Privacy Policy 24cuci — Data Protection Malaysian Users

24cuci collects personal data necessary to provide platform services safely and efficiently. We only collect data that is truly necessary — nothing more. The categories of data we collect are as follows:

Personal data collected is used solely for legitimate and necessary purposes for 24cuci platform operations. The following are specific purposes:

• Account management: Creating and maintaining your account, including identity verification and KYC processes.
• Transaction processing: Processing deposits, withdrawals and other financial transactions securely and accurately.
• Platform security: Detecting and preventing fraud, multiple accounts and other suspicious activity.
• Customer support: Responding to inquiries, resolving technical issues and providing user assistance.
• Platform improvements: Analyzing usage patterns in aggregate to improve performance and user experience.
• Service communications: Sending important notifications regarding account, security and policy changes.
• Legal compliance: Complying with legal requirements, financial regulations and regulatory directives.

We do not use your personal data for third-party marketing purposes without your express consent. If you have consented to receive promotional communications, you may withdraw that consent at any time via account settings.

24cuci does not sell your personal data. Data sharing only occurs in limited and specific situations:

• Service providers: Technical partners who assist platform operations such as payment gateway providers (FPX, Touch 'n Go, GrabPay), game software providers (Evolution Gaming, Pragmatic Play) and cloud infrastructure services — all bound by strict confidentiality agreements.
• Legal requirements: If directed by authorities with legal jurisdiction, 24cuci may be required to disclose certain information pursuant to court orders or relevant regulations.
• Fraud prevention: In cases involving serious financial fraud, relevant information may be shared with financial authorities or law enforcement.

24cuci continuously invests in security infrastructure to protect users' personal data. Security measures implemented include:

• 256-bit SSL/TLS encryption for all data communications in transit.
• AES-256 encryption for data stored in databases.
• Role-based access control (RBAC) — only authorized staff can access specific data.
• Regular security audits by independent third parties.
• 24/7 threat monitoring with automated intrusion detection systems.
• Regular data backups with tested disaster recovery procedures.

While 24cuci takes all reasonable steps to protect your data, no security system can be guaranteed 100% free from threats. You also play an important role by keeping your account password secure and enabling two-factor authentication.

The 24cuci platform uses cookies and similar technologies to enhance user experience and platform security. Types of cookies used:

• Essential Cookies: Required for basic platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collecting statistical information on how the platform is used — all anonymously to help us improve performance.
• Preference Cookies: Storing your settings and preferences such as language and display settings.

You can manage cookie settings through your web browser. However, please note that disabling certain cookies may affect the functionality of some parts of the platform.

In accordance with PDPA 2010 and international data protection principles, you have the following rights regarding your personal data:

24cuci retains your personal data as long as your account is active and for the period required after account closure to comply with legal obligations. Generally:

• Active account data: Retained as long as your account is active.
• Financial transaction records: Retained for seven years in accordance with Malaysian financial legal requirements.
• KYC Data: Retained for five years after account closure for compliance purposes.
• Customer support communication logs: Retained for two years.
• Technical log data: Retained for 90 days and then automatically deleted.

After the retention period expires, data will be securely deleted using methods that ensure the data cannot be recovered.

If you as a parent or guardian discover that your child has registered on this platform, please contact our customer support immediately via live chat. We will take swift action to resolve the situation.

24cuci reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or service improvements. When material changes are made:

• The "Last updated" date at the top of this page will be updated.
• You will be notified via in-platform notification or registered email.
• For significant changes, we may seek your consent again.

For any questions, concerns, or requests related to privacy and your personal data, you can contact our team via:

• Live Chat: Fastest way — click the chat icon in the platform, response usually within minutes.
• Email: [email protected]—for inquiries requiring written documentation, processed within 14 working days.

Please state clearly that your inquiry is related to privacy or data protection to ensure it is directed to the responsible staff more quickly.