1. Introduction
1.1 This Privacy Policy applies to all personal data collected and processed by 1mcuci in connection with the operation of the website at 1mcuci.win and all associated gaming services (collectively, the "Platform"). It applies to all registered players, prospective players, and visitors to the Platform.
1.2 1mcuci is committed to protecting the privacy and personal data of all individuals who interact with our Platform. We process personal data only to the extent necessary for the purposes described in this Policy and in accordance with our legal obligations, including Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable.
1.3 By registering an account on 1mcuci, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
1.4 This Privacy Policy should be read alongside the 1mcuci Terms & Conditions. Capitalised terms not otherwise defined in this Policy carry the meanings given to them in the Terms & Conditions.
2. Personal Data We Collect
1mcuci collects the following categories of personal data in connection with the operation of the Platform:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number, photographs for identity verification |
| Contact Data | Email address, Malaysian phone number, residential address |
| Financial Data | Payment method details (e.g. Touch 'n Go eWallet, Boost, DuitNow, FPX), transaction history, deposit and withdrawal records, MYR wallet balance |
| Account Data | Username, account registration date, login history, account preferences, responsible gaming settings |
| Gameplay Data | Game history, bet amounts, win/loss records, session durations, game preferences |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session identifiers |
| Communications Data | Records of customer support interactions including live chat transcripts and email correspondence |
2.1 You are not required to provide all categories of data listed above in all circumstances; however, failure to provide certain data (for example, identity verification documents) may prevent 1mcuci from processing withdrawal requests or maintaining your account in active status.
3. How We Collect Your Data
1mcuci collects personal data through the following means:
- Direct provision: Information you submit when registering an account, completing identity verification, depositing funds, contacting customer support, or updating your account profile.
- Automated technical collection: Technical data collected automatically when you access and navigate the Platform, including data collected via cookies, session logs, and server-side request logs.
- Third-party sources: Identity verification and fraud prevention data received from third-party verification service providers, and payment data received from payment processors in connection with your transactions on the Platform.
- Gameplay records: Gameplay and transaction data generated as a result of your use of the Platform's gaming and betting services.
4. Legal Basis for Processing
1mcuci processes your personal data on the following legal bases:
- Performance of a contract: Processing necessary to open and maintain your account, process deposits and withdrawals, and deliver gaming services.
- Legal obligation: Processing necessary to comply with applicable law, including anti-money laundering obligations, age verification requirements, and regulatory reporting obligations.
- Legitimate interests: Processing necessary for fraud prevention, Platform security, responsible gaming monitoring, and improvement of our services, where such interests are not overridden by your rights and interests.
- Consent: Where we rely on consent — for example for optional marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5. How We Use Your Personal Data
1mcuci uses the personal data we collect for the following purposes:
- To create, verify, and maintain your 1mcuci player account, including processing your registration information and conducting mandatory identity and age verification;
- To process deposits, withdrawals, and all financial transactions associated with your MYR account wallet;
- To deliver gaming and betting services and to maintain accurate records of all gameplay and wagering activity on your account;
- To comply with our legal and regulatory obligations, including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and mandatory reporting to relevant authorities;
- To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
- To operate and enforce responsible gaming tools including deposit limits, session timers, self-exclusion periods, and account cooling-off requests;
- To provide customer support through live chat and email correspondence;
- To communicate service-related notifications, account alerts, and security notices to your registered email address or phone number;
- To send promotional and marketing communications where you have opted in to receive such communications from 1mcuci;
- To analyse Platform usage patterns for the purpose of improving the user experience, game content, and overall service quality.
6. Disclosure to Third Parties
6.1 1mcuci does not sell, rent, or trade your personal data to any third party for commercial purposes.
6.2 1mcuci may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described in this Policy:
- Payment processors and e-wallet providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banking institutions, to process your financial transactions;
- Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements;
- Game content providers: Licensed game studios and live dealer operators whose content is available on the 1mcuci Platform, to the extent required for game delivery and dispute resolution;
- IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers operating under contractual data processing agreements with 1mcuci;
- Legal and regulatory authorities: Regulatory bodies, law enforcement agencies, and courts where disclosure is required by applicable law, court order, or lawful request.
6.3 All third-party processors engaged by 1mcuci are required to process personal data solely in accordance with our documented instructions and to maintain appropriate technical and organisational security measures.
7. International Data Transfers
7.1 Some of the third-party service providers engaged by 1mcuci may be located outside of Malaysia. Where personal data is transferred to recipients in jurisdictions outside Malaysia, 1mcuci ensures that appropriate safeguards are in place to protect such data, including contractual clauses requiring the recipient to maintain standards of data protection equivalent to those applicable in Malaysia.
7.2 By using the 1mcuci Platform, you acknowledge and consent to the transfer of your personal data outside Malaysia where necessary for the purposes described in this Policy and subject to the safeguards described herein.
8. Data Retention
8.1 1mcuci retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
8.2 Account data and gameplay records are generally retained for a minimum period of seven (7) years following account closure, in compliance with applicable anti-money laundering legislation and regulatory record-keeping obligations.
8.3 Technical and session data collected via server logs is retained for a shorter period, typically not exceeding twelve (12) months, unless specific circumstances require a longer retention period for security investigation purposes.
8.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data deletion methods.
9. Cookies & Tracking Technologies
9.1 The 1mcuci Platform uses cookies and similar tracking technologies to support Platform functionality and to collect technical data as described in Section 2 of this Policy. Cookies used by 1mcuci include the following types:
- Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your authenticated login session and remembering your account preferences. These cookies cannot be disabled without affecting Platform functionality.
- Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform, to identify performance issues, and to improve the user experience. This data is aggregated and does not identify individual players.
- Functional cookies: Used to remember your language preferences, display settings, and other personalisation options you have selected on the Platform.
9.2 You may adjust cookie settings through your browser's settings; however, disabling strictly necessary cookies may impair your ability to log in to or use certain features of the 1mcuci Platform.
10. Security Measures
10.1 1mcuci implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the 1mcuci Platform;
- Encryption of sensitive data at rest, including financial records and identity documents;
- Role-based access controls limiting internal access to personal data to authorised personnel only;
- Two-factor authentication available for all player accounts;
- Regular security audits, vulnerability assessments, and penetration testing;
- Anomalous login detection and automated account protection systems.
10.2 While 1mcuci takes all reasonable precautions to protect your personal data, no data transmission over the internet or data storage system is entirely free from security risk. You are responsible for maintaining the confidentiality of your account credentials and for immediately notifying 1mcuci if you suspect any unauthorised access to your account.
11. Your Rights
Subject to applicable law, you have the following rights in respect of your personal data held by 1mcuci:
11.1 Right of Access: You have the right to request confirmation of whether 1mcuci processes personal data about you and, if so, to request a copy of that data along with information about how it is processed.
11.2 Right to Rectification: You have the right to request correction of any inaccurate personal data held by 1mcuci, and to have incomplete data completed where appropriate.
11.3 Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where there is no overriding legal basis for continued processing. This right is subject to our legal obligation to retain certain data for regulatory purposes.
11.4 To exercise any of the rights described above, please contact the 1mcuci Data Privacy team at the email address provided in Section 14. We will respond to all verified requests within a reasonable timeframe in accordance with applicable law.
12. Children & Minors
12.1 The 1mcuci Platform is strictly restricted to individuals aged twenty-one (21) years and above. 1mcuci does not knowingly collect personal data from individuals below this age.
12.2 If 1mcuci becomes aware that it has inadvertently collected personal data from an individual who does not meet the minimum age requirement, that data will be deleted promptly and the associated account will be suspended in accordance with our Terms & Conditions.
12.3 If you believe that 1mcuci may have collected personal data from an underage individual, please notify us immediately at the contact address in Section 14.
13. Changes to This Privacy Policy
13.1 1mcuci reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the change taking effect.
13.2 The effective date of the current version of this Privacy Policy is stated at the top of this page. We encourage you to review this Policy periodically to stay informed of how 1mcuci handles your personal data. Continued use of the Platform following any posted amendment constitutes acceptance of the revised Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 1mcuci, please contact our Data Privacy team through the following channel:
Email: [email protected]
Please include "Privacy Request" in the subject line of your email and provide sufficient details to enable us to identify your account and process your request. We will acknowledge all privacy-related enquiries within three (3) business days and aim to resolve substantive requests within thirty (30) days of receipt.
For information about our responsible gaming commitments and available player protection tools, please visit the Responsible Gaming page.