Privacy Policy Cuci Cuci — Malaysia Member Data Protection Commitment

1Scope and Purpose of This Privacy Policy

This Privacy Policy ("Policy") is published by Cuci Cuci ("Platform", "We") and applies to all individuals who access or use the cuci cuci platform via the official website, Android or iOS mobile app, or any other official channel we operate.

We understand that privacy is a matter of great importance to our members in Malaysia. This document is written with the intention of explaining cuci cuci's privacy practices as clearly as possible — not merely to satisfy legal requirements, but because we genuinely value the trust you place in us every time you use this platform.

This Policy covers information about:

• The types of personal data we collect and how it is collected.
• The purpose of using that data in the operations of the cuci cuci platform.
• Circumstances under which your data may be shared with other parties.
• The security measures we take to protect your data.
• Your rights as a data subject and how to exercise them.

2Personal Information We Collect

Cuci cuci collects various types of information depending on how you interact with our platform. Below is a summary of the data categories we collect and their sources:

We only collect information that is strictly necessary to provide cuci cuci services safely and efficiently. We do not collect sensitive data such as medical information or religious beliefs unless required to do so by law.

3Purpose of Use of Your Personal Data

Cuci cuci uses the personal data collected for the following purposes, all of which are necessary to deliver a safe, fair, and high-quality platform experience:

• Account management: Creating, verifying and maintaining your cuci cuci member account, including the KYC and identity verification process.
• Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately through supported payment methods.
• Platform security: Detecting and preventing fraud, money laundering, unauthorized access and other illegal activities that may compromise the integrity of the platform.
• Personalization of experience: Personalizing game recommendations, promotions and content based on your usage habits and preferences.
• Customer support: Processing inquiries, complaints and assistance requests submitted to the cuci cuci support team.
• Service communications: Sending important notifications about your account, changes to terms, or relevant security information.
• Legal compliance: Fulfilling reporting and compliance obligations to the relevant authorities in accordance with applicable laws.
• Platform improvements: Analyzing usage patterns to improve the performance, stability and overall experience of the cuci cuci platform.

4Sharing Information with Third Parties

Cuci cuci does not sell or rent member personal data to any third party. However, in the normal operation of the platform, there are certain situations where your information may need to be shared with trusted parties:

• Payment providers: Required transaction information is shared with payment processors such as DuitNow, FPX, Touch 'n Go and other payment partners to facilitate deposits and withdrawals.
• Game providers: Required data is shared with third-party gaming software providers that operate games on the cuci cuci platform, subject to strict confidentiality agreements.
• Identity verification services: Your KYC data is transmitted to a trusted and licensed identity verification service provider for verification purposes only.
• Statutory authority: cuci cuci will disclose required information to law enforcement or regulatory authorities when mandated by law or court order.
• Data analytics providers: Aggregated and anonymised data may be shared with analytics providers for service improvement purposes, without revealing your personal identity.

All third parties working with cuci cuci are required to comply with data protection standards equivalent to this policy and are not permitted to use your information for any purpose other than those stated.

5Data Encryption and Security

Cuci cuci continuously invests in industry-grade security infrastructure to ensure your personal data remains protected at all times. Key security measures we implement include:

• 256-bit SSL/TLS encryption: All communications between your device and cuci cuci servers are protected with the same high-level encryption used by leading financial institutions.
• Two-factor authentication (2FA): An additional security layer that requires verification via your registered phone number each time you log in from a new device.
• 24/7 threat monitoring: An automated threat detection system that continuously monitors for suspicious account activity and takes immediate action when required.
• Secure password storage: Your password is never stored in plain text — only an irreversible cryptographic hash is kept.
• Internal access controls: Access to member data by cuci cuci staff is restricted on a need-to-know basis and audited regularly.
• Data backup and recovery: An automated backup system that ensures your data is never lost due to technical failures.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe. In the event of any security breach affecting your data, cuci cuci will notify you within a reasonable timeframe in accordance with applicable legal requirements.

6Cookies and Web Tracking Technology

The cuci cuci platform uses cookies and similar tracking technologies to enhance user experience and analyze website performance. The types of cookies we use are:

• Essential cookies: Required for core platform functions such as maintaining your login session and security settings. These cookies cannot be disabled.
• Preference cookies: Saving your preferences such as display language, notification settings and interface preferences to deliver a more personalized experience.
• Analytics cookies: Helps us understand how members use the cuci cuci platform so we can continuously improve our services.
• Performance cookies: Collecting data on page load speeds and technical errors to enable us to resolve issues more quickly.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the cuci cuci platform. Our session cookies expire automatically when you close your browser, while persistent cookies are stored for the duration specified in their respective cookie settings.

7Your Rights as a Data Subject

As a cuci cuci member, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact the cuci cuci support team via live chat available 24/7. We will process your request within thirty (30) business days.

8Data Retention Period

Cuci cuci retains your personal data for as long as your account is active and for the required period after account closure to fulfil legal obligations, resolve disputes, and enforce our agreements.

• Active account data: Retained for as long as your account is active and updated periodically.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial compliance and anti-money laundering legal requirements.
• Support communication records: Retained for two (2) years from the date of last interaction for quality control purposes.
• Technical log data: Retained for ninety (90) days for security and troubleshooting purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period has ended, your data will be securely deleted or permanently anonymized so that it can no longer be linked back to your identity.

9Children's Privacy

The cuci cuci platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18.

Should we discover that personal data of a child has been collected without our knowledge — for example, as a result of false information provided during registration — we will take immediate action to delete that data and close the relevant account.

10Amendments to the Privacy Policy

Cuci cuci reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant amendments will be communicated to members via in-platform notifications or email to your registered address.

The "Updated" date at the top of this document will always reflect the latest version of our privacy policy. Your continued use of the cuci cuci platform following the publication of any amendments will be considered as your consent to the amended policy.

11How to Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the cuci cuci privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the cuci cuci platform.
• Email: [email protected] — response within 3 business days.
• FAQ Page: Visit FAQ page us for answers to commonly asked privacy questions.

We are committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. Your trust is the foundation of our relationship, and we will never take lightly any concern you raise.