Privacy Policy bila2cucu —
Our Commitment to
Your Personal Data

1 Introduction and Scope of This Policy

Bila2cucu ("we", "Platform") takes seriously its responsibility to protect the privacy of all users. This Privacy Policy describes our privacy practices regarding the collection, use, disclosure, and protection of personal information you provide to us or that we collect while you use the bila2cucu platform — including our website at bila2cucu.net, our mobile app, and all related services.

This policy applies to all users of the bila2cucu platform, including unregistered visitors, registered members, and former members. By continuing to use this platform after an updated Privacy Policy is published, you are deemed to have accepted the changes made.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable regulations in force from time to time. In the event of any conflict between a translation of this Privacy Policy in another language and the Bahasa Melayu version, the Bahasa Melayu version shall prevail.

2 Types of Personal Data We Collect

We collect your personal information through two main channels — information you provide directly and information collected automatically while you use the platform.

Information you provide directly:

Information collected automatically:

• Your IP address, web browser type, and device operating system version.
• Platform usage data including pages visited, time spent, and in-game actions.
• Device data such as unique device identifiers, screen resolution, and other technical information.
• General location data based on your IP address (state or country — not precise GPS location).
• Error logs and diagnostic data that help us resolve technical issues.

3 How We Use Your Data

All personal data we collect is used solely for legitimate and stated purposes. The following are the primary purposes for which bila2cucu uses your data:

• Account management: Create, maintain, and protect your account on the bila2cucu platform.
• Transaction processing: Process deposits, withdrawals, and any financial transactions requested by you.
• Identity verification (KYC): Meet legal requirements related to anti-money laundering (AML) and age verification.
• Customer support: Respond to enquiries, resolve complaints, and provide technical support.
• Platform security: Detect and prevent fraud, account abuse, and suspicious activity.
• Service improvement: Analyse usage patterns to improve user experience and platform performance.
• Operational communications: Send important notifications related to your account, transactions, security updates, and policy changes.
• Marketing (with consent): Send promotional offers and platform updates where you have consented to receive them.
• Legal compliance: Fulfil reporting and record-keeping obligations under applicable laws in Malaysia.

4 Data Sharing and Disclosure

Bila2cucu does not sell, rent, or disclose your personal data to third parties for their own commercial marketing purposes. Data disclosure to external parties only occurs under the limited circumstances described below:

• Service providers: Third parties that help us operate the platform — including payment processors, technology infrastructure providers, and identity verification services — are bound by confidentiality agreements and are prohibited from using your data for any other purpose.
• Game providers: Minimum required information is shared with licensed game providers to ensure games function correctly and to meet their licensing requirements.
• Legal requirements: We may need to disclose your data to government authorities or law enforcement when required to do so by law or a valid court order.
• Fraud prevention: In cases where there is evidence of fraud or serious illegal activity, we reserve the right to share relevant information with the appropriate authorities or related platforms for investigation purposes.
• Business transfers: In the event of a merger, acquisition, or asset transfer, user data may be transferred as part of that process, subject to prior notice being given to users.

In all of the data sharing situations above, we ensure that adequate safeguards are in place and that your data is used only for legitimate and limited purposes.

5 Data Security and Protection

Protecting your personal data is bila2cucu's top priority. We implement a range of technical and organizational security measures to ensure your data remains protected at all times:

• 256-bit SSL Encryption: All data transmitted between your browser or app and bila2cucu's servers is encrypted using the latest TLS protocol.
• Encrypted password storage: Your account password is never stored in plain text — we use a strong one-way hashing algorithm.
• Two-factor authentication (2FA): An additional security layer is available for all accounts to prevent unauthorized access.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, and security anomalies.
• Internal access controls: Only authorized personnel who require access to perform their duties may access users' personal data.
• Regular security testing: We conduct regular vulnerability assessments and penetration testing by independent security experts.

6 Data Retention Period

Bila2cucu retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: Retained for as long as your account is active and for the required period following account closure in accordance with legal requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• KYC documents: Retained for a minimum of five (5) years after the termination of the business relationship, in accordance with Malaysia's AMLATFPUAA requirements.
• Support communication logs: Retained for three (3) years to allow for historical reference and dispute resolution if required.
• Cookie and analytics data: Retained according to cookie type — generally between 30 days and 24 months depending on the function of the cookie in question.

Once the relevant retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to any specific individual.

7 Your Rights Over Personal Data

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by bila2cucu:

To exercise any of the above rights, please contact our support team by email at [email protected]. We will process your request within 21 business days. In complex cases, this period may be extended to 60 days with prior notice to you.

8 Cookies and Tracking Technologies

Bila2cucu uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage, and deliver relevant content. The following are the categories of cookies we use:

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect core platform functionality, including the ability to log in to your account.

9 International Data Transfers

In the course of operating the platform, some of your personal data may be stored or processed on servers located outside Malaysia — particularly in relation to the cloud computing infrastructure and technical services we use.

In all such international data transfers, bila2cucu ensures that protection equivalent to Malaysia's PDPA is upheld through:

• Binding data processing agreements are in place with all third-party service providers.
• We only work with companies that comply with internationally recognised data protection standards.
• Standard contractual clauses are in place to protect your rights in all cases of data transfer.

You have the right to obtain further information about the safeguards used for international data transfers by contacting us through the channels listed in section 12.

10 Children's Privacy and Minor Protection

The bila2cucu platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe a child in their care may have registered on our platform are asked to contact us immediately at [email protected].

11 Changes to This Privacy Policy

Bila2cucu reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements, or platform service improvements.

When we make significant changes to this Privacy Policy, we will notify you via:

• In-platform notifications on bila2cucu during your next login session.
• An email notification to the email address registered with your account.
• Updates the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the bila2cucu platform after changes are published will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before those changes take effect.

12 Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our team:

• Privacy Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 directly within the bila2cucu platform
• Target Response Time: Privacy-related requests will be responded to within 14 business days

For data rights requests (access, correction, deletion), please include your full name, account username, and request details to help expedite the process. We may need to verify your identity before processing any data-related request.