Data Protection & Privacy

Privacy Policy

cucu2 is committed to protecting the privacy and security of every player's personal data. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your personal data when using the cucu2 platform.

Last Updated: 1 January 2026  |  Effective Immediately
Section 01

Introduction

This Privacy Policy ("Policy") is published by cucu2 (hereinafter "cucu2", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://cucu2.cam. cucu2 operates as an internationally licensed online gaming platform and is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Policy applies to all individuals who access, browse, register for, or use any part of the cucu2 Platform ("Users", "Players", "you"). It covers personal data collected through the Website, mobile interface, customer support interactions, and any other touchpoints between you and cucu2.

By registering an account or continuing to use the cucu2 Platform, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue your use of the Platform and may request account closure by contacting our support team.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, which form part of the overall legal framework governing your relationship with cucu2.

Section 02

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including names, identification numbers, contact details, financial data, device identifiers, and behavioural data.
"Processing" Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
"Data Controller" cucu2, as the entity that determines the purposes and means of processing your personal data.
"Data Processor" Any third-party entity that processes personal data on cucu2's behalf, pursuant to a written agreement and under cucu2's instructions.
"Platform" The cucu2 website at https://cucu2.cam, including all pages, mobile interfaces, and associated services.
"KYC" Know Your Customer — the identity and address verification process required to activate withdrawal functionality and ensure regulatory compliance.
"Cookies" Small text files placed on your device by the Platform to store session information, preferences, and analytics data.
"Consent" A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a specified purpose.
Section 03

Data We Collect

cucu2 collects personal data through several channels: directly from you when you register or interact with the Platform; automatically when you access the Platform via your device; and from third parties such as payment processors, identity verification providers, and fraud prevention services. The categories of personal data we collect include:

A. Registration & Identity Data

Full legal name; date of birth; nationality; residential address; email address; mobile phone number; username; password (stored in hashed, non-reversible form); government-issued identification number (e.g., MyKad IC number, Passport number).

B. KYC Verification Documents

Scanned or photographed copies of your Malaysian identity card (MyKad), driver's licence, passport, or other government-issued photo ID; proof of address documents (such as utility bills or bank statements from Maybank, CIMB, Public Bank, or other Malaysian financial institutions); selfie photographs submitted for facial verification purposes.

C. Financial & Transaction Data

Deposit and withdrawal transaction records; payment method details (e-wallet identifiers such as Touch 'n Go eWallet, Boost, and GrabPay account references; DuitNow/FPX bank account details; bank name and account reference); transaction amounts in Malaysian Ringgit (MYR/RM); timestamps; transaction IDs.

D. Gaming & Betting Activity Data

Game session records; bet histories; wagering volumes; wins and losses; bonus usage records; sports betting selections (including EPL, Liga Super Malaysia, UFC events); game preferences and play patterns.

E. Technical & Device Data

IP address; device type and operating system; browser type and version; session duration and login timestamps; geolocation data (at country and region level only); referring URL; Platform navigation patterns.

F. Communication & Support Data

Records of all communications between you and cucu2 customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted. Language preference (English, Bahasa Melayu, or Chinese).

Section 04

Data Processing

cucu2 processes your personal data for the following specific purposes:

Purpose Description
Account Registration & Management To create, maintain, and administer your cu2 account, including authentication, password management, and account settings.
Identity Verification (KYC) To verify your identity, confirm your age as 21 years or above, and satisfy anti-money laundering (AML) compliance obligations.
Payment Processing To facilitate deposits and withdrawals via Malaysian payment channels (TNG eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong) and to maintain financial records.
Gaming Services Delivery To provide access to games and sports betting markets, record bet outcomes, process winnings, and maintain fair play records.
Fraud Prevention & Security To detect, investigate, and prevent fraudulent activity, account takeover, money laundering, and other malicious conduct on the Platform.
Regulatory Compliance To meet applicable legal, regulatory, and licensing obligations, including record-keeping requirements and cooperation with law enforcement where required by law.
Customer Support To handle enquiries, complaints, and support requests, and to maintain records of support interactions.
Responsible Gambling To monitor play patterns, identify indicators of problem gambling, administer self-exclusion requests and deposit/loss limits, and promote safe gambling practices.
Platform Improvement To analyse Platform usage patterns, conduct A/B testing, improve user experience, and develop new features and services.
Marketing Communications Where you have provided explicit consent, to send you promotional offers, bonus notifications, and relevant updates about cu2 services.
Section 06

Data Sharing & Disclosure

cucu2 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Personal data may be shared with third parties only in the following circumstances:

  • Payment Service Providers: To process deposits and withdrawals, we share necessary transaction data with authorised payment processors and Malaysian financial institutions, including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay integrations.
  • Identity Verification Providers: To conduct KYC and age verification checks, we may share identification documents and related data with authorised third-party verification service providers under strict data processing agreements.
  • Game Software Providers: To provide gaming content, limited technical session data may be shared with licenced game providers. These providers do not receive personally identifiable financial or KYC information.
  • Fraud Prevention Services: We may share data with fraud detection and anti-money laundering screening services to protect the integrity of the Platform and its users.
  • Legal and Regulatory Authorities: cucu2 will disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities where required to do so by applicable law, court order, or regulatory directive.
  • Group Companies and Successors: In the event of a merger, acquisition, or business restructuring, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

All third-party service providers engaged by cucu2 are subject to written data processing agreements that require them to process personal data only on cu2's instructions and to implement appropriate security measures. cucu2 does not authorise any third party to use your data for their own marketing or commercial purposes.

Section 07

Cookies & Tracking Technologies

The cucu2 Platform uses cookies and similar tracking technologies to operate efficiently and to provide a personalised user experience. Cookies are small text files placed on your device when you visit the Platform.

Cookie Type Purpose Duration
Strictly Necessary Essential for Platform operation — session management, authentication, security tokens, and load balancing. Session / Up to 24 hours
Functional Remembers your preferences including language selection (English/BM/Chinese), game display settings, and logged-in state. Up to 30 days
Analytical Collects anonymised data on how Users navigate the Platform to help us improve page performance and user experience. Up to 12 months
Marketing Tracks promotional campaign effectiveness and, with consent, personalises marketing content shown to you. Up to 90 days

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to log in and use core Platform functions. Analytical and marketing cookies may be disabled without affecting core functionality.

Section 08

Data Retention

cucu2 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following general retention periods apply:

  • Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable AML record-keeping requirements.
  • KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later.
  • Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial record-keeping compliance.
  • Customer Support Records: Retained for up to three (3) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or regulatory investigation.
  • Marketing Data: Retained until you withdraw your consent to marketing communications, at which point it will be removed from active marketing lists promptly.
  • Technical and Device Data: Retained for up to twelve (12) months from collection, or longer where security investigations are ongoing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further active processing until deletion is practicable.

Section 09

Data Security

cucu2 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and the cucu2 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
  • Password Hashing: Account passwords are stored exclusively in hashed, non-reversible format using current best-practice cryptographic algorithms. cucu2 staff cannot view your password in plain text.
  • Access Controls: Personal data is accessible only to cucu2 personnel and authorised processors who require it to perform their specific duties. Role-based access controls limit data exposure to a strict need-to-know basis.
  • Regular Security Audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and remediate potential vulnerabilities.
  • Secure Data Storage: Personal data is stored on servers protected by physical access controls, firewalls, intrusion detection systems, and regular backup procedures.
  • Incident Response: cucu2 maintains a documented data breach response procedure. In the event of a significant personal data breach, affected Users will be notified in accordance with applicable legal requirements.

Your Responsibility: While cucu2 takes all reasonable steps to secure your data on our end, you are responsible for maintaining the confidentiality of your account credentials. Never share your username or password with anyone, and always log out from shared devices. If you suspect unauthorised access to your account, contact cu2 support immediately.

Section 10

User Rights

Subject to applicable law and the limitations imposed by cucu2's legal obligations (including regulatory record-keeping requirements), you have the following rights in relation to your personal data held by cucu2:

Right of Access

Request a copy of the personal data cucu2 holds about you, along with information about how it is used and with whom it has been shared.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held about you. You may update certain details directly from your account settings.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.

Right to Restriction

Request that processing of your data be restricted in certain circumstances — for example, while a complaint or accuracy dispute is being investigated.

Right to Portability

Receive a copy of the personal data you have provided to cucu2 in a structured, commonly used, machine-readable format, where technically feasible.

Right to Object

Object to the processing of your personal data where cucu2 relies on legitimate interests as a legal basis, or where data is used for direct marketing.

Right to Withdraw Consent

Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to Complain

Lodge a complaint with a competent data protection authority if you believe your personal data has been processed unlawfully or without sufficient basis.

To exercise any of the rights described above, please contact cucu2's data privacy team by email at [email protected] (plain text address — please copy and paste into your email client). We will acknowledge your request within five (5) business days and aim to provide a substantive response within 30 calendar days, or within any shorter period required by applicable law.

Section 11

Minors & Age Policy

cucu2 operates a strict minimum age policy of 21 years for all registered users. The Platform is not directed at, intended for, or accessible to persons under the age of 21. cucu2 does not knowingly collect personal data from anyone under 21 years of age.

If cucu2 becomes aware that personal data has been submitted by or on behalf of a person under 21, the relevant account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any deposits associated with the account will be handled in accordance with our standard compliance procedures.

Age Verification

Age verification is conducted as part of the KYC process using government-issued photo identification documents. cucu2 may additionally employ third-party age verification services to confirm that account holders meet the 21+ minimum age requirement. Providing false information about your age constitutes a breach of our Terms and Conditions and may give rise to legal liability.

Section 12

International Data Transfers

cucu2 operates internationally and may transfer personal data to jurisdictions outside Malaysia in order to engage authorised third-party service providers, including cloud hosting providers, game software operators, and identity verification platforms. Such transfers may occur to jurisdictions that have data protection frameworks different from those in Malaysia.

Where personal data is transferred internationally, cucu2 takes appropriate steps to ensure that such transfers are conducted securely and in accordance with applicable data protection principles, including through the use of:

  • Contractual safeguards requiring recipient entities to maintain equivalent data protection standards
  • Transfers to jurisdictions that have been assessed as providing an adequate level of data protection
  • Binding corporate rules where applicable within affiliated entities

You may request further information about the specific safeguards applied to international data transfers by contacting our support team at [email protected].

Section 13

Third-Party Services

The cucu2 Platform may contain references to or integrations with third-party payment services, including the e-wallet platforms of Touch 'n Go eWallet, Boost, and GrabPay, as well as banking gateways operated by Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank. When you interact with these payment services, you are also subject to the privacy policies and terms of those providers.

cucu2 is not responsible for the privacy practices, data security measures, or content of any third-party services accessed through the Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your cu2 account.

cucu2 performs due diligence on all third-party service providers before engagement and requires contractual data protection commitments from all processors. However, once you navigate away from the cucu2 Platform to a third-party website or application, that provider's own privacy policy governs the processing of your data.

Section 14

Policy Amendments

cucu2 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, business practices, or the services offered on the Platform. When material changes are made to this Policy, we will:

  • Update the "Last Updated" date displayed at the top of this page
  • Where required, notify registered users by email to the address held on file
  • Display a prominent notice on the Platform for a reasonable period following the change

Your continued use of the cucu2 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed about how your personal data is being handled.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights described in Section 10, please contact the cucu2 data privacy team through the following channels:

Data Privacy Contact Details

Email: [email protected]
(Plain text address — please copy and paste into your email client. This address is not a clickable link.)

Live Chat: Available 24 hours a day, 7 days a week via the cucu2 Platform. For privacy-related queries, please indicate the nature of your request at the start of the conversation so our team can direct it appropriately.

Response Timeframe: cucu2 will acknowledge all privacy-related requests within 5 business days and aims to provide a substantive response within 30 calendar days.

Languages: Privacy requests can be submitted in English, Bahasa Melayu, or Chinese.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection regulatory authority in your jurisdiction.

How We Protect Your Data

256-Bit SSL Encryption

Every piece of data you transmit to cucu2 is protected in transit using industry-standard TLS encryption. Your personal information, payment details, and gaming activity are secured end-to-end.

We Never Sell Your Data

cucu2 does not sell, rent, or trade your personal data to any third party for their own commercial use. Your data is used exclusively to operate and improve your cu2 experience.

Full Transparency

This Privacy Policy clearly sets out every category of data we collect, every purpose we use it for, and every third party we may share it with. No hidden processing, no vague language.

You Are in Control

We provide clear rights to access, correct, delete, and port your personal data. You can also withdraw your marketing consent at any time. Your data rights are respected and actioned promptly.

Defined Retention Limits

cucu2 retains data only as long as necessary for legal, regulatory, and operational purposes. When the retention period expires, data is securely deleted or anonymised — not held indefinitely.

Responsive Privacy Support

Our 24/7 multilingual support team (English, Bahasa Melayu, Chinese) can handle privacy requests and data right enquiries. We acknowledge all requests within 5 business days.

Questions About Your Data?

If you have questions about how cucu2 handles your personal information, our support team is available 24/7. You can also read our FAQ for answers to the most common data privacy questions, or return to the homepage to explore the full cucu2 platform.

🔞 For players aged 21 and above only  |  Terms & Conditions  |  Responsible Gambling