Privacy Policy

btcuci ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who uses our online gaming platform at https://btcuci.cam. This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect the personal information you provide to us or that we collect in the course of your use of the btcuci platform, including all associated pages, services, mobile applications, and customer support channels.

This Policy applies to all players who access btcuci from any location, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. By registering an account or continuing to use the btcuci platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy is to be read in conjunction with our Terms & Conditions, which together constitute the full legal agreement between you and btcuci. In the event of any conflict between this Policy and the Terms & Conditions with respect to data matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, including name, identification number, email address, IP address, payment details, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — btcuci, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — Any third-party service provider that processes personal data on btcuci's behalf and under its documented instructions.
• "Player" / "User" — Any natural person aged 21 or above who has registered an account on the btcuci platform or who otherwise interacts with our services.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a stated purpose.
• "KYC Documents" — Identity and address verification documents submitted by Players in fulfilment of the Know Your Customer obligations, including MyKad, passport, and proof of address documentation.

btcuci collects the following categories of personal data in the course of providing gaming and related services:

3.1 Account Registration Data

• Full legal name as it appears on your identification document.
• Date of birth (for age verification — minimum age 21).
• Email address and mobile phone number.
• Chosen username and encrypted account password.
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Shah Alam).
• Currency preference (MYR / Ringgit Malaysia is the default for Malaysian players).

3.2 KYC Verification Data

• Copy of government-issued photo ID (Malaysian MyKad, Passport, or Driver's License).
• Proof of residential address (utility bill, bank statement, official correspondence dated within 90 days).
• Selfie photograph holding the identity document.
• Payment method verification (screenshot of bank account or e-wallet registered in your name).

3.3 Financial Transaction Data

• Deposit and withdrawal transaction history, including amounts in MYR and timestamps.
• Payment method type (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency wallet address).
• Bank account name and last four digits (no full account numbers are stored on btcuci servers).

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session logs, page views, click events, and platform navigation behaviour.
• Game play history, betting records, and wagering patterns (used for responsible gambling monitoring).

3.5 Communications Data

• Records of live chat and email correspondence with the btcuci support team.
• Complaint and dispute records.
• Survey responses and voluntary feedback submissions.

btcuci collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically through the Platform — via server logs, cookies, pixel tags, and similar technologies when you browse or interact with the btcuci website or mobile application.
• From payment service providers — transaction confirmation data received from FPX, DuitNow, and other payment processors when you complete a deposit or withdrawal.
• From identity verification providers — results and risk scores from third-party KYC and AML screening services, used to verify your identity and comply with regulatory obligations.
• From fraud prevention services — device fingerprinting signals and behavioural analytics data used to detect suspicious activity and protect the integrity of the platform.

btcuci processes your personal data for the following specific and clearly defined purposes:

btcuci relies on one or more of the following legal bases when processing your personal data:

• Contractual necessity — Processing required to perform our obligations under the Terms & Conditions you have agreed to, including account management, payment processing, and game provision.
• Legal obligation — Processing required to comply with applicable gaming regulations, anti-money-laundering obligations, and lawful orders from regulatory or judicial authorities.
• Legitimate interests — Processing conducted in pursuit of btcuci's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service quality improvement, where these interests are not overridden by your rights and freedoms.
• Consent — Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

btcuci does not sell, rent, or trade your personal data to third parties for their own commercial use. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors — FPX gateway operators, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network processors, solely to facilitate your transactions.
• KYC and identity verification providers — Third-party services engaged to verify your identity, age, and source of funds in compliance with our regulatory obligations.
• Fraud prevention and AML screening services — Providers of transaction monitoring, device fingerprinting, and sanction screening services used to protect the integrity of the platform and comply with anti-money-laundering regulations.
• Game software providers — Third-party game studios and live dealer providers whose games are offered on the btcuci platform. These providers may receive anonymised session data for game integrity and technical purposes.
• Regulatory and law enforcement authorities — Where required by applicable law, court order, or regulatory direction, btcuci will disclose personal data to relevant authorities. We will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers — Legal, accounting, and compliance advisers engaged by btcuci, subject to binding confidentiality obligations.

All third-party data processors engaged by btcuci are subject to binding data processing agreements that require them to process personal data only on btcuci's documented instructions, implement appropriate security measures, and not transfer data to further third parties without authorisation.

btcuci retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to overriding legal or regulatory retention requirements. The following general retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players may request early deletion of their data subject to the exceptions described in Section 10 (User Rights).

btcuci uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies — Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impacting core platform functionality. No consent is required for these cookies.
• Performance & Analytics Cookies — Used to collect anonymised information about how players interact with the platform, such as pages visited and time on page, to help us improve performance and usability. Consent is required.
• Functional Cookies — Remember your preferences such as language, currency display (MYR), and notification settings. Consent is required.
• Fraud Prevention Tokens — Short-lived identifiers used to detect and prevent fraudulent logins, bot activity, and account takeovers. These are strictly necessary and require no consent.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from logging into your account or accessing certain features of the btcuci platform.

Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data held by btcuci. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address.

btcuci will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will always communicate any such fee before processing the request.

btcuci implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption at rest — All stored personal data and sensitive account information is encrypted using AES-256 encryption. Database access is restricted to authenticated internal services.
• Encryption in transit — All communications between your browser or device and the btcuci platform are secured using TLS 1.3. HTTP connections are automatically redirected to HTTPS.
• Access controls — Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion detection — Real-time monitoring systems alert the btcuci security team to anomalous access patterns, brute-force attempts, and other indicators of unauthorised access.
• PCI-DSS compliant payment handling — Payment transactions via FPX, DuitNow, and other channels are processed through certified payment gateways. No full banking credentials or card numbers are stored on btcuci infrastructure.
• Incident response — btcuci maintains a formal data breach response plan. In the event of a breach that poses a risk to players' rights and freedoms, affected individuals will be notified without undue delay.

While btcuci implements industry-standard security practices, no system is entirely immune to cyber threats. Players are responsible for maintaining the confidentiality of their account credentials and should contact support immediately if they suspect unauthorised access to their account.

The btcuci platform is strictly intended for individuals aged 21 years and above. btcuci does not knowingly collect, process, or store personal data from individuals under the age of 21.

Age verification is a mandatory step in the btcuci account registration process. Players are required to confirm their date of birth at registration, and KYC identity verification is used to confirm age eligibility before withdrawals are processed.

As an internationally operating gaming platform, btcuci may transfer personal data to third-party service providers or infrastructure hosted outside of Malaysia. Such transfers are carried out only where adequate safeguards are in place to ensure that your data receives a level of protection equivalent to that described in this Policy.

Safeguards for international transfers include:

• Binding contractual clauses in all third-party data processing agreements that require compliance with data protection standards.
• Transfer to countries recognised as providing an adequate level of data protection.
• Implementation of technical measures (encryption, pseudonymisation) to reduce risk during transit and at the destination.

Players may request information about specific international transfers affecting their personal data by contacting us at [email protected].

btcuci reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The "Last Reviewed" date displayed at the top of this page will be updated whenever material changes are made.

Where changes are material — for example, changes to the purposes for which we process your data, changes to your rights, or the introduction of new data sharing arrangements — btcuci will provide advance notice via a prominent notice on the platform and, where practicable, by email to your registered address at least 14 days prior to the changes taking effect.

Your continued use of the btcuci platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you must discontinue use of the platform and may close your account at any time.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way btcuci handles your personal data, please contact our Data Protection team using the details below. All data-related enquiries are handled with priority and strict confidentiality.

For questions about our Terms & Conditions or our Responsible Gambling programme, please visit the respective pages or contact our support team directly.