1. Home
  2. Privacy Policy
Updated: January 2026 — Malaysia PDPA 2010

Privacy Policy m2cuci — Malaysian Player Data Protection

M2cuci takes our responsibility to protect your personal data seriously. This Privacy Policy clearly explains the types of data we collect, how it is used, how we store and protect it, and your rights as a player under Malaysia's Personal Data Protection Act 2010 (PDPA).

Register a Free Account Terms & Conditions
Privacy Policy Summary
Document Version v3.1 — January 2026
Legislation Malaysia's PDPA 2010
Data Encryption 256-bit SSL
Total Sections 11 Sections
Data Breach Records Zero Since 2019
SSL 256
Bit Encryption Level
0
Data Breaches Reported
PDPA
Malaysian Legal Compliance
24/7
Active Security Monitoring
Our Privacy Commitment

M2cuci's Six Data Protection Principles

Before reading the full policy, here are the six core principles that define how m2cuci handles the personal data of every Malaysian player.

Minimum Collection
m2cuci only collects data that is genuinely necessary for the platform's operational purposes. We do not collect excessive or irrelevant information — every piece of data we request has a clear and specific reason behind it.
Clear Purpose
Your data is used solely for the purposes explicitly stated in this Privacy Policy. m2cuci will not use your data for any other purpose without first obtaining your fresh consent.
Bank-Grade Security
All data stored by m2cuci is protected with 256-bit SSL encryption — the same level of security used by major banks in Malaysia. Our security monitoring system operates around the clock to detect any cyber threats.
Control in Your Hands
You have the right to access, correct, update, or request the deletion of your personal data at any time. m2cuci makes this easy through responsive 24-hour customer support channels available in Bahasa Melayu.
No Data Sales
m2cuci has never sold, rented, or transferred your personal data to any third party for marketing or commercial purposes, and we never will. Your data is not a commodity — it is a trust we take seriously.
Malaysia PDPA Compliance
All of m2cuci's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular internal compliance reviews to ensure we remain aligned with the latest legal requirements.
Contents
Updated: January 2026
Important Note

This Privacy Policy explains how m2cuci ("we", "platform") collects, uses, stores, and protects your personal data as a platform user. By registering for or using the m2cuci platform, you agree to the data handling practices set out in this document. Please read it carefully and contact us at support@m2cuci.click if you have any enquiries.

1. Introduction

M2cuci is an online casino and Sports Betting platform operating in Malaysia, designed exclusively for adult Malaysian players. To run the platform effectively, we need to collect and process certain personal data from our users in order to deliver a secure, efficient service that complies with all applicable legal requirements.

This Privacy Policy has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised best practices in data protection. We are committed to ensuring every m2cuci player can play with full confidence that their personal information is in responsible hands.

Since m2cuci began operations in 2019, we have never experienced any data breach involving players' personal information. This clean record is no accident — it is the result of continuous investment in cybersecurity infrastructure and rigorous data handling practices at every level of m2cuci's operations.

2. Personal Data We Collect

M2cuci only collects data necessary for legitimate platform operations. Below are the categories of data we collect:

Data Category Data Examples Collection Methods
Identity Data Full name, date of birth, identification card number (for KYC) Registration forms, KYC process
Contact Data Malaysian phone number, email address Registration form
Financial Data Payment methods (e-wallet, bank), deposit/withdrawal transaction records Deposit and withdrawal process
Gaming Data Betting history, games played, session duration, wins/losses In-platform activity
Technical Data IP address, device type, operating system, web browser, session logs Automatically collected during platform use
Communication Data Customer support chat logs, emails to our team Interactions with the support team

m2cuci does not directly collect credit card numbers or sensitive banking information. All financial transactions are processed through authorised third-party payment processors such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX gateways — we receive only transaction confirmations, not your raw financial details.

3. Purpose of Data Use

M2cuci uses your personal data solely for the following legitimate purposes necessary for the operation of the platform:

  • Identity and eligibility verification: To verify that you meet the minimum age requirement of 18 and are not on any self-exclusion list submitted to us.
  • Account management: To create, manage, and protect your account on the m2cuci platform, including secure login processes and detection of suspicious activity.
  • Transaction processing: To process deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and to handle your withdrawal requests securely and accurately.
  • Provision of gaming services: To allow you to access and play all games on the m2cuci platform, including slots, Live Casino, progressive jackpots and Sports Betting.
  • Customer support: To identify you and assist in resolving any issues or enquiries you raise with the m2cuci support team.
  • Legal compliance: To comply with applicable Malaysian legal requirements, including anti-money laundering (AML) and KYC obligations.
  • Platform security: To detect and prevent fraud, multi-account usage, automated bots, and other harmful activities that could compromise the security of the platform and other players.
  • Service improvement: To analyse aggregated usage patterns (without identifying any individual user) for the purpose of improving the experience on m2cuci.
  • Relevant communications: To send you important account-related information, transaction confirmations, security notifications and, with your consent, promotional content from m2cuci.

4. Sharing Data With Third Parties

M2cuci does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. However, in the course of legitimate platform operations, we may share certain data with the following parties:

  • Authorised payment processors: Payment gateways that process your deposit and withdrawal transactions — including Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and banks participating in the FPX network. Only the minimum data required to complete a transaction is shared.
  • Licensed game providers: Companies such as Pragmatic Play, NetEnt, Microgaming, Evolution and other providers that supply games to m2cuci may receive anonymised game identifiers required for game result verification and RTP audits.
  • IT and security service providers: Companies that provide server infrastructure, cloud services and cybersecurity solutions to m2cuci, bound by strict confidentiality agreements.
  • Legal authorities: The Royal Malaysia Police, Bank Negara Malaysia, or other regulatory authorities where we are legally required to do so under applicable Malaysian law.

Our Commitment: All third parties we work with are bound by data protection agreements that require them to handle your data with no less protection than we provide. We do not permit third parties to use your data for their own marketing purposes.

5. Data Storage & Security

M2cuci implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

  • In-transit encryption: All data transmitted between your device and m2cuci's servers is protected with 256-bit TLS/SSL encryption. You can verify this via the padlock icon in your browser's address bar.
  • Encryption at rest: Sensitive data stored in m2cuci's database, including passwords and financial information, is encrypted using industry-recognised encryption algorithms.
  • Strict access controls: Only m2cuci staff who require access to specific data to perform their job responsibilities are granted permission to do so. All access is logged and continuously monitored.
  • 24/7 Security Monitoring: Our cybersecurity threat monitoring system operates around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
  • Secure data backup: Your data is regularly backed up to a secure, separate location to ensure recovery is possible in the event of any unexpected technical incident.

Data retention periods are as follows: active account records are retained for as long as your account remains active on m2cuci. After an account is closed, data is retained for a minimum of 5 years for legal compliance and audit purposes. Technical log data is retained for 90 days, and Live Casino session recordings are retained for 90 days for dispute resolution purposes.

6. Cookies & Tracking Technologies

M2cuci uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit m2cuci.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, game session management and account security. These cookies cannot be disabled as they are necessary for the platform to function properly.
  • Preference Cookies: Saves your preferences such as language, theme, and display settings so you do not have to reconfigure them every time you log in.
  • Analytics Cookies: Helps us understand how players interact with the platform — which pages are most frequently visited, and where players encounter difficulties — for improvement purposes. This data is collected in aggregate and does not identify individuals.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the m2cuci platform and your overall experience.

m2cuci does not use third-party cookies for advertising or cross-platform marketing purposes. We do not track your online activity outside of the m2cuci platform.

7. Financial Transaction Data

As m2cuci involves real financial transactions, we maintain a strict policy on the handling of players' financial data. This is among the most critical aspects of our Privacy Policy.

When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), we receive transaction confirmation details from the relevant payment processor — including the transaction reference number, amount, and status. We never see or store your e-wallet password or PIN.

Transaction records — including deposits, withdrawals, winnings, and losses — are retained for a minimum of 5 years for the following purposes:

  • Resolution of any transaction disputes that may arise
  • Compliance with reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001
  • Internal and external audit requirements related to platform operations
  • Provision of account statements to Members who request a review of their transaction history

Important: m2cuci does not directly store credit or debit card information. If you believe someone has used your payment method without authorisation to make a deposit at m2cuci, please contact us immediately at support@m2cuci.click and we will cooperate fully with the relevant authorities.

8. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with regard to the personal data we hold about you:

9. Protection of Children's Data

The m2cuci platform is strictly for adults aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

During the registration process, we require date of birth verification and, where necessary, identity documents to confirm that all players meet the minimum age requirement. If we determine that a player is underage — whether during or after registration — the account will be closed immediately and all related data will be deleted.

If you are a parent or guardian who has discovered that your underage child has registered an account at m2cuci, please contact us immediately at support@m2cuci.click and we will take the appropriate action without delay.

m2cuci encourages parents and guardians to use parental control software and to ensure their children do not have access to the online casino platform. Responsible play is a shared responsibility.

10. Cross-Border Data Transfers

In operating the platform, certain data may be processed by service providers operating outside Malaysia — for example, cloud infrastructure providers or international game providers such as Pragmatic Play and Evolution, which are headquartered overseas.

In all such cases, m2cuci ensures that:

  • Data transfers are only carried out where genuinely necessary for legitimate service purposes
  • Data recipients outside Malaysia are bound by data processing agreements that require them to provide a level of protection equivalent to or exceeding that set out under Malaysia's PDPA
  • Only the minimum necessary data is transferred — we do not transfer more than what is required for the specific purpose
  • All cross-border data transfers are recorded and auditable

If you would like to know more about cross-border data transfers related to your account, please contact our privacy team at support@m2cuci.click.

11. Privacy Policy Amendments

M2cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or player feedback. Whenever we make a significant amendment, we will:

  • Updating the "Updated" date at the top of this page
  • Display notifications within the platform at your next login
  • Sending a notification via your registered phone number or email if the amendment materially affects your rights

Your continued use of the m2cuci platform after any amendments take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically — at least once every three months — to stay informed about how we handle your data.

The current version is version 3.1, updated in January 2026. If you have any questions, concerns or complaints regarding this Privacy Policy, please do not hesitate to get in touch with us.

For privacy inquiries: support@m2cuci.click — The m2cuci support team will respond within 1–3 business days in Bahasa Melayu.

Your Rights

Your Data Protection Rights at m2cuci

Under Malaysia's PDPA 2010 and m2cuci's commitment to privacy, you have six important rights that you may exercise at any time.

Right to Access
You have the right to request a copy of all personal data m2cuci holds about you — including your transaction history, account information, and game logs. Requests can be submitted via live chat or by emailing support@m2cuci.click and will be processed within 14 business days.
Right to Rectification
If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Log in to your account and update your profile information directly, or contact our support team for assistance with corrections that require document verification.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for the purpose it was collected, or when you withdraw your consent. Please note that certain data must be retained for a specified period to comply with Malaysian legal requirements.
Right to Object
You have the right to object to the processing of your data for certain purposes — in particular, marketing communications. You may unsubscribe from m2cuci promotional emails at any time via the unsubscribe link in any email, or by contacting our support team.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider should you choose to do so. Contact us to request an export of your data.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your data — for example, while you are disputing the accuracy of the data or awaiting the outcome of an objection request. Please contact us to discuss your specific situation.
How to Exercise Your Rights

To exercise any of the rights above, contact the m2cuci support team via live chat within the platform or by emailing support@m2cuci.click. State the right you wish to exercise along with your account information for identity verification. We will process your request within 14 business days.

Data Security

How m2cuci Protects Your Data Every Day

Data protection is not a one-time setup — it is an ongoing process that demands daily vigilance. At m2cuci, we continuously invest in cybersecurity and staff training to ensure your data stays protected at all times.

Below are the data security controls we have implemented at m2cuci — benchmarked against internationally recognised security standards:

Active Data Encryption 100%
Staff Access Controls 97%
Real-Time Threat Monitoring 100%
Secure Data Backup 99%
Malaysia PDPA Compliance 100%
m2cuci's Data Protection Layers
🔐
Layer 1: SSL/TLS 256-bit
All communications between your device and our servers are fully encrypted.
🏛️
Layer 2: Database Encryption
Sensitive data is re-encrypted at the database storage level.
🛡️
Layer 3: Firewall & Intrusion Detection
Active 24/7 WAF and IDS systems block any unauthorised access attempts.
👥
Layer 4: Role-Based Access Control
Staff can only access the data required for their role — nothing more.
🔍
Layer 5: Audit & Activity Logs
All access to sensitive data is logged and auditable for full accountability.
FAQ

Questions About Data Privacy at m2cuci

Answers to the most frequently asked questions from Malaysian players about data protection and privacy on the m2cuci platform.

Yes, it is safe. The KYC (Know Your Customer) process is a standard compliance procedure required under Malaysian law, specifically under anti-money laundering requirements. Identity documents you submit are stored with 256-bit SSL encryption and can only be accessed by authorised staff strictly for verification purposes. Your MyKad image will not be shared with any third party for commercial purposes. Once verification is complete, only the verification record is retained — your original document image is not kept long-term.

m2cuci only sends marketing communications to players who have given explicit consent at registration or have opted in to receive such communications. You may opt out of promotional emails at any time via the unsubscribe link included in every promotional email, or by contacting our support team. However, we will continue to send important account-related communications such as transaction confirmations, security notifications and updates to our terms — these are not marketing communications and cannot be unsubscribed from, as they form part of the service you have signed up for.

When you close your m2cuci account, we will delete removable data from our active systems within 30 days. However, certain data must be retained for a specified period under Malaysian legal requirements — financial transaction records are kept for a minimum of 5 years under the Anti-Money Laundering Act, and security logs are retained for 90 days. This data is held in secure archives and is not accessible for day-to-day operational purposes. If you wish to make a more specific data deletion request, please contact support@m2cuci.click to discuss further.

m2cuci enforces a strict role-based access control system. This means each staff member can only access the data necessary to carry out their specific job responsibilities. For example, customer support staff can view basic account information and transaction history needed to assist you, but cannot access security records or internal technical data. The finance team can process transactions but cannot access detailed game logs. All access to sensitive data is automatically logged and monitored by our internal security officers.
View All FAQs
Related Documents

Other Policy Pages You Should Know About

In addition to this Privacy Policy, the following documents are also important for a full understanding of your rights and responsibilities at m2cuci.

Terms & Conditions
The complete terms of use for the m2cuci platform — covering deposit and withdrawal rules, bonuses, gameplay and prohibited conduct. This is a binding document between you and m2cuci.
Responsible Gaming
How to use responsible gaming tools such as deposit limits, loss limits and self-exclusion available at m2cuci. Includes links to professional support resources for players who need assistance.
About Us
Get to know m2cuci better — our founding story, mission and core values, leadership team, and our ongoing commitment to Malaysian players since 2019.
Responsible Gaming at m2cuci

M2cuci is committed to responsible and safe gaming. Set deposit limits, loss limits, and session time limits from within your account. If you need support with problem gambling, visit the Responsible Gaming us for appropriate resources and support. The m2cuci platform is intended for adults aged 18 and above only.

Your Data Is Safe With Us

Play With Confidence at m2cuci — Malaysia's Trusted Online Casino

With 256-bit SSL data protection, full PDPA compliance, and a zero data breach record since 2019, m2cuci is the Malaysian online casino platform you can trust completely. Register for free today and enjoy a safe, enjoyable gaming experience.

Register for Free Now Login
Touch 'n Go GrabPay DuitNow FPX Boost ShopeePay
Bahasa Melayu