Sukacuci Privacy Policy – Malaysian Member Personal Data Protection

1. Introduction

Sukacuci ("we", "Platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This policy applies to all information we collect through the sukacuci website, mobile app, customer support services, and other official communication channels. We encourage you to read this document carefully so you fully understand your rights and responsibilities as a sukacuci member.

Privacy is more than a document to us — it is part of how we build trust with every member. Every decision we make regarding your data is guided by your best interests and security first.

2. Types of Personal Data Collected

Sukacuci only collects data that is strictly necessary to provide a safe and seamless service. Below are the categories of data we collect:

We do not collect sensitive data such as your medical information, religious beliefs, or political views. Every piece of data collected has a clear purpose and is only retained for as long as necessary.

3. How We Use Your Data

The data we collect is used responsibly for the following purposes only:

• Account management: Create, verify, and maintain your member account securely, including the required KYC process.
• Transaction processing: Process deposits, withdrawals, and all financial activity in your account accurately and promptly.
• Platform security: Detect and prevent fraud, money laundering, unauthorized access, and other suspicious activity.
• Customer support: Helps us resolve your queries, complaints, or technical issues more efficiently when we have the relevant context.
• Service communications: Send important notifications about your account, terms updates, or security information you need to know.
• Platform improvement: Analyze aggregate (not individual) usage patterns to improve the gaming experience and platform technical performance.
• Legal compliance: Meet reporting obligations to the relevant authorities when required by law.

4. Data Sharing and Disclosure

Sukacuci does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared only in the following limited situations:

• Service providers: Payment processing companies, cloud infrastructure providers, and technical service vendors involved in our platform operations are all bound by strict confidentiality agreements.
• Game providers: Minimal game transaction data is shared with our licensed game providers solely for technical game operation purposes.
• Authorities: When required by Malaysian law or a valid court order, we may need to disclose certain information to the relevant authorities.
• Fraud prevention: In cases involving suspected fraud or financial crime, relevant information may be shared with industry bodies or law enforcement agencies.
• Business transfers: In the event of a merger, acquisition, or sale of company assets, member data may be transferred to the new entity subject to advance notice to all members.

Any third party that receives data from sukacuci is required to comply with data protection standards equal to or higher than our own. We monitor this compliance on a regular basis.

5. Data Security Measures

Protecting your data is more than a legal obligation — it is a moral responsibility we take seriously. sukacuci implements multiple layers of technical and procedural protection:

• 256-bit SSL encryption: All data transmitted between your device and the sukacuci servers is protected by industry-grade SSL encryption. No sensitive data is transmitted in unencrypted form.
• Access control: Your personal data can only be accessed by sukacuci staff who have been granted specific authorisation and have a legitimate need to do so. All access is logged and monitored.
• Two-factor authentication (2FA): Your account is protected by a 2FA system that requires additional verification beyond your password for every new login.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect any unusual activity or intrusion attempts in real time.
• Periodic audits: Our security infrastructure is regularly audited by independent third parties to ensure there are no exploitable vulnerabilities.
• Data backups: Data is regularly backed up to separate, secure servers to ensure data resilience in the event of a system failure.

6. Cookies and Tracking Technologies

Sukacuci uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve platform performance.
• Functional Cookies: Save your preferences such as display settings, preferred language, and other configurations so you do not have to reset them every time you login.
• Analytics Cookies: Helps us understand aggregate usage patterns to make data-driven decisions in improving the platform. This data is processed anonymously.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or your experience on the sukacuci platform.

7. Data Retention Period

Sukacuci does not store your personal data indefinitely. Each data category has a defined retention period based on operational requirements and legal obligations:

• Active account data: Retained for as long as your account is active and for 5 years after account closure for audit and legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• Security logs: Retained for 2 years to assist investigations in the event of a security incident or pending complaint.
• Support communication data: Customer support conversation records are retained for 2 years to ensure service continuity and complaint resolution.
• Cookie data: Session cookies expire automatically when you close your browser. Persistent cookies expire after a set period, typically between 30 and 365 days.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it can no longer be identified as belonging to you.

8. Your Rights as a User

Under Malaysia's PDPA and the data protection standards we adhere to, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our data protection team at [email protected]. We will process your request within 30 business days from the date of receipt. Some requests may require identity verification first to ensure the security of your data.

9. Child Protection

Sukacuci is a platform dedicated to adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

• Our registration system includes age verification measures designed to detect and prevent sign-ups by minors.
• If we find that data belonging to a child has been collected without parental or guardian consent, we will immediately delete that data and close the associated account.
• If you believe your child has registered on this platform, please contact us immediately at [email protected] so that we can take immediate action.

10. Privacy Policy Amendments

Sukacuci reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle data.

• Any material amendments will be communicated to members via in-platform notifications or email at least 14 days before taking effect.
• The "Updated" date at the top of this document will be revised to reflect the latest version.
• Continued use of the platform after any amendment takes effect will be considered acceptance of the revised terms.
• Previous versions of the Privacy Policy are available upon request through our customer support for your reference.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us:

• Email: [email protected]
• Live Chat: Available 24/7 directly within the sukacuci platform
• Response time: Within 2 business days for general enquiries; 30 days for formal data rights requests

You may also refer to the FAQ us for answers to frequently asked questions, or check Terms and Conditions for more information on using the sukacuci platform.