Privacy Policy GengCuci — Malaysia Player Data Protection

1 Introduction & Scope of This Policy

GengCuci ("we", "Platform", or "GengCuci") is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy clearly explains how we handle your personal information — from the moment you first visit our website through to your time as an active GengCuci member.

This policy applies to all users who access the GengCuci platform via the official website, Android or iOS mobile app, and any official GengCuci communication channels including live chat and support email.

We understand that your trust is gengcuci's most valuable asset. That's why we take a "privacy by design" approach — meaning data protection is built directly into every system and process we operate, not added as an afterthought.

2 Personal Data We Collect

GengCuci collects various types of information depending on how you interact with our platform. Here is a comprehensive overview of the data we collect and the purposes for collection:

GengCuci does not collect data beyond what is necessary for the stated purposes. Data minimisation is core to how we operate — we only request information that is genuinely needed to deliver the best service to you.

3 How We Use Your Data

The data we collect is used solely for legitimate and necessary purposes to operate the GengCuci platform effectively. Here are the primary ways we use your information:

• Account management: Processing registration, verifying identity, and managing your account on an ongoing basis.
• Transaction processing: Processing deposits, withdrawals, and all financial activities securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, and unauthorised access to your account.
• Legal compliance: Meeting AML (Anti-Money Laundering), KYC, and other applicable legal obligations.
• Service improvement: Analysing usage patterns to improve platform design, performance, and user experience.
• Service communications: Sending important notifications regarding your account, transactions, terms updates, and security information.
• Marketing (with consent): Sending promotional information, offers, and updates — only where you have given your consent.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need support and to activate self-exclusion limits.

4 Sharing Data with Third Parties

GengCuci does not sell or rent your personal data to any third party for marketing purposes. However, in operating our platform, we may share certain information with the following categories of third parties:

• Payment service providers: Required transaction information is shared with payment gateways (DuitNow, FPX, eWallet) solely to process your deposits and withdrawals.
• Licensed game providers: Minimum username and session data is shared with game providers such as Pragmatic Play and Evolution Gaming to enable gameplay — nothing more.
• KYC verification services: Identity documents are shared with appointed third-party KYC service providers solely for identity verification purposes.
• Legal Authority: GengCuci will disclose required information to competent authorities when mandated by law or a valid court order.
• Independent auditors and security services: Data required for periodic security audits is shared with independent audit firms under strict confidentiality agreements.

All third parties that receive gengcuci data are required to sign a Data Processing Agreement (DPA) that enforces strict security and data usage standards. We ensure our partners uphold privacy standards no lower than those we adhere to ourselves.

5 Cookies & Tracking Technologies

The gengcuci platform uses cookies and similar tracking technologies to enhance user experience and maintain platform security. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and transaction integrity. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how players use the platform — most visited pages, session duration, and navigation patterns. This data is used to improve the user experience.
• Preference Cookies: Storing your preferences such as display language, notification settings, and display configurations you have chosen.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure your session is not hijacked by unauthorised parties.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality and security of your account on the GengCuci platform.

6 Data Retention Period

GengCuci retains your personal data for as long as it is needed for the purposes stated in this policy, or as required by applicable law. The following is a general guide to our data retention periods:

• Active account data: Retained for as long as your account remains active on the GengCuci platform.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial and AML legal requirements.
• KYC Documents: Retained for 5 years after account closure or after the business relationship ends.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Security log data: Retained for 12 months for security investigation and fraud detection purposes.
• Game history: Retained for 3 years to comply with responsible gaming requirements and internal audit needs.

When data is no longer needed, GengCuci will securely delete or anonymise it using industry-standard data disposal procedures. You may request early deletion of your data by contacting our support team, subject to applicable legal retention obligations.

7 Your Rights as a User

Under Malaysia's PDPA and the privacy principles we uphold, you have the following rights regarding your personal data on the GengCuci platform:

8 Data Security Measures

GengCuci implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or deletion. Among the measures we practise:

• 256-bit SSL/TLS encryption for all data communications between your device and gengcuci servers.
• Data-at-rest encryption for all personal and financial data stored in our databases.
• Role-based access control (RBAC) — only staff who genuinely need access to specific data are granted permission.
• Comprehensive audit logs recording every access and modification to sensitive data.
• Penetration testing and independent security audits conducted every 6 months.
• Mandatory data security awareness training for all gengcuci staff.
• A tested incident response procedure to address any data breaches swiftly and effectively.

In the event of a data breach affecting your personal data, gengcuci will notify you and the relevant authorities within the timeframe required by law — typically within 72 hours of the breach being detected.

9 Children's Privacy & Minor Protection

The gengcuci platform is strictly for adults aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without proper verification, gengcuci will take immediate action to delete that data and close the account in question. If you believe your child has registered a gengcuci account, please contact our support team immediately.

10 Privacy Policy Amendments & Contact Us

GengCuci reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made, we will:

• Displaying clear notices on the gengcuci platform homepage.
• Sending notifications to your registered email address.
• Updating the "Last Updated" date at the top of this document.

Continued use of the gengcuci platform after any policy amendment takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.