11cuci Privacy Policy – Data Protection for Malaysian Players

11cuci is an online casino platform operating under a valid international licence. We take our responsibility to member privacy seriously — particularly for our Malaysian players, who make up the majority of our community. This Privacy Policy has been developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and recognised international privacy standards.

This policy applies to all personal data collected by 11cuci through:

• The official 11cuci website and all associated subdomains.
• The member account registration and management process.
• Financial transactions including deposits and withdrawals.
• Interactions with the 11cuci customer support team.
• Participation in promotions, contests, or loyalty programmes.
• Use of responsible gaming features on the platform.

11cuci collects several categories of personal data depending on how you interact with the platform. Below is a breakdown of the data we collect and how it is obtained:

For financial data, 11cuci no store credit or debit card numbers directly. All card processing is handled by third-party payment providers that are PCI DSS compliant. For e-wallet methods such as Touch 'n Go, GrabPay, Boost, and ShopeePay – your account information is managed by the respective e-wallet providers, and 11cuci only receives the transaction confirmation required to process your request.

11cuci uses your personal data solely for legitimate and reasonable purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your member account, including identity verification, limit settings, and profile maintenance.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and carrying out withdrawals to your registered account.
• KYC & Anti-Money Laundering Compliance: Verifying your identity to comply with Know Your Customer (KYC) requirements and applicable anti-money laundering (AML) laws.
• Customer Support: Responding to enquiries, resolving technical issues, and handling complaints related to your 11cuci account or transactions.
• Platform Security: Detecting and preventing fraud, collusion, bot usage, or any activity that violates 11cuci's Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to enforce the limits you have set for yourself.
• Direct Marketing (with consent): Sending you promotional updates, new bonuses, and exclusive offers – only if you have given explicit consent to receive marketing communications from 11cuci.
• Platform Improvements: Analysing usage data in aggregate (without identifying individuals) to understand usage patterns and improve the 11cuci platform experience.

Under Malaysia's PDPA, 11cuci processes your personal data on the basis of one or more of the following legal grounds:

• Consent: You have given your explicit consent by accepting this Privacy Policy at the time of registering your 11cuci account. This consent may be withdrawn at any time.
• Contract Performance: Processing is necessary to fulfil the agreement between you and 11cuci — including providing access to the platform, processing deposits and withdrawals, and delivering the services you have subscribed to.
• Legal Obligation: 11cuci is legally required to process certain data for KYC, AML compliance, and applicable licensing obligations.
• Legitimate Interests: In certain cases, 11cuci processes data on the basis of legitimate business interests — such as fraud prevention and platform security — where these do not override your rights and interests.

11cuci does not sell your personal data to any third party. However, we do share data with the following parties in limited contexts and for legitimate purposes:

• Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow providers, and banks supporting FPX (Maybank, CIMB) — the necessary transaction information is shared to process your deposits and withdrawals.
• Game Providers: Companies such as Pragmatic Play, PG Soft, and other providers receive the session data necessary to deliver games to you. This does not include financial information or full identity details.
• Technical Service Providers: Cloud infrastructure, cybersecurity systems, and analytics platforms that support 11cuci's operations — all subject to strict data protection agreements with 11cuci.
• Legal Authorities: 11cuci will disclose personal data to Malaysian or international authorities where required by a court order, warrant, or other lawful legal obligation.
• Licensing Authority: Audit and compliance information may be shared with our licensing regulatory body for verification and licence renewal purposes.

11cuci continually invests in security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The security measures we employ include:

• Data Encryption in Transit: All communications between your device and 11cuci's servers are protected with TLS 1.3 / SSL 256-bit encryption. No sensitive data is transmitted in plain text.
• Static Data Encryption: Sensitive personal data such as passwords is stored using strong hashing algorithms (bcrypt). Your original password is never stored in a readable format.
• Internal Access Controls: The principle of least privilege applies — 11cuci staff may only access the data required to carry out their specific duties. All access is logged and audited on a regular basis.
• Two-Factor Authentication: 11cuci's internal systems require two-factor authentication for all administrative access. The same feature is available for member accounts as an additional layer of protection.
• Regular Security Testing: The 11cuci platform undergoes regular penetration testing and vulnerability assessments conducted by independent third parties.
• Incident Response Plan: 11cuci has established procedures for responding to data security incidents, including notification protocols for the relevant authorities and affected members as required under the PDPA.

While we take all reasonable precautions, no security system is entirely foolproof. We encourage you to take your own protective measures as well — such as using a strong, unique password for your 11cuci account, not sharing your login credentials, and enabling two-factor authentication.

11cuci retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account remains active with 11cuci, plus any required period following account closure.
• Financial Transaction Data: Retained for a minimum of seven years from the date of transaction to comply with financial reporting and anti-money laundering requirements.
• KYC Data: Retained for a minimum of five years after the business relationship ends, in accordance with Malaysia's AML legal requirements.
• Support Communication Log: Retained for two years for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your marketing consent, after which this data will be removed from our marketing lists.

The 11cuci platform uses cookies and similar automated data collection technologies to enhance the user experience and analyse platform usage patterns. The types of cookies we use are:

• Essential Cookies: Required for core platform functionality — such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use 11cuci — such as which pages are visited most frequently and any error messages encountered. This data is used in aggregate form to improve the platform and does not identify you as an individual.
• Functional Cookies: Storing your in-platform preferences — such as language and display settings — so you do not have to reconfigure them each time you log in.
• Security Cookies: Used to detect suspicious activity and prevent fraud, including identifying patterns that indicate bot usage or unauthorised access attempts.

You can manage your cookie settings through your web browser's preferences. Keep in mind that disabling essential cookies may affect how the 11cuci platform functions. For guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, refer to your browser's help documentation.

As a Malaysian player, the Personal Data Protection Act 2010 (PDPA) grants you certain rights in relation to the personal data held by 11cuci. These rights include:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a readable format within 21 days of receiving your request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. This can be done directly through your account profile or by contacting 11cuci support.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that 11cuci restrict how we process your data — for example, while you are disputing the accuracy of that data.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. This does not affect the validity of any processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Erasure (subject to legal exemptions): You may request the deletion of your personal data, subject to the legal retention requirements outlined in Section 7.

11cuci is a platform intended strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. This is a non-negotiable policy at 11cuci.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take the following steps immediately:

• Closing the account in question immediately.
• Deleting all related personal data from our systems.
• Returning any available funds in the account in accordance with the relevant procedures.

If you know or have reason to believe that someone under the age of 18 is using the 11cuci platform, please notify us immediately by emailing support@11cuci.best. We will investigate and take appropriate action.

11cuci reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform service improvements. When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice within the 11cuci platform during your first login session after the changes take effect.
• Sending a notification email to your registered address for significant changes that materially affect your privacy rights.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of the 11cuci platform after any amendments have been communicated will be considered your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 11cuci handles your personal data, please reach out to us through the following channels:

• Privacy Email: privacy@11cuci.best (for privacy enquiries and rights requests)
• General Support Email: support@11cuci.best (for general enquiries including privacy matters)
• Live Chat: Available 24/7 via the chat icon within the 11cuci platform

We are committed to responding to all privacy enquiries within three business days. For more complex requests such as data access or deletion requests, a response may take up to 21 days in accordance with the PDPA.

If you are not satisfied with our response to any privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the PDPA 2010.