Privacy Policy — 1mcuci

1. Introduction

This Privacy Policy ("Policy") explains how 1mcuci ("1mcuci", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the 1mcuci platform at https://1mcuci.asia ("Platform"), including all associated games, services, and support functions.

1mcuci is committed to handling personal data responsibly and in compliance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable regulations governing our operations. By registering an account or using the 1mcuci Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, all of which together govern your relationship with 1mcuci.

2. Data Controller

1mcuci operates as the data controller for personal data collected through the Platform. As data controller, 1mcuci determines the purposes and means by which your personal data is processed. For all data-related enquiries, please contact our support team through the in-platform messaging system available after logging in to your 1mcuci account.

Where 1mcuci engages third-party service providers to process data on its behalf, such providers act as data processors and are bound by contractual obligations consistent with this Policy and applicable data protection law.

3. Data We Collect

3.1 Registration and Account Data

When you register an account on the 1mcuci Platform, we collect:

• Full legal name;
• Date of birth (to verify minimum age requirement of 21 years);
• Email address;
• Mobile phone number;
• Residential address;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and verify your identity, 1mcuci may collect:

• Government-issued identification documents (e.g., Malaysian National Identity Card, passport);
• Proof of address documentation;
• Payment method verification documents;
• Selfie or facial image for identity verification purposes.

3.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, and gaming transactions processed through the 1mcuci Platform, including transaction amounts, timestamps, payment method identifiers, and settlement status.

3.4 Gaming Activity Data

We collect data relating to your gaming behaviour on the Platform, including games played, wagers placed, outcomes, session durations, and responsible gaming tool usage. This data is used for account management, fraud prevention, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including IP address, browser type and version, device type, operating system, referring URLs, and session timestamps. This data is used for security, fraud detection, and platform optimisation.

3.6 Communications Data

We retain records of communications between you and 1mcuci support, including support tickets, live chat transcripts, and email correspondence, for service quality and dispute resolution purposes.

4. Legal Basis for Processing

1mcuci processes personal data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
Payment processing and transaction records	Performance of contract; legal obligation
Identity verification (KYC/AML)	Legal obligation
Fraud detection and security	Legitimate interests
Responsible gaming monitoring	Legitimate interests; legal obligation
Platform improvement and analytics	Legitimate interests
Marketing communications (where opted in)	Consent

5. How We Use Your Data

1mcuci uses the personal data we collect for the following purposes:

• Account operation: Creating and managing your 1mcuci account, authenticating logins, processing deposits and withdrawals;
• Compliance: Meeting anti-money laundering, counter-terrorism financing, and age verification obligations under applicable law;
• Fraud prevention: Detecting, investigating, and preventing fraudulent, abusive, or illegal activity on the Platform;
• Responsible gaming: Monitoring for signs of problem gambling behaviour and enforcing self-exclusion, deposit limits, and cooling-off periods;
• Customer support: Responding to your enquiries, resolving disputes, and providing account assistance;
• Platform improvement: Analysing usage patterns to improve game selection, payment flows, and overall user experience;
• Communications: Sending account notifications, security alerts, and where you have opted in, promotional materials relevant to your 1mcuci membership.

1mcuci does not sell, rent, or trade personal data to third parties for their independent marketing purposes.

6. Cookies & Tracking Technologies

The 1mcuci Platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your session state, and collect analytics data. The categories of cookies we use include:

• Essential cookies: Required for the Platform to function. These cannot be disabled without impairing your ability to use the service;
• Analytics cookies: Used to understand how members interact with the Platform, including pages visited and session durations. Data is aggregated and anonymised where possible;
• Security cookies: Used to detect and prevent fraudulent login attempts and suspicious session behaviour.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect Platform functionality. 1mcuci does not use third-party advertising cookies or behavioural profiling cookies for cross-site tracking.

7. Third-Party Disclosure

1mcuci shares personal data with third parties only in the following circumstances:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers require transaction data to process deposits and withdrawals on your behalf;
• Game software providers: Licensed game providers receive session data necessary to operate the games you play, including username identifiers and wager amounts;
• Identity verification services: KYC and document verification providers process identity documents on our behalf to complete the verification process;
• Regulatory authorities: We are legally required to disclose certain data to licensing authorities, financial intelligence units, and law enforcement where mandated by applicable law;
• Professional advisers: Legal, accounting, and auditing firms engaged by 1mcuci may access data under confidentiality obligations in the course of their professional services.

All third-party processors engaged by 1mcuci are subject to data processing agreements that require them to handle your data consistently with this Policy and applicable law.

8. International Data Transfers

Some of 1mcuci's service providers and game platform operators are located in jurisdictions outside Malaysia. Where personal data is transferred internationally, 1mcuci takes appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection law, including through the use of standard contractual clauses or equivalent safeguards.

By using the 1mcuci Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia for the purposes described in this Policy.

9. Data Security

1mcuci implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 1mcuci servers;
• Salted cryptographic hashing of account passwords — your actual password is never stored in readable form;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security audits and penetration testing of Platform infrastructure;
• Anomaly detection systems monitoring for unusual login patterns and account access behaviour.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. You are responsible for maintaining the security of your own device and 1mcuci login credentials.

10. Retention of Data

1mcuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. Specific retention periods include:

• Transaction and KYC records: Minimum 5 years from the date of the relevant transaction, in compliance with anti-money laundering regulations;
• Account data: For the duration of your active account plus 2 years following account closure, unless a longer retention period is required by law;
• Support communications: Up to 3 years from the date of the communication;
• Self-exclusion records: Retained for the full duration of any self-exclusion period plus 5 years thereafter, to prevent re-registration during exclusion terms.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 1mcuci's data disposal procedures.

11. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by 1mcuci:

• Right of access: To request a copy of the personal data 1mcuci holds about you;
• Right of rectification: To request correction of inaccurate or incomplete personal data;
• Right of erasure: To request deletion of your personal data, subject to legal retention obligations;
• Right to restrict processing: To request that 1mcuci limits processing of your data in certain circumstances;
• Right to data portability: To request your personal data in a structured, machine-readable format where technically feasible;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a request through the in-platform support system after logging in to your 1mcuci account. 1mcuci will respond to valid requests within 30 days. Identity verification may be required before processing data access or deletion requests.

12. Children's Privacy

The 1mcuci Platform is strictly intended for adults aged 21 years and above. 21+

1mcuci does not knowingly collect personal data from individuals under the age of 21. Where 1mcuci discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted promptly and the associated account permanently closed. If you believe a minor has registered on the Platform, please contact our support team immediately.

13. Changes to This Policy

1mcuci reserves the right to amend this Privacy Policy at any time. Material changes will be notified to Members via in-platform notification or email to the registered address prior to the change taking effect. The date of the most recent revision is displayed at the top of this page.

Continued use of the 1mcuci Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure.

14. Contact

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 1mcuci, please contact our Data Protection team through the in-platform support system available after logging in to your 1mcuci account.

You may also contact us at: [email protected]

If you are not satisfied with our response to a data-related request or complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.