m1cuci Privacy Policy

1. Who We Are and How to Contact Us

1.1 m1cuci is the operator of the online casino and sports betting platform accessible at m1cuci.co. For the purposes of applicable data protection legislation, m1cuci acts as the data controller in respect of personal data collected from Players and Platform visitors.

1.2 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data concern, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on the Platform daily 8:00am – 2:00am MYT
• Ticket Support: Available 24/7 through the Platform support portal

1.3 m1cuci aims to respond to all data-related enquiries within 5 business days.

2. Data We Collect About You

2.1 m1cuci collects personal data from you through several means — directly when you provide it, automatically through your use of the Platform, and from third parties where required for verification purposes.

2.1 Data Provided Directly by You

• Full legal name, date of birth, and gender (registration);
• Email address and mobile phone number;
• Residential address, including city, state, and postcode;
• Government-issued photo identification documents (KYC — e.g., Malaysian MyKad, passport);
• Proof of address documentation (KYC — e.g., utility bill, bank statement);
• Payment method details sufficient to verify ownership (e.g., screenshot of Touch n Go eWallet account name);
• Communications you send to our support team;
• Responsible gaming preferences and self-imposed limits you set on your Account.

2.2 Data Collected Automatically

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session data including login timestamps, session duration, and page interactions;
• Gaming activity records — all bets placed, games played, amounts wagered, and outcomes;
• Transaction history — deposits, withdrawals, and bonus redemptions;
• Cookie and analytics data as described in Section 8.

2.3 Data from Third Parties

We may receive personal data from third-party identity verification providers engaged to assist with KYC compliance, from payment processors in connection with deposit and withdrawal transactions, and from fraud detection services.

3. How We Use Your Personal Data

m1cuci processes your personal data only for the purposes listed below. The table below maps each purpose to the relevant data category and legal basis.

m1cuci will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

4. Legal Bases for Processing

4.1 Contract Performance. Processing your data is necessary to provide the gaming and account services you have registered for. Without this data, m1cuci cannot operate your Account or deliver the services described in our Terms & Conditions.

4.2 Legal Obligation. Certain data processing — principally KYC verification and anti-money laundering record-keeping — is required of m1cuci under its operating licence and applicable financial crime legislation. This processing occurs regardless of your consent.

4.3 Legitimate Interests. m1cuci processes certain data on the basis of legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics. These interests are balanced against your rights and interests.

4.4 Consent. Where m1cuci wishes to send you marketing communications or use non-essential cookies, we will ask for your consent explicitly and in a clear manner. You may withdraw consent at any time by updating your Account preferences or contacting support.

5. Sharing Your Data with Third Parties

5.1 m1cuci does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment Processors: To facilitate deposits and withdrawals, including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 transaction partners;
• KYC and Identity Verification Providers: Third-party services engaged to assist with document verification and identity authentication;
• Game Studios and Content Providers: Technical data (such as Player ID and session token) is passed to certified game providers to load games. These providers are prohibited from using this data for any purpose other than delivering the game session;
• Fraud Detection Services: Risk scoring and anti-fraud platforms that analyse transactional patterns to protect Players and the Platform;
• Regulatory Authorities: Where required by law, licence conditions, or a valid court or regulatory order, m1cuci may disclose personal data to relevant authorities;
• Professional Advisers: Legal, financial, and compliance advisers engaged by m1cuci, subject to confidentiality obligations.

5.2 All third parties with whom m1cuci shares personal data are required to implement appropriate data protection safeguards and are contractually prohibited from using your data for purposes beyond those specified.

6. International Data Transfers

6.1 Due to the global nature of some of m1cuci's technology partners — including game studios based in Europe, payment processing infrastructure, and cloud hosting services — your personal data may be transferred to and processed in countries outside Malaysia.

6.2 Where such transfers occur, m1cuci ensures that appropriate safeguards are in place, which may include contractual data transfer agreements, adequacy decisions, or binding corporate rules recognised under applicable data protection frameworks.

6.3 If you have questions about the specific safeguards in place for any particular data transfer, please contact us at the details provided in Section 1.

7. Data Retention

7.1 m1cuci retains personal data for as long as is necessary for the purposes described in this Policy, subject to minimum retention periods required under applicable law and licensing obligations.

7.2 The following general retention periods apply:

• Account registration data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later;
• Transaction records: Retained for a minimum of 5 years;
• Gaming activity records: Retained for a minimum of 3 years;
• Marketing preferences and consent records: Retained until withdrawn plus 12 months;
• Support communications: Retained for a minimum of 2 years.

7.3 At the end of the applicable retention period, data is securely deleted or anonymised in accordance with m1cuci's data governance procedures.

8. Cookies and Tracking Technologies

8.1 m1cuci uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us deliver and improve the Platform experience.

8.2 The types of cookies used by m1cuci are as follows:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled without impairing Platform functionality;
• Performance and Analytics Cookies: Used to understand how Players interact with the Platform, identify errors, and measure page load performance. Data collected is aggregated and anonymised;
• Preference Cookies: Store your language and display preferences to improve your experience;
• Marketing Cookies: Only placed with your explicit consent. Used to deliver relevant promotional information to you based on your Platform activity.

8.3 You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will affect Platform functionality. Marketing cookies may be disabled at any time through your Account preferences without affecting your access to the Platform.

9. Security of Your Personal Data

9.1 m1cuci implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

9.2 Security measures in place at m1cuci include:

• 256-bit SSL/TLS encryption for all data in transit between your device and m1cuci servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Cryptographic password hashing with salting — passwords are never stored in recoverable form;
• Role-based access controls limiting staff access to personal data to those with a specific operational need;
• Regular security audits and penetration testing by qualified third-party security firms;
• Multi-factor authentication requirements for staff systems access;
• Incident response procedures for data breach detection, containment, and notification.

9.3 In the event of a data breach that is likely to result in a high risk to your rights and freedoms, m1cuci will notify affected Players without undue delay and will report the breach to the relevant supervisory authority in accordance with applicable law.

9.4 No internet transmission can be guaranteed completely secure. While m1cuci applies rigorous security standards, you should also take responsibility for the security of your own login credentials and device.

10. Your Data Rights

10.1 Subject to applicable law and our legal obligations (in particular, data that must be retained for AML compliance cannot be deleted on request), you have the following rights in respect of your personal data held by m1cuci:

• Right of Access: You may request a copy of the personal data m1cuci holds about you;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to Erasure: In certain circumstances, you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies;
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances, such as while a dispute over accuracy is being resolved;
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling and direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, contact m1cuci support at [email protected]. We will respond within 30 days of receiving your request. We may request proof of identity before processing data subject requests.

11. Children and Minors

11.1 The m1cuci Platform is strictly for individuals aged 21 years and above. m1cuci does not knowingly collect or process personal data from minors. If you believe that a minor has provided personal data to m1cuci, please contact us immediately so that we can investigate and, where confirmed, delete the relevant data and close the Account.

11.2 Age verification is conducted as part of the KYC process. Any Account found to belong to a minor will be closed immediately, all funds returned to the source, and all associated personal data deleted (subject to any mandatory reporting obligations).

12. Changes to This Privacy Policy

12.1 m1cuci reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operating environment. Where changes are material, we will notify you by email to your registered address and by prominent notice on the Platform prior to the updated policy taking effect.

12.2 The date of the most recent update is displayed at the top of this page. Your continued use of the Platform after the effective date of any change constitutes acceptance of the revised Privacy Policy. If you do not accept the updated Policy, you should close your Account before the changes take effect.

13. Complaints and Enquiries

13.1 If you have a concern about how m1cuci is handling your personal data, we encourage you to contact us in the first instance so that we can try to resolve the matter directly. We take all privacy concerns seriously and will provide a substantive response within 5 business days.

13.2 If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

This Privacy Policy was last reviewed and updated in June 2026. For questions, contact us at: [email protected]