444cuci Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 444cuci ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the Player") who register for or use the 444cuci online casino and sports betting platform, accessible at 444cuci.one and associated sub-domains and mobile applications (collectively, the "Platform").

We are committed to protecting your privacy and handling your personal data responsibly. This Policy is intended to be transparent — we want you to understand exactly what data we hold about you, why we hold it, how long we keep it, and what your rights are in relation to it.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the 444cuci Platform.

2. Data Controller

For the purposes of applicable data protection legislation, 444cuci acts as the data controller in respect of personal data collected through the Platform. As data controller, we determine the purposes and means of processing your personal data.

444cuci operates under internationally recognised gaming authority licensing. Our data processing activities are subject to both the requirements of our gaming licence and applicable data protection legislation including, to the extent relevant to Malaysian resident players, the Malaysian Personal Data Protection Act 2010 (PDPA).

If you have any questions about how we process your personal data or wish to exercise your data rights, please contact our Data Protection representative via the contact details set out in Section 15 of this Policy.

3. Data We Collect

444cuci collects the following categories of personal data in connection with your registration and use of the Platform:

Registration Data:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify you are 21 years of age or older).
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor).
• Email address and mobile phone number.
• Username and encrypted password (passwords are never stored in plain text).

Identity Verification (KYC) Data:

• Copies of government-issued identification (Malaysian National Identity Card / passport / driving licence).
• Proof of residential address documentation.
• Proof of payment method (e.g., bank statement, e-wallet account screenshot).
• Facial verification data where required for identity checks.

Financial Transaction Data:

• Deposit and withdrawal amounts, dates, and payment methods used.
• Account balances and transaction history.
• Payment method identifiers (e.g., partial bank account numbers, Touch n Go eWallet account reference, Boost account reference).

Gaming Activity Data:

• Games played, bets placed, and outcomes.
• Session duration, login timestamps, and device type.
• Bonus redemption and wagering activity.

Technical and Usage Data:

• IP address, browser type and version, operating system.
• Device identifiers and screen resolution.
• Pages visited on the Platform, navigation paths, and click patterns collected via analytics tools.

Communications Data:

• Records of live chat sessions, email correspondence, and support ticket history.
• Marketing preference settings and opt-in/opt-out records.

4. How We Use Your Data

444cuci uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and provide you with access to the Platform.
• Age and eligibility verification: To confirm that you are at least 21 years of age and meet all other eligibility requirements before permitting account registration and gaming activity.
• Transaction processing: To process deposits, withdrawals, and refunds through your chosen payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX, or other accepted methods).
• Platform operation: To provide the games, sportsbook, live casino, and all other features of the 444cuci Platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal and regulatory compliance: To fulfil our Anti-Money Laundering (AML), Counter-Terrorism Financing (CTF), and Know Your Customer (KYC) obligations under applicable gaming regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, and Platform misuse.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer self-exclusion and limit-setting tools at your request.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates — only where you have given consent or where permitted under applicable law. You may opt out of marketing communications at any time.
• Platform improvement: To analyse aggregate usage patterns and improve the Platform's features, performance, and user experience.

5. Legal Bases for Processing

To the extent that applicable data protection law requires 444cuci to identify a legal basis for each processing activity, we rely on the following:

• Contract performance: Processing necessary to register your account, process your transactions, and provide the Platform services you have requested.
• Legal obligation: Processing required to comply with AML, CTF, KYC, and other regulatory requirements applicable to licensed gaming operators.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform analytics, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookie placement, where your explicit opt-in consent has been obtained.

6. Data Sharing & Disclosure

444cuci does not sell, rent, or trade your personal data to third parties for commercial gain. We may share your data with the following categories of recipients in connection with Platform operation:

• Identity verification providers: Third-party KYC service providers used to verify your identity and age as required by our gaming licence.
• Payment processors: Financial institutions and e-wallet operators (including those processing Touch n Go eWallet and Boost transactions) necessary to complete your deposits and withdrawals.
• Game providers: Software providers whose games are hosted on the 444cuci Platform may process session-level gaming data to facilitate gameplay.
• Regulatory authorities: Gaming regulatory bodies, financial intelligence units, and law enforcement agencies where we are required by law or court order to disclose your data.
• IT infrastructure providers: Cloud hosting, database, and security service providers engaged to operate the Platform, under data processing agreements that obligate them to protect your data.

All third-party recipients of 444cuci player data are contractually bound to process your data only for the specified purpose and in accordance with applicable data protection requirements.

7. International Data Transfers

444cuci's Platform infrastructure and some third-party service providers may be located outside Malaysia. Where your personal data is transferred to or processed in a jurisdiction outside Malaysia, we ensure that appropriate safeguards are in place — including contractual clauses that require the receiving party to protect your data to a standard equivalent to that required under Malaysian PDPA and our gaming licence data protection obligations.

By using the 444cuci Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

8. Cookies & Tracking Technologies

444cuci uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state persistence, and fraud prevention. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the Platform, enabling us to identify performance issues and improve the user experience.
• Preference cookies: Store your selected language, display, and notification preferences to personalise your experience on return visits.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of specific Platform features. 444cuci does not use third-party advertising cookies or cross-site tracking cookies.

9. Data Security

444cuci implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit is encrypted using TLS 1.3.
• Stored personal data is encrypted using AES-256 encryption.
• Passwords are hashed using industry-standard bcrypt algorithms — plaintext passwords are never stored.
• Access to personal data within 444cuci's operations is restricted on a need-to-know basis and subject to role-based access controls.
• The Platform undergoes regular penetration testing and vulnerability assessments by independent security specialists.
• In the event of a data security incident, 444cuci will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements.

While 444cuci takes extensive precautions, no online system is completely immune from security risks. You are responsible for maintaining the security of your 444cuci login credentials and for notifying us immediately of any suspected unauthorised access to your account.

10. Data Retention

444cuci retains your personal data for as long as your account remains active and for the period required by applicable legal, regulatory, and licensing obligations following account closure. Typical retention periods are as follows:

• Account registration and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by AML and gaming regulatory obligations.
• Financial transaction records: Retained for seven (7) years from the date of the transaction for tax and regulatory compliance purposes.
• Gaming activity logs: Retained for five (5) years from the date of activity.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Marketing preference data: Retained until you withdraw consent or request deletion.

After the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

11. Your Data Rights

Subject to applicable law and regulatory limitations (including data retention obligations described in Section 10), you have the following rights in relation to your personal data held by 444cuci:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete personal data be corrected.
• Right of deletion: You may request deletion of your personal data where we no longer have a legal basis to retain it.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests where your particular circumstances warrant it.

To exercise any of these rights, please contact our support team via the details in Section 15. We will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

12. Children's Privacy

The 444cuci Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Age verification is mandatory as part of the 444cuci account registration process.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend that account, delete the associated personal data, and void any transactions carried out on that account. If you have reason to believe a minor has registered on the Platform, please contact our support team immediately.

13. Responsible Gaming & Data

444cuci processes gaming activity data to support our responsible gaming obligations. This includes monitoring for patterns that may indicate problem gambling behaviour, administering deposit and session limits at your request, and managing self-exclusion arrangements.

Where you have requested self-exclusion from the Platform, your personal data (specifically account identifiers and exclusion status) will be retained for the duration of the exclusion period to ensure the exclusion is enforced. This retention is a regulatory requirement and cannot be waived.

Responsible gaming data is treated with the utmost sensitivity and is not used for any commercial purpose. For more information on responsible gaming tools available on 444cuci, please visit our Responsible Gaming page.

14. Changes to This Privacy Policy

444cuci may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes will be communicated to registered players via email to the address registered on their account and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 444cuci, please contact us through the following channels:

• Live Chat: Available 24/7 via the Platform — the fastest way to reach our support team.
• Email: [email protected]

We aim to respond to all privacy-related enquiries within five (5) business days. Formal data subject access requests will be processed within 30 days as required by applicable law.