Privacy Policy

v3cuci ("we", "us", "our", or "the Platform") operates the website at https://v3cuci.cam and any associated digital services. We take the privacy of our Members seriously and are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") describes how v3cuci collects, uses, stores, discloses, and protects personal data relating to individuals who access or use the Platform ("Members", "Users", or "you"). This Policy applies to all data processing activities carried out in connection with the Platform, regardless of the device or channel through which you access it.

By registering an Account on the Platform, making a deposit, or otherwise using the Platform's services, you acknowledge that you have read this Policy in full and that you consent to the processing of your personal data as described herein. This Policy forms part of your agreement with v3cuci and should be read alongside our Terms & Conditions.

For the purposes of this Policy, the following definitions apply:

v3cuci collects the following categories of Personal Data in connection with your use of the Platform:

We do not collect special category data (such as health data, racial or ethnic origin, or political opinions) except where strictly required by applicable law or regulation and with your explicit consent.

v3cuci collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, server logs, and analytics tools when you browse or interact with the Platform. This includes your IP address, device identifiers, and session behaviour.
• From third-party payment providers — when you transact through Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency channels, relevant transaction data is shared with us by those providers to complete and verify your payment.
• From identity verification services — where we use authorised third-party KYC or fraud detection providers, they may share verification outcomes and risk scores with us.
• From fraud prevention and AML databases — where required by law or regulation, we may check your details against sanctions lists and publicly available fraud databases.

v3cuci processes your Personal Data only where a lawful basis exists. The applicable basis for each processing activity is summarised below:

v3cuci uses your Personal Data for the following purposes:

• To create, verify, and manage your Account on the Platform.
• To process deposits and withdrawals in MYR via your selected Malaysian payment method.
• To settle bets, calculate winnings, and maintain your gaming and transaction history.
• To carry out KYC and identity verification as required for withdrawal processing and regulatory compliance.
• To detect and prevent fraud, account abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• To provide customer support and respond to your enquiries and complaints.
• To send you transactional communications — including deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications, including information about bonuses and offers, where you have opted in to receive such communications.
• To enforce our Terms & Conditions, including investigating potential breaches.
• To monitor and improve the performance, security, and usability of the Platform.
• To comply with our legal obligations under applicable law and regulation.
• To administer our responsible gambling programme, including monitoring for indicators of problem gambling behaviour.

v3cuci does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We share your data only in the following limited circumstances:

• Payment Service Providers: We share necessary financial and identity data with payment processors — including FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), and DuitNow — to complete your transactions. These providers act as Data Processors under contract with v3cuci and may not use your data for their own purposes.
• Identity Verification & KYC Providers: We may share KYC Data with authorised third-party verification services to validate your identity and comply with anti-fraud and AML obligations.
• Cloud & Infrastructure Providers: Platform data, including Account information and gaming records, is stored on secure cloud infrastructure operated by vetted third-party providers under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory authority, we may disclose your Personal Data to competent authorities. We will inform you of any such disclosure where legally permitted to do so.
• Professional Advisers: We may share data with lawyers, auditors, and other professional advisers bound by confidentiality obligations where necessary for the operation of our business.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of v3cuci's business, Personal Data may be transferred as part of that transaction. You will be notified of any such transfer and any material change to the applicable privacy terms.

v3cuci retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The general retention periods applicable to each data category are set out below:

After the applicable retention period expires, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction. Where data must be retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory inquiry, it will be retained for the duration of that matter.

v3cuci implements appropriate technical and organisational security measures to protect your Personal Data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is encrypted using 256-bit SSL encryption. Look for the padlock symbol in your browser's address bar.
• Encryption at Rest: Sensitive Personal Data, including financial information and KYC documents, is encrypted when stored in our databases.
• Access Controls: Internal access to Personal Data is restricted on a need-to-know basis. All staff with access to Member data receive data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Available to all Members and recommended as an additional layer of login security for your Account.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for suspicious activity, unauthorised access attempts, and data integrity anomalies.
• Regular Security Audits: We conduct periodic security reviews of our infrastructure, data handling processes, and third-party provider arrangements.

Notwithstanding these measures, no data transmission over the internet or electronic storage method is completely secure. Where a security breach affecting your Personal Data occurs, we will notify you and relevant authorities in accordance with applicable law without undue delay.

v3cuci uses cookies and similar tracking technologies on the Platform to provide core functionality, improve your experience, and — where you have consented — for analytics and personalisation purposes.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. You may withdraw consent for non-essential cookies at any time by updating your Account preferences or adjusting browser settings. Note that withdrawing cookie consent does not affect prior processing.

As a Member and data subject, you hold the following rights in respect of your Personal Data held by v3cuci. These rights are available to all Members regardless of location, consistent with our commitment to responsible data stewardship:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and aim to fulfil it within 30 days. Where requests are complex or numerous, we may extend this period by a further 30 days with notification.

The Platform is strictly intended for individuals aged 21 years and above. v3cuci does not knowingly collect or process Personal Data from persons under the age of 21.

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. Any funds deposited by an underage user will be returned, minus any winnings derived from platform use, which will be forfeited.

v3cuci's primary server infrastructure is located in the Asia-Pacific region. In the course of operating the Platform, your Personal Data may be transferred to and processed in countries other than Malaysia — for example, where our cloud infrastructure, payment processors, or KYC verification providers are located in different jurisdictions.

Where such international transfers occur, v3cuci ensures that appropriate safeguards are in place to protect your Personal Data to the same standard as applied within Malaysia. These safeguards include:

• Data processing agreements incorporating internationally recognised data protection clauses.
• Transfers only to jurisdictions or service providers demonstrating adequate levels of data protection.
• Technical and contractual measures ensuring the recipient processes data only for the stated purpose and in accordance with our instructions.

v3cuci reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, we will provide advance notice to registered Members via email or a prominent notice on the Platform, with not less than fourteen (14) days' notice where reasonably practicable.

The current version of this Policy, including the "Last Updated" date at the top of this page, is always available at https://v3cuci.cam/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the v3cuci data team using the details below. All contact must be via the plain-text addresses provided — do not send sensitive documents or financial information via email.

Where you are unsatisfied with our response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection authority. In Malaysia, the relevant authority for personal data protection matters is the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.