Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which nakcuci ("we", "us", "the Operator", "nakcuci") collects, uses, stores, discloses and otherwise processes the personal data of individuals ("you", "the User", "the Player") who access or register on the nakcuci platform at nakcuci.cam and its associated interfaces.

By registering an account or continuing to use the platform, you acknowledge that you have read, understood and agreed to the terms of this Policy. This Policy forms part of the broader contractual relationship between you and nakcuci, together with our Terms & Conditions and Responsible Gambling Policy.

nakcuci is committed to respecting and protecting the privacy of all its registered players. We process personal data lawfully, fairly and in a transparent manner, and we collect only the data that is necessary to deliver, operate and continually improve our platform and services.

The following terms carry the meanings below throughout this Policy:

nakcuci collects personal data through several channels in the ordinary course of operating a licensed gaming and betting platform. The categories of data we collect include:

3.1 — Registration & Identity Data

When you create an account, we collect your full name, date of birth, nationality, email address, phone number and chosen username. Where KYC verification is required, we additionally collect copies of identity documents such as a national identification card (MyKad), passport or other government-issued photo identification.

3.2 — Financial Data

To facilitate MYR deposits and withdrawals through channels such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX and cryptocurrency wallets, we collect and securely process payment account details, transaction records and verification information. Card numbers, if applicable, are handled through certified payment processors and are not retained on our own servers in full.

3.3 — Device & Technical Data

We automatically collect technical data including your IP address, browser type and version, operating system, device model, session timestamps, referral URLs and general geolocation derived from IP. This data helps maintain platform security, detect fraud and optimise performance.

3.4 — Activity & Behavioural Data

We record your gameplay history, wagering patterns, bonus usage, login frequency and in-platform communications to enable responsible gambling monitoring, personalised communications and compliance reporting.

nakcuci processes personal data only for legitimate, documented purposes. The primary bases on which we rely are contractual necessity, legal obligation and, where applicable, your consent. Specifically, we use your data to:

• Create and administer your account and verify your identity through KYC procedures;
• Process deposits and withdrawals in MYR through the payment channels you select;
• Detect, prevent and investigate fraud, money laundering, collusion and bonus abuse;
• Provide customer support through live chat, email and in-platform messaging;
• Monitor gameplay for responsible gambling obligations and apply account restrictions where appropriate;
• Send transactional notifications, account alerts and service communications;
• Conduct internal analytics to improve platform performance, game selection and user experience;
• Meet applicable regulatory, tax and anti-money laundering reporting obligations;
• Send optional promotional communications, where you have provided consent, which you may withdraw at any time.

nakcuci does not engage in automated decision-making that produces legal effects for users without human review of the relevant outcome. Where automated processes are used to flag accounts for review, a qualified member of our team will assess the case before any consequential action is taken.

nakcuci does not sell, rent or trade your personal data to third parties for their own commercial gain. We may share personal data with carefully selected third parties only to the extent necessary to deliver our services or comply with applicable legal obligations. These include:

5.1 — Payment Service Providers

MYR payment processors such as those operating Touch 'n Go eWallet, DuitNow and FPX integrations receive transaction data necessary to execute and verify your deposits and withdrawals. These providers operate under their own data protection obligations and contractual agreements with nakcuci.

5.2 — Identity Verification Services

Licensed KYC and anti-money laundering service providers may receive identity document images and validation data to complete regulatory verification. All such providers are bound by confidentiality obligations and data processing agreements.

5.3 — Regulatory and Legal Authorities

Where required by applicable law, court order or regulatory directive, nakcuci may disclose personal data to law enforcement agencies, financial intelligence units or other competent authorities. We will not voluntarily disclose data beyond what is legally required.

5.4 — Technology and Infrastructure Providers

Cloud infrastructure, fraud monitoring and analytics service providers may process limited technical and behavioural data solely to support platform operation. All third-party data processors are required to comply with equivalent data protection standards through contractual agreements with nakcuci.

nakcuci retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax or anti-money laundering obligations.

Account data — including KYC documentation, transaction records and gameplay history — is typically retained for a minimum period of five years following account closure or the last transaction date, in accordance with standard financial services compliance obligations. In some jurisdictions, extended retention periods may apply.

Technical log data and session records are retained for shorter periods, typically up to 24 months, for security monitoring and fraud prevention purposes. Data retained solely on the basis of your consent will be deleted promptly following withdrawal of that consent, unless another lawful retention basis applies.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual.

nakcuci uses cookies and similar tracking technologies to provide a functioning, secure and personalised platform experience. Cookies are small text files placed on your device by our platform. They do not contain executable code and cannot access other files on your device.

7.1 — Essential Cookies

These cookies are strictly necessary for core platform functionality, including session management, security enforcement and load balancing. They cannot be disabled without significantly impairing your ability to use the platform.

7.2 — Analytics Cookies

We use analytics technologies to understand how players interact with the platform — including page views, navigation paths and feature usage. This data is aggregated and used to improve the platform. You may opt out through your browser settings.

7.3 — Preference Cookies

These cookies remember your language preferences, display settings and other customisation choices so that you do not need to reset them on each visit.

Most browsers allow you to view, manage and delete cookies through their privacy or security settings. Disabling all cookies will affect platform functionality. For further guidance on managing cookies, consult your browser's support documentation.

nakcuci implements robust technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss, alteration or destruction. Our primary security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encrypted storage for sensitive data including identity documents and payment records;
• Strict internal access controls limiting data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication requirements for platform administration access;
• Regular security audits, penetration testing and vulnerability assessments conducted by qualified third parties;
• Incident response procedures with defined timelines for breach detection, containment and notification.

While nakcuci applies industry-standard security measures, no system can guarantee absolute protection against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and any relevant regulatory authorities in accordance with applicable requirements.

Subject to applicable legal obligations and limitations, you hold the following rights in respect of your personal data held by nakcuci:

9.1 — Right of Access

You may request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe following identity verification and do not charge a fee for standard access requests.

9.2 — Right to Rectification

Where personal data held by nakcuci is inaccurate or incomplete, you may request that we correct or update it. Some rectification requests — such as name changes — may require documentary evidence before being actioned.

9.3 — Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where processing is unlawful. Note that nakcuci may be legally required to retain certain data (such as transaction records and KYC documentation) for compliance periods even following account closure.

9.4 — Right to Restrict Processing

You may request that we limit processing of your personal data to storage only in specific circumstances — for example, while a data accuracy dispute is being resolved.

9.5 — Right to Object

You may object to our processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. We will assess and respond to such objections promptly.

9.6 — How to Exercise Your Rights

To exercise any of the above rights, contact our support team via live chat or by email at [email protected] (plain text — not a link). We may need to verify your identity before processing requests. We aim to respond within 30 days, or sooner where operationally possible.

nakcuci does not knowingly collect personal data from individuals below the age of 21. Our platform is strictly for adults aged 21 and above. Registration by minors is prohibited, and any account identified as having been opened by an individual under 21 will be permanently closed.

Where nakcuci becomes aware that personal data has been collected from an individual under the minimum age, that data will be promptly deleted from our systems without further retention, unless applicable legal or regulatory obligations require temporary retention for reporting purposes.

nakcuci reserves the right to update, revise or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements or platform features. The revised Policy will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect how we process your personal data or reduce your rights — we will endeavour to provide reasonable advance notice via email or a prominent in-platform notification before the revised Policy takes effect.

Continued use of the platform following publication of a revised Policy constitutes your acceptance of those changes. If you do not accept the revised Policy, you should cease use of the platform and contact us to request account closure. We encourage you to review this page periodically to stay informed.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a complaint about how nakcuci processes your personal data, please reach us through any of the following channels:

• Email: [email protected] — displayed as plain text; not a clickable link
• Live Chat: Available 24/7 via the platform interface
• Support Hours (Live Agent): 9AM – 1AM, Malaysia Time (MYT), daily

For privacy-related requests, please include your registered email address and a brief description of your request so we can verify your identity and respond efficiently. We aim to acknowledge all privacy-related requests within two business days and to resolve them within 30 calendar days where operationally possible.

For information about your gambling account, bonus terms or general enquiries, please also refer to our FAQ page or our Terms & Conditions.