I3cuci Privacy Policy – Malaysia Member Data Protection

1 Introduction

This Privacy Policy ("Policy") is published by i3cuci ("we", "platform", or "i3cuci"), operating under the domain i3cuci.best. This document sets out in detail how i3cuci collects, processes, stores, shares, and protects the personal information of all users and members of our online betting platform.

I3cuci takes data protection seriously. As an online betting platform serving more than 500,000 members across Malaysia, we understand that your trust in us depends not only on a fair and secure gaming experience, but also on how responsibly and transparently we handle your personal information.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. By registering for or using any i3cuci service, you agree to the terms set out in this Privacy Policy. This Policy is to be read together with Terms & Conditions i3cuci.

2 Personal Data We Collect

I3cuci collects your personal information through several means depending on how you interact with the platform. Below is a summary of the data we may collect:

I3cuci does not collect sensitive data such as your medical records, biometric information, or religious details unless specifically required by applicable law or regulatory obligations.

3 How i3cuci Uses Your Data

I3cuci uses your personal data only for legitimate purposes necessary to operate the platform. The following are the primary purposes for which data is used:

• Identity verification and member eligibility — to verify that you meet the minimum age requirement of 18 years and any other eligibility criteria that apply.
• Account management — to create, maintain, and manage your i3cuci account, including processing deposits, withdrawals, and bonus management.
• Provision of betting and gaming services — to give you access to all i3cuci platform features, including Sports Betting (Malaysia Super League, EPL, badminton, e-sports), Live Casino games, slots, and table games.
• Service communications — to send important notifications relating to your account, transactions, policy updates and security information.
• Customer support — to accurately and effectively process your enquiries, complaints, and support requests.
• Fraud prevention and security — to detect, investigate and prevent fraudulent activity, money laundering or security threats.
• Legal compliance — to fulfil obligations under the PDPA 2010, anti-money laundering (AML/CFT) requirements, and directives from lawful authorities.
• Platform improvement — to analyse aggregated usage patterns (without identifying individuals) in order to improve the i3cuci user experience.

I3cuci will not use your data for unrelated purposes without obtaining fresh consent from you. Any change in the purpose for which your data is used will be communicated via an update to this Privacy Policy or through a direct notification to you.

4 Sharing Information with Third Parties

I3cuci does not sell, rent or disclose your personal information to third parties for marketing purposes without your explicit consent. However, there are limited situations where we need to share certain information for legitimate operational purposes:

• Payment service providers — such as FPX, Touch 'n Go eWallet, GrabPay, DuitNow, Boost and ShopeePay gateways, which require the necessary information to process your financial transactions securely.
• Game software providers — such as Evolution Gaming, Pragmatic Play and SA Gaming, which provide live casino and slots games on the i3cuci platform. Data sharing is limited to the session information required to run the games.
• Technology service providers — including cloud computing, cybersecurity, and analytics services used to operate the i3cuci platform. All such providers are bound by strict data confidentiality agreements.
• Competent authorities — i3cuci may be required to disclose information to Malaysian government authorities, police or courts where there is a valid legal order or in the context of a financial crime investigation.
• Independent auditors — third parties conducting game fairness audits and financial audits may have limited access to the aggregated data required for their respective tasks.

5 Data Security at i3cuci

Protecting members' personal data is more than a legal obligation for i3cuci — it is a moral responsibility we take seriously. We continuously invest in high-grade security infrastructure to keep your data safe at all times:

• 256-bit SSL/TLS Encryption for all data transmissions between your device and i3cuci's servers — no information is sent in readable plaintext.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection during login.
• Industry-standard password storage using strong cryptographic hashing — your password is never stored in plain text by i3cuci.
• Strict internal access controls — i3cuci staff may only access member data to the extent required by their role. Access to sensitive data is audited on a regular basis.
• Real-time threat monitoring — our security systems automatically detect and respond to suspicious login attempts, cyberattacks and other abnormal activity.
• Regular data backups — critical data is regularly backed up to redundant data centres to ensure service continuity and data recovery in the event of any disruption.

While we take all reasonable steps to protect your data, no technology system can guarantee absolute 100% security. In the event of any security incident affecting your data, i3cuci is committed to notifying affected members within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

I3cuci uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. The types of cookies we use are as follows:

• Essential cookies — required for core platform operations such as login session verification and security. These cookies cannot be disabled.
• Optional cookies — stores your settings and preferences, such as your chosen language and display theme, helping the platform remember your selections for future sessions.
• Performance cookies — collects anonymous information about how pages are used, helping us identify technical issues and improve platform performance.
• Analytics cookies — used to understand usage patterns in aggregate. All analytics data is processed in a form that cannot identify any individual.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the i3cuci platform and cause certain features to not work as intended. For more information on managing cookies, please refer to your web browser's documentation.

7 Data Retention & Deletion

I3cuci retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by applicable law. Our data retention guidelines are as follows:

• Active account data — retained for the duration of your active account on the i3cuci platform.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, in line with Malaysia's tax and anti-money laundering (AML) legal requirements.
• Betting and gaming records — retained for 2 years from the date of activity for complaint resolution and fairness audit purposes.
• Customer support records — retained for 3 years after a ticket is closed, for record-keeping and service improvement purposes.
• Security log data — retained for 1 year for security investigation and threat monitoring purposes.

Once the relevant retention period has elapsed, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. Early deletion requests from members will be considered subject to the conditions set out in the Your Rights section below.

8 Your Rights as an i3cuci Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy, you have the following rights regarding your personal data held by i3cuci:

To exercise any of the rights above, please contact i3cuci's Data Protection Officer by email at support@i3cuci.best, stating the right you wish to exercise and providing the information needed to verify your identity. i3cuci will process your request within 21 working days.

9 Children's Data Protection

I3cuci is an online betting platform intended exclusively for adult users aged 18 and above. We strictly prohibit the registration and use of our platform by individuals under the age of 18.

I3cuci does not knowingly or intentionally collect, process, or store the personal data of minors under the age of 18. Should we discover that an account has been registered by someone under 18, the account will be closed immediately, all financial transactions will be voided, and the associated data will be securely deleted.

10 Cross-Border Data Transfers

In the course of operating the i3cuci platform, some of your personal data may need to be transferred to or processed by systems located outside Malaysia — for example, servers operated by casino game software providers such as Evolution Gaming or Pragmatic Play, which operate globally.

Every cross-border data transfer carried out by i3cuci is subject to the following conditions:

• The receiving country or service provider must maintain data protection standards equivalent to or higher than those required under Malaysia's PDPA.
• A comprehensive data processing agreement must be signed with each data recipient to ensure adequate protection.
• Data transfers are limited strictly to information necessary for the relevant service purpose.
• I3cuci maintains control and oversight over all cross-border data transfers and may terminate any data-sharing agreement if the required protection conditions are no longer met.

11 Changes to the Privacy Policy

I3cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements or changes in platform operations. Each updated version of the Policy will display a new "Updated" date at the top of this document.

For changes we consider significant — such as changes to how we use your data or to your rights — i3cuci will endeavour to provide adequate notice via email or in-platform notification at least 14 days before the changes take effect.

Your continued use of the i3cuci platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to proceed with account closure.

12 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how i3cuci handles your personal data, please contact us through any of the following channels:

• Privacy & Data Email: support@i3cuci.best (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available on the i3cuci platform — response time under 2 minutes, 24 hours a day
• Support language: Full Bahasa Malaysia support

I3cuci is committed to responding to all privacy-related enquiries within 3 business days. For formal data rights requests — such as access, correction, or deletion — that require more thorough review, the processing period is up to 21 business days from the date the request is received and verified.