Privacy Policy

This Privacy Policy ("Policy") describes how amoicuci ("we", "us", "our", or "the Company") collects, processes, stores, and protects personal data submitted by or gathered from users ("you", "User", or "Player") of the amoicuci platform, accessible at https://amoicuci.cam.

amoicuci is committed to handling your personal information with transparency, integrity, and due care. We recognise that the trust you place in us when sharing your data is a privilege, and we take our corresponding obligations seriously. This Policy has been drafted in accordance with applicable international data protection standards and principles.

By registering an account on the amoicuci platform or by continuing to use our services, you acknowledge that you have read, understood, and consent to the collection and use of your personal data as described in this Policy. This Policy should be read alongside our Terms & Conditions, which together form the full legal framework governing your relationship with amoicuci.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data. This includes name, email address, date of birth, national identity card number, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" — amoicuci, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party organisation that processes personal data on behalf of amoicuci under written contractual obligations and subject to this Policy's protections.
• "Data Subject" — the individual whose personal data is being processed; in the context of this Platform, this means you, the registered Player or site visitor.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "Cookie" — a small text file placed on your device by the amoicuci platform to facilitate session management, analytics, and personalisation features.
• "KYC" — Know Your Customer — the identity and address verification process conducted in accordance with applicable anti-money laundering and regulatory obligations.

amoicuci collects personal data through several channels during your interaction with the Platform. The categories of data we collect and the circumstances under which they are gathered are set out below:

3.1 Registration Data

When you create an account on the amoicuci platform, we collect the information you provide directly, including: full legal name, date of birth, email address, phone number, country of residence, city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam), preferred currency (MYR), and your chosen username and password (passwords are stored in encrypted form and are never visible to our staff).

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your eligibility to use the Platform, we may collect copies of government-issued identification documents (such as your Malaysian MyKad, passport, or driving licence), proof of address documents (such as utility bills or bank statements from Maybank, CIMB, Public Bank, or Hong Leong), and in some circumstances, a selfie or live photograph for biometric verification purposes.

3.3 Financial & Payment Data

When you make a deposit or request a withdrawal, we collect payment method details necessary to process your transaction. This may include bank account numbers, Touch 'n Go eWallet identifiers, GrabPay account references, DuitNow transfer IDs, FPX session tokens, or partial card details. Full payment card numbers are processed exclusively by our PCI-DSS-compliant payment gateway partners and are never stored on amoicuci servers.

3.4 Transactional & Gaming Data

We maintain detailed records of all transactions, wagers, game sessions, bonus claims, and withdrawals conducted through your account. This data is essential for dispute resolution, regulatory compliance, responsible gambling monitoring, and the integrity of our gaming operations.

3.5 Technical & Device Data

Our platform automatically collects certain technical data when you access the site, including your IP address, browser type and version, operating system, device model, screen resolution, time zone, referring URL, pages visited, session duration, and interaction data such as clicks and scroll depth. This information is used for fraud detection, security monitoring, and platform performance optimisation.

3.6 Communications Data

If you contact our customer support team via live chat, email ([email protected]), or any other channel, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome, for quality assurance and dispute management purposes.

amoicuci processes your personal data only for clearly defined, legitimate purposes. The table below sets out the primary purposes for which we process your data and the categories of data involved in each activity:

amoicuci processes personal data only where a valid legal basis exists. Depending on the specific processing activity, we rely on one or more of the following grounds:

• Contractual Necessity: Processing is necessary to fulfil our obligations under the Terms & Conditions you accepted when registering your account — for example, processing deposits and withdrawals, managing your gaming activity, and providing customer support.
• Legal Obligation: Certain processing activities are required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and gaming licence conditions. We cannot operate lawfully without conducting these processes.
• Legitimate Interests: We process some data where it serves a legitimate business interest that does not override your fundamental rights — for example, fraud prevention, platform security monitoring, and aggregated analytics to improve our services.
• Consent: For optional processing activities such as marketing communications, personalised promotions, and the use of non-essential cookies, we rely on your explicit and freely given consent. You may withdraw consent at any time without consequence to your service access.

amoicuci does not sell, rent, or trade your personal data to any third party for their independent commercial use. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it to a standard consistent with this Policy:

6.1 Payment Processing Partners

To process your financial transactions, we share relevant payment and identity data with our licensed payment gateway providers, which include processors facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank PBe, and Hong Leong Connect transactions. These partners are PCI-DSS compliant and operate under strict data processing agreements.

6.2 Identity Verification Providers

KYC verification is conducted with the assistance of accredited third-party identity verification services. Your identity documents and associated data are transmitted to these providers via encrypted channels solely for the purpose of verifying your identity and are not retained by those providers beyond their contractual obligations to us.

6.3 Gaming Software Providers

The third-party game studios and live dealer operators whose content is accessible via the amoicuci platform may receive limited technical and session data necessary to deliver their games. These providers do not receive your full identity or financial profile and are bound by data protection obligations in their agreements with us.

6.4 Legal & Regulatory Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other competent public authorities where required to do so by applicable law, valid legal process, or in order to protect the rights and safety of amoicuci, its users, or the public. We will inform you of any such disclosure where we are legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of amoicuci's business, your personal data may be transferred to the relevant successor entity, subject to the successor being bound by obligations equivalent to those set out in this Policy.

The amoicuci platform uses cookies and similar tracking technologies to deliver, maintain, and improve our services. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled without preventing core functionality. They include session management cookies that keep you logged in, security tokens that protect your account from CSRF attacks, and cookies that remember your language preference. No consent is required for these cookies.
• Performance & Analytics Cookies: These cookies collect anonymised data about how users interact with the Platform — page views, click paths, session durations, and error encounters. This information is used to improve Platform performance and user experience. These cookies are only set with your consent.
• Functional Cookies: These remember your preferences, such as your preferred deposit method (e.g., DuitNow or FPX), display settings, and previously viewed content, to provide a more personalised experience. Consent-based.
• Fraud Prevention & Security Cookies: These cookies help us identify suspicious behaviour, detect bot activity, and protect the integrity of our gaming operations. They are set on a strictly necessary basis.

You can manage your cookie preferences through the cookie settings panel accessible on the Platform, or through your browser's built-in privacy controls. Please note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled via consent mechanisms as they are required for secure and functional service delivery.

amoicuci retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our regulatory obligations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the account's active life plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable AML regulations.
• Financial transaction records: Retained for a minimum of seven (7) years in line with standard financial record-keeping obligations and potential audit requirements.
• Gaming session logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an active or potential legal dispute.
• Technical and device data: Retained for up to twelve (12) months in raw form; anonymised and aggregated thereafter for analytics purposes with no individual-level retention.
• Marketing consent records: Retained for the duration of active consent plus three (3) years as evidence of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

amoicuci employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• TLS Encryption: All data transmitted between your browser and the amoicuci platform is encrypted using TLS 1.2 or higher, protecting your information in transit from interception.
• Data Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using industry-standard AES-256 encryption.
• Password Security: User passwords are hashed using a strong, adaptive hashing algorithm. Plaintext passwords are never stored or accessible to any member of our staff.
• Access Controls: Access to personal data is strictly limited to authorised amoicuci personnel and contracted service providers who have a demonstrated need to access the data for legitimate business purposes. All internal access is logged and audited.
• Fraud & Intrusion Detection: Our platform employs real-time monitoring systems that detect and alert on anomalous activity, including unusual login patterns, atypical transaction volumes, and potential bot behaviour.
• Regular Security Audits: We engage independent security professionals to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.

As a data subject, you hold a set of rights with respect to your personal data held by amoicuci. We are committed to honouring these rights promptly and transparently. Your rights are summarised below:

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 days. In complex cases we may extend this period by up to a further 30 days, with prior notification to you.

Please note that certain rights are subject to limitations where our processing is based on legal obligations (for example, AML record-keeping requirements). In such cases, we will clearly explain any limitations on your rights and the reason for them.

The amoicuci platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Our registration process includes an age declaration requirement, and we conduct KYC verification to confirm that all users meet the minimum age threshold before enabling full account functionality.

If we become aware — through our KYC process, a parental report, or any other means — that an individual under the age of 21 has registered an account or provided personal data on our platform, we will immediately suspend that account, delete the associated personal data to the fullest extent permitted by law, and refund any deposited funds to the source payment instrument.

amoicuci operates globally and may transfer your personal data to servers, service providers, or affiliated entities located outside Malaysia. Some of our third-party payment processors, cloud infrastructure providers, and KYC verification partners operate in jurisdictions that may have different data protection laws than those applicable in Malaysia.

Where we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. We do not transfer personal data to jurisdictions that lack adequate protections without implementing compensating contractual or technical controls.

By using the amoicuci platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia for the purposes described in this Policy, subject at all times to the protections described above.

amoicuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. Any material changes will be communicated to registered users via a platform notification or email to your registered address prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the amoicuci platform following publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how amoicuci handles your personal information, please reach out to us through any of the channels below. We take all privacy enquiries seriously and will respond promptly.

For matters relating to responsible gambling, account limits, or self-exclusion, please visit our Responsible Gambling page. For questions about your account's terms of service, please refer to our Terms & Conditions.