Data Minimisation
imcuci aims to request only the information reasonably required for account administration, security, KYC verification, MYR transaction review and compliance obligations.
This Privacy Policy explains how imcuci collects, uses, stores and protects personal information when Malaysian users browse the website, manage an account, complete identity checks or review MYR payment activity.
imcuci follows four practical privacy principles: collect only information connected to a defined purpose, protect it with proportionate safeguards, retain it only as long as necessary, and respond clearly when users exercise their rights.
imcuci aims to request only the information reasonably required for account administration, security, KYC verification, MYR transaction review and compliance obligations.
imcuci applies technical and organisational controls intended to reduce unauthorised access, alteration, disclosure or loss of personal and transaction information.
imcuci explains why each major category of information may be processed, including account support, fraud prevention, payment reconciliation and responsible gambling measures.
imcuci considers applicable Malaysian privacy requirements, including the Personal Data Protection Act 2010 where it applies to the relevant processing activity.
Identity records used for KYC are treated as sensitive operational material and should only be accessed by authorised personnel or approved service providers.
imcuci provides a process for users to request access, correction or deletion where applicable, subject to identity confirmation and lawful retention duties.
This Privacy Policy applies to personal information processed through imcuci. It should be read together with the website's Terms & Conditions. By using imcuci, you acknowledge that personal information may be handled as described in this policy, subject to applicable law and any choices made available to you.
Privacy is particularly important in an online gambling environment because account records may include identity documents, financial activity and information connected to responsible gambling controls. imcuci therefore treats privacy management as an operational obligation rather than a marketing statement.
This policy applies to website visitors, registered users and individuals who communicate with imcuci about account, payment, privacy or responsible gambling matters. It covers information collected through the website and information received while delivering related support.
The categories collected depend on how a person uses imcuci. Merely reading an informational page does not require the same data as opening an account, completing KYC or requesting a withdrawal.
| Data category | Typical examples | Primary purpose |
|---|---|---|
| Identity and contact data | Name, date of birth, residential address, email address and account identifier | Account administration, age checks, communication and security |
| Verification data | MyKad, driving licence, passport, proof of address and verification selfie | KYC, fraud prevention and compliance review |
| Payment data | Transaction amount, selected bank or e-wallet, time, status and masked account details | Processing and reconciling MYR deposits and withdrawals |
| Usage data | Pages visited, session time, browser type, device type and approximate location | Security, performance, troubleshooting and service improvement |
| Gaming data | Game category, wager, result, bonus usage and sports market activity | Account history, dispute handling, risk controls and integrity monitoring |
Payment records may identify the route selected, such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. imcuci does not need users to publish full payment credentials in ordinary support correspondence.
imcuci may receive information directly when a user enters registration details, uploads requested verification documents, makes a payment choice, sets a deposit limit or contacts support. Information may also be created automatically when the platform records a login, game session, EPL or Liga Super Malaysia sports selection, security event or transaction outcome.
Technical data may be collected from the device and browser used to access imcuci. This can include an internet protocol address, browser version, device operating system, time zone and page interaction data. Such records help identify suspicious access, troubleshoot errors and maintain reliable service for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere.
imcuci may process personal information for the following defined purposes:
imcuci will not use KYC documents for unrelated advertising. Where a new purpose is materially different from the reason for which information was collected, imcuci will provide an appropriate notice or seek consent where required.
Depending on the circumstances and applicable law, imcuci may rely on contractual necessity, legal obligations, legitimate operational interests or consent. Contractual processing includes administering an account and completing a requested transaction. Legal or compliance processing can include identity verification, fraud investigation and retention of transaction records.
Legitimate interests may support platform security, service improvement and the prevention of misuse, provided those interests are balanced against individual privacy rights. Where imcuci relies on consent, a user may withdraw that consent for future processing, although withdrawal does not invalidate processing completed beforehand.
imcuci may request a valid Malaysian identity document, driving licence or passport, together with proof of address and a verification selfie. A bank statement or utility bill used as proof of address should normally be recent and clearly show the required name and address. Additional checks may be requested where account information and payment ownership do not match.
MYR payment information is used to authorise, record and reconcile transactions. imcuci may retain a payment reference, amount, date, status and masked account details. Payment processing may involve the selected Malaysian bank, e-wallet or payment service provider. Those providers may process information under their own legal duties and privacy practices.
imcuci may use cookies or similar browser storage to maintain a session, remember essential preferences, support security controls and measure website performance. Essential cookies are required for functions such as authentication and account protection. Analytical records may help imcuci understand which pages perform correctly and where users encounter technical difficulties.
Users can control browser cookies through their device settings. Blocking essential cookies may prevent login, saved preferences or other secure functions from operating correctly. imcuci does not use a cookie setting to remove the need for age verification or KYC.
imcuci does not sell personal information as a standalone commercial product. Information may be disclosed only where reasonably necessary to operate the platform, complete a transaction, protect users or meet lawful duties.
Recipients may include approved hosting and security providers, identity-verification services, payment processors, fraud-prevention specialists, professional advisers and competent authorities acting under a valid legal basis. imcuci expects service providers to use personal information only for agreed purposes and to apply suitable confidentiality and security controls.
If the ownership or structure of imcuci changes, relevant information may be transferred as part of a legitimate business transaction, subject to confidentiality safeguards and applicable privacy requirements.
Some technical, verification or operational service providers may process information outside Malaysia. Privacy laws and enforcement standards can differ between jurisdictions. Where an international transfer occurs, imcuci will seek appropriate contractual, technical or organisational safeguards relevant to the nature of the information and the applicable legal requirements.
International processing does not change the purposes described in this policy. imcuci will not treat an overseas location as permission to use account or KYC information for unrelated purposes.
imcuci uses proportionate safeguards intended to protect personal information. These may include encrypted transmission, access restrictions, account authentication controls, activity logging, staff confidentiality duties, vulnerability management and procedures for reviewing suspected security incidents.
No internet service can promise absolute security. Users also have an important role: choose a unique password, secure the email account connected to imcuci, avoid shared public devices and report unexpected login activity promptly. imcuci will assess suspected data incidents and provide notifications where required by applicable law.
imcuci retains personal information only for as long as reasonably needed for the relevant purpose. Account data may remain available while the account is active. KYC, transaction, dispute, security and responsible gambling records may need to be retained after closure to meet compliance, fraud prevention, accounting or legal defence requirements.
Retention periods can differ according to the data category, legal obligation and risk involved. When information is no longer required, imcuci will delete it, anonymise it or place it beyond routine operational use, subject to secure backup cycles and lawful preservation requirements.
Subject to applicable law and relevant exceptions, a user may ask imcuci to provide access to personal information, correct inaccurate records, restrict certain processing or delete information that is no longer required. A user may also object to particular processing or withdraw consent where consent is the applicable legal basis.
imcuci may request identity confirmation before responding to a privacy request. This protects account records from disclosure to an impersonator. Some requests may be limited where retention is required for transaction records, security investigations, self-exclusion enforcement, legal claims or another lawful obligation.
Privacy requests should state the account identifier, the right being exercised and enough information for imcuci to locate the relevant records. The website email is displayed in the Contact Us section below as plain text.
imcuci is intended for players aged 21 and above only. Date-of-birth and identity information may be used to prevent underage access. Information about deposit limits, cooling-off requests or self-exclusion may be retained to apply those protections effectively and to prevent a restricted account from being reopened during an active exclusion.
Where account behaviour indicates a potential responsible gambling concern, imcuci may use transaction, session and betting information to provide a warning, restrict features or support an account review. Such processing is intended to reduce harm and protect the user; it is not used to encourage increased gambling.
imcuci may update this Privacy Policy when services, legal requirements, security practices or processing activities change. Material revisions will be identified by an updated review date and may be communicated through a prominent website notice where appropriate.
Users should review this page periodically. Continued use of imcuci after an update does not remove any rights that cannot lawfully be waived. If a change requires consent, imcuci will seek that consent before applying the relevant processing.
Questions about this Privacy Policy, correction requests or concerns about how imcuci handles personal information may be sent to the website support team. Please do not include a full password, one-time password, complete bank credential or unrequested identity-document attachment in the first message.
Website email: [email protected]
The email address above is displayed as plain text and is not a clickable link. imcuci may request additional information through a secure process when identity verification is necessary to answer a privacy request.
Privacy protection works best when platform controls and careful user behaviour operate together. Before using imcuci, confirm that the website address is correct, your connection is secure and your account credentials are not reused elsewhere.
Return to the imcuci homepage or review the account rules before using any gaming or sports betting feature. Play responsibly — 21+ only.