Privacy Policy

This Privacy Policy ("Policy") is issued by sukacuci2 ("we", "us", "the Operator", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data submitted by or generated in connection with users ("you", "User", "Player") of the sukacuci2 platform accessible at https://sukacuci2.cam.

sukacuci2 is committed to handling your personal data responsibly and in compliance with the data protection principles applicable under the international online gaming licensing regime under which the platform operates. We take our data protection obligations seriously, and this Policy reflects the standards we maintain in practice — not merely on paper.

This Policy should be read in conjunction with our Terms & Conditions, which form the overarching legal agreement governing your use of the sukacuci2 platform. By accessing the platform and creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact information, financial data, location data, and online identifiers such as IP addresses and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure, or destruction.
• "Data Controller" means sukacuci2, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means a third party that processes personal data on behalf of sukacuci2, pursuant to a data processing agreement that imposes equivalent data protection obligations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.
• "KYC Data" means identity verification documentation including government-issued identity documents, proof of address, and selfie photographs collected for the purpose of Know Your Customer compliance.
• "Cookies" means small text files stored on a user's device by the platform, used for session management, fraud detection, analytics, and user preference persistence.

sukacuci2 collects the following categories of personal data in connection with your use of the platform. We collect only data that is necessary for the purposes described in this Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the facial photograph collected solely for age and identity verification purposes during the KYC process.

sukacuci2 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your sukacuci2 account, including processing your registration, authenticating your identity at login, and managing account settings and preferences.
• Identity Verification (KYC/AML): To verify your identity and age in accordance with our legal and licensing obligations, and to conduct ongoing monitoring of account activity to detect and prevent money laundering, terrorist financing, and other financial crime.
• Payment Processing: To process deposit and withdrawal transactions through your selected payment methods, including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency platforms.
• Service Delivery: To provide access to games, sports betting markets, live casino services, promotions, and all other features of the platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, bonus abuse, and security breaches on the platform.
• Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour, to apply responsible gambling tools at the user's request or the Operator's discretion, and to facilitate self-exclusion arrangements.
• Customer Support: To respond to queries, complaints, and disputes submitted through live chat, email, or other support channels.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including record-keeping requirements, responding to lawful requests from authorities, and fulfilling obligations under our international gaming licence.
• Marketing Communications: To send promotional emails, SMS messages, or in-platform notifications about bonuses, offers, and platform updates, where you have provided prior consent to receive such communications.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, and product development.

sukacuci2 processes your personal data on the following legal bases, which determine the justification for each category of data use:

• Contractual Necessity: Processing that is necessary for the performance of our contract with you under the Terms & Conditions — including account management, payment processing, service delivery, and withdrawal processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing that is required to comply with our legal and regulatory obligations — including KYC identity verification, AML monitoring, and responding to lawful requests from competent authorities — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics is conducted on the basis of legitimate interests, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sukacuci2 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: To process deposit and withdrawal transactions, your financial data and relevant personal identifiers are shared with our contracted payment processors, including operators of the FPX network, DuitNow, and approved cryptocurrency exchange and custodial services. These providers process data solely as instructed by sukacuci2 and are contractually bound to maintain equivalent data protection standards.
• Identity Verification Partners: To conduct KYC and AML checks, identity documents and related data are processed by contracted third-party verification service providers operating under strict data processing agreements.
• Game and Platform Providers: Game providers whose titles are hosted on the sukacuci2 platform may receive anonymised or pseudonymised gameplay data necessary to deliver the game service and maintain RNG certification records.
• Fraud Prevention and Security Services: Aggregated or pseudonymised data may be shared with fraud detection and cybersecurity service providers for the purpose of protecting the platform and its users from malicious activity.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by law, where disclosure is necessary to protect the rights and safety of sukacuci2 users, or where required under our gaming licence obligations.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of the sukacuci2 business, personal data held by the Operator may be transferred to a successor entity, subject to equivalent data protection commitments being maintained by the successor.

sukacuci2 uses cookies and similar tracking technologies on the platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential for the operation of the platform and cannot be disabled. They include session management cookies that authenticate your login, security cookies that protect against CSRF attacks, and cookies that maintain your in-session preferences. These cookies do not require your consent as they are necessary for service delivery.
• Functional Cookies: These cookies remember your platform preferences, such as language settings and display preferences, to improve your experience. They are deployed only with your consent.
• Analytics Cookies: Anonymised analytics data is used to understand how the platform is used and to identify areas for improvement. Analytics data is aggregated and does not identify individual users. These cookies are deployed only with your consent.
• Fraud Detection Cookies: Certain cookies and device fingerprinting technologies are used to detect and prevent fraudulent activity, including multi-accounting and bot activity. These are deployed as part of our legitimate interest in platform security.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect platform functionality. For specific cookie management instructions, please refer to the help documentation for your browser.

sukacuci2 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention guidelines:

• Active Account Data: Personal data associated with an active sukacuci2 account is retained for the duration of the account relationship and is reviewed upon account closure.
• KYC and Financial Records: Identity verification documents, transaction records, and financial data are retained for a minimum of five years following account closure or the date of the last transaction, in compliance with our AML obligations and licensing requirements. Certain records may be retained for up to seven years where required by applicable law.
• Gameplay Records: Bet history and gameplay logs are retained for a minimum of five years following the date of the relevant activity, for the purposes of dispute resolution, fraud investigation, and regulatory compliance.
• Communication Records: Support correspondence, including live chat transcripts and email records, is retained for a minimum of two years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute, legal proceeding, or compliance investigation.
• Marketing Data: Where you have consented to marketing communications, your marketing preferences are retained until you withdraw consent. Upon withdrawal of consent, your details are removed from active marketing lists within a reasonable operational timeframe (typically 10 business days) while retaining a record of your consent withdrawal for compliance purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. You may request early deletion of specific categories of data, subject to our overriding legal retention obligations (see Section 11 — User Rights).

sukacuci2 implements and maintains technical and organisational security measures proportionate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sukacuci2 platform.
• Encryption at rest for sensitive personal data, including identity documents and financial records stored in our database infrastructure.
• Access controls that restrict access to personal data to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular security assessments, including vulnerability scanning and penetration testing, conducted by qualified third-party security professionals.
• Multi-factor authentication requirements for internal administrative access to systems containing personal data.
• Segregated storage of player funds and personal data, reducing the risk profile of any single security event.
• Incident response procedures to detect, investigate, contain, and notify in the event of a personal data breach. Where a breach is likely to result in a risk to your rights and freedoms, we will notify affected users as promptly as operationally practicable.

sukacuci2 operates under international online gaming licensing, and our technical infrastructure, service providers, and data processing operations may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where such international transfers occur, sukacuci2 takes steps to ensure that your data receives an adequate level of protection, including through:

• Ensuring that transfers are made only to countries or organisations that maintain adequate data protection standards as assessed by the applicable licensing authority.
• Implementing contractual safeguards in the form of data processing agreements with third-party processors, which include obligations equivalent to the data protection standards applied by sukacuci2.
• Conducting due diligence on third-party processors to verify that their security and privacy practices meet our required standards prior to engagement.

By registering an account and using the sukacuci2 platform, you acknowledge and consent to the international transfer of your personal data as described in this Section.

Subject to applicable law and our overriding legal obligations (including AML retention requirements), you have the following rights in relation to your personal data held by sukacuci2:

To exercise any of the above rights, please contact our Data Protection team via the support email address provided in Section 15 of this Policy. We will respond to valid requests within a reasonable timeframe, typically within 30 days of receipt. Where a request requires further verification of your identity before it can be actioned, we will notify you promptly.

Please note that certain rights are qualified and may be limited where our processing is required to comply with legal obligations — in particular, the retention of KYC and transaction data for AML purposes cannot be overridden by a right to erasure request during the applicable retention period.

The sukacuci2 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete or destroy the collected data (subject to any legal obligation to retain evidence of the breach), and return any deposited funds to the source of payment. We may also report the matter to relevant authorities where required.

The sukacuci2 platform integrates with third-party services including payment processors, game providers, and identity verification systems. These third-party services operate under their own privacy policies and data protection practices, which are governed by their respective terms of service and applicable law.

sukacuci2 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations we impose through data processing agreements. We recommend that you review the privacy policies of any third-party payment service providers (including Touch 'n Go, Boost, GrabPay, and applicable banking institutions) whose services you use in connection with your sukacuci2 account, as those providers process your data independently for their own purposes.

sukacuci2 reserves the right to amend this Privacy Policy at any time. Where amendments are material — such as changes to the categories of data we collect, the purposes for which data is processed, or the parties with whom data is shared — we will notify registered users via the email address on file, where reasonably practicable, prior to the changes taking effect.

Minor amendments, including clarifications, formatting corrections, and updates to reflect changes in applicable law that do not alter the substance of our data practices, may be made without direct notification. The updated Policy will be published on this page with a revised "Last Updated" date.

Your continued use of the sukacuci2 platform following the publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must discontinue use of the platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sukacuci2, please contact our support team through the following channels. Privacy-related requests and data subject rights submissions are handled by our dedicated data protection team.

When submitting a data subject rights request, please include your registered username, a description of the specific right you wish to exercise, and any supporting information that will assist us in processing your request efficiently. We may require identity verification before actioning certain requests to protect against fraudulent access to personal data.

Live chat support is available 24 hours a day, 7 days a week, with peak staffing during Malaysian standard hours (10am – 2am MYT, UTC+8). For privacy-related enquiries, email correspondence typically receives a response within 5 to 10 business days; formal data subject rights requests are processed within 30 days of receipt of a complete and valid submission.

This Privacy Policy was last reviewed and updated on 1 January 2026. For the most current version applicable to your account and use of the sukacuci2 platform, please refer to this page.