Privacy Policy 360cuci – Our Commitment to Protecting Your Personal Data

This Privacy Policy explains how 360cuci collects, uses, stores, and protects personal information provided by members during registration and use of our platform. This document forms part of the agreement between you and 360cuci, and should be read together with Terms and Conditions us.

This policy applies to all users of the 360cuci platform — whether accessed via website, mobile app, or any other channel we provide. By using the 360cuci platform, you agree to the data collection and usage practices described here.

360cuci operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices for user privacy protection in the digital services sector. We take every aspect of data protection seriously and continuously update our internal practices to ensure full compliance.

360cuci collects various types of information depending on your interactions with our platform. Generally, the data we collect can be categorized as follows:

Automatically collected data (such as technical and activity data) is gathered for security, fraud prevention, and user experience improvement purposes. This data is not directly linked to your personal identity except for account security purposes.

360cuci uses your personal data for limited and clearly defined purposes. We will not use your data for any other purpose without informing you in advance. The primary purposes of data use are as follows:

• Identity verification (KYC) — to verify that you meet the age requirement and are using a valid identity in accordance with legal requirements.
• Transaction processing — deposits, withdrawals, and any other financial transactions on the 360cuci platform require your financial data to be processed securely.
• Customer support — your data helps the 360cuci support team identify your account and resolve any issues more efficiently.
• Security and fraud prevention — technical and activity data is analyzed to detect any suspicious activity that could compromise account or platform security.
• Legal compliance — 360cuci is required to retain certain records in accordance with anti-money laundering (AML) legal requirements and related regulations.
• Service communications — important account notifications, policy changes, or security issues will be sent to you via your registered contact method.
• Platform improvements — anonymized usage data is used to understand usage patterns and improve the overall user experience.

360cuci does not sell, rent, or disclose your personal data to third parties for commercial gain. However, there are limited situations where data sharing is necessary and legally justified:

• Payment service providers — information required to process deposits and withdrawals is shared with licensed payment providers used by 360cuci (such as FPX and DuitNow processors).
• Game providers — the minimum data required to ensure smooth gameplay may be shared with third-party gaming software providers integrated with the 360cuci platform.
• Legal authorities — 360cuci will comply with any lawful request from authorities, courts, or regulatory bodies to disclose data when required by law.
• Identity verification services — approved third parties may be used for KYC verification purposes, subject to strict confidentiality agreements.

All third parties that receive 360cuci data are bound by data protection agreements ensuring they handle your information to the same or higher standards that we ourselves uphold.

The security of your data is a top priority at 360cuci. We continuously invest in security infrastructure to ensure your information is protected from unauthorized access, data loss, or misuse.

The technical measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and 360cuci servers.
• Stored data encryption for sensitive information such as passwords and financial details.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• 24/7 security monitoring to detect and respond to any suspicious activity in real time.
• Regular security audits conducted by independent third parties to identify and address any vulnerabilities.
• Internal access controls ensuring that only authorized personnel can access member data, and only to the extent necessary for their role.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a significant data breach, 360cuci will notify affected members within the timeframe required by law and take immediate steps to mitigate the impact.

360cuci uses cookies and similar technologies to enhance the user experience and analyze how the platform is used. Cookies are small text files stored on your device when you browse our platform.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions and security preferences. These cookies cannot be disabled.
• Performance cookies — collects data on how users interact with the platform to help us identify and resolve technical issues.
• Functionality cookies — remembers your preferences such as language, display settings, and login information to streamline future use.
• Analytics cookies — helps us understand aggregated and anonymized usage patterns for platform improvement purposes.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 360cuci platform.

360cuci retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Retention periods vary by data type:

• Active account data — retained for as long as your account remains active and for a specified period after account closure for legal compliance purposes.
• Financial transaction records — retained for at least seven years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC verification data — retained for the lifetime of the account and for the period specified by regulatory authorities after closure.
• Support communication records — retained for three years for reference and service improvement purposes.
• Technical data and logs — typically retained for 12 months for security and technical analysis purposes.

Once the prescribed retention period has ended, data will be securely disposed of using methods that ensure it cannot be recovered.

As a 360cuci user, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and facilitate the exercise of these rights:

360cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Whenever amendments are made, we will update the date at the top of this document.

For significant amendments that affect your rights, 360cuci will provide reasonable notice via registered email or in-platform notification at least 14 days before the amendments take effect. Continued use of the 360cuci platform after such notice will be considered your acceptance of the amendments.

We encourage you to review this page periodically, especially before providing any new personal information to us.

If you have any questions, concerns, or wish to submit a request regarding your personal data under this Privacy Policy, please contact the 360cuci support team through the following channels:

• Live Chat — available 24 hours a day, 7 days a week, directly within the 360cuci platform.
• Email — submit your request to the official email address [email protected] (displayed as plain text, not a link).

For data access, correction, or deletion requests, please provide sufficient information for us to verify your identity before processing the request. This is a security measure to protect your data from unauthorized access.

360cuci is committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. Your trust is the foundation of our relationship, and we will never delay in handling any issue you raise.