Bkcuci Privacy Policy — Malaysia Member Personal Data Protection

Welcome to the bkcuci Privacy Policy. This document outlines our commitment to protecting the personal data of every member who uses the bkcuci platform — including the bkcuci.onl website, iOS and Android mobile apps, and all digital channels we operate.

We understand that your trust is our most valuable asset. Every decision involving the handling of personal data is made with care and accountability. By using the bkcuci platform, you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our team before continuing to use the platform.

Bkcuci collects several categories of personal information from members to ensure the services we offer run smoothly, securely, and satisfactorily. This information is collected through the account registration process, day-to-day platform use, and interactions with our support team.

Personal Identification:

• Full name as shown on your identity card or passport.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Identity card number (MyKad) or passport number for international members.
• Current residential address including postcode and state.

Contact Details:

• The active email address used for communications and account verification.
• A valid Malaysian mobile number for SMS verification and security notifications.

Financial Information:

• Bank account number and bank name for processing deposits and fund withdrawals.
• The registered account holder name for eWallets (Touch 'n Go, Boost, GrabPay).
• Records of deposit and withdrawal transactions processed through the bkcuci platform.

Technical & Usage Data:

• The IP address of the device used to access the bkcuci platform.
• Web browser type, operating system, and device model in use.
• Activity log data including pages visited, session duration, and games played.
• Cookie data and other tracking technologies as described in Section 5 below.

Personal information collected from members is used solely for legitimate purposes directly related to the operation of the bkcuci platform. We do not use your data for any other purpose without your prior consent.

Members' personal data will not be used for automated decision-making that materially affects their rights or interests without manual review by qualified bkcuci staff.

Bkcuci treats members' personal data with strict confidentiality. We do not sell, rent, or disclose members' personal information to any third party for commercial purposes without member consent. However, there are limited situations where data sharing is necessary for the platform to operate properly:

• Payment Service Providers: Transaction information is shared with authorised payment providers such as FPX, Touch 'n Go eWallet, Boost and GrabPay solely to process your deposits and withdrawals.
• KYC Service Providers: Identity verification documents are shared with certified third-party KYC services that have signed strict data protection agreements with bkcuci.
• Game Providers: Minimal game session data is shared with game software providers to ensure game integrity. No personal financial information is shared in this process.
• Regulatory Authorities: bkcuci will disclose members' personal information to government or law enforcement authorities when required to do so by applicable law, court order, or valid legal process.
• Professional Advisors: Lawyers, accountants or auditors bound by professional confidentiality obligations may access certain data in the context of services they provide to bkcuci.

Bkcuci consistently invests in cybersecurity infrastructure to ensure members' personal data remains protected against increasingly sophisticated threats. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser or app and bkcuci servers are encrypted using the latest TLS 1.3 protocol, making your data unreadable to unauthorized parties.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account beyond just a password.
• 24/7 Monitoring: The bkcuci security team continuously monitors account activity to detect and respond to any suspicious activity in real time.
• Internal Access Controls: Access to members' personal data within bkcuci staff is restricted on a strict need-to-know basis, with full audit logs maintained for every access event.
• Regular Security Testing: bkcuci conducts regular penetration testing and security audits by independent security experts to identify and patch system vulnerabilities.
• Secure Data Backup: Member data is regularly backed up to separate locations with full encryption, ensuring continuity of service under any circumstances.

The bkcuci platform uses cookies and related tracking technologies to enhance the user experience, analyse website traffic and personalise the content displayed to you. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session and securing transactions. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect statistical data on how members use the bkcuci platform, enabling us to make targeted improvements. This data is collected in anonymised form.
• Functional Cookies: Remembers your preferences such as language, display settings and game preferences to deliver a more personalised and consistent experience.
• Analytics Cookies: Helps us understand overall platform usage patterns to plan improvements and develop new features and content more relevant to Malaysia members.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and experience of the bkcuci platform.

As a bkcuci member, you have certain rights regarding the personal data we hold about you. bkcuci is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe.

Bkcuci retains members' personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law. The following is a guide to our data retention periods:

• Active Account Data: While your account remains active and in use, all personal data associated with it will be retained in full to ensure uninterrupted service.
• Data After Account Closure: Financial transaction records and personal identification data are retained for a minimum of five (5) years following account closure to comply with anti-money laundering (AML) legal requirements and financial reporting obligations.
• Activity & Technical Logs: Technical log data such as IP addresses and access records are retained for twelve (12) months before being automatically deleted or anonymised.
• Communication Records: Conversation records with the customer support team are retained for two (2) years for quality control and dispute resolution purposes.
• Marketing Data: Data used for marketing communications will be deleted within 90 days of you withdrawing consent or submitting an unsubscribe request.

Once the designated retention period expires, personal data will be securely deleted or anonymized in a way that can no longer be linked to any individual.

The bkcuci platform is strictly for adults aged 18 and above. We do not permit registration or use of the platform by underage individuals under any circumstances.

• Bkcuci does not knowingly collect or store any personal data from individuals under the age of 18.
• If we discover that a child's personal data has been collected unintentionally, that data will be deleted immediately and the account in question will be suspended without notice.
• The age verification process during new account registration is designed to screen out underage individuals from accessing the platform.
• Parents or guardians who suspect their child has registered an account on bkcuci are encouraged to contact our support team immediately for follow-up action.

Bkcuci reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in data protection industry standards.

• Any material changes to this Privacy Policy will be communicated to members via in-platform notifications or email at least 14 days before the changes take effect.
• The "Updated" date at the top of this page will be refreshed whenever changes are made, allowing you to track the latest revision.
• Continued use of the bkcuci platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
• If you disagree with any changes made, you have the right to close your account and request deletion of your personal data, subject to applicable record-keeping obligations.

We encourage members to check this page periodically to stay informed about how we protect your personal information.

If you have any questions, concerns, or complaints regarding how bkcuci handles your personal data, our privacy team is here to help.

You can reach us through the following channels:

• Privacy Email: [email protected]
• Live Chat 24/7: Available directly through the bkcuci platform — click the support icon in the bottom-right corner of your screen.
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days and to complete all formal requests within 30 business days.