Kasicuci Privacy Policy – How We Protect the Personal Data of Malaysian Users

01 Introduction & Scope of Privacy Policy

Kasicuci takes seriously our responsibility to protect the privacy of every user who entrusts their personal data to us. This Privacy Policy is designed to provide a clear and transparent overview of our data handling practices – so you can make informed decisions about your use of the kasicuci platform.

This policy describes the types of personal data we collect when you use the kasicuci platform, the purposes and manner in which that data is used, the parties who may receive or access your data, the security measures we take to protect your data, and the rights you have in relation to that personal data.

If you have any questions about how we handle your data after reading this policy, do not hesitate to contact our privacy team through the channels listed at the end of this document.

02 Types of Personal Data We Collect

Kasicuci collects users' personal data through several different methods depending on how you interact with our platform. The following are the categories of data we collect:

Data you provide directly:

• Personal identification information – Full name, MyKad or passport number, date of birth, and gender during the account registration process.
• Contact information – Active email address, mobile phone number, and residential address.
• Financial information – Bank account number, bank name, and e-wallet details (TNG, GrabPay, etc.) used for deposits and withdrawals.
• Identity verification documents (KYC) – Copies of your identity card, passport, utility bill, or other documents required to verify your identity.

Data collected automatically:

• Technical data – IP address, browser type and version, device operating system, screen resolution, and other technical device information.
• Usage data – Pages visited, time spent, clicks, navigation patterns, and in-platform search history.
• Transaction data – Records of deposits, withdrawals, wagering, wins, claimed bonuses, and all financial activity in your account.
• Location data – General location information based on your IP address for geo-restriction compliance purposes.

03 Purpose & How We Use Your Data

Kasicuci uses collected personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without first obtaining your consent. The primary purposes for data use are as follows:

• Account management: Creating, verifying and managing your user account on the kasicuci platform, including the login process and security verification.
• Transaction processing: Processing all deposits, withdrawals, wagering and other financial transactions accurately and securely.
• Identity verification (KYC): Meeting anti-money laundering (AML) compliance requirements and verifying that users meet the minimum age requirement.
• Service communications: Sending transaction notifications, account security updates, promotional information you have consented to receive, and responses to customer support enquiries.
• Platform security: Detecting and preventing fraudulent activity, money laundering, unauthorised access and any misuse of the kasicuci platform.
• Service improvement: Analysing usage patterns in aggregate and anonymised form to improve platform features, user experience and gaming offerings.
• Legal compliance: Fulfilling reporting, audit and compliance obligations required by applicable laws and relevant authorities.

04 Data Sharing & Disclosure to Third Parties

Kasicuci does not sell, rent, or disclose users' personal data to third parties for marketing purposes without your consent. However, there are limited situations where your data may be shared with certain parties:

• Payment service providers: Payment gateways, banks, and e-wallet providers that process your financial transactions require the information necessary to complete those transactions. All such providers are bound by strict confidentiality agreements.
• KYC service providers: A third-party identity verification platform used to validate users' identification documents in compliance with industry-standard KYC requirements.
• Authorities and regulatory bodies: kasicuci will disclose user data when required to do so by court order, applicable law, or a legitimate request from a law enforcement authority.
• Technical service providers: Cloud infrastructure providers, hosting services and analytics tools that support platform operations. All such providers may only access data necessary for their specific functions.

In all of the above data-sharing scenarios, kasicuci ensures that the receiving parties adhere to data protection standards equivalent to or higher than those we uphold ourselves.

05 Data Protection Security Measures

Kasicuci continually invests in cybersecurity infrastructure to ensure your personal data is protected from unauthorised access, loss, damage, or accidental disclosure. The key security measures we implement are:

• Data encryption in transit: All communications between your device and kasicuci's servers are secured by TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are stored in encrypted format using AES-256 algorithms.
• Strict access control: Access to user data within kasicuci's internal systems is restricted to staff who require it to perform their duties, and every access is automatically logged.
• Two-factor authentication (2FA): Users are encouraged to enable 2FA for their kasicuci account. Internally, all staff access to critical systems requires multi-factor authentication.
• Continuous monitoring and auditing: An automated monitoring system operates 24/7 to detect any suspicious activity or attempted security breaches.
• Periodic penetration testing: kasicuci conducts regular security testing by independent parties to identify and address any vulnerabilities in our systems before they can be exploited.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

06 Cookie Policy

The kasicuci platform uses cookies and similar tracking technologies to enhance user experience, analyse website traffic and ensure platform security. The following are the types of cookies we use:

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the kasicuci platform.

07 User Rights Regarding Personal Data

Kasicuci recognises and respects users' rights in relation to their personal data. You are entitled to exercise the following rights at any time:

08 Children's Data Protection

The kasicuci platform is intended solely for adults aged 18 and above. kasicuci does not knowingly collect or process any personal data from individuals under the age of 18.

If we become aware that a child's personal data has been collected without our knowledge through age misrepresentation during registration, kasicuci will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their child has registered on the kasicuci platform are urged to contact us immediately at [email protected] so that prompt action can be taken.

09 Cross-Border Data Transfer

In the course of its operations, kasicuci may need to transfer users' personal data to servers or service providers located outside Malaysia. Any such data transfer will only take place when:

• The recipient country or region provides an adequate level of data protection as determined by applicable law.
• Appropriate data protection agreements have been established with the recipient parties to ensure your data is protected to the standards we have set.
• The transfer is necessary to fulfil a contract between you and kasicuci, or for legitimate public interest reasons.

Kasicuci ensures that all cross-border data transfers are carried out with appropriate safeguards and in compliance with applicable legal requirements. You may request further information about the protection mechanisms used for such data transfers by contacting our privacy team.

10 Privacy Policy Amendments & Updates

Kasicuci reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or the addition of new features to the kasicuci platform.

When significant changes are made to this Privacy Policy, kasicuci will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice of such changes on the kasicuci platform homepage.
• Sending email notifications to registered users for changes that materially affect their privacy rights.

Continued use of the kasicuci platform after the effective date of any amendment constitutes your acceptance of the amended Privacy Policy. We encourage you to review this page periodically to stay informed of our latest practices.

11 How to Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kasicuci handles your personal data, our privacy team is ready to assist through the following channels:

• Privacy Email: [email protected] – for all enquiries related to personal data and user rights requests.
• Support Email: [email protected] – for general support including account and transaction issues.
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the kasicuci platform for immediate responses.
• FAQ: Visit the Frequently Asked Questions us for answers to the most frequently asked questions about privacy and data security.

All privacy-related complaints will be investigated seriously and we are committed to responding within 5 business days. The last updated date of this Privacy Policy is 1 January 2026.