Privacy Policy 1 mcuci — Malaysia Personal Data Protection

1 mcuci ("we", "platform", or "our website") is committed to protecting the privacy of every user who accesses and uses our Sports Betting, Live Casino, slots, and Table Games services. This Privacy Policy has been drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

As an online betting platform built exclusively for users in Malaysia, 1 mcuci understands the importance of trust in the relationship between us and our members. We do not view your personal data as a business asset — rather, it is personal information you have entrusted to us, and we handle it with the utmost responsibility.

This document explains the types of data we collect when you register, make a deposit via Touch 'n Go, GrabPay, DuitNow, or FPX, play Malaysia Super League football matches, live baccarat, or engage in any other activity on our platform. We also outline your rights regarding that data and how to reach us should you have any questions.

1 mcuci collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

We may also receive data about you from third-party sources such as identity verification providers, payment service providers (e.g. FPX or DuitNow transaction status information), and publicly available sources relevant to anti-money laundering (AML) compliance.

1 mcuci uses the personal data collected for the following purposes, in line with the principle of lawful purpose under PDPA 2010:

• Account Management — registering, verifying, and maintaining your user account;
• Transaction processing — processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your bank account or e-wallet in MYR;
• Legal compliance — fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations as required under Malaysian law;
• Platform security — detecting and preventing fraud, multi-account usage, bonus abuse, and other unlawful activities;
• Service improvement — analysing usage patterns to improve the user experience, platform performance, and the range of games offered;
• Service communications — sending important notifications related to your account, transactions, policy changes, and security information;
• Marketing (with consent) — sending promotional offers, festive bonuses, and special campaign communications 1 mcuci to you, subject to the consent you have provided.

We will not use your data for any purpose beyond what is stated above without first obtaining your consent. Any significant new use will be communicated through updates to this Privacy Policy.

1 mcuci does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, in the context of legitimate business operations, we may share your data with the following parties:

• Payment service providers — FPX processors, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, and other payment gateway providers used to process financial transactions;
• Identity verification providers — a third-party KYC company that assists us in verifying the identity of new members in line with compliance requirements;
• Game software providers — Live Casino, slots, and sports game providers who require limited access to session data in order to deliver their games;
• Legal authorities — government agencies, law enforcement bodies, or courts when required by Malaysian law or a valid court order;
• IT and security service providers — companies that assist us in maintaining our technical infrastructure, cybersecurity, and platform analytics.

Your personal data is stored on secure servers protected by multi-layered access controls. 1 mcuci implements comprehensive technical and organisational security measures to protect your data from unauthorised access, loss, or misuse.

The key security measures we employ include:

• Encryption of data in transit using TLS 1.3 and 256-bit SSL protocols;
• Encryption of data at rest for all sensitive information;
• Role-based access control (RBAC) ensuring only authorised personnel can access user data;
• 24/7 security monitoring and intrusion detection systems;
• Regular data backups and disaster recovery plans;
• Regular security audits conducted by independent third parties.

Data Retention Period: We retain your personal data for as long as your account remains active or as necessary to provide our services. Following account closure, we retain certain records for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and AML compliance.

Website 1 mcuci uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The types of cookies we use are as follows:

You may manage or delete cookies through your web browser settings at any time. However, deleting essential cookies may affect the functionality of the platform 1 mcuci. For guidance on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to each browser's help documentation.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by 1 mcuci:

To submit any request relating to your data rights, please contact us by email at support@1mcuci.click with the subject line "Personal Data Rights Request". We will respond within 14 working days.

Platform 1 mcuci is not intended for individuals under the age of 18. We do not knowingly collect or process personal data from minors.

Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that their child has registered on 1 mcuci are encouraged to contact us immediately at support@1mcuci.click.

In certain circumstances, your personal data may be processed or stored outside Malaysia — for example, by cloud service providers or international gaming software vendors. In such cases, 1 mcuci ensure that:

• Data transfers are made only to countries or entities that provide a level of data protection equivalent to or higher than Malaysia's PDPA;
• Legally binding data protection agreements are established with all international data recipients;
• Data transferred is limited solely to what is necessary for the specific service purpose;
• You will be notified of such transfers upon request.

1 mcuci reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. You will be notified of any material changes through:

• In-platform notification upon your next login;
• Notification emails to your registered email address;
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform 1 mcuci after the effective date of any changes shall be deemed acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 1 mcuci handles your personal data, please contact us through the following channels:

• Email: support@1mcuci.click
• Live Chat: Available 24/7 across the platform 1 mcuci

Our privacy team will endeavour to respond to all enquiries within 14 working days. For requests that are complex or require additional identity verification, processing may take longer, and we will keep you updated on the latest developments.

For formal complaints relating to personal data protection in Malaysia, you may also contact Department of Personal Data Protection (JPDP) Malaysia which is the regulatory body under the Malaysian Ministry of Communications and Digital.