Privacy Policy

This Privacy Policy ("Policy") describes how 77cuci ("77cuci", "we", "us", "our"), the operator of the online gaming platform accessible at https://77cuci.cam (the "Platform"), collects, processes, stores, discloses, and protects the personal data of individuals ("Players", "Users", "you") who register, access, or interact with the Platform.

77cuci is committed to handling personal data responsibly, in accordance with applicable data protection principles including purpose limitation, data minimisation, integrity, confidentiality, and the right of individuals to exercise meaningful control over their own information.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the Platform.

The following terms, as used in this Policy, carry the meanings set out below:

77cuci collects personal data through the following channels: account registration, KYC verification, payment processing, Platform usage, and direct communications with our support team. The categories of data collected are as follows:

77cuci processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and financial record-keeping obligations applicable to online gaming operators.
• Legitimate interests: Processing carried out to detect and prevent fraud, ensure Platform security, improve service quality, and communicate relevant platform updates to active players. These interests have been assessed against player rights and determined not to override those rights.
• Consent: Where processing is not covered by the above bases — for example, sending promotional communications beyond service notifications — 77cuci will seek your explicit prior consent, which may be withdrawn at any time.

Personal data collected by 77cuci is used exclusively for the following purposes:

• Creating, maintaining, and securing your registered 77cuci Account.
• Processing deposits and withdrawals via your chosen Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency networks.
• Conducting identity and age verification (KYC) to comply with regulatory requirements and to ensure that the Platform is not accessed by persons under the age of 21.
• Detecting, investigating, and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities.
• Providing customer support through live chat and email, including resolving disputes and responding to account-related queries.
• Sending transactional communications — account confirmations, withdrawal processing notices, security alerts — that are necessary to deliver the service.
• Sending promotional communications — offers, bonuses, platform updates — where you have provided consent or where such communications constitute a legitimate interest that has not been overridden by your right to object.
• Maintaining responsible gambling compliance, including monitoring for signs of problem gambling behaviour and processing self-exclusion or deposit limit requests.
• Improving Platform performance, game availability, and user experience through aggregated, anonymised analytics data.

77cuci does not sell, rent, or otherwise commercially transfer your personal data to third parties. Disclosure of personal data is limited to the following strictly defined circumstances:

• Payment service providers: Financial institutions and e-wallet operators (including but not limited to Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, DuitNow, and FPX networks) receive the minimum data necessary to process your payment instructions.
• KYC and identity verification providers: Licensed third-party identity verification services may receive a copy of your identification documents and facial image for the purpose of automated and manual KYC review.
• Fraud prevention and AML screening services: Anonymised or pseudonymised transactional data may be shared with third-party fraud and AML detection platforms to identify suspicious activity patterns.
• Game studio providers: Game providers receive the minimum technical data required to operate their games on the Platform — typically a player identifier and session token. No financial data or full personal identity data is shared with game providers.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory demand, 77cuci will disclose relevant personal data to the requesting authority. 77cuci will, where legally permissible, notify the affected player of such disclosure.
• Business succession: In the event of a merger, acquisition, or sale of substantially all of 77cuci's assets, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All financial transactions on the 77cuci Platform — including deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfers, and cryptocurrency — are processed through encrypted, PCI-DSS compliant or equivalent payment gateways.

77cuci retains the following payment-related data for operational, fraud prevention, and regulatory purposes:

• Transaction reference numbers and timestamps.
• Masked payment account identifiers (e.g., last 4 digits of account number, masked e-wallet identifier).
• Transaction amounts in MYR or cryptocurrency equivalent.
• Transaction status and processing outcome.

Full bank account numbers, e-wallet PINs, and online banking credentials are never stored on 77cuci's servers at any point. Cryptocurrency wallet addresses associated with deposit or withdrawal transactions are retained for compliance and traceability purposes.

77cuci uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored locally on your browser or device. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, CSRF protection, and security controls. These cannot be disabled without affecting Platform functionality.
• Preference cookies: Store your language, display, and gameplay preferences so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which game categories they visit, how long sessions last, which pages generate errors. This data is used exclusively for internal Platform improvement.
• Responsible gambling cookies: Support the operation of session timers, deposit limit tracking, and cooling-off controls associated with our responsible gambling tools.

77cuci does not use third-party advertising cookies, cross-site tracking pixels, or any cookie technology designed to build behavioural profiles for sale to third parties. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

77cuci retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

77cuci implements a layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The following technical and organisational security measures are in place:

• Encryption in transit: All data exchanged between your device and the Platform is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal and financial data stored on 77cuci's servers is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and are bound by confidentiality obligations.
• Intrusion detection and monitoring: Real-time monitoring systems alert the security team to anomalous access patterns, brute-force attempts, and other potential threats.
• Penetration testing: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
• Incident response: 77cuci maintains a documented data breach response plan. In the event of a breach affecting personal data, affected players will be notified promptly in accordance with applicable notification obligations.

As a data subject, you hold the following rights in relation to the personal data that 77cuci holds about you. These rights may be exercised at any time by contacting our support team:

To exercise any of the above rights, contact our Data Privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 days. We may require identity verification before processing your request.

The 77cuci Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If 77cuci becomes aware that personal data has been collected from an underage individual, the Account will be immediately suspended, all data will be deleted, and any deposited funds will be returned to the verified source without payment of winnings.

77cuci's Platform infrastructure and core operational systems are hosted in data centres that meet international security standards. Where personal data is transferred to, or processed in, a jurisdiction outside of Malaysia, 77cuci ensures that appropriate safeguards are in place to protect that data, including but not limited to:

• Binding contractual obligations on the recipient imposing data protection standards equivalent to those described in this Policy.
• Technical measures ensuring that data in transit is encrypted and cannot be intercepted or accessed by unauthorised parties.
• Restricting such transfers to jurisdictions or service providers that demonstrate equivalent data protection capability.

Players who have concerns about specific international transfers of their data may contact [email protected] for further information about the particular safeguards in place.

77cuci reserves the right to update or amend this Privacy Policy at any time. Changes will be communicated to registered players via email notification and by a prominent notice displayed on the Platform no fewer than seven (7) days before the changes take effect.

Material changes — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — will be communicated with no less than 14 days' advance notice. Your continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

The effective date displayed at the top of this Policy reflects the date of the most recent update. Archived versions of prior Policy editions are available on request via [email protected].

If you have any questions, concerns, or requests in relation to this Privacy Policy, or wish to exercise any of your data rights, please contact the 77cuci Privacy & Data Protection team through the following channels: