Privacy Policy

This Privacy Policy ("Policy") is published by cuan128 ("the Platform", "we", "us", "our") in connection with the website located at https://cuan128.cam and all associated digital services, games, promotional activities, and customer support channels (collectively, "the Platform").

We understand that privacy matters deeply to our users — particularly Malaysian players who entrust us with personal and financial information in the course of using our online casino and sports betting services. This Policy describes how cuan128 collects, uses, stores, shares, and protects personal data submitted by or obtained in connection with registered users, prospective users, and visitors to our website.

By accessing cuan128.cam, registering an account, making a deposit, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and cuan128.

For the purposes of this Policy, the following terms carry the meanings set out below:

cuan128 collects the minimum personal data necessary to operate the Platform safely, comply with our regulatory obligations, and deliver the best possible experience to our users. The categories of data we collect are described below.

cuan128 processes personal data for the following specific, documented purposes:

1. Account Management: To create, verify, maintain, and administer your registered account on the Platform, including processing login credentials, updating account settings, and managing your balance in Malaysian Ringgit (MYR).
2. Transaction Processing: To process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, DuitNow QR, and USDT TRC20, and to maintain accurate financial records for each transaction.
3. Identity & Age Verification (KYC): To verify that users are aged 21 or above and to comply with applicable anti-money-laundering (AML) and counter-terrorist financing (CTF) obligations under the terms of our international gaming licence.
4. Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide technical assistance through our live chat, email, and Telegram support channels.
5. Platform Improvement: To analyse user behaviour, session data, and gameplay patterns in aggregate form to improve game selection, interface design, load times, and overall user experience on the Platform.
6. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, bonus exploitation, collusion, money laundering, and other prohibited activities defined in our Terms & Conditions.
7. Marketing & Promotions: To send promotional communications about cuan128 bonuses, events, and new game releases to users who have consented to receive such communications. Users may opt out at any time through account settings or by contacting support.
8. Regulatory Compliance: To fulfil our legal and regulatory obligations under the terms of our international gaming licence, including the retention of transaction records and the reporting of suspicious activity to relevant authorities where legally required.
9. Responsible Gambling: To monitor gaming patterns that may indicate problematic gambling behaviour, administer self-exclusion requests, apply deposit limits, and enforce account restrictions in accordance with our Responsible Gambling policy.

cuan128 processes personal data under the following legal bases, each of which applies to one or more of the processing purposes described in Section 4:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account creation, transaction processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including AML/CTF obligations under our international gaming licence — specifically KYC verification and financial record retention.
• Legitimate Interests: Processing carried out for purposes that serve cuan128's legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, and aggregate analytics for product improvement.
• Consent: Processing carried out based on your explicit consent — specifically, the sending of marketing communications and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cuan128 does not sell, rent, or trade personal data to third parties for commercial purposes. We may disclose personal data to the following categories of recipients only where strictly necessary and under appropriate safeguards:

• Payment Processors: Malaysian and international payment service providers (including the operators of Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, and Public Bank gateways) who process transactions on our behalf and are bound by their own privacy and security obligations.
• KYC & Identity Verification Providers: Third-party identity verification service providers who assist in processing document verification and age checks as part of our KYC obligations.
• Game Content Providers: Licensed game studios and RNG providers whose software powers games offered on the Platform. These providers may receive limited session data for the purpose of game performance monitoring and dispute resolution.
• Regulatory Authorities: Government bodies, financial intelligence units, and law enforcement agencies in any jurisdiction where cuan128 is legally required to disclose information — for example, in response to a lawful order or as part of an AML/CTF reporting obligation.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by cuan128, subject to binding confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cuan128's assets, personal data held by the Platform may be transferred to the successor entity, subject to equivalent data protection commitments.

cuan128 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the Platform, enhance user experience, and analyse usage patterns. Cookies used on the Platform fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, secure login state management, and fraud prevention. These cookies cannot be disabled without impairing core functionality.
• Performance & Analytics Cookies: Used to collect aggregate data on how users interact with the Platform — which pages are visited most, average session duration, and error occurrence rates. This data helps us improve the platform experience. These cookies are activated only with your consent.
• Functionality Cookies: Used to remember your preferences such as language settings, saved payment methods, and notification preferences to deliver a more personalised experience on subsequent visits.
• Marketing Cookies: Used to track engagement with promotional campaigns and to measure the effectiveness of our marketing activities. Activated only with your explicit consent.

You may manage your cookie preferences through your browser settings or through any consent management tool displayed on the Platform. Disabling certain cookies may affect the functionality of parts of the Platform. For more information about managing cookies, consult your browser's help documentation.

cuan128 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply as a general guide:

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

cuan128 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS) encryption on all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal data and hashed storage of authentication credentials using industry-standard algorithms.
• Strict internal access controls ensuring that only authorised personnel with a documented business need can access personal data.
• Regular independent security audits and penetration testing of the Platform's infrastructure.
• Segregation of player funds from operational accounts, ensuring that personal financial data is held in isolated environments.
• Incident response procedures that ensure any personal data breach is assessed, contained, and — where required — reported to affected users and relevant authorities in a timely manner.

Subject to applicable law and the constraints of our legal obligations, cuan128 respects and upholds the following rights in relation to your personal data:

1. Right of Access: You may request confirmation of whether cuan128 holds personal data about you and, if so, a copy of that data along with information about how it is being processed.
2. Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. You may also update some information directly through your Account settings panel.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of personal data held about you in circumstances where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful — subject to overriding legal retention obligations.
4. Right to Restrict Processing: You may request that cuan128 temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
6. Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to other processing based on legitimate interests, subject to cuan128 demonstrating compelling grounds to continue.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team using the contact details in Section 15. We will respond to all valid requests within a reasonable period and in accordance with applicable data protection law. We may request proof of identity before processing certain requests to protect against fraudulent or unauthorised access to personal data.

cuan128 strictly prohibits access to and use of its gambling and betting services by individuals under the age of 21. This minimum age requirement applies to all users regardless of their location.

If you are a parent or guardian and believe that a minor under your care has registered an account on cuan128, please contact our support team immediately. We take such reports very seriously and will act promptly to investigate and close any affected account.

cuan128 operates under an international gaming licence and engages service providers located in various jurisdictions globally. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Malaysia.

Where personal data is transferred internationally, cuan128 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data in a manner consistent with this Policy. Such safeguards may include contractual data processing agreements with recipient entities, adherence to applicable data transfer frameworks, or the implementation of equivalent technical security measures.

By using the Platform and accepting this Policy, you acknowledge and consent to the cross-border transfer of your personal data for the purposes described herein.

The Platform integrates with third-party services including payment gateways, game content providers, analytics platforms, and customer support tools. While cuan128 carefully selects its service partners and requires them to comply with data protection obligations, we are not responsible for the independent privacy practices of these third parties.

cuan128 does not control the data collection or processing activities of third-party game studios whose software is accessible through the Platform lobby. Users should review the privacy policies of any third-party service with which they interact independently of the cuan128 interface.

cuan128 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational circumstances. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where amendments are material — meaning they substantially affect your rights or our data processing obligations — cuan128 will notify registered users by email or by displaying a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your Account before the effective date and request erasure of your personal data where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by cuan128, please contact our dedicated data support team through the following channels:

When submitting a data rights request, please include your registered username, the nature of your request, and a copy of your identity document to allow us to verify your identity and process your request securely and efficiently.