Privacy Policy

This Privacy Policy ("Policy") is issued by Sukacuci88 ("Platform", "we", "us", "our") and applies to all personal data collected from users ("Member", "you", "your") who access or use the Sukacuci88 website at sukacuci88.cam and all associated services, features, and products (collectively, the "Services").

We take the protection of your personal data seriously. This Policy sets out in clear terms: what categories of personal data we collect, the lawful basis upon which we process that data, how it is used and shared, how long we retain it, and the rights available to you as a data subject. This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, both of which are accessible from the navigation menu.

By creating an account with Sukacuci88, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, please refrain from using the Platform.

The following definitions apply throughout this Privacy Policy:

Sukacuci88 collects personal data through various interactions you have with the Platform. The categories of data we collect are set out below:

3.1 Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for 21+ age verification).
• Malaysian National Identity Card number (MyKad) or equivalent for non-Malaysian residents.
• Email address and mobile phone number.
• Username and encrypted password.
• Residential address.

3.2 KYC & Verification Data

• Photographs or scanned copies of government-issued identification documents (MyKad front and back, passport, or equivalent).
• Selfie photograph taken whilst holding your identification document.
• Proof of payment method (e.g., screenshot of registered Touch 'n Go eWallet, Boost, GrabPay, Maybank, or CIMB account).
• Source-of-funds documentation for high-value transactions where required under AML obligations.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references.
• Wagering history including game titles, bet amounts, and outcomes.
• Bonus redemption and wagering requirement fulfilment records.
• Currency denomination (Malaysian Ringgit — MYR/RM).

3.4 Technical & Device Data

• IP address at time of registration, login, and significant transactions.
• Device type, operating system, browser type and version.
• Session duration and activity timestamps.
• Geolocation data at IP level (not GPS-level precision).

3.5 Communications Data

• Records of live chat, email, and support ticket communications between you and our customer support team.
• Responses to surveys, feedback forms, or promotional opt-in communications.

Sukacuci88 processes your personal data on the following legal bases, consistent with the data protection requirements of our international licensing framework:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account maintenance, payment processing, and delivery of Services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML), counter-terrorism financing (CTF), and KYC requirements mandated by our international gaming licence.
• Legitimate Interests: Processing carried out in the pursuit of legitimate business interests — such as fraud detection, platform security, abuse prevention, and service improvement — provided such interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent (for example, receiving promotional communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

The personal data we collect is used for the following specific purposes:

• Account Management: Creating and maintaining your Sukacuci88 account, authenticating your identity at login, and enabling access to the Services.
• KYC & Regulatory Compliance: Verifying your identity and age (21+) prior to permitting withdrawals, and fulfilling our obligations under AML/CTF regulations and international gaming licence requirements.
• Payment Processing: Processing deposit and withdrawal transactions through your nominated payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfer, and USDT TRC20.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct.
• Customer Support: Responding to your enquiries, resolving disputes, and providing account assistance through our live chat and email support channels.
• Responsible Gambling: Monitoring wagering behaviour for indicators of problem gambling and facilitating the operation of self-exclusion, deposit limits, and other responsible gaming tools.
• Service Improvement: Analysing aggregate and anonymised usage data to improve platform performance, game availability, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to members who have consented to receive such communications. You may opt out at any time.

Sukacuci88 does not sell your personal data to third parties. We may share personal data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment Service Providers: We share transaction data with payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency payment gateways — to the extent necessary to process your deposits and withdrawals.
• KYC & Identity Verification Partners: We may share identification documents and biometric data with licensed third-party identity verification service providers to facilitate KYC checks, under contractual data processing agreements.
• Game Studio Partners: Certain technical data (session tokens, bet data) is transmitted to our licensed game studio partners solely to enable the delivery of their games to your device. These partners are bound by confidentiality and data protection obligations.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations — including disclosures required under AML/CTF regulations.
• Fraud Prevention & Security Services: We may share relevant data with third-party fraud prevention and cybersecurity service providers for the purpose of protecting the Platform and its members from fraud and security threats.

Sukacuci88 uses cookies and similar tracking technologies on its Platform for the following purposes:

• Essential Cookies: Required for the core operation of the Platform, including maintaining your login session, managing your account state, and enabling the cashier to function correctly. These cookies cannot be disabled without impairing Platform functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns, bot activity, and suspicious transaction behaviour.
• Analytics Cookies: Collect aggregated, anonymised data about how members interact with the Platform — pages visited, session duration, game categories accessed — to inform platform improvements. Individual-level tracking is not conducted for analytics purposes.
• Preference Cookies: Store your language settings, display preferences, and any customised Platform settings so that they persist across sessions.

You may configure your browser to block or delete cookies. Note that disabling essential cookies will impair your ability to use the Platform. Third-party analytics cookies can typically be blocked without affecting core Platform functionality.

As a data subject, you hold the following rights in relation to your personal data held by Sukacuci88. To exercise any of these rights, contact our Data Support team via the details in Section 14:

We will respond to all data subject requests within a reasonable timeframe, typically within 30 days. Where a request is complex or voluminous, we may extend this period and will notify you accordingly. We may require identity verification before processing a data subject request to protect against fraudulent access to another member's data.

Sukacuci88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later), as required by our international gaming licence and AML/CTF obligations.
• Transaction Records: Financial and wagering transaction records are retained for a minimum of five (5) years to satisfy licensing, AML, and audit requirements.
• Support Communications: Customer support correspondence is retained for up to two (2) years from the date of the last interaction, or longer where a matter is subject to ongoing dispute or investigation.
• Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be used to identify individual members.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

Sukacuci88 maintains a comprehensive programme of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is protected by TLS 1.2 or higher. Sensitive data fields stored in our databases — including passwords, identification numbers, and payment references — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within our systems is restricted on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for staff accessing sensitive systems.
• Penetration Testing & Security Audits: Our systems undergo regular security assessments by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to affected members, we will notify them and relevant authorities in accordance with our licensing obligations and applicable law.
• Physical Security: Our hosting infrastructure is maintained in secure, access-controlled data centres with physical security measures including CCTV, access logs, and environmental controls.

Notwithstanding these measures, no system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying Sukacuci88 support if you suspect any unauthorised access to your account.

Sukacuci88 is an internationally operated platform and your personal data may be processed and stored on servers located outside Malaysia, including in jurisdictions within Europe, Southeast Asia, and other regions where our hosting, payment processing, and technology partners operate.

Where personal data is transferred to third parties in jurisdictions outside Malaysia, we take reasonable steps to ensure that such transfers are subject to appropriate contractual protections — including data processing agreements that require the receiving party to apply data protection standards consistent with those described in this Policy.

The Sukacuci88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access.

If you are a parent or legal guardian and believe that a minor under your care has registered an account with Sukacuci88 or submitted personal data to the Platform, please contact us immediately via the details in Section 14. Upon verification, we will take prompt steps to close the account and delete the associated personal data.

Sukacuci88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The revised Policy will be published on this page with an updated effective date.

For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify active members via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Policy periodically to stay informed about how Sukacuci88 protects your personal data. The current version is always accessible from this page and from the footer navigation of every page on the Platform.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related concern or complaint, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, directly via the Platform. This is the fastest channel for urgent data-related requests.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to respond within 30 days.

We will acknowledge receipt of your request promptly and work to resolve it in good faith. For data erasure and access requests, we may require identity verification before proceeding, to protect against fraudulent requests.

If you are dissatisfied with our handling of your personal data or the resolution of a privacy complaint, you may escalate the matter to the relevant data protection authority in the jurisdiction governing our processing activities, or seek independent legal advice.