We are committed to protecting your personal data. This policy explains exactly what information we collect, how we use it, and the rights you hold over your data as a 21cuci player.
At a Glance
A summary of what matters most. The full legal policy is set out in the sections below — please read it in its entirety.
21cuci limits data collection to information necessary to provide the service, verify your identity, process transactions, and comply with licensing obligations. We do not collect data speculatively or sell it to data brokers.
All personal data transmitted between your device and 21cuci is protected with 256-bit SSL/TLS encryption. Data at rest is stored in access-controlled environments subject to regular security auditing and penetration testing.
21cuci does not sell, rent, or trade your personal information to third-party advertisers or data marketplaces under any circumstances. Data shared with third parties is limited to what is strictly necessary for service delivery.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days in accordance with applicable data protection principles.
We use essential session cookies to keep you logged in and functional cookies to remember your preferences. Analytics cookies help us understand how the platform is used so we can improve it. You can manage cookie preferences in your browser settings.
Have a question about how your data is handled? Our support team is available 24/7 via live chat in English, Bahasa Melayu, and Chinese. For formal data requests, email us at [email protected] — we aim to respond within 30 days.
This Privacy Policy ("Policy") describes how 21cuci ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access and use the website at https://21cuci.cam and all related services, features, and communications.
21cuci takes its obligations regarding personal data seriously. This Policy has been prepared to give you a clear and honest account of our data practices. We are committed to handling your information with care, transparency, and in a manner consistent with internationally recognised data protection principles.
By registering an account, making a deposit, or otherwise using the 21cuci platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.
Malaysian Users: While 21cuci operates as an internationally licensed platform, we respect the spirit of Malaysia's Personal Data Protection Act 2010 (PDPA) as a baseline standard for the handling of personal data belonging to Malaysian players. Our data practices are designed to meet or exceed those standards.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion. |
| Data Controller | 21cuci, as the entity that determines the purposes and means of processing your personal data. |
| Data Processor | A third party that processes personal data on behalf of 21cuci under a data processing agreement, such as a payment service provider or KYC verification provider. |
| KYC | Know Your Customer — the identity and age verification process required under our licensing obligations. |
| Cookie | A small text file placed on your device by a website to store information about your session, preferences, or behaviour. |
| Consent | Freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
21cuci collects personal data through several channels: directly from you during account registration and use, automatically through your interaction with the platform, and in some cases from third parties such as KYC verification services and payment processors. The categories of data we collect are set out below.
When you register an account, we collect:
To comply with our licensing obligations and prevent fraud and underage gambling, we may collect:
When you make deposits or withdrawals, we collect transactional data including:
Note: 21cuci does not store full credit or debit card numbers. Payment card data is handled directly by PCI-DSS-compliant payment processors and is not stored on our servers.
We record information about your activity on the platform, including game sessions, bet amounts and outcomes, sports markets wagered on (including EPL, Liga Super Malaysia, UFC, and other events), session duration, win and loss history, and bonus utilisation. This data is used for account management, dispute resolution, and responsible gambling monitoring.
When you access 21cuci, we automatically collect technical information including:
If you contact our support team via live chat, email, or WhatsApp, we retain records of those communications for quality assurance, training, and dispute resolution purposes.
21cuci uses your personal data for the following purposes. We process data only where we have a valid legal basis to do so (see Section 5).
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration data, KYC data, communications data |
| Age and identity verification (KYC) | Registration data, KYC documents, date of birth |
| Processing deposits and withdrawals | Financial and transaction data, KYC data |
| Providing gaming and betting services | Account data, gameplay and betting data, technical data |
| Fraud prevention and security monitoring | Technical data, transaction data, KYC data |
| Anti-money laundering compliance | Transaction data, KYC data, source of funds documentation |
| Responsible gambling monitoring | Gameplay data, account data, deposit and loss history |
| Customer support and dispute resolution | Account data, communications data, gameplay data |
| Platform analytics and improvement | Technical data, gameplay data (anonymised or aggregated) |
| Promotional communications (where consented) | Registration data, gameplay preferences, contact details |
Marketing communications: We will only send you promotional emails or messages where you have actively opted in to receive them. You may withdraw consent to marketing communications at any time by contacting our support team or using the unsubscribe option in any marketing email.
Where internationally recognised data protection principles apply, 21cuci relies on the following legal bases for processing your personal data:
21cuci does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:
We engage third-party service providers to assist with payment processing, KYC identity verification, fraud detection, data hosting, and customer communications. These providers act as data processors under written agreements that restrict their use of your data to the specific service they are providing on our behalf.
To process deposits and withdrawals via DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, FPX, and supported cryptocurrency networks, we share the minimum transaction data required by those payment providers to complete the transaction.
We may disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or in response to lawful requests from competent authorities. We will not disclose data beyond what is required to comply with the specific legal obligation.
In the event that 21cuci undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account.
No sale of data: Under no circumstances does 21cuci sell, license, or otherwise provide personal data to third-party advertisers, data brokers, or marketing networks for their independent use.
21cuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.
21cuci implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:
While we apply industry-standard security measures, no online platform can guarantee absolute security. You play a part in keeping your account safe — please use a strong unique password, enable 2FA, and never share your login credentials with anyone.
21cuci uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how our site is used. The cookie categories we deploy are as follows:
| Cookie Type | Required? | Purpose |
|---|---|---|
| Essential | Required | Maintain your session while logged in, remember your region and language preference, and enable core security features such as CSRF protection. |
| Functional | Optional | Remember your display preferences, game lobby settings, and notification choices to personalise your experience on return visits. |
| Analytics | Optional | Collect aggregated usage data (pages visited, session duration, click paths) to help us understand platform performance and improve the user experience. Data is anonymised before analysis. |
You may manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies may prevent core platform functionality from operating correctly and may result in your session not being maintained.
Subject to applicable data protection law, you have the following rights in relation to the personal data that 21cuci holds about you. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:
You have the right to request a copy of the personal data we hold about you, along with information about how it is being used. We will respond to access requests within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (such as name changes) may require documentary evidence.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Note that certain data must be retained under our legal and regulatory obligations and cannot be deleted on request.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as our legal basis. You may also object to the use of your data for direct marketing at any time without giving a reason.
21cuci is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth collection and age verification steps to enforce this requirement.
If we become aware that we have collected personal data from a person under 21 years of age, we will take immediate steps to close the account, delete the collected personal data (subject to any legal retention obligations), and return any deposited funds to the payment source used.
For Players Aged 21 and Above Only. If you are a parent or guardian and believe that a person under 21 in your care has registered on the 21cuci platform, please contact our support team immediately so we can take appropriate action.
21cuci operates as an internationally licensed platform. As a result, your personal data may be processed and stored on servers located outside Malaysia. In particular, data may be transferred to service providers in jurisdictions where our licensed infrastructure and third-party processors are based.
Where such transfers occur, we take steps to ensure that your personal data is protected to a standard consistent with applicable data protection principles. This includes using data processing agreements with receiving parties that impose contractual data protection obligations consistent with internationally recognised standards.
By registering an account and using the 21cuci platform, you acknowledge and agree to the potential transfer of your personal data outside of Malaysia in accordance with this Policy.
21cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The version number and effective date at the top of this page identify the current version.
Where changes are material, we will provide notice via the email address registered to your account or by a prominent notice on the platform prior to the changes taking effect. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
We recommend that you review this page periodically. Previous versions of this Policy are available on request from our support team.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data is being handled, please reach out to us through any of the following channels. We take all privacy enquiries seriously and will respond promptly.
Available 24 hours a day, 7 days a week. Average response time of 3–5 minutes. Agents available in English, Bahasa Melayu, and Chinese.
Send your privacy enquiry or data rights request to [email protected]. Please include your registered username and the nature of your request. We respond within 30 days.
For formal Subject Access Requests (SARs) or requests to exercise other data rights, please submit your request in writing to our email address above with the subject line "Data Rights Request — [Your Username]". We may need to verify your identity before processing the request.
Your data is secure, your privacy is respected, and your experience is protected. Join over 500,000 Malaysian players who trust 21cuci. For players aged 21 and above only.
21+ only. Gambling can be addictive — please play responsibly.