bkcuci Privacy Policy

1. Who We Are

This Privacy Policy applies to the bkcuci online gaming platform, accessible at bkcuci.win ("Platform", "Site"). References to "bkcuci", "we", "us", or "our" in this document refer to the operator of bkcuci.win and its associated services.

bkcuci is the data controller in respect of the personal data of registered players and visitors to the bkcuci platform. As data controller, bkcuci determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

If you have any questions or concerns about how bkcuci handles your personal data, please contact our Data Support team via live chat or email at [email protected].

2. Data We Collect

bkcuci collects the following categories of personal data in connection with the provision of its services:

bkcuci does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data, except where required for responsible gaming self-assessment purposes, in which case such data is treated with heightened protection.

3. How We Use Your Data

bkcuci uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your bkcuci account, including authentication, password recovery, and account settings management.
• Service delivery: To process deposits and withdrawals, credit bonuses, resolve game disputes, and provide the full suite of bkcuci gaming services.
• Identity verification (KYC): To verify your identity and age in accordance with bkcuci's licensing obligations and to prevent fraud and money laundering. This is mandatory for all withdrawal requests above applicable thresholds.
• Regulatory compliance: To fulfil reporting obligations under applicable international online gambling licensing requirements, anti-money laundering (AML) regulations, and counter-terrorism financing rules.
• Responsible gaming: To monitor gaming patterns, identify potential problem gambling behaviours, and apply responsible gaming interventions including deposit limits and self-exclusion where appropriate.
• Platform improvement: To analyse aggregated usage data to improve the bkcuci platform, personalise your experience, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have not opted out of such communications.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and prohibited conduct as defined in the bkcuci Terms & Conditions.

4. Legal Basis for Processing

bkcuci processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between bkcuci and you (i.e., providing the platform services you have registered to use).
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and licensing obligations.
• Legitimate interests: Processing conducted in pursuit of bkcuci's legitimate business interests (e.g., fraud prevention, platform security, analytics) where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including marketing communications. You may withdraw consent at any time.

5. Data Sharing

bkcuci does not sell your personal data. We may share your data with the following categories of third parties solely for the purposes described in this Policy:

• Payment processors: To process your deposits and withdrawals. This includes Malaysian eWallet providers (Touch 'n Go, Boost, GrabPay), DuitNow, FPX, and local banks. These providers receive only the data necessary to process the relevant transaction.
• Game software providers: Our licensed game providers (e.g. Evolution Gaming, Pragmatic Play) may receive session data necessary to operate their games on the bkcuci platform. These providers operate under strict data processing agreements with bkcuci.
• Identity verification services: Third-party KYC vendors may process your identity documents solely for the purpose of age and identity verification.
• Regulatory and law enforcement authorities: Where required by applicable law or a valid court order, bkcuci may disclose personal data to regulatory bodies, law enforcement, or other competent authorities.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who process data on behalf of bkcuci under data processing agreements.

6. Data Retention

bkcuci retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. In practice:

• Account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction, in accordance with standard AML record-keeping requirements.
• KYC documents are retained for the period required by bkcuci's licensing authority, typically five (5) years from account closure.
• Marketing communication records are retained until you opt out or for a maximum of three (3) years following your last platform interaction, whichever is earlier.
• Live chat and support records are retained for a maximum of two (2) years for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, bkcuci will securely delete or anonymise your personal data.

7. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bkcuci:

• Right of access: You may request a copy of the personal data bkcuci holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to bkcuci's legal retention obligations.
• Right to restrict processing: You may request that bkcuci limit the processing of your data in certain circumstances.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another controller where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the bkcuci Data Support team via live chat or at [email protected]. bkcuci will respond to all valid requests within 30 calendar days.

8. Cookies

bkcuci uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow bkcuci to recognise returning visitors and maintain session continuity.

The following categories of cookies are used on bkcuci:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Analytics cookies: Used to understand how players use the platform in aggregate, enabling bkcuci to improve navigation, identify errors, and optimise page performance. Analytics data is anonymised.

bkcuci does not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

9. Security

bkcuci implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bkcuci servers.
• Encryption of sensitive data fields (including payment details) at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and security audits conducted by independent third parties.
• Intrusion detection systems and real-time monitoring of platform infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, bkcuci will notify affected players and relevant authorities as required by applicable law and without undue delay.

10. Children's Privacy

The bkcuci platform is strictly intended for individuals aged 21 years and above. bkcuci does not knowingly collect personal data from individuals under the age of 21. If bkcuci becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and the matter escalated in accordance with bkcuci's responsible gaming obligations.

If you believe a minor has registered an account with bkcuci, please contact our support team immediately at [email protected].

11. Policy Changes

bkcuci may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Material changes to this Policy will be communicated to registered players via email to their registered address or by a prominent notice on the bkcuci platform prior to the change taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the bkcuci platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bkcuci processes your personal data, please contact our Data Support team:

• Live chat: Available 24/7 in English via the bkcuci platform
• Email: [email protected]

bkcuci commits to acknowledging all data-related enquiries within two (2) business days and resolving subject access requests within thirty (30) calendar days of receipt.