Privacy Policy 21cuci – Your Data Security

This Privacy Policy is published by 21cuci ("Company", "we", "Platform") and applies to all users who register, browse, or use any part of the 21cuci platform, including our official website at 21cuci.onl and the 21cuci mobile app for Android and iOS.

The primary purpose of this document is to give you a clear and transparent overview of our privacy practices — what we collect, why we need it, how it is protected, and your rights as the data owner. We believe transparency is the foundation of trust, and your trust is something we do not take lightly.

This Privacy Policy should be read together with Terms and Conditions 21cuci which outlines the general terms of platform use. Together, these two documents form the framework of the agreement between you and 21cuci.

21cuci collects various categories of information from users depending on how you interact with our platform. The following are the types of data we may collect:

We only collect information that is strictly necessary to provide our services safely and efficiently. You are not required to provide more than what is needed, and we will never request information irrelevant to the platform's operational requirements.

The data we collect is used solely for legitimate purposes and in the best interests of users and the platform. The following are the primary purposes for which 21cuci uses your personal data:

• Create and manage your user account, including identity verification through the required KYC process
• Process all financial transactions, including deposits and withdrawals, securely and accurately
• Detect and prevent fraud, money laundering, or any other illegal activity on the platform
• Send important notifications related to your account, security, or changes to the terms of service
• Provide responsive and effective customer support whenever you need assistance
• Comply with legal obligations and regulations applicable to our platform's operations
• Improve the user experience based on aggregated and anonymised usage behaviour analysis
• Manage the VIP programme and tailor relevant promotional offers to you

21cuci takes seriously our obligation not to disclose your personal information to external parties without strong justification. Your personal information may be shared only in the following situations:

• Payment Service Provider: Required financial information is shared with recognised payment processors to facilitate deposit and withdrawal transactions securely.
• Legal Compliance: We are required to disclose information to Malaysian authorities (such as Bank Negara Malaysia, MACC, or the police) when there is a valid court order or legal requirement.
• Identity Verification: KYC information may be shared with authorised third-party identity verification service providers to confirm the authenticity of submitted documents.
• Audit & Certification: Independent auditors who verify the fairness of our games and security systems may have limited access to platform statistical data
• Fraud Protection: In cases of suspected fraud, relevant information may be shared with the appropriate authorities or financial institutions involved

The security of your personal data is the absolute top priority at 21cuci. We continuously invest in the latest security infrastructure and apply multi-layered protection protocols to ensure your information remains safe at all times.

• All data transmitted between your device and 21cuci servers is encrypted using 256-bit SSL/TLS protocol — the highest encryption standard in the industry
• User passwords are stored in an unreadable hashed format using the highly secure bcrypt algorithm.
• Internal staff access to users' personal data is strictly limited on a need-to-know basis
• 24/7 security monitoring detects and blocks any unauthorized access attempts in real time
• Data backups are performed regularly and stored at secure, separate locations to ensure system resilience.
• Penetration testing is conducted regularly by independent security experts to identify and patch any vulnerabilities

Like most online platforms, 21cuci uses cookies and similar tracking technologies to enhance your experience and help us understand how the platform is used. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings at any time. Please note that deleting essential cookies may affect certain platform functions, including the ability to stay logged in. For more information on managing cookies, refer to your web browser's help section.

As a 21cuci platform user, you have certain rights regarding your personal data. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the rights above, please contact our privacy team via email or live chat. We will respond to all requests within 30 business days.

21cuci does not retain your personal data longer than necessary for the purposes stated in this policy. Data retention periods depend on the type of information and applicable legal requirements:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure for financial compliance purposes
• Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by law
• Security Logs: Retained for 1 to 2 years for security investigation and fraud prevention purposes
• Communication Data: Customer support records are retained for 2 years from the date of the last interaction.

Once the retention period expires and no legal requirement prevents deletion, your data will be securely deleted or anonymised so it can no longer be associated with you.

The 21cuci platform may contain links or references to third-party websites or services in certain contexts. Please be aware that the 21cuci Privacy Policy does not apply to any such third-party websites or services.

Every third-party website has its own privacy policy and data management practices, which may differ from the standards we uphold. 21cuci is not responsible for the privacy practices or content of any third-party website, and we recommend that you read their privacy policy before providing any personal information.

21cuci reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, current legal requirements, or improvements to the technology we use.

When significant changes occur, we will notify you through one or more of the following methods:

• In-platform notifications or pop-ups upon next login
• A notification email to your registered email address
• A prominent banner or notice displayed on the platform's main page

Your continued use of the 21cuci platform after any changes are published will be considered your acceptance of the updated Privacy Policy terms. The "Updated" date at the top of this document always reflects the latest version of our Privacy Policy.

If you have any questions, concerns, or wish to exercise any of your privacy rights, the dedicated 21cuci data privacy team is ready to assist:

• 24/7 Live Chat within the platform — the fastest way to get an immediate response.
• Privacy email: [email protected] — for written enquiries and official data-related requests
• Support is available in Malay, English, and Chinese
• All privacy rights requests will be processed within 30 business days

We take every privacy-related inquiry seriously. Our trained team will guide you through each process with care and full respect for the confidentiality of your information.