Official Document – PDPA 2010

999 Cuci Privacy Policy – Personal Data Protection for Malaysian Members

Your privacy is our priority. This Privacy Policy clearly explains how 999 cuci collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read it carefully before using our platform.

Last updated: 1 January 2026 Applicable in: Malaysia

Our Privacy Commitment

Full PDPA 2010 compliance
256-bit SSL Encryption
Zero Third-Party Data Sales
Your data access & deletion rights
Secure servers based in Malaysia

1 Introduction & Scope of Privacy Policy

999 cuci ("we", "Platform", "Company") is fully committed to protecting the privacy and personal data of all members and users who access our online entertainment platform in Malaysia. This Privacy Policy has been formulated in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia, and sets out in detail our practices regarding the collection, use, storage, disclosure, and protection of your personal data.

This document applies to all users accessing the 999 cuci website at 999cuci.click, our mobile app, or any other services we provide. By registering an account or continuing to use the 999 cuci platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy all of which form a comprehensive protection framework for 999 cuci members.

Data Protection Officer: 999 cuci has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance. Any privacy-related inquiries may be directed to support@999cuci.click.

2 Types of Personal Data We Collect

999 cuci only collects personal data that is necessary to provide a quality and secure service to our members. The data we collect can be grouped into several categories:

A. Identity & Account Data

  • Full name as per MyKad or passport
  • MyKad or passport number (for KYC process)
  • Date of birth and gender
  • Username and encrypted password
  • Profile photo (if voluntarily uploaded)

B. Contact Data

  • Active email address
  • Malaysian phone number
  • Residential address (for KYC verification if required)

C. Financial & Transaction Data

  • Bank account number or e-wallet number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
  • Deposit and withdrawal history in MYR
  • Bonus and promotion claim records
  • Betting and gaming activity history

D. Technical & Usage Data

  • IP address, browser type, and device operating system
  • Login session data including time, date, and approximate location
  • Cookie and similar tracking technology information
  • Platform performance data and technical error reports
Data Category Example Mandatory / Voluntary
Identity Full name, MyKad, date of birth Required
Relationship Email, phone number Required
Finance Bank account number, e-wallet Required for transactions
Technical IP address, cookie data Automatic
Marketing Communication preferences Voluntary

3 How We Collect Personal Data

999 cuci collects personal data through various lawful and transparent channels. We never collect your data without your knowledge, except through standard technologies described below.

  • Registration Form: Basic data is collected when you first register a 999 cuci account, including your name, email address, phone number, and date of birth.
  • KYC Verification Process: Identity documents and proof of address are collected when you undergo the identity verification process required prior to fund withdrawals.
  • Transaction Activity: Financial data is collected automatically each time you make a deposit using Touch 'n Go, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay, as well as during withdrawals.
  • Platform Usage: Technical data is collected automatically via cookies, server logs, and standard web technologies when you use the 999 cuci website or application.
  • Support Communications: When you contact the 999 cuci support team via live chat, WhatsApp, or email, the content of those communications is stored for record-keeping and service improvement purposes.
  • Licensed Third Parties: In certain cases, 999 cuci may receive data from licensed third-party identity verification partners to confirm the validity of the information you provide.

4 How We Use Your Personal Data

999 cuci uses your personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without first obtaining your consent.

  • Account Management: Creating, verifying, and maintaining your 999 cuci account, including secure login and password recovery.
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via your chosen local payment methods.
  • Legal Compliance: To meet anti-money laundering (AML), identity verification (KYC), and reporting obligations to the relevant Malaysian authorities.
  • Platform Security: Detecting and preventing fraud, unauthorised access, account misuse, and activities that violate Terms & Conditions ours.
  • Customer Support: To handle member enquiries, complaints, and technical support requests more efficiently and accurately.
  • Service Improvement: Analysing platform usage patterns to improve the member experience, introduce new games, and optimise technical performance.
  • Marketing Communications: To send promotional information, bonus offers, and the latest 999 cuci news — only if you have given your consent to receive such communications.
  • Responsible Gaming: Identifying risky gaming patterns and reaching out to members who may need support through our Responsible Gaming ours.
Legal Basis: All data processing by 999 cuci is based on one of the following grounds — your consent, contractual necessity, legal obligation, or the company's legitimate interests that do not override your fundamental rights.

5 Data Sharing & Disclosure to Third Parties

999 cuci does not sell, rent, or trade your personal data to any third party for marketing purposes. However, under certain limited circumstances, we may need to share your data with the following parties:

  • Payment Service Provider: E-wallet and banking providers used to process your financial transactions, including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions. Data shared is strictly limited to what is necessary to process each transaction.
  • Game Provider: Third-party game software providers that supply slots, live casino, blackjack, poker, and virtual sports on the 999 cuci platform. They receive only the minimum data necessary to deliver the games.
  • Legal Authorities: Malaysian law enforcement agencies, courts, or regulatory bodies where required to do so by law or court order.
  • Technical Service Provider: Cloud computing companies, cybersecurity services, and technical infrastructure providers that assist us in operating the platform securely. All such third parties are bound by strict confidentiality agreements.
  • Verification Partner: Licensed third-party identity verification services to validate the authenticity of your submitted KYC documents.
Our Commitment: Every third party that receives your data is bound by strict data protection agreements and is only permitted to use that data for the specified purposes. 999 cuci remains accountable for the security of your data.

6 Security & Data Protection

999 cuci implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or unlawful alteration.

  • 256-bit SSL Encryption: All data transmitted between your device and 999 cuci servers is encrypted using industry-standard TLS/SSL protocols.
  • Stored Data Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using modern encryption algorithms — your password is never stored in plain text.
  • Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of security on their 999 cuci account.
  • Continuous Monitoring: Our 24/7 security monitoring system detects suspicious activity and intrusion attempts in real time.
  • Internal Access Controls: Access to member personal data within our organisation is restricted to staff who require it to perform their duties, based on the principle of least privilege.
  • Regular Security Audits: 999 cuci conducts regular security assessments and penetration testing carried out by independent security experts.

While we take all reasonable precautions, no system can be guaranteed 100% secure against every cyber threat. In the event of a data breach affecting your data, 999 cuci will notify you within the timeframe stipulated by applicable Malaysian law.

7 Cookies & Tracking Technologies

999 cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Gathering information on how you use the 999 cuci platform — most visited pages, time spent, and errors encountered — to help us continuously improve our services.
  • Functional Cookies: Remembering your preferences — such as language, location, and display settings — so you don't have to reconfigure them each time you log in.
  • Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregate, anonymised form for ongoing improvement purposes.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the 999 cuci platform.

Important Note: 999 cuci does not use third-party cookies for external advertising purposes. All analytics data is used internally solely to improve our platform.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a 999 cuci member have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete data in your account.

Right to Erasure

You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without having to provide a reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform if needed.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances while a claim or complaint is being resolved.

To exercise any of the rights above, please contact our team via email at support@999cuci.click or via live chat on the 999 cuci platform. We will process your request within 21 working days in accordance with the provisions of PDPA.

9 Data Retention Period

999 cuci retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Retention periods vary depending on the type of data:

Data Type Retention Period Reason
Active account data For the duration of the active account Service requirements
Financial transaction records 7 years after the transaction AML legal obligations
KYC Documents 5 years after account closure Compliance requirements
Support communication logs 2 years Service records
Technical Data & Logs 12 months Security & analytics
Marketing data Until consent is withdrawn Member consent

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with the data disposal procedures established by 999 cuci.

10 Children's & Minors' Privacy

999 cuci is an online entertainment platform intended exclusively for individuals aged 18 years and above only. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should we find that personal data has been collected from someone under the age of 18 without proper age verification, we will take immediate steps to:

  • Delete all data relating to that individual from our systems
  • Immediately closing the account in question
  • Returning any deposited funds in accordance with established procedures
  • Reporting the case to the relevant authorities where required

If you know or suspect that someone under the age of 18 has registered an account on 999 cuci, please contact us immediately at support@999cuci.click so that immediate action can be taken.

11 Amendments to Privacy Policy

999 cuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

  • A prominent notice on the 999 cuci platform homepage
  • Notification emails will be sent to the email address registered to your account
  • In-app notifications (if you are using our mobile application)

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Continued use of the 999 cuci platform after any amendments take effect constitutes your acceptance of the revised policy. It is your responsibility to review this page periodically.

12 Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 999 cuci handles your personal data, please do not hesitate to contact us:

Email
support@999cuci.click
Live Chat
24/7 in Bahasa Malaysia
Response Time
Within 21 business days
Jurisdiction
Malaysia (PDPA 2010)

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia which is the PDPA regulatory body in this country.

Why Your Data Is Safe with 999 Cuci

Six concrete commitments we uphold to protect the privacy of every Malaysian member.

Full PDPA 2010 Compliance

All data handling practices at 999 cuci fully comply with Malaysia's Personal Data Protection Act 2010. We don't merely follow the rules — we genuinely understand and respect your privacy rights.

Military-Grade Encryption

256-bit SSL encryption protects every piece of data transmitted between your device and 999 cuci's servers — the same level of security used by Malaysia's leading banking institutions.

Zero Data Sales

999 cuci has never sold and will never sell your personal data to any third party for marketing purposes. Your data is not our product — your trust is our greatest asset.

Full Control in Your Hands

You may access, correct, download, or request deletion of your personal data at any time. Our team is ready to process your request within 21 business days.

Restricted Internal Access

Only 999 cuci staff who genuinely require access to your data are permitted to do so, based on a strict minimum access principle.

Immediate Breach Notification

In the event of a security incident involving your data, 999 cuci is committed to notifying you within the timeframe required by law — no cover-ups, no delays.

Your Privacy Protected, Your Entertainment Assured — Register with 999 Cuci Today

Backed by a robust privacy policy and high-standard data protection, you can enjoy slots, Live Casino, blackjack, poker, Sports Betting on Liga Super Malaysia, EPL, badminton, e-sports, and much more with full confidence at 999 cuci.

100% secure data PDPA 2010 Compliance No data sales 24/7 BM Support
Bahasa Melayu