m2cuci Privacy Policy

1. Who We Are

m2cuci ("the Operator", "we", "us", "our") operates the online casino and sportsbook platform accessible at m2cuci.one. We act as the data controller in respect of all personal data collected and processed in connection with your use of the m2cuci Platform. We are subject to the data protection and privacy obligations imposed by our international gaming licence conditions and applicable privacy legislation.

For all privacy-related enquiries, including data subject access requests and complaints, you may contact us via the support channel detailed in Section 14 of this Policy.

2. Personal Data We Collect

m2cuci collects the following categories of personal data from registered players and Platform visitors:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (used for age verification purposes)
• Residential address
• Email address
• Username chosen at registration
• Government-issued identity document details (where required for KYC verification)

2.2 Financial and Transaction Data

• Payment method details (e-wallet identifiers, bank account or card details, as applicable)
• Deposit and withdrawal history
• Account balance records
• Bonus and promotional credit history

2.3 Technical and Usage Data

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser type
• Session logs, including login timestamps and session duration
• Pages visited and features accessed on the Platform
• Betting and gameplay history, including game type, wager amounts, and outcomes

2.4 Communications Data

• Records of your interactions with our support team via live chat or email
• Responses to surveys or feedback forms where voluntarily submitted
• Marketing preference settings, including opt-in and opt-out records

3. How We Use Your Personal Data

m2cuci uses your personal data for the following purposes:

• Account creation and management: To register your Account, verify your identity, and maintain your Account in accordance with our Terms & Conditions.
• Payment processing: To process deposits and withdrawals via your selected Malaysian payment methods, including Touch n Go eWallet, Boost, Maybank FPX, CIMB, and Public Bank.
• Regulatory compliance: To fulfil our obligations under our gaming licence, including Know Your Customer (KYC) verification, anti-money laundering (AML) screening, and responsible gaming monitoring.
• Age verification: To confirm that all registered players meet the minimum age requirement of 21 years.
• Platform operation and improvement: To administer, maintain, and develop the m2cuci Platform, including resolving technical issues and analysing usage patterns.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, prohibited conduct, and unauthorised Account access.
• Customer support: To respond to your support queries and resolve Account-related issues.
• Marketing communications: To send you promotional offers and Platform updates where you have provided your consent to receive such communications. You may opt out at any time via your Account settings or by contacting support.
• Responsible gaming: To identify patterns of play that may indicate problem gambling behaviour and to enforce responsible gaming measures, including self-exclusion requests, in accordance with our Responsible Gaming policy.

4. Legal Basis for Processing

m2cuci relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil the agreement between you and m2cuci under our Terms & Conditions — including Account management, gameplay, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing necessary for our legitimate operational interests — including fraud prevention, security monitoring, and Platform improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

m2cuci does not sell your personal data to third parties. We disclose personal data only in the following circumstances:

• Service providers: We share data with third-party providers who deliver services on our behalf — including payment processors, identity verification (KYC) providers, customer support platforms, and cloud hosting providers. All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Gaming licence authority: We are obligated to share certain player data with our licensing regulatory authority on request, as a condition of maintaining our international gaming licence.
• Law enforcement and legal process: We will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our business assets, personal data held by m2cuci may be transferred to the acquiring entity, subject to equivalent privacy protections.
• Game suppliers: Certain gameplay data (such as bet amounts and game results) is transmitted to our certified game providers as a technical requirement of game delivery. These providers are not permitted to use this data for their own commercial purposes.

m2cuci will not share your personal data with third-party advertisers or data brokers.

6. International Data Transfers

m2cuci operates under an international gaming licence and may engage service providers whose operations are based outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, m2cuci will implement appropriate safeguards — including contractual clauses approved by the relevant regulatory authority — to ensure that your data remains protected to a standard consistent with this Policy.

7. Data Retention

m2cuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Account data is retained for the duration of your active Account and for a period of at least five (5) years following Account closure, in accordance with our gaming licence obligations and applicable anti-money laundering legislation.
• Transaction and financial records are retained for a minimum of seven (7) years from the date of the transaction, as required by financial record-keeping obligations.
• Support communications are retained for two (2) years from the date of the interaction, or longer if the communication is relevant to an ongoing dispute.
• Technical and usage data is retained for twelve (12) months on a rolling basis, unless retention for a longer period is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Security Measures

m2cuci implements technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and m2cuci servers.
• Encryption of sensitive personal data at rest, including payment credentials and identity document data.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. Players are responsible for maintaining the security of their own Account credentials. If you suspect unauthorised access to your m2cuci Account, please contact our support team immediately.

9. Cookies and Tracking Technologies

m2cuci uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your Platform preferences, such as language settings and responsible gaming configurations. These improve your user experience but are not essential to basic Platform operation.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors interact with the Platform, to help us identify areas for improvement. This data is not used to identify individual users.

m2cuci does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from using certain Platform features, including Account login.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by m2cuci:

• Right of access: The right to request a copy of the personal data m2cuci holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer required for the purposes for which it was collected and where no overriding legal obligation requires its retention.
• Right to restriction: The right to request that processing of your personal data be restricted in certain circumstances — for example, where you contest the accuracy of the data.
• Right to data portability: The right to receive certain personal data you have provided to m2cuci in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: The right to object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of the above rights, please contact our support team as described in Section 14. We will respond to verified requests within 30 days. Complex or high-volume requests may require up to 60 days; we will notify you of any extension within the initial 30-day period.

11. Children's Privacy

The m2cuci Platform is strictly intended for adults aged 21 and above. 21+  We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been registered by, or is being used by, a person below the minimum age, that Account will be immediately suspended and any personal data associated with it will be deleted or retained only as required by our regulatory obligations relating to underage gambling incidents.

If you are the parent or guardian of a person under 21 whom you believe has registered on the m2cuci Platform, please contact our support team immediately so that the Account can be closed and the matter investigated.

12. Third-Party Links

The m2cuci Platform does not include links to external third-party websites. In the event that the Platform links to third-party content for informational purposes, those third-party sites operate under their own privacy policies and m2cuci accepts no responsibility for their data practices. You should review the privacy policy of any third-party site before providing personal data to it.

13. Changes to This Privacy Policy

m2cuci may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our licensing obligations. Where changes are material, we will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must discontinue use of the Platform.

14. Contact and Complaints

For privacy-related enquiries — including data access requests, correction requests, deletion requests, or complaints about how m2cuci handles your personal data — please contact our support team via 24/7 live chat on the Platform or by email at [email protected]. This email address is provided for informational purposes only and is not a clickable link.

We take all privacy complaints seriously and will acknowledge your enquiry within two business days. We aim to resolve all privacy-related matters within 30 days of receipt. If you are not satisfied with the outcome of our internal complaint process, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the regulatory authority under whose licence m2cuci operates.