Official Privacy Document

Privacy Policy 999 Cuci – Your Personal Data Protection

Your privacy is not merely a legal obligation to us — it is the trust you place in us, and we take it seriously every day. This policy clearly explains what data we collect, why we need it, and how we protect it.

Updated: 1 January 2026  |  Version 3.1  |  PDPA 2010 Compliant
Personal Data Protection Act 2010 (PDPA) Compliant
256-bit SSL Encryption
Data Not Sold to Third Parties
Right to Access & Correct Data
Secure Malaysian Data Storage
Appointed Privacy Officer
Personal Data Protection Act 2010 (PDPA) Compliant
256-bit SSL Encryption
Data Not Sold to Third Parties
Right to Access & Correct Data
Secure Malaysian Data Storage
Appointed Privacy Officer

999 Cuci's 6 Privacy Pledges to Every Member

Privacy is not a checklist — it is how we operate. This is the standard we uphold for every one of our 500,000+ Malaysian members.

Bank-Grade Data Encryption
All data transmitted between your device and 999 Cuci's servers is protected by 256-bit SSL/TLS encryption — the same technology used by Maybank2u and CIMB Clicks to secure online banking transactions in Malaysia.
256-bit SSL
Data Is Never Sold or Rented
Your personal information is NEVER sold, rented, or transferred to any third party for marketing purposes. Your data belongs to you. We use it solely to operate the 999 Cuci services you use.
Privacy Guaranteed
Full Control Over Your Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to access, correct, transfer and delete your personal data held by us. All requests will be processed within 14 working days.
PDPA 2010
Data Stored in Malaysia
999 Cuci's primary servers are based in Malaysia, with backups at certified data centres across the Asia region. Your data is not transferred to countries that lack data protection standards equivalent to Malaysia's PDPA without your consent.
Local Storage
Marketing Communications Controls
You have full control over the marketing communications you receive from 999 Cuci. Unsubscribe from promotional emails, SMS or push notifications at any time via your account settings or by contacting our support team.
Full Control
Dedicated Privacy Officer
999 Cuci has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance. You may contact this officer directly via our official email for any privacy-related enquiries.
DPO Appointed
Important Notice

This Privacy Policy describes our personal data handling practices 999 Cuci and applies to all members using our platform, website and services. It should be read together with Terms & Conditions us. By using the 999 Cuci platform, you agree to the practices described in this Privacy Policy.

Section 01

Introduction & Scope of This Privacy Policy

999 Cuci is an online gambling platform that operates and serves players in Malaysia. We are committed to protecting the privacy of all users on our platform in accordance with the Personal Data Protection Act 2010 (PDPA), all applicable laws, and international industry best practices.

This Privacy Policy applies to all individuals who use the 999 Cuci in any capacity – whether as a registered member, website visitor, or individual contacting our customer support. It covers the collection, use, storage, sharing, and protection of all personal information you provide to us or that we collect through your use of our services.

If you do not agree with any part of this Privacy Policy, you are advised not to use 999 Cuci's services. For further enquiries, please contact our Data Protection Officer at privacy@999cuci.biz.

Section 02

Types of Personal Data We Collect

999 Cuci only collects personal data that is strictly necessary to operate our services safely and effectively. The following are the categories of data we collect:

Data Categories Type of Information How We Collect
Identity Data Full name, date of birth, MyKad number, selfie photo Registration form, KYC verification
Contact Data Phone number, email address, mailing address Registration forms, profile updates
Financial Data Malaysian bank account numbers, RM transaction records Deposit/withdrawal process (FPX, DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay)
Game Data Betting history, account balance, bonus records Automated platform system
Technical Data IP address, device type, web browser, login session details Collected automatically during platform use
Communication Data Customer support conversation records and feedback Live Chat, WhatsApp, support email

We will never ask for sensitive information such as your full password, bank account PIN, or OTP (One-Time Password) through any communication channel. If you receive such a request claiming to be from 999 Cuci, it is a fraudulent attempt — please contact our support team immediately.

Section 03

How We Use Your Personal Data

The personal data you provide to 999 Cuci is used solely for legitimate and reasonable purposes in operating our services. We use your data to:

  • Account management – registering, verifying, and maintaining your member account
  • Transaction processing – handling deposits and withdrawals in MYR via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX
  • Identity verification (KYC) – fulfilling anti-money laundering (AML) legal requirements
  • Customer Service – responding to your enquiries and resolving issues you have reported
  • Platform security – detecting and preventing fraud, suspicious activity, and system abuse
  • Legal compliance – fulfilling obligations under PDPA 2010 and applicable Malaysian laws
  • Marketing communications – sending information about promotions and latest offers (with your consent)
  • Platform improvement – analysing usage patterns to enhance the user experience

999 Cuci never makes decisions that materially affect you based solely on automated processing of your personal data without human involvement. Every significant decision, such as account suspension, is reviewed by our team.

Section 04

Sharing Data With Third Parties

999 Cuci NEVER sells, rents or trades your personal data to third parties for marketing purposes. However, in the course of operating our services, we may share necessary data with the following categories of recipients:

  • Malaysian payment providers – Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX-approved banks for processing your financial transactions
  • Game service providers – game studios and providers supplying slots, live dealer, and table games for our platform, subject to strict confidentiality agreements
  • Technology service providers – companies that assist us in managing the platform's technical infrastructure, analytics, and cybersecurity
  • Competent authorities – police, courts, or Malaysian regulatory authorities when required by law or court order

All third parties with whom we share data are bound by data protection agreements that prohibit them from using your information for any purpose other than what has been specified.

Section 05

Our Data Security Measures

999 Cuci invest heavily in security infrastructure to ensure your data is protected at all times. The technical and organisational measures we implement include:

  • Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.3 with AES-256 encryption
  • Storage encryption: Sensitive data such as bank account numbers is stored in encrypted form (encrypted at rest)
  • Two-factor authentication (2FA): Available to all member accounts as an additional layer of security
  • 24/7 monitoring: Our security team continuously monitors systems to detect suspicious activity
  • Regular security audits: Vulnerability assessments and penetration testing are conducted regularly by independent third parties
  • Internal access controls: Only employees who require access to specific data to perform their duties are permitted to do so – the principle of least privilege

In the event of a data breach affecting your personal data, 999 Cuci is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

Section 06

Your Rights Under Malaysia's PDPA 2010

As a member 999 Cuci who are Malaysian citizens or residents, you have the following rights under the Personal Data Protection Act 2010 (PDPA). All requests will be processed within 14 working days:

📋
Right of Access
Request a copy of all personal data we hold about you
✏️
Right to Rectification
Correct inaccurate or incomplete data
🗑️
Right to Erasure
Request data deletion when it is no longer needed
Right to Object
Object to the processing of your data for marketing purposes
📦
Right to Portability
Receive your data in a machine-readable format
🔕
Withdraw Consent
Withdraw your consent to data processing at any time

To exercise any of the above rights, contact our Data Protection Officer at privacy@999cuci.biz by stating the right you wish to exercise and providing your account details for identity verification.

Section 07

Cookies, Tracking Technologies & Your Controls

Like most websites, 999 Cuci using cookies and similar tracking technologies to enhance the user experience and maintain platform security. The following are the types of cookies we use:

You can manage optional cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the 999 Cuci platform.

Section 08

Personal Data Retention Period

999 Cuci retaining your personal data only for as long as necessary for the purpose it was collected, or as required by Malaysian law. The following are our data retention guidelines:

  • Active account data: Retained for the duration your account remains active and in use
  • Financial transaction records: Retained for 7 years in accordance with Malaysia's tax and financial regulatory requirements
  • KYC records and identity verification: Retained for 5 years after account closure in accordance with AML requirements
  • Customer support data: Retained for 3 years after case resolution
  • Analytics data (anonymised): Retained for up to 2 years for platform improvement purposes
  • After account closure: Personal data that is no longer required will be securely deleted or anonymised
Section 09

Child Protection & Age Restrictions

Platform 999 Cuci is NO intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a child under 18 has registered an account using false information about their age, please contact us immediately at privacy@999cuci.biz.

Upon becoming aware of any inadvertent collection of data from minors, we will take immediate steps to delete such data and close the account in question.

Section 10

Amendments to This Privacy Policy

999 Cuci reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or services. When material changes are made, we will:

  • Updating the "Updated" date at the top of this document
  • Sending a notification to your registered email address at least 14 days before the changes take effect
  • Displaying a clear notice on the platform's homepage

Continued use of 999 Cuci's services after the effective date of any changes constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

Section 11

Contact Our Data Protection Officer

If you have any questions, concerns or complaints about how 999 Cuci handling your personal data, or if you wish to exercise any of the rights provided under PDPA 2010, please contact our Data Protection Officer (DPO):

Privacy Email
privacy@999cuci.biz
General Support
support@999cuci.biz
Response Time
14 working days
Live Chat
24/7 – Bahasa Melayu

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.

Your Privacy is Protected. Join 999 Cuci with Complete Confidence.

Your data is protected under Malaysia's PDPA 2010. Register free in 2 minutes, deposit from RM20 via Touch 'n Go, DuitNow or GrabPay, and start enjoying the best games in Malaysia.

PDPA 2010 Compliant 256-bit SSL Data Not Sold DPO Appointed
Bahasa Melayu