oncuci Privacy Policy

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by oncuci and applies to all users who register an account, browse the website, or use any services offered through the oncuci platform. By using our platform, you acknowledge that you have read, understood and agreed to this Privacy Policy in full.

oncuci operates under international licensing and is committed to the responsibility of protecting users' personal information. We recognise that privacy is a fundamental right of every individual, and we take this responsibility seriously at every level of our operations.

This Policy applies to all personal information we collect through the oncuci website, mobile applications, email communications and any direct interactions with our support team. Any material changes to this Policy will be communicated to you through a clear notice on this website.

2 Personal Information We Collect

In operating a responsible online gambling platform, oncuci collects various categories of information from players. This collection is necessary to enable us to provide a secure service, comply with licensing requirements and implement anti-money laundering measures.

Account Registration Information

When creating a new account, we collect your full name as stated on your identity document, your chosen username, an active email address, your mobile phone number, your date of birth for age verification, and the password you set, stored in encrypted form.

Identity Verification Information

As part of the Know Your Customer (KYC) process required by our international licensing, oncuci may require copies of identity documents such as your MyKad, passport or other relevant official documents to verify your identity before financial transactions are processed.

Financial and Transaction Information

For the purpose of deposits and withdrawals, we record details of the payment method you use, transaction history including deposit and withdrawal amounts, transaction reference numbers, and the date and time of each transaction. oncuci does not directly store your full bank account number or e-wallet password.

Usage and Game Activity Information

We track game records, bets and winnings solely for security purposes, dispute resolution and anti-fraud compliance. This data also helps us understand players' gaming habits in order to provide effective responsible gambling support.

Automatic Technical Information

When you browse the oncuci website, our systems automatically record your device's IP address, browser type and version, device operating system, pages you visit and time spent on them, as well as login and logout session data for account security purposes.

3 How We Use Your Information

oncuci uses collected personal information only for legitimate and reasonable purposes. We will not process your data for other purposes without giving prior notice and, where required, obtaining your explicit consent.

• Creating and managing your player account, including the required identity verification process
• Processing deposits and withdrawals through your chosen payment methods such as Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency
• Delivering important service notices, account security updates and relevant bonus information
• Detecting and preventing any fraudulent activity, money laundering or platform abuse
• Complying with legal obligations and licensing requirements imposed on us as an international licence operator
• Providing responsive and effective customer support via live chat and email in Malay and English
• Identifying early signs of gambling problems for responsible gambling support purposes
• Improving and developing platform services based on general usage patterns that cannot be individually identified

4 Sharing Information with Third Parties

oncuci does not sell your personal information to any third party. However, there are limited situations where we need to share your data with trusted parties to enable the platform to operate smoothly and securely.

Payment Service Providers

To process deposit and withdrawal transactions, we share the necessary transaction information with the payment gateway providers we use. These providers are subject to strict data protection agreements and are only permitted to use your data for transaction processing purposes.

Game and Technology Providers

Game software providers may receive game session data required to deliver a smooth gaming experience. All our technology partners are bound by confidentiality agreements and data protection standards equivalent to those we apply.

Regulatory Authorities

As a licensed operator, oncuci may be required to disclose personal information to regulatory authorities, licensing bodies or law enforcement agencies when legally obligated to do so. We will notify you of such requests unless we are prohibited from doing so by a court order or applicable law.

5 Data Security and Protection Measures

The security of your personal information is our priority. oncuci implements multiple layers of technical and organisational measures to protect your data from unauthorised access, accidental disclosure, alteration or destruction.

• All data transmitted between your browser and oncuci servers is encrypted using the latest Transport Layer Security (TLS) protocol
• Account passwords are stored as cryptographic hashes that cannot be decrypted, not in plain text format
• Our server infrastructure is protected by layered firewall systems, continuous security monitoring and strict access controls
• Regular security audits are conducted by our internal technical team and independent third-party assessors
• Access to players' personal data is granted only to staff with a legitimate work need and who are subject to confidentiality agreements
• An active anomaly detection system monitors transactions and login activity to identify any suspicious behaviour

While we take all reasonable steps to protect your data, no system for transmitting data over the internet can be guaranteed one hundred percent secure. We encourage you to also play your part in keeping your account secure by using a strong, unique password and not sharing your login details with anyone.

6 Data Retention Period

oncuci retains your personal information for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we retain certain records for the period required by legal and licensing obligations, particularly in relation to financial records and identity verification to comply with anti-money laundering requirements.

Technical data such as server logs and IP records are retained for a shorter period and automatically deleted once no longer needed for security and fraud detection purposes. Data that is no longer needed for any legitimate purpose will be permanently deleted or anonymised.

7 Your Rights Regarding Personal Data

As a data subject, you have certain rights regarding the personal information we hold about you. oncuci respects these rights and provides clear mechanisms for you to exercise them.

Right to Access Data

You have the right to request a copy of the personal information we hold about you. Such a request may be submitted by email to our support team and we will respond within a reasonable timeframe.

Right to Rectification

If any personal information we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update some information directly through your account profile settings.

Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. However, this right is subject to our legal obligation to retain certain records for the period required by licensing and applicable law.

Right to Object to Processing

You have the right to object to the processing of your personal data for certain purposes such as direct marketing. Once such an objection is received, we will stop the processing in question unless there are legitimate grounds that override your interests.

Right to Data Portability

You have the right to receive the personal information you have provided to us in a structured, commonly used and machine-readable format, where such processing is carried out based on your consent.

8 Cookies and Tracking Technologies

The oncuci website uses cookies and similar tracking technologies to improve user experience, analyse usage patterns and provide essential security functions.

• Essential Cookies: Required for basic website functions including login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how visitors use our website through aggregated and anonymous data for improvement purposes.
• Functional Cookies: Remember your preferences such as language, display settings and login information for ease of use.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the oncuci website.

9 Cross-Border Data Transfers

As an internationally licensed platform, oncuci may store and process your personal information on servers located outside Malaysia. In such situations, we ensure that protection equivalent to the standards set by this policy is fully applied, including through binding data protection agreements with all involved service providers.

All cross-border data transfers are carried out only where adequate safeguards are in place and in line with our licensing requirements. We do not transfer data to regions that do not have appropriate data protection standards.

10 Children and Age Restrictions

oncuci services are strictly for individuals aged 21 and above. We do not knowingly collect personal information from individuals below that age limit. If you believe that someone under the age of 21 has registered an account or provided personal information to us, please contact our support team immediately so that appropriate action can be taken, including account closure and deletion of related data.

11 Changes to This Privacy Policy

oncuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service developments. When material changes occur, we will display a clear notice on the oncuci website and, in certain circumstances, send a notification directly to your registered email.

The "Last Updated" date at the top of this page reflects the date this Policy was last reviewed. Continued use of the oncuci platform after changes take effect means you accept the updated Policy. We encourage you to review this page periodically.

12 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way we handle your personal information, please contact our team through the following channels:

The oncuci customer support team is ready to handle privacy-related enquiries via live chat on the platform and by email at [email protected]. We operate 24 hours a day, 7 days a week and provide service in Malay and English for your convenience.

We aim to respond to all privacy-related enquiries within a reasonable timeframe. For requests involving data access rights or record deletion, please clearly state your account username and the type of request in your message to help speed up the process.