Vipcuci2 Privacy Policy – Malaysia Personal Data Protection

01 Introduction

This Privacy Policy is issued by vipcuci2 ("we", "the platform" or "vipcuci2") and applies to all users, registered members and visitors of the vipcuci2 website. This document describes our practices regarding the collection, processing, storage and protection of personal data in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia.

By registering as a vipcuci2 member or using any of our services, you agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us to request deletion of your account and data.

Vipcuci2 is committed to keeping this Privacy Policy up to date to reflect changes in law, technology, or business practices. Members will be notified of any significant amendments via their registered email or an in-platform notice before the changes take effect.

02 Types of Personal Data We Collect

Vipcuci2 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

Vipcuci2 only collects data that necessary and relevant for the stated purposes. We do not collect sensitive information such as biometric data, health records, or political affiliations unless required by law.

03 How We Collect Personal Data

Your personal data is collected through the following channels:

• Account registration: When you complete the registration form on vipcuci2, we collect the identity and contact information you provide directly.
• KYC Verification: The Know Your Customer process requires you to submit a copy of your identification document (MyKad) and proof of address to verify your identity before your first withdrawal.
• Financial transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX, your transaction details are securely recorded.
• Platform usage: Our systems automatically record technical and behavioural data when you browse and use vipcuci2.
• Support communications: When you contact the vipcuci2 support team via live chat or email, communication records are retained for quality assurance and security purposes.
• Cookies and tracking technologies: As described in Section 9, vipcuci2 uses cookies to enhance user experience and analyze platform traffic.

04 Purposes for Using Personal Data

Vipcuci2 processes your personal data on valid legal grounds under the PDPA. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and managing your vipcuci2 member account.
• Payment processing: Securely processing your deposits and withdrawals via your chosen payment method.
• Legal compliance: Fulfilling legal obligations including anti-money laundering (AML), fraud prevention and reporting to authorities when required.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it.
• Service improvement: Analyzing usage data to improve platform features, user interface, and the vipcuci2 game library.
• Marketing communications: Sending promotional information, bonus offers and vipcuci2 news — only to members who have consented to receive marketing communications.
• Platform security: Detecting and preventing fraud, unauthorised access, account abuse and other illicit activities.

05 Data Sharing with Third Parties

Vipcuci2 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Service providers: Payment providers (such as FPX gateways), gaming software suppliers, customer support platforms, and cloud services we use to operate vipcuci2. All these providers are bound by strict data protection agreements.
• Legal authorities: Where required by Malaysian law, court order or official investigation by a competent enforcement agency.
• Fraud prevention: With accredited industry bodies or identity verification services to verify member identities and prevent fraud.
• Business transfer: In the event of a merger, acquisition or transfer of vipcuci2 assets, member data may be transferred to the successor entity, subject to equivalent privacy protections.

In all data-sharing arrangements, vipcuci2 ensures that the receiving party upholds data protection standards equivalent to or higher than Malaysia's PDPA requirements.

06 Data Security Measures

Vipcuci2 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and vipcuci2's servers is protected by industry-grade SSL encryption.
• Data encryption at rest: Sensitive data stored in our databases, including financial and identification information, is encrypted using the AES-256 algorithm.
• Strict access controls: Only authorised vipcuci2 staff with a legitimate business need may access members' personal data.
• Two-factor authentication (2FA): Available to all vipcuci2 member accounts as a highly recommended additional security layer.
• 24/7 Monitoring: Threat detection systems and security monitoring operate around the clock to identify and respond to suspicious activity.
• Regular security audits: Regular security assessments and penetration testing are conducted by independent security experts to ensure our systems remain robust.

07 Data Retention Period

Vipcuci2 retains your personal data for as long as your account remains active or as long as necessary to provide services to you. After account closure, we retain certain data for specified periods to meet legal compliance requirements:

• Financial and transaction records: Retained for 7 years after the transaction date, in compliance with Malaysia's tax and anti-money laundering legal requirements.
• Identity verification data (KYC): Retained for 5 years following account closure as required by AML compliance obligations.
• Support communication records: Retained for 2 years for service quality and dispute resolution purposes.
• Gaming and betting data: Retained for 3 years for responsible gaming and audit purposes.
• Technical data (access logs, IP): Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. If you request account deletion before the mandatory retention period ends, we will delete all data not subject to legal obligations and inform you of what data must still be retained and why.

08 Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by vipcuci2:

To exercise any of the above rights, please contact the vipcuci2 Privacy Officer by email at privacy@vipcuci2.com stating the type of request, your full name, and account number. We will process your request within 21 working days as required under the PDPA. In certain cases, we may require additional identity verification before processing your request.

09 Cookies & Tracking Technologies

Vipcuci2 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic and deliver relevant content. Cookies are small text files stored on your device when you visit vipcuci2.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use vipcuci2 — pages visited, time spent and errors encountered — to help us improve the platform.
• Functional Cookies: Saves your preferences such as language, display settings and game choices to deliver a more personalised experience.
• Analytics Cookies: Used to understand aggregated, anonymised usage patterns for the purpose of improving vipcuci2's products.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on vipcuci2. For more information on managing cookies, refer to your browser's help section.

10 Third-Party Links & Services

The vipcuci2 platform may contain links to or integrations with third-party services such as game providers, payment gateways and analytics tools. This Privacy Policy applies to vipcuci2 only and does not cover the privacy practices of those third parties.

Vipcuci2 is not responsible for the privacy practices or content of any third-party services. We encourage you to read the privacy policy of each third-party service provider you use alongside the vipcuci2 platform, particularly payment providers such as Touch 'n Go eWallet, GrabPay, and FPX providers.

11 Child Protection

Vipcuci2 is an online betting platform that for individuals aged 18 and above only. We do not knowingly collect or process personal data of children under the age of 18. Should we discover that a child's data has been collected without proper age verification, we will promptly delete that data and close the account in question.

Parents or guardians who suspect their child has registered on vipcuci2 without consent are encouraged to contact us immediately at privacy@vipcuci2.com so that appropriate action can be taken promptly.

12 Contact Our Privacy Officer

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by vipcuci2, please contact our Privacy Officer:

• Email: privacy@vipcuci2.com
• General support email: support@vipcuci2.com
• Live Chat: Available on the vipcuci2 platform, 24 hours a day, 7 days a week
• Response time: Within 21 business days for formal PDPA requests

If you are dissatisfied with how we have handled your privacy request, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital Malaysia.