12cuci net Privacy Policy — Personal Data Protection for Malaysian Members

01 What Personal Data We Collect

12cuci net collects the personal data necessary to operate the platform and provide a secure service to our members. The data we collect falls under the following categories:

Personal Identification Data:

Financial & Transaction Data:

Platform Usage Data:

We do not collect data we don't need. Credit/debit card details are not stored on our servers — FPX transactions are processed directly by the banks, while e-wallet transactions are handled by providers such as Touch 'n Go, GrabPay and DuitNow through their own security systems.

02 How We Use Your Data

12cuci net uses the personal data collected solely for the following purposes:

• Account Management: Creating and managing your account, processing registration, login and account setting changes.
• Identity Verification: Verifying your identity to meet legal requirements and to prevent fraud or unauthorised account access.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX securely and accurately.
• Customer Support: Responding to enquiries, resolving complaints and providing technical support to members.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account usage, and system abuse.
• Service Improvement: Analysing aggregated (not individual) usage patterns to improve the interface, platform performance, and overall user experience.
• Service Communications: Sending important account notifications, terms updates, security alerts, and promotional information (where you have consented to receive them).
• Legal Compliance: Complying with legal obligations under Malaysian law, including lawful requests from authorities with the relevant jurisdiction.

12cuci net does not use your personal data to make automated decisions that materially affect you without human review, except for industry-standard fraud detection systems.

03 Sharing Data With Third Parties

12cuci net does not sell or rent your personal data. However, in certain limited circumstances, we may share data with the following parties:

• Payment Service Providers: Necessary transaction information is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, and banks to process your deposits and withdrawals. They are bound by their own privacy policies and industry security standards.
• Game Providers: Usernames and game session data may be shared with third-party game software providers to operate casino and sports games correctly. They do not receive your full personally identifiable information.
• Malaysian Authorities: 12cuci net will disclose personal data if required by Malaysian law, a valid court order, or an official request from a law enforcement agency with proper jurisdiction.
• Technical Service Providers: Third parties providing technical infrastructure services (such as cloud and cybersecurity services) may have limited access to data within the scope of their service agreements with 12cuci net, and are bound by strict confidentiality agreements.

04 Data Security & Protection Measures

12cuci net continuously invests in data security to protect your personal and financial information. Key security measures we have in place include:

• Data Encryption in Transit: All communications between your browser or app and the 12cuci net servers are protected using TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as passwords is stored in an irreversible hashed format. Sensitive financial information is stored with AES-256 encryption.
• Multi-Layered Access Control: Access to user data within the 12cuci net organisation is restricted to staff who genuinely require it, with varying permission levels based on their role.
• 24/7 Monitoring: An intrusion detection system and round-the-clock security monitoring operate continuously to detect and respond to any threats promptly.
• Regular Security Audits: 12cuci net conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): We encourage all members to enable two-factor authentication on their accounts as an added layer of security.

While we take all reasonable steps to protect your data, no system is completely immune to sophisticated cyberattacks. In the event of a data breach that materially affects you, 12cuci net is committed to notifying you within the timeframe required under applicable Malaysian law.

05 Data Retention Period

12cuci net retains your personal data for as long as your account remains active and for a specified period after account closure, depending on the type of data and applicable legal requirements:

• Active Account Data: For as long as your account remains active with 12cuci net, all data associated with your account will be retained to ensure uninterrupted service.
• After Account Closure: Core personal identification data is retained for 7 years following account closure to comply with Malaysian legal and tax requirements.
• Financial Transaction Records: All financial transaction records are retained for a minimum of 7 years in compliance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• Support Communication Data: Customer support chat logs are retained for 2 years for reference and quality control purposes.
• Security Logs: System and security activity logs are retained for 1 year for the purpose of security incident investigations when required.

Once the relevant retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

06 Your Rights Under Malaysia's PDPA

As a data subject under the Personal Data Protection Act (PDPA) Malaysia 2010, you have the following rights regarding your personal data held by 12cuci net:

To exercise any of the rights above, contact the 12cuci net support team via live chat or email at support@12cucinet.best. We may need to verify your identity before processing certain requests as a security measure.

07 Cookies & Tracking Technologies

12cuci net uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform operations such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members use the platform — including the most visited pages, time spent, and navigation paths. This data is used in aggregate to improve platform performance.
• Functional Cookies: Stores your preferences such as language selection, display settings, and frequently used account information to streamline your experience.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect certain features on the 12cuci net platform. We do not use cookies to track your activity outside of 12cuci net.

08 Children's Privacy

12cuci net is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If you believe we may have collected personal data from someone under the age of 18, please contact us immediately at support@12cucinet.best. We will take prompt action to investigate and, if confirmed, delete the relevant data.

09 Privacy Policy Amendments

12cuci net reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other legitimate reasons.

For significant amendments, we will provide members with clear notice via in-platform notifications or email at least 14 days before the changes take effect. Continued use of the 12cuci net platform after the effective date of any amendment will be considered your acceptance of the updated policy.