1 Introduction
This Privacy Policy ("Policy") issued by Cucuflix ("the Company", "we", "us", "our") and applies to all personal data collected from users ("Player", "User", "you") who access or use the Cucuflix website atcucuflix.cam and its associated gaming services, including online casino, sports betting, live casino, lottery, and all related features (collectively, "the Platform").
We are committed to processing your personal data responsibly, transparently, and in accordance with applicable international data protection standards. This Policy explains what data we collect, the purposes for which we use it, your legal rights in respect of that data, and how to exercise those rights.
By registering an account on the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
2 Definitions
For the purpose of this Privacy Policy, the following terms shall have the meanings assigned below:
- "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, mobile number, payment details, IP address, or any combination of identifiers that could reasonably be used to identify you.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, Cucuflix.
- "Data Processor" means any third party that processes personal data on behalf of Cucuflix under a data processing agreement.
- "KYC" (Know Your Customer) means the identity and age verification process required to comply with anti-money laundering regulations and responsible gambling obligations.
- "Cookie" means a small text file placed on your device by the Platform to support its functionality, security, and analytics.
- "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
3 Data Controller
Cucuflix acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we determine the purposes and means by which your personal data is processed and are responsible for ensuring that such processing complies with applicable data protection principles.
Cucuflix operates the Platform under applicable international gaming and data protection regulations. Where we engage third-party Data Processors — such as payment service providers, game software suppliers, or analytics platforms — we do so under formal data processing agreements that impose binding data protection obligations consistent with this Policy.
4 Data We Collect
Cucuflix collects personal data through multiple channels. The categories of data we collect, and the contexts in which they arise, are described below.
4.1 Data You Provide Directly
- Full legal name and date of birth (for account registration and age verification).
- Email address and Malaysian mobile number.
- Residential address (for KYC and identity verification).
- Government-issued identity document details (National Registration Identity Card / passport number) for KYC compliance.
- Payment information: e-wallet account identifiers (Touch 'n Go, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, RHB, Hong Leong), and cryptocurrency wallet addresses where applicable.
- Communications you send to our support team via live chat or email.
4.2 Data Collected Automatically
- IP address and approximate geolocation (to enforce jurisdictional access controls).
- Device type, operating system, browser version, and screen resolution.
- Session data: login timestamps, pages visited, games played, betting history, and session duration.
- Cookie and tracking data (see Section 8).
4.3 Data from Third Parties
- Identity verification results from KYC service providers.
- Transaction confirmation data from payment processors and banking partners.
- Fraud risk scores from third-party fraud detection services.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, DOB, NRIC, passport | Account registration, KYC, age verification |
| Contact Data | Email, mobile number | Account communication, support |
| Financial Data | Bank account, e-wallet ID | Deposits, withdrawals, AML compliance |
| Technical Data | IP address, device info | Security, fraud prevention, access control |
| Usage Data | Betting history, session logs | Platform improvement, responsible gambling monitoring |
| Communications | Support chat transcripts | Query resolution, quality assurance |
5 Legal Basis for Processing
Cucuflix processes your personal data on the following legal bases, depending on the specific purpose of the processing:
- Contractual Necessity: Processing required to perform the contract between you and Cucuflix — including account management, transaction processing, and customer support.
- Legal Obligation: Processing required for compliance with applicable legal requirements, including anti-money laundering (AML) obligations, KYC verification, and responsible gambling regulations.
- Legitimate Interests: Processing necessary for Cucuflix's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights.
- Consent: Processing based on your specific, freely given consent — for example, receipt of marketing communications or promotional offers. You may withdraw consent at any time without prejudice to the lawfulness of prior processing.
6 How We Use Your Data
We use the personal data we collect for the following specific purposes:
- Account Management: To create, maintain, and secure your Cucuflix account, including verifying your identity and age (21+) in compliance with our eligibility requirements.
- Transaction Processing: To process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank.
- Regulatory Compliance: To fulfil obligations under applicable anti-money laundering laws, gaming regulations, and tax reporting requirements.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- Customer Support: To respond to your queries, complaints, and support requests via live chat or email.
- Responsible Gambling: To monitor your gaming activity for signs of problem gambling behaviour and to administer self-exclusion, deposit limits, and other responsible gambling tools upon your request.
- Platform Improvement: To analyse aggregated usage data for the purpose of improving Platform features, game offerings, and user experience.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent, and subject to your right to opt out at any time.
7 Data Sharing & Disclosure
Cucuflix does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data protection obligations:
- Payment Service Providers: Malaysian e-wallet operators, banks, and payment gateway providers necessary to process deposits and withdrawals. These providers operate under their own published privacy policies and applicable Malaysian financial regulations.
- Identity Verification (KYC) Providers: Third-party services engaged to verify your identity, age, and address as required for regulatory compliance.
- Game Software Providers: Licensed game developers and live casino stream operators whose software is integrated into the Platform. These providers may collect limited technical usage data under their own data processing terms.
- Fraud Detection & Security Services: Third-party platforms used to identify suspicious activity, prevent money laundering, and protect the integrity of the Platform.
- Regulatory Authorities & Law Enforcement: Where required by law, court order, or instruction from a competent regulatory authority, we may disclose personal data without prior notice to you.
- Professional Advisors: Legal counsel, auditors, and accountants where disclosure is necessary in the context of a formal professional engagement.
8 Cookies & Tracking Technologies
Cucuflix uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and collect analytics data for service improvement purposes.
The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting Platform functionality.
- Functional Cookies: Remember your preferences such as language settings and game display options to personalise your experience across sessions.
- Analytics Cookies: Collect aggregated, anonymised data on how users interact with the Platform — used exclusively to improve features and identify technical issues. We do not use this data for individual user profiling.
- Security Cookies: Used to detect and prevent fraudulent access, multi-accounting, and automated bot activity on the Platform.
Most browsers allow you to manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality, including your ability to log in or maintain an active session. Cucuflix does not use third-party advertising cookies or cross-site tracking technologies.
9 Data Security
Cucuflix implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- AES-256 encryption for sensitive data stored at rest, including payment details and identity documents.
- Multi-factor authentication (MFA) options for player accounts.
- Regular security penetration testing and vulnerability assessments conducted by independent third parties.
- Strict internal access controls limiting data access to authorised personnel on a need-to-know basis.
- 24/7 transaction monitoring and anomaly detection systems to identify and respond to suspicious activity.
In the event of a personal data breach that is likely to result in a high risk to your rights, Cucuflix will notify affected individuals without undue delay in accordance with applicable data protection regulations.
10 Data Retention
Cucuflix retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. The following general retention periods apply:
- Account Data (Identity & Contact): Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
- Transaction Records (Financial Data): Retained for a minimum of seven (7) years to comply with applicable financial record-keeping obligations.
- KYC Documentation: Retained for a minimum of five (5) years from the date of collection or date of account closure, whichever is later.
- Support Communications: Retained for up to three (3) years for quality assurance and dispute resolution purposes.
- Analytics Data: Retained in aggregated, anonymised form indefinitely for Platform improvement purposes. No individual-level analytics data is retained beyond24 months.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures.
11 Your Rights
Subject to applicable law and certain conditions, you have the following rights in relation to the personal data Cucuflix holds about you:
- Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data. Account holders can update basic contact information directly via their account settings; for other corrections, contact our support team.
- Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that erasure requests cannot be fulfilled where retention is required by law.
- Right to Restrict Processing: You may request that we temporarily restrict the processing of your data in specific circumstances — for example, while a data accuracy dispute is being resolved.
- Right to Data Portability: Where processing is based on your consent or a contractual obligation, you may request a structured, machine-readable copy of your personal data.
- Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
To exercise any of the above rights, please contact our support team via live chat or at [email protected]. We will respond to all verifiable requests within thirty (30) days.
12 International Data Transfers
As an internationally operating platform, Cucuflix may transfer your personal data to, and store it in, jurisdictions outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to provide a level of protection equivalent to applicable data protection standards.
These safeguards may include standard contractual clauses approved by relevant regulatory authorities, adequacy decisions, or other legally recognised transfer mechanisms. Our third-party game software providers and cloud hosting partners who process data internationally are bound by contractual data protection obligations consistent with this Policy.
We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate contractual safeguards.
13 Minors
Age verification is a mandatory step in the Cucuflix account registration process. If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the associated account and delete the relevant data.
If you are a parent or guardian and believe that a minor has accessed the Platform or submitted personal data, please contact our support team immediately via live chat or email so that we may take prompt remedial action.
14 Changes to This Policy
Cucuflix reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Revised versions of this Policy will be published on this page with an updated "Last Updated" date.
Where amendments are material — for example, where we introduce a new purpose for processing or a new category of data sharing — we will notify registered players via email or in-platform notification at least fourteen (14) days before the changes take effect, where practicable.
Your continued use of the Platform following the effective date of any amendment constitutes acknowledgement of the updated Policy. We encourage you to review this page periodically to remain informed of how Cucuflix protects your personal data.
15 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which Cucuflix processes your personal data, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the Platform. This is the fastest way to reach our support and data protection team.
- Email: [email protected]
We will acknowledge your privacy-related query within two (2) business days and aim to resolve all data rights requests within thirty (30) days of receipt of a verifiable request.