Privacy Policy — cuan368

This Privacy Policy ("Policy") is issued by cuan368 ("cuan368", "we", "us", "our") and applies to all personal data collected from users ("User", "you", "your") of the cuan368 platform accessible at https://cuan368.click (the "Platform"), including all associated services, tools, customer support channels, and promotional communications.

cuan368 is committed to protecting the privacy and personal data of all users in accordance with internationally recognised data protection standards. This Policy is designed to inform you — clearly and completely — of what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you hold in relation to that data.

By registering an Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers such as IP address.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means cuan368, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of cuan368 under a contractual arrangement.
• "KYC Data" means identity and address verification documents submitted to cuan368 as part of the Know Your Customer compliance process.
• "Cookies" means small text files placed on your device by the Platform to collect and store information about your interactions with the Platform.
• "Account" means a registered user account created on the cuan368 Platform.

cuan368 collects the following categories of personal data in the course of operating the Platform:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — 21+ only)
• Email address
• Mobile phone number
• Username and encrypted password
• Country of residence and, optionally, city of residence

3.2 KYC & Identity Verification Data

• Copy of national identity card (e.g., MyKad for Malaysian citizens) or passport
• Proof of address (utility bill, bank statement, or official government correspondence)
• Payment method ownership documentation (e.g., Touch 'n Go eWallet screenshot, Maybank or CIMB bank statement)
• Facial verification data where required for enhanced identity checks

3.3 Financial Data

• Deposit and withdrawal transaction records (amounts in MYR, timestamps, payment method used)
• Payment method identifiers — e-wallet account references, bank account details, cryptocurrency wallet addresses
• Account balance history

3.4 Gaming & Behavioural Data

• Wagering history — games played, bet amounts, outcomes, and timestamps
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)
• Bonus redemption and promotional interaction history
• Session duration and frequency of play patterns

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session logs and access timestamps
• Cookie identifiers and similar tracking technologies

3.6 Communication Data

• Live chat transcripts and support ticket records
• Email correspondence with cuan368 support
• Marketing preferences and opt-in/opt-out records

cuan368 collects personal data through the following channels and methods:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically via the Platform: When you access or use the Platform, we automatically collect technical data including IP address, device information, browser type, and usage logs through server-side logging and cookies.
• From payment service providers: When you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or other integrated payment channels, we receive transaction confirmation data from those providers.
• From identity verification partners: Where third-party KYC verification services are engaged, we may receive verified identity information from those partners to supplement data you have provided directly.
• From fraud prevention services: We may receive risk signals and flagging information from fraud detection partners to protect the Platform and its users.

cuan368 processes your personal data for the following specific and legitimate purposes:

cuan368 will not process your personal data for any purpose that is incompatible with those listed above without your prior consent or a legitimate overriding legal basis.

cuan368 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform our contract with you — providing gaming services, processing transactions, maintaining your Account.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations under our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, analytics, and responsible gambling monitoring — where our legitimate interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

cuan368 does not sell your personal data. We may share your data with carefully selected third parties only in the circumstances set out below, and only to the extent necessary for the specific purpose:

7.1 Payment Service Providers

We share necessary transaction data with payment processors facilitating your deposits and withdrawals — including the operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank. Data shared is limited to what is required to process the specific transaction.

7.2 Identity Verification & KYC Partners

We engage specialised third-party identity verification services to assist with KYC compliance. These providers act as data processors under contractual data processing agreements with cuan368 and are not permitted to use your data for their own purposes.

7.3 Fraud Prevention & Security Services

We may share technical and transactional data with fraud detection service providers to identify and prevent fraudulent activity, money laundering, and other security threats to the Platform.

7.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of cuan368, our users, or the public.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of cuan368's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via the Platform or by email.

cuan368 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They allow us to recognise your device, maintain your session, and analyse usage patterns.

8.1 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in and security cookies that detect unauthorised access attempts. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and your responsible gambling tool configuration.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, time spent, errors encountered — to help us improve performance and user experience.
• Security & Fraud Prevention Cookies: Help us detect and prevent fraudulent activity, including identifying patterns consistent with bot activity or multiple-account creation.

8.2 Managing Cookies

You can control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect certain personalisation features. Please note that disabling essential cookies may impair your ability to log in or access certain functionality.

cuan368 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable laws and regulations. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, to satisfy anti-money laundering (AML) and other regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later, in compliance with our licensing obligations.
• Transaction records: Retained for a minimum of 7 years to comply with financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of 5 years following Account closure for responsible gambling monitoring and dispute resolution purposes.
• Customer support communications: Retained for up to 3 years following resolution of the relevant enquiry or complaint.
• Marketing preferences and consent records: Retained until you withdraw consent or request deletion, plus an additional period as required for legal documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.

cuan368 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and cuan368's servers is encrypted using current-generation TLS protocols.
• At-rest encryption: Sensitive data stored on our servers — including KYC documents and payment credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and monitored.
• Two-factor authentication (2FA): Recommended for all user accounts and mandatory for administrative access to systems processing personal data.
• Regular security audits: cuan368 conducts periodic internal and external security reviews to identify and remediate vulnerabilities.
• Incident response plan: We maintain a documented data breach response procedure, including user notification protocols as described in our Privacy Commitments above.

Subject to applicable laws and our regulatory obligations, you hold the following rights in relation to the personal data cuan368 holds about you:

• Right of Access: You may request a copy of the personal data cuan368 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You can update many details directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances — particularly where data is no longer necessary for the purpose for which it was collected — you may request deletion of your personal data. This right is subject to overriding legal obligations, including our KYC record-keeping requirements.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection team via live chat or email at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

Please note that certain rights may be subject to limitations where our overriding obligations under anti-money laundering regulations, our gaming licence conditions, or other legal requirements apply.

The cuan368 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from any person under the age of 21. If you believe that a minor has registered an Account on the Platform, please contact us immediately at [email protected].

Upon receiving a credible report that an Account holder is under 21, cuan368 will immediately suspend the Account, conduct a verification review, and — where underage access is confirmed — permanently close the Account, return any funds that can be verified as legitimate, and delete all associated personal data to the extent permitted by law.

cuan368 operates under international online gaming licensing and may process and store your personal data on servers located outside of Malaysia. Where personal data is transferred internationally, cuan368 takes steps to ensure that an appropriate level of data protection is maintained, including through the use of contractual safeguards with third-party processors and the selection of service providers in jurisdictions with recognised data protection frameworks.

If you have questions about the specific safeguards in place for international data transfers applicable to your personal data, you may contact us using the details in Section 16.

The cuan368 Platform does not contain links to external third-party websites as a matter of policy. However, integrated payment and identity verification services that process your data are subject to their own privacy policies. cuan368 is not responsible for the privacy practices of third-party payment processors or verification partners, although we contractually require them to handle your data responsibly.

cuan368's Privacy Policy applies exclusively to the data we collect and process in connection with the Platform. We encourage you to review the privacy notices of any third-party services you interact with directly.

cuan368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, regulatory requirements, or operational practices. Material changes will be communicated to registered users by email and/or via a prominent notice on the Platform no fewer than 7 days before they take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after a Policy update constitutes your acknowledgement of the revised version. If you do not agree with a material change, you may close your Account in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cuan368, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 via the Platform. Our Malaysia-based agents communicate in English and Bahasa Melayu and can handle data rights requests and privacy enquiries.
• Email: [email protected] — for data rights requests, please use the subject line "Data Rights Request". We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days.