1. Introduction
This Privacy Policy ("Policy") describes how 2cuci ("the Company", "we", "us", or "our") collects, processes, stores, and protects personal data relating to users ("you", "your") of the 2cuci website and platform accessible at 2cuci.co (the "Platform").
By registering an account on 2cuci or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the 2cuci Platform.
This Policy was last updated on 1 January 2026. We recommend that you review this Policy periodically. Continued use of the 2cuci Platform following any update constitutes acceptance of the revised Policy.
2. Data Controller
For the purposes of applicable data protection legislation, 2cuci is the data controller responsible for your personal data collected and processed through the Platform. We process your data in accordance with the data protection standards required under the terms of our international gaming licence. Queries relating to data protection may be directed to our support team at [email protected].
3. Personal Data We Collect
2cuci collects the following categories of personal data:
3.1 Identity & Contact Data
- Full legal name;
- Date of birth;
- Email address;
- Phone number;
- Residential address;
- Government-issued identification document details (e.g., MyKad number, passport number) collected during KYC verification.
3.2 Financial Data
- Bank account details or eWallet identifiers (e.g., Touch n Go eWallet, Boost) used for deposits and withdrawals;
- Transaction history including deposit amounts, withdrawal requests, and timing;
- Source of funds documentation where required for regulatory compliance.
3.3 Technical & Usage Data
- IP address and approximate geolocation;
- Device identifiers, browser type, and operating system;
- Session logs including login times, pages visited, and game activity;
- Cookies and similar tracking technologies as described in Section 10.
3.4 Communications Data
- Records of your communications with 2cuci customer support via live chat or email;
- Responses to surveys, feedback requests, or promotional communications where you choose to participate.
4. How We Collect Your Data
2cuci collects personal data through the following means:
- Direct provision — information you provide when registering an account, completing KYC, making a deposit or withdrawal, or contacting customer support;
- Automated collection — technical and usage data collected automatically when you access the Platform via cookies, server logs, and similar technologies;
- Third-party sources — identity and fraud screening data from KYC verification service providers; payment transaction data from eWallet and banking payment processors; geolocation data from IP intelligence services used for regulatory compliance.
5. Purposes & Legal Basis for Processing
2cuci processes your personal data for the following purposes and on the following legal bases:
- Contract performance — processing your account registration, managing deposits and withdrawals, and providing access to games and the sportsbook;
- Legal obligation — conducting KYC identity verification, complying with anti-money laundering (AML) obligations, age verification, and responding to lawful regulatory or law enforcement requests;
- Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the 2cuci service;
- Consent — sending optional marketing communications where you have opted in to receive them. You may withdraw consent at any time by contacting support.
6. Sharing Your Personal Data
2cuci does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:
- KYC and identity verification providers — for age verification and fraud screening in compliance with our licensing obligations;
- Payment processors — banks and eWallet operators (including Maybank, CIMB, Public Bank, RHB, Touch n Go eWallet, and Boost) to facilitate deposits and withdrawals;
- Game and technology providers — studio partners who deliver game content on the Platform, subject to data processing agreements;
- Regulatory and law enforcement authorities — where required by law, court order, or our licensing authority;
- Professional advisers — legal, audit, and compliance advisers bound by confidentiality obligations.
All third parties with whom we share data are required to process it in accordance with applicable data protection standards and only for the specified purpose for which it was shared.
7. Data Retention
2cuci retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and audit requirements. In practice:
- Account and identity data is retained for a minimum of five (5) years following account closure to comply with AML record-keeping obligations;
- Transaction records are retained for a minimum of five (5) years following the date of the transaction;
- Customer support communications are retained for a minimum of two (2) years;
- Technical and session logs are retained for a minimum of twelve (12) months.
Where data is no longer required for any lawful purpose, it is securely deleted or anonymised.
8. Data Security
2cuci implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and the 2cuci Platform;
- Encryption of sensitive data at rest within our systems;
- Role-based access controls limiting staff access to personal data to those with a legitimate need;
- Regular security testing and vulnerability assessments;
- Incident response procedures for managing potential data breaches.
While we take data security seriously and implement industry-standard protections, no transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your own login credentials. If you suspect that your 2cuci account has been compromised, contact customer support immediately.
9. Your Data Rights
Subject to applicable law and the data protection standards under our licensing framework, you may have the following rights in relation to your personal data held by 2cuci:
- Right of access — to obtain a copy of the personal data we hold about you;
- Right to rectification — to correct inaccurate or incomplete personal data;
- Right to erasure — to request deletion of your personal data, subject to our legal retention obligations;
- Right to restriction — to request that we restrict processing of your data in certain circumstances;
- Right to data portability — to receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
- Right to object — to object to processing based on legitimate interests, including direct marketing.
To exercise any of these rights, please contact 2cuci customer support. We will respond to requests within a reasonable timeframe. Some requests may be subject to identity verification before we can action them.
10. Cookies & Tracking Technologies
The 2cuci Platform uses cookies and similar technologies to support essential platform functionality, remember your preferences, and collect usage analytics that help us improve the service. The categories of cookies used are:
- Strictly necessary cookies — required for the Platform to function, including session management and security. These cannot be disabled without breaking core functionality;
- Functional cookies — used to remember your preferences such as language settings and display options;
- Analytics cookies — used to collect anonymised data about how users interact with the Platform, helping us identify and fix usability issues.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent core Platform features from functioning correctly. We do not use third-party advertising or behavioural targeting cookies on the 2cuci Platform.
11. Minors
The 2cuci Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor without the appropriate age verification controls having prevented it, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created a 2cuci account, please contact our support team immediately.
12. International Data Transfers
As an internationally licensed platform, 2cuci may transfer your personal data to recipients located in countries outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place — including data processing agreements incorporating standard contractual protections — to ensure that your data receives a level of protection consistent with applicable data protection standards. You may obtain further information about the safeguards applied to international transfers by contacting our support team.
13. Policy Changes
2cuci reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, we will provide reasonable advance notice via the Platform or by email to registered account holders. The current version of this Policy is always accessible at 2cuci.co/privacy-policy. The date of the most recent update is indicated at the top of the Policy. Your continued use of the 2cuci Platform following any update constitutes acceptance of the revised Policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 2cuci, please contact our support team:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 on the 2cuci Platform
Last Updated: 1 January 2026