Updated: 1 January 2026

cucu100 Privacy Policy – Personal Data Protection for Malaysia Members

Cucu100 is committed to protecting every member's privacy. This policy transparently explains how we collect, use, store, and safeguard your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

✓ PDPA 2010 Malaysia Compliant  ✓ 256-bit SSL Encryption  ✓ Data never sold to third parties

256-bit
SSL Encryption
PDPA
2010 Compliance
0
Data Sales
24/7
Secure Monitoring
Data Protected
PDPA Compliant
No Data Sales
End-to-End Encryption
Guaranteed Member Rights

Cucu100's Privacy Commitment to Malaysian Members

Six data protection principles we uphold across every aspect of cucu100's platform operations.

Industry-Grade Data Security
All personal data of cucu100 members is protected with 256-bit SSL encryption — the same technology used by Malaysia's leading banking institutions. Sensitive information such as payment details and passwords is never stored in plain text on our servers.
Your Data Is Never Sold
cucu100 has never and will never sell, rent, or trade member personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it only to deliver the services you signed up for.
PDPA 2010 Malaysia Compliance
cucu100's Privacy Policy is fully aligned with Malaysia's Personal Data Protection Act 2010. We comply with all data processing principles set out in the PDPA, including the principles of consent, purpose, accuracy, retention, integrity, and access.
Full Control in Members' Hands
You have the full right to access, rectify, download, or request the deletion of your personal data from cucu100's records. Requests can be submitted at any time through our support team and will be processed within 14 working days.
Marketing Communication Preferences
cucu100 does not send marketing communications without your consent. During registration, you are given the option to accept or decline promotional emails, SMS notifications, and WhatsApp communications. You can update these preferences at any time through your account settings.
Transparent Cookie Policy
cucu100 uses cookies to enhance the user experience — not to track your activity outside our platform. You can manage your cookie preferences through your browser settings. Our cookie usage policy is clearly outlined in this Privacy Policy document.
Contents

This Privacy Policy describes cucu100's ("Platform", "we") privacy practices regarding the collection, use, and protection of user ("Member", "you") personal data on the cucu100 platform, accessible at cucu100.xyz. This document should be read together with Terms & Conditions us and forms part of the overall agreement between you and cucu100.

Introduction & Scope of the Privacy Policy

Cucu100 is an online entertainment platform operating for the Malaysian market. We take our responsibility to protect each member's privacy seriously, particularly when they entrust their personal information to us. This Privacy Policy is crafted to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and reflects industry best practices in personal data handling.

This policy applies to all personal data we collect across various channels, including the cucu100.xyz website, the cucu100 mobile app (where available), email and WhatsApp communications, live chat interactions with our support team, and all financial transactions processed through our platform.

By registering a cucu100 account or using our services, you consent to our collection and processing of your personal data in accordance with the terms set out in this Privacy Policy. If you disagree with any aspect of this Policy, we encourage you to contact the cucu100 support team for further clarification before deciding whether to continue using our platform.

Data Protection Officer: cucu100 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with PDPA 2010 and handling privacy-related enquiries from members. You can reach our DPO by email at privacy@cucu100.xyz.
Personal Data We Collect

Cucu100 collects your personal data through two primary methods: information you provide directly during registration and platform use, and data collected automatically via tracking technologies as you browse our platform.

Data Category Examples of Information Collection Methods
Identity Data Full name, date of birth, MyKad/Passport number Account registration, KYC verification
Contact Data Email address, mobile number, mailing address Account registration, profile updates
Financial Data E-wallet account numbers, FPX details, transaction history Deposit and withdrawal process
Technical Data IP address, browser type, device type, operating system Automated logs generated during platform use
Activity Data Game history, game preferences, session duration Recorded automatically during gameplay
Communications Data Support chat records, emails, feedback Interactions with the support team

Cucu100 does not collect sensitive personal data such as health information, political views, or religious beliefs unless it is directly relevant to a service you have requested (for example, Responsible Gaming information you choose to disclose voluntarily).

Cucu100 follows the principle of data minimisation — we only collect data that is strictly necessary to provide our services. We do not collect excessive data or data that has no clear service purpose.

How We Use Your Personal Data

Cucu100 uses collected personal data solely for legitimate, stated purposes. We do not use your data for any other purpose without obtaining fresh consent from you.

  • Account Management: To create, verify, and manage your cucu100 account, including password recovery and two-factor authentication.
  • Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and withdrawals to registered Malaysian bank accounts and e-wallets.
  • Service Provision: To give you access to all games and services on the cucu100 platform, including slots, Live Casino table games, lottery, Sports Betting on Malaysia Super League and EPL matches, and e-sports.
  • Legal Compliance: To fulfil legal and regulatory obligations, including Know Your Customer (KYC) requirements, anti-money laundering (AML) compliance, and reporting to Malaysia's Financial Intelligence Unit (UPWM) where required.
  • Platform Security: To detect and prevent fraud, account misuse, hacking attempts, and other suspicious activities that could compromise the security of the platform and other members.
  • Customer Support: To resolve enquiries, complaints, and support requests submitted to the cucu100 support team via live chat, WhatsApp, or email.
  • Platform Improvements: To analyse usage patterns for the purpose of improving our product, user interface, and overall service quality.
  • Marketing Communications: To send information about promotions, bonuses, and new offers — only to members who have given their consent to receive such communications.
  • Responsible Gaming: To monitor member activity for the purpose of identifying signs of problem gambling and activating appropriate protective measures when necessary.
Third-Party Data Sharing & Disclosure

Cucu100 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited circumstances in which we may need to share data with certain parties for operational and legal compliance purposes.

Third parties that may receive personal data of cucu100 members include:

  • Payment Processors: Malaysian payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow operators — required to process financial transactions. They receive only the minimum data necessary to verify transactions.
  • Regulatory Authority: Malaysian government and regulatory bodies including UPWM where required by law, court order, or valid legal process.
  • Technology Service Providers: Companies providing cucu100's technical infrastructure services — such as cloud hosting, platform analytics, and cybersecurity systems — are subject to strict confidentiality agreements.
  • Game Providers: Third-party game content providers whose slots, live casino, or other games are available on the cucu100 platform — only the minimum data required to verify active membership is shared.
  • Law Enforcement: The police or Malaysian law enforcement agencies where required by law or to prevent criminal activity.

All third parties who receive cucu100 member data are bound by data protection agreements that prohibit them from using the data for any purpose other than those specified in their service agreements with us.

Cross-Border Transfers: Where a member's personal data needs to be transferred to another country (for example, to cloud servers operating outside Malaysia), cucu100 ensures that protection equivalent to PDPA 2010 standards is applied through appropriate data transfer mechanisms, such as standard contractual clauses or security compliance verification.
cucu100 Data Security Measures

Cucu100 continually invests in cybersecurity infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

  • 256-bit SSL Encryption: All communications between your device and cucu100's servers are encrypted using TLS 1.3 — the same encryption standard used by Malaysia's leading financial institutions.
  • Data-at-Rest Encryption: Sensitive data stored in the cucu100 database is encrypted using the AES-256 algorithm, meaning it remains meaningless even if the server is accessed without authorisation.
  • Two-Factor Authentication (2FA): 2FA is available for all cucu100 member accounts, adding an extra layer of protection against unauthorised access.
  • Multi-Layer Firewall: cucu100's server infrastructure is protected by a multi-layered firewall system that continuously monitors and filters all incoming and outgoing traffic.
  • Regular Penetration Testing: cucu100 engages third-party cybersecurity specialists to conduct regular penetration testing and security audits, identifying and addressing system vulnerabilities before they can be exploited.
  • Internal Access Controls: Access to members' personal data within the cucu100 organisation is restricted to staff who require it to perform their duties, based on the principle of least privilege.
  • Incident Response Plan: cucu100 has tested security incident response procedures in place, including an obligation to notify affected members within 72 hours in the event of a material data breach.

While cucu100 implements comprehensive security measures, no system can guarantee absolute 100% security. We encourage members to take their own personal security precautions as well, such as using strong and unique passwords, enabling 2FA, and never sharing their login credentials with anyone.

Data Retention Period

Cucu100 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our data retention policy is as follows:

  • Active Account Data: Personal data of members with active accounts is retained for the duration of active membership plus 5 years following account closure, for legal compliance and dispute resolution purposes.
  • Financial Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of 7 years, in line with Malaysian financial compliance and tax reporting requirements.
  • Communications Logs: Customer support conversation records, emails, and complaint tickets are retained for 3 years from the date of the last communication.
  • Technical & Log Data: System access logs and technical data are retained for 12 months for security purposes and technical troubleshooting.
  • KYC Records: Identity verification documents submitted during the KYC process are retained for the duration of active membership plus 7 years after account closure, in accordance with Malaysian AML legal requirements.

Upon expiry of the retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to a specific individual. Deletion is carried out using methods that ensure the data cannot be recovered.

Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by cucu100:

Right to Access
You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 14 working days.
Right to Rectification
If your personal data is inaccurate or out of date, you have the right to request that we correct or update it promptly.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to any applicable legal retention requirements.
Right to Withdraw Consent
You may withdraw your consent for data processing at any time, particularly for marketing communication purposes.
Data Portability
You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service, where this is technically feasible.
Right to Object
You have the right to object to the processing of your personal data for specific purposes, including direct marketing, and we will honour that objection.

To exercise any of the rights above, please email cucu100's Data Protection Officer at privacy@cucu100.xyz with the subject line "Data Rights Request – [Full Name & Account ID]". We will verify your identity before processing the request and will respond within 14 business days.

Cookies & Tracking Technologies

Cucu100 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies used by cucu100 are:

  • Essential Cookies: Required for core platform functions such as login, game sessions, and transaction security. These cookies cannot be disabled without affecting essential platform functionality.
  • Performance Cookies: Collects information on how you use the platform — such as the most frequently visited pages and response times. This information is used in aggregated form to improve platform performance.
  • Functional Cookies: Saves your preferences such as language settings, favourite game types, and display preferences to deliver a more personalised experience.
  • Analytics Cookies: cucu100 uses analytics tools to understand platform usage patterns in aggregated, anonymised form for product improvement purposes.

You can manage and delete cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality and security of your session on the cucu100 platform. For detailed guidance on managing cookies across different browsers, please refer to your browser's help documentation.

Important Note: cucu100 does not use cookies to track your activity on other websites outside our platform. We do not engage in targeted advertising based on your cross-site browsing history.
Children's Data Protection

The cucu100 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe your minor child has registered a cucu100 account, please contact us immediately at privacy@cucu100.xyz or through our customer support team.

Upon receiving such notification, we will:

  • Immediately suspending the account in question pending investigation.
  • Verifying account holders' age through identity document checks.
  • Closing the account upon confirmation that the account holder is under 18 years of age.
  • Deleting all associated personal data from our records within a reasonable timeframe.
  • Returning any remaining account balance once the verification process is complete.

Cucu100 employs a multi-layered age verification system during registration to prevent sign-ups by underage individuals. We recognise, however, that no system is foolproof, and we encourage parents to monitor their children's online activity.

Cross-Border Data Transfers

As a digital platform, parts of cucu100's technical infrastructure may operate outside Malaysia, including cloud hosting services and certain processing systems. This means your personal data may be transferred to and stored on servers located in other countries.

Where cross-border data transfers are required, cucu100 ensures a level of protection equivalent to Malaysia's PDPA 2010 standards through the following measures:

  • We only work with infrastructure providers that hold internationally recognised data security certifications, such as ISO 27001 and SOC 2 Type II.
  • Comprehensive data processing agreements (DPAs) are signed with all third-party providers that handle cucu100 member data.
  • Data protection assessments are conducted before entering into a relationship with any new vendor that will handle member personal data.

For specific enquiries about where your data is stored or the protection mechanisms used for cross-border transfers, please contact our Data Protection Officer at privacy@cucu100.xyz.

Changes to the Privacy Policy

Cucu100 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legislation, or new operational requirements. The date of the most recent update is always displayed at the top of this document.

When material changes are made to how we collect, use, or protect your personal data, we will provide appropriate notice through one of the following methods:

  • An email to your registered email address at least 14 days before the changes take effect.
  • A clear in-platform notification on cucu100 when you next log in.
  • Updates to this Privacy Policy page with the revision date clearly displayed.

Continued use of the cucu100 platform after the updated Privacy Policy takes effect will be considered your acceptance of the revised Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data by contacting our support team.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how cucu100 handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, you may contact us through the following channels:

  • Privacy Email: privacy@cucu100.xyz (for specific enquiries related to data protection)
  • General Support Email: support@cucu100.xyz
  • Live Chat: Available on the cucu100 platform, 24 hours a day, 7 days a week
  • WhatsApp: Number available within the platform after logging in

For requests relating to personal data rights, please include in your email: your full name, cucu100 account ID number, the type of request (access, rectification, deletion, etc.) and identity document details for verification. We will respond within 14 working days from the date of receipt of a complete request.

If you are dissatisfied with cucu100's response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.

Response Time: cucu100 is committed to handling all privacy requests promptly and thoroughly. We target an initial response within 2 hours for emails, and full resolution within 14 business days for complex requests.

FAQ – cucu100 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at cucu100.

No. cucu100 has never sold, rented, or traded member personal data to any advertiser, marketing company, or other third party for commercial purposes. Your data is used solely to provide cucu100 platform services, process your transactions, ensure account security, and meet legal obligations. This is cucu100's absolute commitment to all our Malaysian members.

You may request a copy of your personal data by emailing privacy@cucu100.xyz with the subject line "Data Access Request", along with your full name, account ID number, and a copy of your MyKad for identity verification. cucu100 will process your request within 14 business days and deliver your data in a secure format. No fee is charged for the first data access request within any 12-month period.

Yes, you may request deletion of your personal data by emailing privacy@cucu100.xyz. Please note, however, that certain data must be retained for a specified period under Malaysian legal requirements — for example, financial transaction records must be kept for 7 years for AML and tax compliance purposes. Data not subject to legal retention requirements will be deleted within 30 days of your request being verified. Account closure is a prerequisite for a comprehensive data deletion request.

When you close your cucu100 account, your personal data is not deleted immediately. We retain closed account records for 5 years for legal compliance, dispute resolution, and audit purposes. Financial transaction records are kept for 7 years. Once the retention period expires, all your data will be securely deleted or permanently anonymised. If you wish to have your data deleted earlier than the standard retention period, you may submit a request to our privacy team for individual review.

cucu100 does not store your full payment account details — such as your complete bank account number, e-wallet password, or credit/debit card information. Transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed directly through secure, certified payment gateways. We retain only the minimum information needed to verify payment method ownership and resolve transaction disputes — such as the last four digits of an account number or the account holder's name. All stored payment information is encrypted to industry security standards.
View More FAQs

Your Privacy, Our Responsibility

Four core commitments cucu100 makes to protect the personal data of every Malaysian member.

PDPA Compliant
Fully compliant with Malaysia's Personal Data Protection Act 2010 in every aspect of data handling.
Transparent & Clear
Our Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon.
Member Rights Come First
We make exercising your data rights straightforward — access, correction, deletion, and objection requests are processed within 14 days.
72-Hour Breach Notification
In the event of a material data breach, affected members will be notified within 72 hours without delay.
Privacy Policy & Terms of Use

This Privacy Policy should be read together with Terms & Conditions cucu100 and forms the entire agreement between you and our platform. For any privacy-related enquiries, contact us at privacy@cucu100.xyz. You are also encouraged to read the Responsible Gaming before you start playing.

Play with Peace of Mind at cucu100 – Your Data is Safe with Us

Join over 500,000 Malaysian members who trust cucu100 for a safe, fair, and enjoyable digital entertainment experience. Slots, live casino, lottery, Malaysian Super League & EPL Sports Betting, and e-sports — all in one licensed platform that protects your privacy.

Register Free – Get RM100 Already Have an Account

18+ only. Please read our Responsible Gaming us before playing.

Bahasa Melayu