Privacy Policy Geng Cuci — Your Data Security Is Our Priority

Welcome to the geng cuci Privacy Policy page. This document is a binding agreement between you as a member and geng cuci as the operator of an online gaming platform registered in Malaysia. We respect your right to privacy and are committed to protecting your personal data in a responsible, transparent, and secure manner.

This Privacy Policy explains the types of personal data we collect, the purposes for collection, how we store and protect it, and the rights you hold over your personal data. This Policy applies to all users of the Geng Cuci platform, including the official website at gengcuci.app, the mobile app, and all related services.

By registering or continuing to use the Geng Cuci platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any provision of this Policy, please discontinue use of our platform and contact our support team to close your account.

Geng Cuci collects various types of personal data from you during registration, platform use, and interactions with our team. All data collection is carried out lawfully and only for the stated purposes.

We do not collect sensitive personal data such as health information, religious beliefs, or political views unless required by law or a directive from the relevant authority. All data collected is the minimum necessary to provide you with a safe and quality service.

The personal data we collect is used solely for the lawful purposes stated herein. Geng Cuci will not use your data for any unrelated purpose without first obtaining your permission.

• Account management: Creating and managing your member account, including identity verification through the KYC process.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Gaming service provision: Providing access to all games, promotions, and platform features you are eligible to use.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal compliance: Meeting Malaysia's legal compliance obligations, including AML/CFT requirements and regulatory directives.
• Product improvement: Analysing aggregated usage patterns to improve the user experience and platform features.
• Service communications: Sending important notices regarding account changes, transactions, and policy updates.
• Marketing communications: Sending promotional information and exclusive offers — you may opt out at any time.
• Customer support: Helping to resolve your enquiries, complaints, and technical issues quickly and effectively.

All data analysis conducted by geng cuci for product improvement purposes is carried out in aggregate and anonymised form, meaning it cannot be traced back to your personal identity.

Geng Cuci processes your personal data based on one or more valid legal grounds under the Malaysia Personal Data Protection Act 2010 (PDPA):

• Consent: You provided explicit consent during account registration for data processing for gaming purposes and marketing communications.
• Contract performance: Processing is necessary to fulfil the service contract between you and geng cuci, including processing payments and providing access to games.
• Legal obligation: Certain processing is required under Malaysian law, including KYC requirements, AML reporting, and tax compliance.
• Legitimate interest: Geng Cuci processes certain data based on legitimate interests that do not override your fundamental rights, such as fraud prevention and platform security.

You have the right to withdraw your consent at any time for processing based on consent, particularly for marketing communications. Withdrawal of consent does not affect the validity of processing carried out prior to the withdrawal.

Geng Cuci does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of platform operations, we may share your data with the following categories of third parties, strictly on an operational need basis:

• Payment providers: FPX, Touch 'n Go, GrabPay payment gateways and local Malaysian banks that process your deposit and withdrawal transactions.
• Game software providers: Game developers that supply game content to our platform, who receive only the minimum data necessary.
• IT service providers: Server hosting companies, CDN providers, and cybersecurity services that help us maintain the platform securely.
• Audit and compliance firm: Auditors and legal advisors who assist us in meeting our regulatory compliance obligations.
• Government authorities: Malaysian authorities such as Bank Negara Malaysia, the police, or courts when required by law or court order.

The security of your personal data is our highest priority. geng cuci implements multiple layers of technical and organisational security measures to protect your data from unauthorised access, loss, misuse, or disclosure.

Technical security measures we practise:

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers.
• Sensitive personal and financial data in our databases is encrypted using AES-256.
• Multi-layered firewall and intrusion detection system (IDS/IPS) active 24/7.
• Two-factor authentication (2FA) for internal staff access to systems containing member data.
• Regular penetration testing conducted by independent third parties.
• Encrypted data backups are automatically performed daily to a separate, secure server location.

Data retention period: Geng Cuci retains your personal data for as long as your account remains active. Following account closure, core data is retained for seven (7) years to fulfil Malaysian legal requirements relating to financial records and AML. Data exceeding the mandated retention period will be securely deleted or anonymised.

All geng cuci member data is stored on servers located in the Asia Pacific region in compliance with ISO 27001 security standards. We do not store your data in countries that do not offer an equivalent level of data protection.

Geng Cuci uses cookies and similar tracking technologies to enhance your experience on our platform and to secure your login sessions. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as session management, login authentication, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymous information about how you use our platform, helping us identify technical issues and improve performance.
• Functional cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reset them each time you visit the platform.
• Analytics cookies: Helping us understand aggregated usage patterns for product improvement purposes. This data is anonymised and cannot be used to identify you personally.

You may manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect platform functionality and your gaming experience. For more information on managing cookies in your browser, refer to your browser's help documentation.

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Geng Cuci:

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected] or via Live Chat on the platform. All requests will be acknowledged within 3 business days.

Geng Cuci is an adult gaming platform exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we become aware that we have collected personal data from an individual who is underage, we will promptly take the following steps:

• Immediately suspending the relevant account pending investigation.
• Deleting all personal data associated with that individual from our systems.
• Reporting the incident to the relevant authorities where required by law.

We encourage parents and guardians to monitor their children's online activities and to use appropriate parental control software. If you have reason to believe a minor has registered on our platform, please contact us immediately.

Geng Cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. We will notify you of any material changes via:

• A notice prominently displayed on the geng cuci platform homepage.
• A notification email will be sent to your registered address at least 14 days before the changes take effect.
• An in-account notice displayed upon your next login.

The date of the latest update is always displayed at the top of this page. Continued use of the geng cuci platform after the effective date of any changes constitutes your acceptance of the amended Privacy Policy. We recommend you review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact the geng cuci Data Protection Officer (DPO).

• Email: [email protected]
• Live Chat: Available 24/7 via the geng cuci platform
• Target response time: 2 minutes via Live Chat; 24 hours via email
• Communication language: Bahasa Malaysia and English

You also have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner if you believe Geng Cuci has violated your rights under PDPA 2010. However, we encourage you to contact us first so we can address your concerns directly and promptly.