Official Document · Updated 1 January 2026

Policy Privacy i2cuci — Personal Data Protection for Malaysian Members

I2cuci takes your privacy seriously. This document clearly explains what data we collect, why we need it, how we protect it, and your rights over your own personal data.

Effective: 1 January 2026 Bahasa Malaysia Jurisdiction: Malaysia

I2cuci's Privacy Commitment: Six Key Principles

A summary of the data protection principles we uphold for every member in Malaysia

256-bit SSL Encryption

All data transmitted between your device and i2cuci's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions such as Maybank and CIMB. Your personal information and transaction details are never transmitted in unencrypted form.

No Sale of Data to Third Parties

I2cuci does not sell, lease, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent. Your data belongs to you — we use it solely for the purposes stated in this Privacy Policy and nothing beyond that.

Personal Data Protection Act Compliance

The i2cuci Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise and respect your rights as a protected data subject under Malaysian law, including the right to access, correct, and request the deletion of your data.

Secure Servers & Access Controls

Your personal data is stored on servers protected by strict access controls — only i2cuci staff with specific authorisation may access sensitive data, and all access is recorded in audit logs. We also conduct regular penetration testing to identify and address any security vulnerabilities.

Limited & Purpose-Driven Data Use

We only collect data that is strictly necessary to operate the i2cuci service — a principle of "data minimisation" meaning we do not collect excessive or irrelevant information. Each category of data we collect has a clearly defined purpose, as stated in this policy.

Data Breach Notification

In the unlikely event of a data breach that could affect members, i2cuci is committed to notifying affected members within a reasonable timeframe via registered email and in-platform notifications, and to taking immediate remedial action to minimise the impact.

Welcome to the i2cuci Privacy Policy. This document explains how i2cuci ("we", "Platform") collects, uses, stores, and protects your personal data ("Member", "you") when you use our platform at https://i2cuci.xyz. We understand that your trust in us depends greatly on how we handle your personal information — which is why we have aimed to be as transparent as possible in this document. Please read it carefully before using i2cuci's services.

1. Introduction & Scope of This Privacy Policy

This Privacy Policy applies to all information collected through the i2cuci platform — including the website at https://i2cuci.xyz, any mobile applications we may offer in the future, and all interactions you have with our customer support team. This document should be read together with Terms & Conditions and policies Responsible Gaming i2cuci.

By registering an account, using our services, or browsing the i2cuci website, you consent to the collection and use of data as described in this Privacy Policy. If you do not agree, please discontinue use of our platform. Should you have any questions about how we handle your data, you may contact us at any time at support@i2cuci.xyz.

i2cuci complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise you as a data subject with rights protected under Malaysian law with respect to your personal data.
2. Personal Data We Collect

I2cuci collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect:

Data Category Example Information How It's Collected
Identity Data Full name, identity card number, date of birth Registration & KYC process
Contact Data Phone number, email address Registration form
Financial Data E-wallet account numbers, deposit & withdrawal records in MYR Financial transactions
Gaming Data Betting history, games played, session duration In-platform activity
Technical Data IP address, device type, web browser, operating system Server logs & cookies
Communications Data Support chat transcripts, emails sent Customer support interactions
Location Data Country & region based on IP address (Malaysia) Automated system logs

I2cuci does not collect sensitive data such as medical information, religious beliefs, political affiliations, or biometric data unless specifically required for an identity verification process that you have agreed to. All data we collect has a legitimate purpose, as set out in the following sections.

For the KYC (Know Your Customer) process on withdrawals exceeding RM 5,000, we may request a copy of your Malaysian MyKad or passport. These documents are stored securely and used solely for identity verification and anti-money laundering (AML) compliance purposes.
3. How We Use Your Personal Data

I2cuci uses your personal data solely for legitimate purposes that are necessary to operate our platform effectively. The specific purposes for which your data is used are set out below:

  • Account Management: Creating, verifying, and managing your i2cuci account — including processing registrations, logins, and account settings
  • Financial Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to Malaysian bank accounts in MYR
  • Identity Verification (KYC): Meeting legal compliance obligations, including Anti-Money Laundering (AML) requirements and fraud prevention
  • Gaming Service Delivery: Enables you to access and play slots, baccarat, roulette, blackjack, and Sports Betting on the i2cuci platform
  • Service Communications: Sending important notifications about your account, changes to our terms, promotions you are eligible for, and customer support responses
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other security threats
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support
  • Platform Enhancements: Analysing usage data in aggregate (without identifying individuals) to improve the user experience, platform performance, and the development of new features
  • Legal Compliance: Fulfilling any reporting or disclosure obligations required under applicable Malaysian law
i2cuci does not use your personal data to make automated decisions that carry legal or similarly significant consequences without human involvement. All major decisions — such as account closures or withdrawal rejections — are reviewed manually by our team.
4. Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), i2cuci processes your personal data on the following valid legal bases:

  • Consent: By registering an i2cuci account, you consent to the collection and use of your personal data as described in this Privacy Policy. You may withdraw your consent at any time, though this may limit our ability to provide services to you.
  • Contract Performance: Certain data processing is necessary to fulfil the service agreement between you and i2cuci — for example, processing your MYR deposits and withdrawals.
  • Legitimate Interest: We process certain data on the basis of our legitimate interests in operating a safe business — including fraud prevention, platform security, and service improvement.
  • Legal Obligation: Certain data processing is necessary to fulfil our legal obligations under Malaysian law, including AML requirements and financial reporting.
5. Sharing Data with Third Parties

I2cuci does not sell or lease your personal data to any third party for marketing purposes. However, there are limited situations in which we may share your data with carefully selected third parties:

  • Payment Service Providers: To process transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), we share only the minimum transaction information required with the relevant payment service provider
  • Game Software Providers: Slot and casino game providers such as Pragmatic Play, PG Soft, and others receive the game session data necessary to operate the games — this does not include your personal financial information
  • Technical Support Service Provider: Companies that assist us in operating the i2cuci technical infrastructure — all bound by strict confidentiality agreements
  • Legal Authorities: Where required by Malaysian law, a court order, or a legitimate request from a law enforcement agency — we will disclose only the minimum data necessary
  • Business Acquisition or Merger: In the event of a merger, acquisition, or sale of i2cuci assets, member data may be transferred to the successor entity, which will remain bound by the terms of this Privacy Policy

All third parties that receive your data from i2cuci are bound by data processing agreements that require them to handle your data in accordance with security and privacy standards equivalent to or exceeding our own. We do not permit third parties to use your data for their own purposes outside the scope of the services they provide to us.

Your data is stored and processed on servers located within Malaysia or in jurisdictions with equivalent data protection standards. Where a transfer outside Malaysia is necessary, we ensure adequate safeguards through appropriate contractual arrangements.
6. Cookies & Tracking Technologies

I2cuci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website. The following are the types of cookies we use:

Cookie Type Purpose Deletable?
Essential Cookies Required for core platform functionality — login, game sessions, and security No (the platform will not function)
Preference Cookies Remembering your preferences such as language and display settings Yes — no impact on core functionality
Analytics Cookies Helps us understand how users interact with the platform so we can make improvements Yes — data collected anonymously
Security Cookies Detecting suspicious activity and protecting your account from unauthorised access Deletion not recommended

You can manage your cookie settings through your web browser (Chrome, Firefox, Safari, Edge). However, deleting or blocking essential cookies may cause certain features of the i2cuci platform to function incorrectly. We do not use cookies to track your activity on websites outside of the i2cuci platform.

7. Data Retention & Deletion

I2cuci retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your i2cuci account is active, plus the mandatory retention period following account closure
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date — a legal requirement under Malaysia's financial reporting regulations
  • Game Records: Retained for 2 years from the date of the gaming session for dispute resolution and audit purposes
  • KYC Documents: Retained for the period required under Malaysia's AML legislation — typically 5 years after account closure
  • Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes
  • Technical & Security Logs: Retained for 90 days for security analysis and fraud monitoring purposes

When data is no longer needed and there is no legal obligation to retain it, i2cuci will securely delete or anonymise it using industry-recognised methods. You may request early deletion of your data by contacting us — subject to our legal retention obligations.

8. Data Security Measures

I2cuci continually invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures we have in place include:

  • Data Encryption in Transit: All communications between your device and i2cuci's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption
  • Data Encryption at Rest: Sensitive data such as financial information and KYC documents is stored in encrypted form on our servers
  • Role-Based Access Control: Only i2cuci staff with a legitimate business need are granted access to personal data — in accordance with the "least privilege" principle
  • Two-Factor Authentication (2FA): All internal access to systems containing personal data requires two-factor authentication
  • Monitoring & Audit Logs: All access to sensitive data is recorded in tamper-proof audit logs for the detection of suspicious activity
  • Regular Penetration Testing: i2cuci conducts regular security testing by independent experts to identify and address system vulnerabilities
  • Staff Security Training: All i2cuci staff who handle personal data undergo regular information security and data protection training
  • Incident Response Plan: i2cuci has formal procedures in place to handle security incidents, including data breaches, promptly and effectively
While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, do not share your login credentials, and contact us immediately if you suspect any unusual activity.
9. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by i2cuci. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will process this request within 21 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update your profile information directly in your account settings.

Right to Erasure

You may request the deletion of your personal data — subject to the limits of our legal obligations, such as financial record retention requirements under Malaysian law.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of your data or the validity of our processing.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to that withdrawal.

Right to Lodge a Complaint

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or through i2cuci's own complaints channel.

To exercise any of the above rights, please contact i2cuci's privacy team by email at support@i2cuci.xyz with the subject line "Data Privacy Rights Request". Include your full name, account number, and a detailed description of your request. We will verify your identity before processing any data-related request.

10. Children's Data Protection

The i2cuci platform is intended exclusively for adults aged 18 and above. i2cuci does not knowingly collect or process the personal data of anyone under the age of 18. If you believe we have inadvertently collected information from an underage individual, please contact us immediately at support@i2cuci.xyz and we will take prompt steps to delete that information.

If you are a parent or guardian who believes your child has registered an account on i2cuci, please contact our support team immediately. We will investigate the matter promptly and close the account if it is confirmed to belong to an underage individual.
11. Links to Third-Party Websites

The i2cuci platform may contain links to third-party websites or services in certain contexts — for example, links to payment providers during the deposit or withdrawal process. i2cuci's Privacy Policy applies solely to our own platform. We are not responsible for the privacy practices of any third-party websites you may visit through links on i2cuci.

We encourage you to read the Privacy Policy of every website you visit, especially when providing personal information. i2cuci does not control the content or privacy practices of external websites and cannot be held responsible for them.

12. Changes to This Privacy Policy

I2cuci reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:

  • Updating the "Effective Date" at the top of this document
  • Notifying all active members via their registered email or through in-platform notifications on i2cuci
  • For significantly material changes, we may seek your explicit consent again before you can continue using the platform

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your information. Your continued use of the i2cuci platform after any changes take effect will be considered acceptance of the updated policy.

This Privacy Policy was last updated on 1 January 2026. This version supersedes all previous versions of the i2cuci Privacy Policy.
13. Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights under i2cuci's Privacy Policy, please reach out to our team through the following channels:

Privacy Emailsupport@i2cuci.xyz
Email SubjectData Privacy Rights Request
Live ChatAvailable 24/7 within the platform
Response TimeLive Chat: 5 minutes · Email: 2 hours
Support LanguagesBahasa Malaysia
Data Request Processing Time21 business days

For data-related requests, please include your full name and i2cuci account number along with a detailed description of your request. We may require additional identity verification before processing a request in order to protect your privacy and data security.

Why Data Privacy Matters to i2cuci

In today's digital world, personal data has become an extraordinarily valuable asset. We at i2cuci fully appreciate how sensitive the information you entrust to us is — from your phone number and email address to your MYR financial transaction records, which reflect your personal financial decisions. Your trust is the foundation of our business, and we never take that responsibility lightly.

One thing that sets i2cuci apart from many platforms in this industry is our proactive approach to data protection. We don't wait for problems to arise before taking action — we continuously invest in security infrastructure, conduct regular security audits, and train our staff on the importance of data protection in their day-to-day work. Every i2cuci team member who handles personal data signs a confidentiality agreement and undergoes regular data protection training.

We are also very mindful of how we use your data for communications. i2cuci will not flood your inbox or messages with irrelevant promotions. When we do reach out about a promotion — such as a special bonus offer for a Malaysian badminton match or the latest slot title from Pragmatic Play — it is because we have assessed that the offer is genuinely relevant to your interests and gaming activity based on the data you have provided to us. You can opt out of marketing communications at any time without affecting your ability to use the i2cuci platform.

From a compliance standpoint, i2cuci keeps a close watch on data protection legislation in Malaysia. We review this Privacy Policy on a regular basis — not only when there are legal changes, but also as industry practices evolve or when we introduce new platform features that may involve processing data in different ways. Our goal is to ensure this Privacy Policy remains relevant, clear, and an accurate reflection of how we handle your data at all times.

Finally, we want to emphasise that your privacy rights are not merely a legal obligation for i2cuci — they are a core value we hold. Players who feel safe and respected are happy players, and happy players are the foundation of i2cuci's continued growth and success. Protecting your privacy is, in the most literal sense, in the best interests of everyone — including ourselves.

❓ FAQs — i2cuci Privacy Policy

The most frequently asked questions from members about privacy and data protection at i2cuci

No. i2cuci does not sell, lease, or trade your personal data to any third party for marketing or advertising purposes. This is an unconditional commitment. Your data is only shared in the limited situations outlined in our Privacy Policy — with service providers who help us operate the platform (such as payment processors Touch 'n Go, DuitNow, GrabPay, and others), or where required by Malaysian law. In all legitimate data-sharing scenarios, the receiving parties are bound by strict confidentiality agreements and may only use the data for purposes we have authorised. You may contact support@i2cuci.xyz if you would like more information about who may receive your data in a specific context.

You may submit a Subject Access Request by contacting our team via email at support@i2cuci.xyz with the subject line "Personal Data Access Request". In your email, please include your full name, i2cuci account number, and a description of the data you wish to access. To protect your privacy, we may require additional identity verification before processing your request. Once your identity has been verified, we will process the request and deliver the relevant data to you within 21 business days. Data will be provided in a secure and readable format. Please note that certain data may not be fully disclosed if it involves information belonging to third parties or is subject to legal confidentiality obligations.

When your i2cuci account is closed, we do not immediately delete all your data, as certain legal obligations require us to retain specific records for defined periods. Financial transaction records in MYR are retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements. KYC documents are kept for 5 years after account closure under Anti-Money Laundering (AML) legal requirements. Data not subject to legal retention requirements — such as game history and communication logs — will be deleted or anonymised within a reasonable period following account closure. For detailed information about your specific data after account closure, contact us at support@i2cuci.xyz.

Your payment transaction data — whether via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks) — is used solely for the following purposes: processing and verifying your deposits, processing and verifying your withdrawals, detecting and preventing fraudulent transactions, meeting financial reporting and AML requirements under Malaysian law, and resolving any disputes related to your transactions. Sensitive payment information such as your full bank account or e-wallet details is not stored directly by i2cuci — all processing is handled through secure payment systems that comply with Malaysian payment security standards. i2cuci does not use your transaction data to build a credit profile or share it with financial institutions without your consent.

Play Safely & With Confidence at i2cuci

Your data is protected. Your games are fair. Withdrawals are processed in 15 minutes. Over 316,000 members in Malaysia trust i2cuci — register for free today and experience a platform that puts you first.

256-bit SSL Malaysia PDPA Compliant Data Not Sold 24/7 BM Support

Responsible gaming. 18+ only. Terms & Conditions in effect.

Bahasa Melayu