Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by i2cuci ("we", "us", "our", "the Company") and describes how we collect, use, store, share, and protect personal data belonging to individuals ("you", "your", "User", "Player") who access or use the i2cuci online casino and sports betting platform available at https://i2cuci.cam and any associated mobile applications or services (collectively, the "Platform").

i2cuci is committed to processing personal data responsibly, lawfully, and transparently. This Policy has been prepared in accordance with applicable data protection laws and reflects best practices for online gaming operators serving Malaysian players.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy shall prevail.

2 Definitions

The following terms have the meanings set out below when used in this Privacy Policy:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including name, identification number, contact details, financial data, and online identifiers.
• "Data Controller" means i2cuci, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by i2cuci to process Personal Data on our behalf and under our documented instructions.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "KYC" means Know Your Customer — the identity verification process required to authenticate a player's identity and comply with anti-money laundering obligations.
• "Cookies" means small text files placed on your device when you visit the Platform, used to remember preferences and support analytics functions.
• "Sensitive Personal Data" means data relating to a person's racial or ethnic origin, health, financial circumstances, or other categories warranting additional protection under applicable law.

3 Data We Collect

i2cuci collects personal data across the following categories, depending on how you interact with the Platform:

3.1 Identity & Registration Data

Full Name Date of Birth Gender National ID / MyKad Passport Number

Collected at registration and during KYC verification. Required to establish your identity, confirm you meet the 21+ age requirement, and comply with anti-money laundering obligations.

3.2 Contact Information

Email Address Mobile Number Residential Address City / Postcode

Used for account communications, support responses, promotional messaging (with your consent), and KYC address verification for Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations.

3.3 Financial & Transaction Data

Deposit History Withdrawal Records Payment Method Type Transaction Reference Numbers

We record all financial transactions processed through Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20. We do not store full bank account numbers or e-wallet PINs.

3.4 Gameplay & Betting Data

Bet History Game Sessions Win / Loss Records Bonus Uptake

Maintained for account integrity, responsible gambling monitoring, dispute resolution, and regulatory reporting. This data also allows us to tailor promotions and game recommendations to your preferences.

3.5 Technical & Device Data

IP Address Browser Type Device Type Operating System Session Duration

Collected automatically when you access the Platform. Used for security monitoring, fraud detection, geolocation verification, and improving Platform performance.

4 How Data Is Collected

i2cuci collects personal data through the following mechanisms:

• Account registration form: when you create your i2cuci Account, you voluntarily provide identity and contact information.
• KYC verification uploads: when you submit identity documents such as your Malaysian MyKad, passport, or proof-of-address documentation.
• Deposit and withdrawal transactions: payment processing systems record transaction metadata each time you use a Malaysian payment method.
• Gameplay activity: our Platform automatically logs your game sessions, bet placements, and game results as part of normal platform operation.
• Customer support interactions: when you contact our support team via live chat or email, the content of those communications is recorded and retained.
• Cookies and tracking technologies: our Platform places cookies on your device to support session management, analytics, and fraud prevention. Please refer to Section 10 for full cookie details.
• Third-party payment processors: when you transact through e-wallets or bank payment gateways, those processors may share transaction confirmation data with i2cuci.

5 Legal Basis for Processing

i2cuci processes personal data on the following legal bases:

6 How We Use Your Personal Data

i2cuci uses collected personal data for the following purposes:

6.1 Platform Operation

To create and manage your Account, process deposits and withdrawals via Malaysian payment channels, authenticate your identity at login, and deliver the gaming and sports betting services you have requested.

6.2 Regulatory Compliance

To meet our obligations under anti-money laundering (AML) regulations, conduct KYC verification, detect and prevent fraud and collusion, and respond to lawful requests from regulatory or law enforcement authorities.

6.3 Responsible Gambling

To monitor gameplay patterns for indicators of problem gambling behaviour, enforce deposit and loss limits you have requested, apply self-exclusion measures where requested, and fulfil our obligations to protect vulnerable players including those under the age of 21.

6.4 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance purposes. Our support agents are available 24/7 and handle communications in English, Bahasa Melayu, and Mandarin.

6.5 Marketing Communications

Where you have given explicit consent, to send you promotional communications about bonuses, new games, sports betting opportunities, and platform updates. You may withdraw this consent at any time by contacting us at [email protected]. We will never send unsolicited marketing communications without prior consent.

6.6 Platform Security & Fraud Prevention

To detect and investigate suspicious account activity, prevent unauthorised access, identify duplicate accounts, and protect the integrity of our gaming environment for all players.

7 Sharing of Personal Data

i2cuci does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf and under our documented instructions. These include payment processing partners (e-wallet operators, FPX network providers), KYC verification technology vendors, cloud hosting and infrastructure providers, and customer support platform operators. All service providers are bound by contractual data protection obligations and may not use your data for any purpose other than providing services to i2cuci.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required or compelled to do so. In such cases, we will only disclose the minimum information required by the legal obligation.

7.3 Business Transfers

In the event that i2cuci undergoes a merger, acquisition, or sale of business assets, personal data held by the Company may be transferred to the successor entity, subject to equivalent privacy protections being applied. You will be notified of any such transfer via email or a prominent notice on the Platform.

8 Data Retention

i2cuci retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

9 Data Security Measures

i2cuci implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or destruction:

• 256-bit SSL / TLS encryption for all data in transit between your device and our servers
• Encrypted data storage for sensitive fields including identification numbers and payment references
• Access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of our Platform infrastructure
• Multi-factor authentication available for player accounts and mandatory for all administrative access
• Intrusion detection systems monitoring for unusual access patterns or data exfiltration attempts
• Incident response procedures including notification protocols in the event of a data breach

While we implement robust security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, contact our support team immediately.

10 Cookies & Tracking Technologies

The i2cuci Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your login session, preserve your language and region preferences, and enable secure payment processing. These cookies cannot be disabled without impairing your ability to use the Platform.

10.2 Functional Cookies

These cookies remember your preferences and settings — such as preferred language (English, Bahasa Melayu, or Chinese), saved game categories, and display options — to provide a more personalised experience on return visits.

10.3 Analytics Cookies

These cookies collect anonymised data about how visitors interact with the Platform — such as which pages are most visited, how long sessions last, and which features are used most frequently. This information is used solely to improve Platform performance and user experience. No individual player is identified through analytics data.

10.4 Security & Fraud Prevention Cookies

These cookies support our fraud detection systems by recording device fingerprints and session characteristics. They help us identify suspicious login attempts, duplicate account registrations, and anomalous betting patterns.

10.5 Managing Cookies

You may manage or disable cookies through your browser settings at any time. However, disabling strictly necessary cookies may prevent you from logging into your Account or completing transactions. Instructions for managing cookies in common browsers are available through the browser's help documentation.

11 Your Rights Regarding Personal Data

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data i2cuci holds about you. To exercise any of these rights, please contact our support team at [email protected].

11.1 Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.

11.2 Right to Rectification

You have the right to request correction of any personal data we hold that is inaccurate or incomplete. For account details such as name, contact information, or address, updates may require re-verification via KYC.

11.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest. Please note that we may be required to retain certain data for regulatory or legal compliance reasons even following a valid erasure request.

11.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a processing objection is under review.

11.5 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing for that purpose immediately.

11.6 Right to Withdraw Consent

Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at [email protected].

12 Minors & Age Verification

i2cuci's Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21, and we actively enforce age verification through our KYC processes.

Parents and guardians who believe their child may have registered on our Platform without authorisation are encouraged to contact us immediately at [email protected]. We will investigate and respond within 48 hours.

We also encourage parents and guardians to use commercially available internet filtering and parental control software to restrict access to online gambling platforms by minors within their household.

13 International Data Transfers

i2cuci operates as an international online gaming platform. In the course of providing our services, personal data may be transferred to and processed in countries other than Malaysia. This includes transfers to our cloud infrastructure providers, payment processing partners, and game studio technology partners.

Where personal data is transferred internationally, i2cuci takes appropriate safeguards to ensure that the data continues to be protected to a standard equivalent to that applicable in Malaysia. These safeguards may include:

• Contractual data protection agreements with service providers incorporating standard data protection clauses
• Processing only with service providers located in jurisdictions that maintain adequate data protection standards
• Technical security measures applied regardless of the location of processing

By using the Platform, you acknowledge that your personal data may be transferred and processed in locations outside Malaysia in the circumstances described above.

14 Changes to This Privacy Policy

i2cuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered players via the email address associated with their Account at least 7 days before changes take effect
• Where required, seek renewed consent for any new processing activities that require it

We encourage you to review this Privacy Policy periodically. The version published on this page at any given time is the current and governing version. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

Previous versions of this Privacy Policy are available upon request by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way i2cuci handles your personal data, please contact us through the following channels. All privacy-related enquiries are handled by our dedicated support team.

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Languages supported: English, Bahasa Melayu, and Mandarin Chinese
• Response time: Under 5 minutes via live chat; within 24 hours for written requests submitted by email

For data rights requests under Section 11 (access, rectification, erasure, restriction, objection, or consent withdrawal), please submit your request by email to the address above with the subject line "Data Rights Request" and include your registered account email address for verification purposes.