Official m2cuci Documents

M2cuci Privacy Policy – Personal Data Protection for Malaysian Players

Your privacy is more than a legal obligation to us — it is the trust placed in us by every player who registers at m2cuci. This document clearly explains what data we collect, how it is used, and your rights as a user of our platform.

Updated: 1 January 2026 Bahasa Melayu (ms-MY) 256-bit SSL Active

M2cuci's Six Core Privacy Commitments

How we protect your personal information from start to finish — without compromise.

256-bit SSL Encryption

All data transmitted between your device and m2cuci's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB. No third party can intercept or read your information while it is in transit.

No Sale of Data to Third Parties

M2cuci has never and will never sell, rent, or loan your personal data to any advertiser, data broker, or third-party company for marketing purposes without your explicit consent. Your data belongs to you — we are simply its custodian.

Secure Servers & Restricted Access

M2cuci user data is stored on servers with restricted access, accessible only to authorised personnel with a legitimate business need. All access to the user database is automatically logged and monitored to detect any suspicious activity.

Full Control in Your Hands

You have the right to view, amend, download, or request the deletion of your personal data at any time. m2cuci provides a straightforward and responsive process for all privacy rights requests — all of which can be handled via Live Chat or our support email.

Financial Information Protection

Your payment details — whether via Touch 'n Go eWallet, DuitNow, FPX, or any other method — are not stored in full within m2cuci's systems. We use tokenisation to ensure your sensitive financial information remains protected even in unforeseen circumstances.

Regular Independent Security Audits

M2cuci undergoes regular security and data privacy audits conducted by independent audit firms. This ensures our practices remain aligned with the latest standards and that there are no vulnerabilities in the data protection systems we use to safeguard user information.

M2cuci Data Protection Levels

Every security layer is continuously assessed and monitored. Below is an overview of the protection measures safeguarding your data at m2cuci.

Data Transmission Encryption100%
Internal Access Control98%
Real-Time Threat Monitoring99%
Financial Information Protection100%
Compliance with International Data Standards97%
256-bit
SSL Encryption Strength
24/7
Security Monitoring
0
Data Breach Reporting
<3 min
Privacy Request Response

Introduction

Welcome to the Privacy Policy m2cuci. This document forms part of the agreement between you and the m2cuci platform, and it explains in detail how we collect, use, store, and protect your personal data. By using any m2cuci services, you agree to the practices described in this Privacy Policy.

M2cuci is built specifically for Malaysian players, and we understand that trust is the foundation of our relationship with every user. Your privacy is not merely a compliance checkbox — it is a core value that shapes how we design our systems, train our staff, and make business decisions. We believe you deserve to know exactly what happens to the information you share with us.

If you have any questions regarding this Privacy Policy, the m2cuci support team is available via Live Chat 24/7 within the platform or by email at support@m2cuci.best. We are happy to respond in Bahasa Melayu.

Section 1
Personal Data We Collect

M2cuci collects personal data through several channels — primarily when you register an account, carry out financial transactions, use our support services, or interact with the platform. Below are the categories of data we collect and the purpose behind each.

Data Category Sample Data How It's Collected Status
Identity Information Full name, MyKad/passport number, date of birth Registration & KYC Required
Contact Information Malaysian mobile number, email address Register Required
Financial Information E-wallet tokens (TNG, GrabPay), FPX references Deposit/withdrawal transactions Required
Platform Activity Data Betting records, games played, session duration Platform usage Automatic
Technical Data IP address, device type, web browser, OS System logs Automatic
Communication Data Live Chat records, support emails Support interactions Where applicable
  • m2cuci does not directly collect credit or debit card information. All payments via TNG, DuitNow, FPX, GrabPay, Boost, and ShopeePay are processed by third-party payment processors that comply with PCI-DSS standards.
  • Identity data is only collected when required for the KYC process (Know Your Customer) mandatory for responsible betting operators for the purposes of age verification and anti-money laundering compliance.
  • m2cuci does not collect sensitive data such as health information, religion, or political views you. We only collect what is genuinely necessary for platform operations.

Data Minimisation Principle: m2cuci adheres to the principle of data minimisation — we only collect data that is strictly necessary for the stated purpose. If a piece of data isn't needed, we don't collect it, even if doing so might be technically convenient.

Section 2
How m2cuci Uses Your Data

Every piece of data we collect has a clear and lawful purpose. m2cuci does not use your data for purposes unrelated to the operation of the platform or the services you use.

  • Account Management: Identity and contact data are used to create and maintain your account, verify your identity, and enable account-related communications such as security notifications and important updates.
  • Transaction Processing: Your financial information is used to securely process deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, or ShopeePay.
  • Gaming Services Provision: Platform activity data is used to deliver a seamless gaming experience, display your game statistics, and enable features such as betting history and the VIP programme.
  • Security & Fraud Prevention: Technical and activity data are used to detect and prevent unauthorised access, fraud, money laundering, and platform abuse.
  • Responsible Gaming: Gaming activity records are used to monitor playing patterns and to issue alerts or recommendations to users who may be showing signs of problem gambling — this is a core commitment of m2cuci.
  • Customer Support: Your account and communication data are used by our Bahasa Melayu support team to resolve issues and answer your enquiries accurately and efficiently.
  • Platform Improvements: Anonymised usage data (with no personal identifiers) is used to understand general usage patterns and improve the design and features of the m2cuci platform.

Direct Marketing: m2cuci will only send you marketing communications if you have given explicit consent to do so during registration or through your account communication settings. You may withdraw this consent at any time via your account settings or by contacting our support team.

Section 3
Data Sharing with Third Parties

M2cuci does not sell your personal data. However, there are limited situations where we need to share certain information with trusted third parties to keep the platform running smoothly.

  • Payment Processors: Minimal transaction information is shared with authorised payment processors (such as the TNG, DuitNow, and FPX gateways) as required to execute deposits and withdrawals. All such processors comply with strict financial security standards.
  • Game Providers: Usernames and limited game session information are shared with the live casino and slots providers partnering with m2cuci to enable access to their games. Full identity details are not shared.
  • Legal Authorities: m2cuci will comply with valid court orders or lawful requests from Malaysian authorities in connection with criminal investigations such as money laundering or fraud. We will not disclose data beyond what is legally required.
  • Independent Audits: Independent audit firms contracted by m2cuci to conduct security and game integrity audits may access a required subset of data, and they are bound by strict confidentiality agreements.
  • In all of the data sharing scenarios described above, m2cuci ensures that the receiving party is bound by a data protection agreement which requires them to handle your information to a standard equal to or higher than our own.

Our Commitment: m2cuci has never and will never sell, lend, or share your personal data with advertisers, marketing companies, or data brokers without your express and explicit consent. This is a commitment we will not compromise on.

Section 4
Data Security Measures

M2cuci invests seriously in security infrastructure to protect your personal data. Below are the key layers of protection we have in place.

  • Data Encryption in Transit (TLS 1.3): All communications between your browser or app and m2cuci's servers are encrypted using TLS 1.3 with 256-bit encryption strength. This means that even if someone were to intercept your network traffic, they would not be able to read its contents.
  • Encryption of Data at Rest: Sensitive data stored in m2cuci's databases — including passwords (stored in hashed form) and authentication information — is encrypted using industry-strength encryption algorithms.
  • Role-Based Access Control (RBAC): m2cuci staff can only access user data that is relevant to their specific role. System administrators do not have automatic access to all data — every access request requires justification and tiered authorisation.
  • Monitoring & Threat Detection: m2cuci's automated monitoring system operates 24/7 to detect unauthorised access attempts, brute-force attacks, SQL injection, and other cyber threats. Any anomaly immediately triggers an alert.
  • Regular Data Backups: User data is regularly backed up to secure, separate locations. Data recovery procedures are periodically tested to ensure service continuity in the event of an unexpected incident.
  • External Security Audit: Independent security audit firms conduct regular penetration testing and comprehensive security reviews of m2cuci's systems to identify and address any vulnerabilities before they can be exploited.

Shared Responsibility: While m2cuci invests heavily in system security, the safety of your account also depends on your own actions. Use a strong and unique password, never share your login credentials with anyone, and enable two-factor authentication (2FA) in your account settings.

Section 5
Cookies & Tracking Technologies

M2cuci uses cookies and similar tracking technologies to enhance the user experience and platform security. Below is an explanation of the types of cookies we use.

  • Essential Cookies (Required): These cookies are required for core platform functions such as login session management, CSRF security, and language preferences. Without them, the platform will not work properly. These cookies cannot be disabled.
  • Functional Cookies: Saves your preferences — such as display language, game table settings, and default betting limits — so you don't have to reconfigure them every time you log in to m2cuci.
  • Analytics Cookies: Helps us understand, in aggregate, how users interact with the m2cuci platform — which pages are visited most frequently, time spent on-site, and where users exit. This data is used to improve the platform and is not linked to any individual's personal identity.
  • Security Cookies: Used to detect suspicious login attempts, unusual sessions, and activity that may indicate unauthorised access. These cookies help keep your account secure.
  • You can manage your cookie settings via your web browser settings. Please note, however, that disabling essential cookies may significantly affect the functionality of the platform.
Essential Cookies Functional Cookies Analytics Cookies Security Cookies
Section 6
Your Rights Regarding Personal Data

As an m2cuci user, you have the following rights regarding your personal data. m2cuci is committed to respecting and facilitating the exercise of these rights without unnecessary red tape.

Right of Access
You can request a copy of all personal data we hold about you at any time.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete data in your account.
Right to Erasure
You may request the deletion of your personal data upon account closure, subject to applicable legal requirements.
Right to Object
You may object to the processing of your data for Direct Marketing purposes at any time.
Right to Portability
You may request your data in a machine-readable format for transfer to another platform.
Right to Restrict
You may request a restriction on the processing of your data under certain circumstances while other requests are being resolved.
  • To exercise any of the rights above, please contact the m2cuci support team via Live Chat 24/7 or email support@m2cuci.best. We will verify your identity before processing any data-related request.
  • m2cuci will process privacy rights requests within no more than 30 days from the date of receiving a complete request. We will notify you if additional time is required.
  • Please note that the right to erasure has its limitations — m2cuci may be required to retain certain data for periods stipulated by applicable laws, such as financial records for audit and anti-money laundering purposes.
Section 7
Data Retention & Deletion

M2cuci retains your personal data only for as long as necessary for the stated purposes or as required by law. Below are the guidelines for our data retention periods.

  • Active Account Data: For as long as your account is active and you continue using m2cuci's services, your core account data will be retained to ensure uninterrupted service.
  • Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, as required by applicable laws governing financial records and anti-money laundering (AML) compliance in Malaysia.
  • Game Records: Retained for 2 years after the game date for dispute resolution purposes and anonymised internal analytics.
  • Customer Support Records: Retained for 3 years for training purposes, service quality assurance, and future dispute resolution.
  • Technical Data & Logs: System access logs are typically retained for 90 days for security monitoring and incident investigation purposes.
  • Once the retention period ends, data will be securely deleted using methods that ensure data cannot be recovered.
Section 8
Changes to This Privacy Policy

M2cuci may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements.

  • Users will be notified of any material changes to this Privacy Policy through in-platform notifications or your registered email at least 14 days before the changes take effect.
  • The "Updated" date at the top of this document will reflects the latest version Privacy Policy. Users are encouraged to check this page periodically.
  • Continued use of the platform after the effective date of any Privacy Policy changes will be considered as consent to the latest version.
  • If you do not agree with the changes made, you have the right to closing your account and request the deletion of your data as detailed in Sections 6 and 7.
Section 9
Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by m2cuci, please contact us through the following channels.

  • 24/7 Live Chat: The fastest option — access via the chat icon within the m2cuci platform. Average response time is under 3 minutes in full Bahasa Melayu.
  • Email: Send your privacy enquiries to support@m2cuci.best. For requests related to privacy rights, please include "Data Privacy Request" in the subject line of your email to ensure faster processing.
  • All privacy-related communications will be handled by a specially trained team in data privacy compliance and will be responded to in Bahasa Melayu.
  • m2cuci will acknowledge receipt of your privacy request within 3 business days and resolve requests within no more than 30 days.

Our Final Commitment: m2cuci is committed to remaining a platform that Malaysian players can truly trust — not just in terms of game and financial security, but also in the protection of their personal data. Your privacy is our responsibility, and we take that responsibility seriously every single day.

Understanding m2cuci's Privacy Policy – What Matters for Malaysian Players

For most Malaysians, a privacy policy is a long, dry document that rarely gets read. But if you're using an online platform — especially one involving real money like m2cuci — taking a few minutes to understand how your data is handled is genuinely worth your time. At m2cuci, we have made every effort to keep this document as clear and straightforward as possible, because we believe players who understand how their data is handled are more confident and comfortable using our platform.

One of the first things many Malaysian players want to know is — what happens to their phone number and payment details? The answer is straightforward: your phone number is used solely for account verification, security notifications, and account-related communications. Your payment details — whether Touch 'n Go eWallet, DuitNow, FPX via Maybank2u or CIMB Clicks, GrabPay, Boost, or ShopeePay — are not stored in full within m2cuci's systems. Transactions are processed through a secure payment gateway, and only the transaction token is retained for record-keeping purposes — not your full account details.

On the technical security front, m2cuci uses 256-bit SSL encryption for all communications between your device and our servers — the same standard used by major financial institutions, not merely the minimum requirement. m2cuci's servers are protected by multi-layered firewalls, intrusion detection systems, and 24/7 monitoring by a dedicated cybersecurity team. Independent security audits are conducted regularly by external firms with no other interest in m2cuci, ensuring an objective and honest assessment of our security infrastructure.

One thing that sets m2cuci apart from many other platforms is our commitment to never selling or sharing user data with advertisers. Many free platforms on the internet fund their operations by selling user data to advertising companies. m2cuci operates differently — we fund our operations through margins from the games we offer, not by monetising user data. This means you won't suddenly find yourself bombarded with third-party ads based on your gaming activity after signing up at m2cuci.

When it comes to user rights, m2cuci fully supports your right to access, amend, and delete your personal data. The process for exercising these rights is designed to be as straightforward as possible — reach out via Live Chat or email, verify your identity, and we'll handle your request within the stipulated timeframe. No complicated forms, no drawn-out procedures. We understand that most of our players are busy people who shouldn't have to deal with unnecessary red tape.

On the topic of cookies — yes, m2cuci uses them, but not in any way that should concern you. Essential cookies are what keep you logged in, save your game settings, and protect your account from CSRF attacks. The analytics cookies we use serve internal purposes — understanding how players use the platform so we can make meaningful improvements. We do not share this analytics data in any personally identifiable form with third parties.

Ultimately, privacy in the context of online gaming goes beyond protecting your phone number and email address. It also means ensuring your gaming activity records are never misused. At m2cuci, your gaming activity records are used for three purposes only — to provide the services you requested (such as betting history and VIP program management), to maintain the security and integrity of the platform, and in the context of responsible gaming, to detect patterns that may require support. No third party has access to your individual gaming activity records without a valid court order.

FAQ – m2cuci Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at m2cuci.

No. m2cuci has never and will never sell, rent, or loan your personal data to any advertiser, data broker, or third-party company for marketing purposes without your explicit and express consent. m2cuci funds its operations through game margins, not by monetising user data. Your data is only shared with parties genuinely required for platform operations — such as payment processors to handle your transactions, and only to the extent necessary for that purpose.

When you close your m2cuci account, your personal data will begin a phased deletion process. Data not subject to legal retention requirements will be deleted within 90 days. However, financial and transaction records must be retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering compliance. After this period, all data will be securely deleted. You may request confirmation of your data deletion status by emailing support@m2cuci.best.

Yes, you have full right of access to your personal data. To request a copy, contact the m2cuci support team via Live Chat or email support@m2cuci.best with "Data Access Request" stated in your message. We will verify your identity before processing the request. Your data will be delivered in a readable format within no more than 30 days from the date a complete request is received. This service is free of charge for one request every 12 months.

m2cuci uses tokenisation to protect your payment information. This means your full account or wallet details — whether Touch 'n Go eWallet, DuitNow, FPX via Maybank2u or CIMB Clicks, GrabPay, Boost, or ShopeePay — are never stored in a directly usable format within m2cuci's systems. Instead, a reference token that is meaningless without access to the secure payment processor's system is stored in its place. All communications between m2cuci and payment processors are encrypted, and the processors we work with comply with strict PCI-DSS standards.

If you suspect your m2cuci account has been accessed without authorisation, take the following steps immediately: First, contact the m2cuci support team via Live Chat and state "Account Security Emergency" — our team will prioritise your case. Second, change your account password right away. Third, review your login history and account activity in your security settings. m2cuci will investigate the incident promptly and, if necessary, temporarily freeze the account pending investigation. Do not delay in reporting — the sooner you reach out, the more effectively we can help.
Contents
1. Data Collected 2. Use of Data 3. Data Sharing 4. Data Security 5. Cookies & Tracking 6. Your Rights 7. Data Retention 8. Policy Changes 9. Contact Us
Contact Us
24/7 Live Chat
support@m2cuci.best
ACTIVE PROTECTION
256-bit SSL Encryption
Data Not Sold
Privacy Assured

Responsible Gambling

M2cuci is committed to responsible gambling. Our platform provides self-control tools — daily deposit limits, betting limits, and mandatory break options. This platform is strictly for users aged 21 and above. Never gamble with money you cannot afford to lose.

24/7 Support Available: Helpline 1800-88-8694 or visit Responsible Gambling.

Your Data Is Fully Protected

Ready to Play with Confidence at m2cuci?

Over 50,000 Malaysian players have trusted m2cuci — not just for the best live casino, baccarat, and roulette games, but also for uncompromising data protection and privacy. Register for free today.

Touch 'n Go DuitNow FPX GrabPay Boost ShopeePay

This platform is for users aged 21 and above only. Please gamble responsibly.

Bahasa Melayu