Privacy & Data Security

2cuci Privacy Policy – Personal Data Protection for Malaysian Users

Your privacy is more than a legal obligation to us — it is a responsibility we take seriously every day. This policy transparently explains how 2cuci collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 Malaysia (PDPA 2010) Version 2.5
256-bit SSL
Full encryption
PDPA 2010
Full compliance
Encrypted Data
Every transaction
No Data Sales
To third parties

Our Commitment: 2cuci never sells, rents, or trades your personal data to any third party for marketing or commercial purposes. Your data is collected solely to enable us to provide you with a better and more secure service.

1 Introduction

This Privacy Policy is published by 2cuci ("Company", "We") and applies to all users who access or use the 2cuci platform through the official website at 2cuci.fun or via our mobile app. We understand that your personal data belongs entirely to you — and we treat the protection of that data as a non-negotiable priority.

This policy is formulated in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and clearly outlines:

  • The types of personal data we collect from users.
  • The purpose and legal basis behind the collection of such data.
  • How we store, process, and protect your data.
  • Your rights regarding the personal data we hold.
  • How to contact us for any privacy-related inquiries or requests.

By using 2cuci's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team to close your account.

2 Types of Personal Data We Collect

We only collect data that is strictly necessary to provide our services safely and efficiently. The following are the categories of data we may collect:

Data Category Example Information Collection Method
Identity Data Full name, MyKad/passport number, date of birth, gender Account registration & KYC process
Contact Data Email address, phone number, residential address Registration & profile updates
Financial Data Bank account number, bank name, deposit & withdrawal records Financial transaction process
Technical Data IP address, browser type, device, operating system Automatically upon platform use
Activity Data Game history, wagering, login, in-platform activity Automatically upon use
Document Data Copy of identity card, bank statement, verification selfie KYC verification process

We never collect sensitive information such as passwords in plain text, full credit card numbers, or your personal health information. All passwords are stored in hashed form that cannot be decrypted.

3 Purpose of Data Collection and Processing

Every piece of data we collect has a specific and legitimate purpose. We do not process your data for any purpose other than those stated below without obtaining your consent first:

  • Identity verification (KYC): To verify that you meet the age eligibility requirements and to prevent fraud and money laundering.
  • Transaction processing: To process deposits, withdrawals, and all financial transactions accurately and securely.
  • Account management: To create, maintain, and manage your account on our platform.
  • Service communications: To send account-related notifications, transaction confirmations, and important policy updates.
  • Platform security: To detect and prevent unauthorised access, fraud, and suspicious activity.
  • Legal compliance: To comply with legal obligations, regulations, and directives from relevant authorities in Malaysia.
  • Service improvement: To analyse usage patterns in aggregate (without identifying individuals) in order to improve the quality of our platform.
  • Customer support: To assist you in resolving any issues or enquiries submitted to our support team.

4 Data Sharing with Third Parties

2cuci takes a highly restricted approach to sharing your personal data. We does not sell, does not rent, and does not trade your personal data to any third party for marketing purposes. Your data is only shared in the following situations:

  • Payment service providers: Only the minimum necessary data is shared with licensed payment processors such as FPX, DuitNow, and eWallet providers to process your transactions.
  • Game software providers: Basic technical data required to keep gameplay running smoothly, without exposing your financial information or full identity.
  • Legal authority: We are required by law to disclose certain information upon receipt of a court order, warrant, or lawful request from Malaysian law enforcement agencies.
  • Identity verification services: Identity document data is shared with licensed KYC service providers for verification purposes only.

All third parties who work with us are bound by strict confidentiality agreements and are required to handle your data in accordance with data protection standards equal to or higher than our own.

Note: 2cuci is not responsible for the privacy policies of third-party websites or services whose links may appear on our platform. Please review their respective privacy policies before engaging with any external services.

5 Data Storage and Security Measures

The security of your personal data is our top priority. We implement multiple layers of technical and procedural protection to ensure your data remains safe at all times:

  • 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols.
  • Secure data storage: Personal data is stored on servers protected by firewalls, role-based access controls, and continuous monitoring.
  • Password hashing: Your account password is never stored in plain text — it is hashed using a strong cryptographic algorithm.
  • Two-factor authentication (2FA): An additional security layer is available and strongly recommended for all user accounts.
  • Threat monitoring: Our automated monitoring system works around the clock to detect any suspicious activity or unauthorised access attempts.
  • Staff training: All staff who handle user data undergo data protection training and are bound by strict confidentiality agreements.

Your personal data is retained for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, your data is retained for the minimum period required by Malaysian law (typically 7 years for financial records) before being securely deleted.

All data centres used by 2cuci hold international security certifications and undergo regular security audits by independent third parties to ensure consistent levels of protection.

6 Cookies and Tracking Technologies

The 2cuci platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Performance Cookies: Help us understand how users interact with the platform for technical improvement purposes.
  • Functional Cookies: Remember your preferences such as language and display settings to make repeat visits more convenient.
  • Analytics Cookies: Collect aggregated and anonymised usage data to help us understand overall platform usage patterns.

You can manage your cookie settings through your browser settings at any time. However, disabling essential cookies may affect the functionality of our platform.

7 Your Rights as a Data Subject

Under Malaysia's PDPA, you have the following rights regarding your personal data that we hold. We are committed to making it easy for you to exercise these rights:

Right of Access Request a copy of the personal data we hold about you.
Right to Rectification Request correction of inaccurate or incomplete data.
Right to Erasure Request deletion of your data when there is no valid basis for retention.
Right to Restriction Request restriction of processing under certain circumstances.
Right to Object Object to the processing of your data for direct marketing purposes.
Right to Portability Receive your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our privacy team via email at [email protected] or via live chat within the platform. We will process your request within 14 working days and may require identity verification before the request is processed.

8 Children's Data Protection

The 2cuci platform is exclusively for adult users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. Our strict age verification process is designed to prevent registration by minors.

If we discover that personal data of a child has been collected without the knowledge and consent of a parent or legal guardian, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account on our platform, please contact us immediately.

9 Changes to the Privacy Policy

2cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, technical requirements, or legal compliance. Any significant changes will be communicated to you via:

  • In-platform notification at least 7 days before the changes take effect.
  • Email to your registered email address for significant changes.
  • Update the "Last Updated" date at the top of this document.

Continued use of the platform after a policy change takes effect will be considered acceptance of the amended policy. It is your responsibility to review this Privacy Policy periodically.

10 Contact Us for Privacy Inquiries

If you have any questions, concerns, or complaints regarding how we handle your personal data, the 2cuci privacy team is ready to assist. We are committed to responding to all privacy inquiries within a reasonable timeframe.

You can reach us via:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the corner of the platform.
  • Privacy Email: [email protected] — state "Privacy Enquiry" in the email subject line.
  • FAQ Page: Visit FAQ page for answers to frequently asked questions about privacy.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for enforcing the PDPA in Malaysia.

Why Is Your Data Safe with 2cuci?

We invest in best-in-class security infrastructure because we understand that your trust is the most valuable asset we hold.

Malaysia PDPA Compliance

All our data handling practices are designed and audited to fully comply with the provisions of the Personal Data Protection Act 2010, giving you complete legal protection.

Advanced-Level Encryption

Every bit of data moving between your device and our platform is protected by 256-bit SSL encryption — the same standard used by leading financial institutions worldwide.

No Data Sales

Our position is clear: your personal data is never sold, rented, or shared with advertisers or data brokers under any circumstances.

KYC for Your Protection

The identity verification process we carry out is not only for legal compliance — it also protects your account from being accessed or misused by unauthorised parties.

Full Control in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time through our responsive support channels.

Account Activity Alerts

Our system sends instant notifications for every new login, password change, and important transaction — ensuring you are always aware of activity on your account.

Your Data is Protected. Join Millions of 2cuci Members.

Play with peace of mind knowing that your personal and financial information is protected by the best-in-class security infrastructure we provide.

Malaysia PDPA Compliance No sale of personal data 256-bit SSL at all times
Bahasa Melayu