356 Cuci Privacy Policy – Protection of Your Personal Data

1 Our Introduction & Commitment to Your Privacy

356 Cuci operates as an online gaming platform that places trust and member security above all else. We understand that privacy is more than a legal obligation — it is a fundamental right of every individual who interacts with our platform.

This Privacy Policy applies to all users who access the 356 Cuci website, register as members, make deposits or withdrawals, contact our support team, or interact with any part of our platform via web browser or mobile device.

By using the 356 Cuci platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team for next steps.

2 Personal Information We Collect

356 Cuci collects various types of personal information depending on how you interact with our platform. The following are the categories of information we may collect:

We do not collect any sensitive information such as medical records, religious beliefs, or political views. Should there be a specific need to collect data outside the categories above, you will be informed in advance and asked to provide explicit consent.

3 How We Collect Your Information

Your personal data is collected through several different channels as you interact with the 356 Cuci platform. Understanding how this collection works helps you make more informed decisions about the information you share with us.

• Account Registration — When you complete the registration form, basic information such as your name, email and phone number is collected directly.
• KYC (Know Your Customer) Process — During identity verification, copies of your identification document and bank statement are collected to meet compliance requirements.
• Financial Transactions — Every time you make a deposit or submit a withdrawal request, your bank account information and transaction details are recorded automatically.
• Platform Usage — Technical data such as IP addresses, device types and usage patterns are collected automatically via cookies and controlled tracking technologies.
• Support Communication — Any enquiries, complaints or feedback you submit to our support team are recorded for service quality purposes.
• Referral Programme — If you registered via a referral link, basic information about your registration source is recorded for reward attribution purposes.

4 Purpose of Use of Your Personal Data

356 Cuci uses collected information for lawful, specific, and transparent purposes. We do not use your data for any purpose beyond those stated below without obtaining your additional consent:

• Identity Verification & KYC — Ensuring every member is a genuinely eligible individual who meets the minimum age requirement of 18 years.
• Transaction Processing — Processing deposits, withdrawals and all financial activity in your account securely and accurately.
• Account security — Identifying suspicious activity, preventing fraud, money laundering and unauthorised access.
• Service Delivery — Allowing you to access all platform features, save game settings and enjoy a personalised experience.
• Customer Support — Providing relevant and effective assistance based on your account history and previously reported issues.
• Service Communication — Sending important notifications related to your account, policy changes, transaction confirmations and security updates.
• Legal Compliance — Fulfilling reporting obligations to regulatory authorities and law enforcement agencies when required by law.
• Platform Improvements — Analysing usage patterns in aggregate and anonymised form to improve the quality of our services.

5 Information Sharing with Third Parties

356 Cuci takes a highly cautious and limited approach to sharing members' personal information with external parties. We do not sell, rent, or trade your personal data. Information sharing only occurs in limited situations as outlined below:

• Payment Processing Providers — Required transaction information is shared with FPX, DuitNow and authorised payment gateway providers to process your deposits and withdrawals.
• KYC Service Providers — Identity verification data is shared with certified third-party verification services to carry out the necessary background checks.
• Game Providers — Minimum technical data required is shared with licensed game providers to ensure games function correctly on our platform.
• Regulatory Authorities — Information is shared with the Royal Malaysia Police, Bank Negara Malaysia or relevant agencies when required by law or court order.
• Legal Consultants — In the event of a dispute or legal action, relevant information may be shared with the applicable lawyers or courts.

All third parties receiving data from 356 cuci are required to sign a data confidentiality agreement and may only use that information for permitted purposes. We are not responsible for the privacy practices of third parties you contact independently outside our platform.

6 Data Security & Protection of Your Information

Protecting your personal information from unauthorised access, theft, and misuse is the top priority of 356 cuci. We invest in cutting-edge security infrastructure and employ multi-layered security protocols to keep your data safe at all times.

• Data Encryption in Transit — All data transmitted between your browser and the 356 cuci servers is encrypted using the latest TLS 1.3 protocol.
• Data Encryption at Rest — Sensitive information such as passwords and banking details is stored in encrypted form using secure hashing algorithms and cannot be decrypted by any staff member.
• Internal access controls — Only staff with a legitimate work requirement who have passed background checks are permitted to access user data.
• Two-Factor Authentication — Admin accounts are protected with mandatory two-factor authentication (2FA) for all relevant staff.
• Incident Response Plan — In the event of any data breach, you will be notified within 72 hours in line with industry best practices.

7 Platform Cookies & Tracking Technologies

356 Cuci uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences, and deliver a better experience. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as maintaining your login session and processing transactions. These cookies cannot be disabled.
• Performance Cookies — Collecting information about how you use the platform (pages visited, time spent) in aggregate and anonymised form to help us improve our services.
• Functional Cookies — Remembering your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Security Cookies — Helping identify suspicious login attempts and protecting your account from unauthorised access.

You can manage or block cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your gaming experience. We recommend keeping essential and security cookies enabled at all times for optimal account protection.

8 Your Rights as a User Under the PDPA

As a registered 356 cuci platform user in Malaysia, you are protected under the Personal Data Protection Act 2010 (PDPA). Under this Act, you have the following rights, which we fully respect:

To exercise any of the above rights, contact our customer support team via live chat. We will process your request within 21 working days in accordance with PDPA requirements. If there is any delay or obstacle, you will be informed of the reason and the time required.

9 Data Retention and Deletion Period

356 Cuci retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Once that period ends, your data will be securely deleted or anonymised.

• Active account data — Retained for the duration your account is active on the 356 cuci platform plus 5 years after account closure, in line with anti-money laundering requirements.
• Financial Transaction Records — Retained for 7 years from the transaction date to meet tax reporting and financial audit requirements.
• KYC Documents — Retained for 5 years after the business relationship ends, in accordance with Bank Negara Malaysia guidelines.
• Support Communication Logs — Retained for 2 years from the date of communication for service quality reference purposes.
• Performance cookie data — Deleted or anonymised within 13 months from the date of collection.
• Inactive account — If an account has been inactive for 3 consecutive years, data not required by law will be flagged for pre-deletion and you will be notified.

10 Privacy Policy Amendments & How to Contact Us

356 Cuci reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new service features. Members will be notified of any material changes via their registered email or in-account notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the 356 Cuci platform after any amendments take effect will be considered acceptance of the updated terms.

If you have any questions or concerns, or wish to exercise your rights under the PDPA, our dedicated data protection team is ready to assist you through the following channels:

• Live Chat — Available 24 hours a day, 7 days a week via the chat icon on the 356 cuci platform.
• Email — Send your enquiry to [email protected] and we will respond within 1 working day.

You may also refer to Terms and Conditions us to learn more about your rights and responsibilities as a 356 cuci platform member.