How mcuci2 Collects, Uses and Protects Personal Data

Introduction and Scope

This Privacy Policy describes how mcuci2 may collect, use, store, disclose and protect personal information. It applies to visitors, registered users and people who contact mcuci2 for website support. The policy covers information submitted directly, generated through website use or received from authorised payment, identity verification and security providers.

By using mcuci2, a user acknowledges the data practices explained here. This policy should be read together with the Terms & Conditions. Where a specific service displays an additional privacy notice, that notice may provide further details for the relevant activity.

Definitions

“Personal data” means information relating to an identified or reasonably identifiable person. “Processing” includes collecting, recording, organising, using, reviewing, disclosing, retaining and deleting information. “User” means a person who visits or interacts with mcuci2.

“KYC data” means information used to verify identity, age, address or payment ownership. “Technical data” includes device, browser, network, log and security information. “Service provider” means an organisation processing information to support an authorised mcuci2 function.

Information We Collect

The information mcuci2 collects depends on how a person uses the website. A general visitor may generate limited technical records, while an account holder may provide registration, verification and transaction details. Categories may include:

• Identity and profile information: name, date of birth, username, account identifier, nationality and verification status.
• Contact information: email address, residential address and phone number where required for account or security purposes.
• KYC documentation: identification records, proof of address, document images and verification results.
• Financial and payment information: transaction references, deposit and withdrawal amounts, masked account details, wallet identifiers and payment ownership evidence.
• Usage information: pages viewed, selected language, games or sports markets accessed, session times and responsible gambling settings.
• Technical and security information: IP address, device type, browser, operating system, login history, fraud indicators and cookie identifiers.
• Communication records: support enquiries, complaint details and information a user chooses to provide during correspondence.

Users should provide only information reasonably requested by mcuci2. Passwords, complete one-time codes and unnecessary financial credentials must never be sent through general correspondence.

How Personal Information Is Used

mcuci2 may process personal information to provide website and account functions, verify eligibility, secure user access, process supported transactions, respond to enquiries and maintain accurate operational records. Information may also be used to investigate suspected fraud, duplicate accounts, payment disputes or technical abuse.

Where account-based gambling services are available, mcuci2 may use activity information to apply deposit limits, cooling-off periods, self-exclusion restrictions and other responsible gambling controls. A review may also be conducted when activity indicates potential loss of control, unusual transaction behaviour or an affordability concern.

Aggregated or de-identified information may be analysed to improve content about MYR payments, Touch 'n Go eWallet withdrawals, DuitNow, FPX, live casino games, EPL markets or Liga Super Malaysia coverage. Such analysis should not identify an individual user.

Grounds for Data Processing

Depending on the circumstances and applicable requirements, mcuci2 may process information because it is necessary to provide a requested service, meet a legal or compliance obligation, protect legitimate security and operational interests, or respond to a user's consent.

Where consent is relied upon, the user may withdraw it for future processing, although withdrawal will not invalidate lawful processing already completed. Some information may remain necessary for account security, fraud prevention, transaction records, dispute handling or compliance even after consent is withdrawn.

Payment and KYC Data

mcuci2 may process payment records associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, cryptocurrency or transfers through Maybank, CIMB, Public Bank and Hong Leong Bank. The exact information depends on the selected method and may include a transaction reference, amount, time, account-holder name, masked bank account or wallet address.

Identity checks may be required before a withdrawal, following a change in payment details or when a security review identifies a need for further verification. KYC material should be limited to the documents and images reasonably requested. mcuci2 does not require a user to provide online banking credentials or a complete e-wallet password.

Cookies and Technical Information

mcuci2 may use cookies and comparable local storage technologies to keep sessions secure, remember essential preferences, understand website performance and detect suspicious behaviour. Strictly necessary technologies support functions such as login continuity, load balancing and security controls.

Analytics information may include pages viewed, approximate session duration, device category and error events. Where a consent choice is required, non-essential cookies should not be enabled until the user makes that choice. Browser controls may block or remove cookies, but disabling essential storage can affect mcuci2 functionality.

When Data May Be Shared

mcuci2 does not sell personal information as a standalone product. Information may be shared with authorised service providers only where reasonably necessary for hosting, security, identity verification, payment administration, fraud prevention, customer support or professional advice.

Data may also be disclosed where required by applicable law, a valid legal process or an appropriate regulatory obligation, or where disclosure is necessary to protect users, investigate wrongdoing or defend legal rights. Service providers should receive only information relevant to their assigned function and should be subject to confidentiality and security requirements.

If the ownership or structure of mcuci2 changes, relevant records may form part of a legitimate business transfer, subject to appropriate confidentiality and continuity safeguards.

International Data Transfers

Because online services may rely on infrastructure, verification or support teams located in different jurisdictions, personal information may be processed outside Malaysia. Privacy and data protection rules in another location may differ from those familiar to Malaysian users.

Where a transfer occurs, mcuci2 should use proportionate contractual, organisational or technical safeguards appropriate to the data and destination. Access should remain limited to authorised personnel with a legitimate operational need.

Data Retention and Deletion

mcuci2 retains personal data only for as long as reasonably necessary for the purposes described in this policy. Retention may consider the duration of an account, unresolved withdrawals, complaint periods, fraud risk, self-exclusion enforcement, accounting requirements and applicable legal obligations.

Different records may have different retention periods. Temporary technical logs may be kept for a shorter period than transaction, KYC or self-exclusion records. When information is no longer required, mcuci2 should delete it securely, anonymise it or restrict access until deletion can be completed.

An account closure request does not always require immediate removal of every record. Certain data may need to remain available to prevent duplicate accounts, enforce a responsible gambling exclusion, resolve a payment dispute or comply with a lawful retention requirement.

User Rights and Requests

Subject to applicable law and reasonable verification, a user may ask whether mcuci2 holds personal information about them, request access to relevant data, correct inaccurate details or request deletion or restriction in appropriate circumstances. A user may also object to certain processing or withdraw consent where consent is the applicable basis.

Before fulfilling a request, mcuci2 may ask for enough information to verify identity and prevent disclosure to an unauthorised person. A request may be limited or refused where required to protect another person's privacy, preserve fraud evidence, comply with a legal duty or maintain a valid self-exclusion record.

Users should describe the requested action clearly and identify the relevant account or transaction period. mcuci2 aims to respond within a reasonable period, although a complex or extensive request may require additional review.

Age Restriction and Minors

mcuci2 is intended only for people aged 21 and above. The website does not knowingly seek personal information from children or permit minors to participate in casino-style gambling. Age verification may be requested before account functions or withdrawals are made available.

If mcuci2 becomes aware that information has been submitted by a person below the permitted age, access may be restricted and the information may be reviewed, retained where necessary for prevention and compliance, or deleted where appropriate.

Changes to This Privacy Policy

mcuci2 may revise this policy to reflect service changes, improved security practices, revised legal obligations or new data processing activities. Material changes should be communicated through an updated effective date or an appropriate notice on the website.

Users should review the mcuci2 Privacy Policy periodically. Continued use after a revised policy becomes effective confirms acknowledgement of the updated information, but does not replace consent where fresh consent is legally required.