At cucikuat, your privacy is not an afterthought — it is a core principle. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own information.
These highlights summarise our key commitments. The full policy below governs in all cases.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data "just in case."
All data transmitted between your device and the cucikuat platform is protected by industry-standard 256-bit SSL/TLS encryption. Stored personal data is encrypted at rest using AES-256.
Cucikuat does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your data belongs to you, not to advertisers.
You have the right to access, correct, port, restrict, and request deletion of your personal data at any time. Submit requests to our support team and we will respond within 14 business days.
We do not retain personal data indefinitely. Account data is held for the duration of your account plus 5 years for regulatory compliance. Marketing data is deleted upon opt-out.
Our data practices are designed with Malaysian users in mind, following applicable data protection principles relevant to our market and the standard of care expected by Malaysian players.
This Privacy Policy ("Policy") issued by cucikuat ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at cucikuat.cam ("the Platform"). This Policy applies to all registered users ("User", "you", "your") of the Platform and governs the collection, processing, storage, sharing, and deletion of personal data in connection with your use of our services.
Cucikuat is committed to protecting the privacy and personal data of our Malaysian users and all other individuals who interact with our Platform. We process personal data only where we have a lawful basis to do so, and we handle all personal data in a manner that is transparent, fair, and proportionate to the purposes for which it was collected.
By registering an account, accessing the Platform, or submitting any personal information to cucikuat, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.
Note: This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which form part of the agreement between you and cucikuat.
In this Policy, the following terms have the meanings assigned to them below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, or deletion. |
| "Data Controller" | Cucikuat, being the entity that determines the purposes and means of processing personal data collected via the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of cucikuat, subject to contractual data protection obligations. |
| "Consent" | Freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process required before withdrawals may be processed. |
| "Sensitive Data" | A special category of personal data including financial account details, government-issued identification, and similar information requiring heightened protection. |
Cucikuat collects personal data in the following categories, depending on how you interact with the Platform:
When you create an account, we collect:
For identity verification and regulatory compliance purposes, we collect:
To process deposits and withdrawals, we collect:
Important: Cucikuat does not store full card numbers or payment credentials on its servers. Sensitive payment data is handled by our PCI-DS-compliant payment processors.
When you use the Platform, we automatically collect:
If you contact our support team via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and the agent who handled your query. This is used for quality assurance, dispute resolution, and regulatory compliance purposes.
Cucikuat processes personal data only where a lawful basis exists. The following bases apply to our processing activities:
| Lawful Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account registration, deposits and withdrawals, game access, customer support interactions necessary to deliver the service you have contracted for. |
| Legal Obligation | KYC verification, age verification, anti-money laundering checks, fraud prevention, and regulatory reporting requirements. |
| Legitimate Interests | Platform security, fraud detection, abuse prevention, system analytics, and service improvement — where not overridden by your fundamental rights. |
| Consent | Marketing communications, personalised promotions, and optional analytics cookies — where you have provided clear, informed consent that may be withdrawn at any time. |
Personal data collected by cucikuat is used for the following purposes:
Aggregated and anonymised usage data is used to understand how players interact with the Platform, identify areas for improvement, and develop new features. This data does not personally identify any individual user.
Cucikuat does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:
We engage trusted third-party service providers to assist in delivering the Platform. These include payment processors, KYC verification providers, cloud infrastructure providers, customer support platforms, and fraud detection services. All third-party processors are bound by contractual data protection obligations and may only use personal data for the specified purpose.
We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or in response to a lawful request from a competent authority. We will, where legally permissible, notify you of such requests.
In the event of a merger, acquisition, restructuring, or sale of all or part of cucikuat's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity. We will notify affected users in advance of any such transfer.
We will never: Sell your personal data to marketers, share your data with third parties for their own promotional purposes, or disclose your account details to any person or entity not covered by this Policy without your explicit consent.
Cucikuat retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Legal & regulatory obligation |
| KYC Documents | 5 years from submission or account closure | Anti-money laundering compliance |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Customer Support Communications | 3 years from last interaction | Dispute resolution & quality assurance |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent obligation |
| Technical & Usage Logs | 12 months from collection | Security & fraud detection |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be used to identify any individual.
Cucikuat implements robust technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:
While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure. You acknowledge this inherent risk and accept responsibility for keeping your own login credentials confidential.
The cucikuat Platform uses cookies and similar tracking technologies to deliver, maintain, and improve the services we offer. A cookie is a small text file placed on your device when you access the Platform. Cookies do not contain executable code and cannot access other data on your device.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Required for the Platform to function — login sessions, security tokens, account authentication, responsible gambling controls. | No — required for service delivery | |
| Remember your preferences such as language selection, game settings, and display options. | Yes — disabling may reduce personalisation | |
| Collect anonymised data on how users navigate the Platform. Used to identify usability issues and improve the user experience. | Yes — opt out via browser settings |
You can control cookie settings through your browser's privacy or settings menu. Disabling essential cookies will prevent you from logging in and using core platform features. For analytics cookies, you may opt out without affecting your ability to use the Platform. Your cookie preferences are saved per device and browser — if you clear your browser data, you will need to re-set your preferences.
As a user of the cucikuat Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We aim to respond to all valid requests within 14 business days.
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data where no overiding legal basis exists for retention.
Request that we limit processing of your data in certain circumstances.
Request your data in a structured, commonly used, machine-readable format.
Object to processing based on legitimate interests, including direct marketing.
Withdraw any previously given consent at any time, without affecting prior lawful processing.
Lodge a complaint with a relevant supervisory authority if you believe your rights have been violated.
Identity Verification: For the protection of all users, we will verify your identity before fulfilling any data rights request. This is a security measure to prevent unauthorised access to another person's account data.
The cucikuat Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, process, or retain personal data from anyone under the age of 21. Our registration process includes mandatory date-of-birth collection and KYC age verification to enforce this requirement.
If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account, return any deposits where possible, void any wagering activity, and permanently delete all associated personal data.
If you believe a minor has registered on cucikuat: Please contact us immediately at [email protected] so we can take immediate action. We take underage gambling extremely seriously.
Some of the third-party service providers engaged by cucikuat — including cloud infrastructure providers and payment processors — may process personal data in jurisdictions outside of Malaysia. Where such transfers occur, cucikuat ensures that appropriate safeguards are in place, including contractual data protection clauses that require recipients to maintain equivalent levels of data protection.
Cucikuat does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the necessary contractual safeguards. By using the Platform, you acknowledge that your data may be transferred to and processed in other countries as part of service delivery.
Cucikuat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or applicable regulations. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.
For material changes that significantly affect how we process your personal data, we will provide notice via email to your registered address or via an in-platform notification at least 7 calendar days before the changes take effect. Your continued use of the Platform following such notice constitutes acceptance of the updated Policy.
We recommend that all users review this Policy periodically. The current version is always accessible at cucikuat.cam/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection team through the following channels:
For matters relating to your account terms, bonus rules, or betting conditions, please refer to our Terms & Conditions. For responsible gambling support, deposit limits, or self-exclusion, please visit our Responsible Gambling page.
Malaysian Players: Our support team is based and operates with Malaysian users in mind. We understand local context and are here to help — in English, Bahasa Melayu, or Chinese, whichever is easiest for you.
Cucikuat is built on trust. Fast payouts, fair games, and rock-solid data protection — that is the standard we hold ourselves to for every Malaysian player.21+ only.