Privacy Policy GudangCuan – Member Data Security

1. Introduction

GudangCuan is an online entertainment platform operating in Malaysia, offering Sports Betting, slots, Blackjack, table games, progressive jackpots, and live casino services to eligible members. In providing these services, GudangCuan needs to collect and process certain personal data.

This Privacy Policy is drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection standards. GudangCuan is committed to ensuring that all personal data collected is processed responsibly, securely, and with full transparency.

This Privacy Policy applies to all users of the GudangCuan platform — including unregistered visitors, registered members, and former members whose data is still within the defined retention period. By accessing or using any part of the GudangCuan platform, you are deemed to have read and agreed to this Privacy Policy.

2. Types of Personal Data Collected

GudangCuan collects various categories of personal data depending on how you interact with the platform. Below is a summary of the data we may collect:

Payment processing, AML compliance

Data Category	Sample Information	Primary Purpose
Identity Data	Full name, date of birth, MyKad/passport number	KYC identity verification, fraud prevention
Contact Data	Email address, phone number, state of residence	Account communications, promotional notifications
Financial Data	Deposit/withdrawal transaction records, payment methods
Technical Data	IP address, browser type, operating system, device ID	Account security, fraud detection
Usage Data	Game records, betting history, session duration	Responsible gaming, platform improvement
Communication Data	Live chat transcripts, support tickets, emails	Customer support, complaint resolution

3. How GudangCuan Collects Data

GudangCuan collects personal data through several different channels:

3.1 Data You Provide Directly

• GudangCuan account registration form — name, email, phone number, date of birth
• KYC identity verification process – copies of MyKad, facial photo, proof of address
• Deposit and withdrawal forms — TNG, GrabPay, DuitNow, or FPX e-wallet account details
• Communications with the GudangCuan customer support team via live chat or email
• Participation in GudangCuan campaigns or loyalty programmes

3.2 Automatically Collected Data

• Server logs recording IP addresses, browser types, and access times
• Cookies and tracking technologies that store user preferences and sessions
• Game data automatically recorded by the GudangCuan platform system
• Device information such as phone model, operating system version, and screen resolution

3.3 Data from Third Parties

In certain circumstances, GudangCuan may receive personal data from trusted third parties, such as identity verification service providers, payment processing companies like FPX and Malaysian e-wallet operators, and fraud prevention agencies.

4. Purposes for Using Personal Data

GudangCuan uses the personal data collected for the following legitimate and permitted purposes:

• Account Management: Creating, verifying, and managing GudangCuan member accounts
• Transaction Processing: Securely processing deposits and withdrawals in MYR via TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Platform Security: Detecting and preventing fraud, hacking, duplicate accounts, and other unlawful activity
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and mandatory reporting requirements to the relevant Malaysian authorities
• Customer Support: Assisting members with enquiries, complaints, and technical issues related to the GudangCuan platform
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support
• Service Improvements: Analysing usage data to improve the user experience and performance of the GudangCuan platform
• Marketing Communications: Sending information about GudangCuan's latest promotions, bonuses, and offers to members who have consented to receive such communications

5. Sharing Data with Third Parties

GudangCuan does not sell, rent, or trade members' personal data to any third party for marketing purposes. However, in the course of operating the platform, GudangCuan may share data with select third parties in the following circumstances:

• Payment Service Providers: Transaction information is shared with payment processors such as FPX, TNG eWallet, GrabPay, and Boost to facilitate deposit and withdrawal processing
• Identity Verification Service Providers: KYC data is shared with approved third-party identity verification providers for verification purposes only
• Game Providers: Minimal game data is shared with game software providers to ensure games function correctly
• Statutory Authorities: GudangCuan will disclose personal data where required by Malaysian law, court order, or a legitimate request from law enforcement authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of GudangCuan assets, user data may be transferred as part of the business transaction

All third parties that receive data from GudangCuan are required to protect it to the same or higher standard as GudangCuan itself.

6. Data Storage & Security

GudangCuan retains members' personal data for as long as necessary to fulfil the purpose for which it was collected, or for the period required under Malaysian law. Generally:

• Active account data: retained for the duration the account remains active and up to 5 years after account closure
• Financial transaction records: retained for a minimum of 7 years as required by Malaysian law
• Support communication logs: retained for 2 years after the case is resolved
• Technical data and logs: retained for 12 months for security purposes

6.1 Technical Security Measures

GudangCuan implements a range of technical and organisational security measures to protect members' personal data, including:

• Encryption of data in transit using the TLS 1.3 / SSL 256-bit
• Encryption of data at rest for sensitive information
• Strict role-based access controls – only staff who require the data to perform their job duties are permitted to access it
• Regular security audits and penetration testing conducted by independent third parties
• Continuous 24/7 monitoring to detect suspicious activity or security breaches
• A comprehensive incident response plan to address any data breaches

7. Cookies and Tracking Technologies

GudangCuan uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit the GudangCuan platform.

7.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Functional Cookies: Saves your preferences such as language, text size, and display settings to enhance your user experience.
• Analytic Cookies: Collecting aggregated information on how members use the GudangCuan platform to help us improve our services.
• Marketing Cookies: Used to display relevant advertisements and measure the effectiveness of GudangCuan's marketing campaigns.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the GudangCuan platform.

8. Your Rights as a Data Subject

As a GudangCuan member based in Malaysia, you have the following rights regarding your personal data under PDPA 2010:

• 👁️
  Right to Access Data – You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 21 business days.
• ✏️
  Right to Rectification – If any personal data we hold about you is inaccurate or out of date, you have the right to request immediate correction.
• 🗑️
  Right to Erasure – In certain circumstances, you may request the deletion of your personal data. Such requests are subject to applicable legal retention requirements.
• ⛔
  Right to Object to Processing – You may object to the processing of your personal data for direct marketing purposes at any time.
• 📦
  Right to Data Portability – You have the right to receive your personal data in a machine-readable format for transfer to another operator where applicable.
• 🔕
  Right to Withdraw Consent – You may withdraw your consent for data processing that relies on consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To submit any request relating to the rights above, please contact the GudangCuan Privacy team by email at privacy@gudangcuan.net or via our platform's live chat. We will respond to all valid requests within the timeframe required by law.

9. Children's Privacy

The GudangCuan platform is intended solely for individuals aged 18 years and above. GudangCuan does not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered on GudangCuan are urged to contact us immediately at support@gudangcuan.net.

10. Links to Third-Party Sites

The GudangCuan platform may contain links to third-party websites in certain contexts. GudangCuan is not responsible for the privacy practices or content of those third-party websites. We recommend that you read the Privacy Policy of each website you visit separately.

11. Changes to the Privacy Policy

GudangCuan reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. Any material changes to this Privacy Policy will be communicated to members via:

• In-platform notifications on GudangCuan upon login
• Email to the registered address at least 14 days before the changes take effect
• Update the "Last Updated" date at the top of this page

Continued use of the GudangCuan platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

12. Contact the GudangCuan Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how GudangCuan handles your personal data, please reach us through the following channels:

• Privacy Email: privacy@gudangcuan.net
• General Support Email: support@gudangcuan.net
• Live Chat: Available 24/7 directly on the GudangCuan platform
• Response Time: Under 3 minutes (live chat), up to 5 business days (email)