuous security monitoring and intrusion detection systems;
• Regular security assessments and vulnerability testing.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, m2cuci will notify affected members in accordance with applicable data protection law.

9.Your Data Rights

9.1 Subject to applicable law, you have the following rights in respect of your personal data held by m2cuci:

• Right of access: you may request a copy of the personal data m2cuci holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data, subject to legal retention obligations;
• Right to restriction: you may request that m2cuci restricts processing of your data in certain circumstances;
• Right to object: you may object to processing based on legitimate interests, including for direct marketing;
• Right to data portability: you may request your data in a structured, machine-readable format where processing is based on consent or contract.

9.2 To exercise any of the above rights, please contact m2cuci via live chat support or at the email address in Section 13. m2cuci will respond to all verified requests within thirty (30) days.

10.International Data Transfers

10.1 Some of the third-party service providers engaged by m2cuci may be located outside Malaysia, including game software providers and infrastructure partners. Where personal data is transferred outside Malaysia, m2cuci takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses consistent with applicable data protection standards.

10.2 By using the m2cuci Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Malaysia, where data protection laws may differ from those applicable in Malaysia.

11.Children and Minors

11.1 The m2cuci Platform is strictly for adults aged 21 years and above. m2cuci does not knowingly collect personal data from persons under the age of 21. If m2cuci becomes aware that personal data has been collected from a person under 21, the relevant account will be closed and the data will be deleted promptly, subject to any legal retention obligations.

11.2 If you believe that a person under 21 has registered an m2cuci account, please notify us immediately via live chat support.

12.Changes to This Policy

12.1 m2cuci reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify members by posting a notice on the Platform or by email to the registered address associated with your account, with a minimum of seven (7) days' advance notice where practicable.

12.2 Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes acceptance of the changes. The current version of this Policy is always accessible at m2cuci.win/privacy-policy.

13.Contact Us

13.1 If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact m2cuci via:

• Live chat: available 24/7 on any page of the m2cuci Platform;
• Email: [email protected] (plain text — not a clickable link).

m2cuci aims to acknowledge all privacy-related queries within 48 hours and to resolve substantive matters within 30 days of receipt of a verified request.