7ecuci Privacy Policy – Our Commitment to Protecting Malaysian Members' Data

1 Introduction and Scope of This Policy

7ecuci takes data protection responsibilities extremely seriously. As an online betting and entertainment platform operating in Malaysia, we handle personal data across multiple categories every day — from basic registration details to sensitive financial transaction data. We understand that your trust in us depends significantly on how we manage that information.

This Policy applies to all information you provide to us through any channel — including account registration on 7ecuci.com, interactions with our customer support team, use of deposit and withdrawal services, and participation in our promotional and VIP programmes.

This Privacy Policy should be read together with Terms & Conditions us. Together, these two documents form the complete agreement between you and 7ecuci regarding your use of the platform and how your data is handled.

2 Personal Data We Collect

7ecuci only collects data that is strictly necessary for the stated purposes — we do not collect more than we need (the "data minimisation principle"). The data we collect falls into several categories:

Data You Provide Directly:

• Full name as stated on your Malaysian identity document (MyKad)
• An active Malaysian phone number (used for OTP verification)
• A valid email address
• Date of birth (for age verification — 18 and above)
• Photo ID and selfie (requested only during first withdrawal verification)
• EWallet account information or Malaysian bank account number for withdrawal purposes

Automatically Collected Data:

• The IP address of your device when accessing the platform
• Device type, operating system, and browser version
• Login session data, including the date, time, and duration of each session
• Betting history and transaction records within the platform
• Support team interaction data, including live chat conversation records

Data from External Sources (where applicable):

• Verification information received from eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) when you make a deposit or withdrawal
• Verification data received from Malaysian banks via the FPX gateway when used for transactions

3 How We Use Your Personal Data

7ecuci uses your personal data solely for the following purposes:

We will not use your data for any purpose beyond those listed above without first obtaining a fresh and separate consent from you.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), 7ecuci processes your personal data on the following legal bases:

• Consent: For most data processing activities, including marketing notifications, we rely on the explicit consent you provide at registration or at a later time. You may withdraw this consent at any time through your account settings or by contacting our support team.
• Performance of Contract: Processing required to deliver the services you have requested — for example, processing a deposit via Touch 'n Go or withdrawing winnings to your DuitNow account — is carried out on the basis of legitimate contract performance.
• Legitimate Interests: Fraud detection, platform security, and anonymised usage analytics are conducted on the basis of legitimate interests 7ecuci and our members, provided those interests do not override your privacy rights.
• Legal Obligation: In cases where Malaysian law requires us to disclose certain data to the relevant authorities, we will comply with those requirements without exceeding the limits prescribed by law.

5 Data Sharing with Third Parties

7ecuci does not sell your personal data. Data sharing only occurs in the following limited circumstances and only with parties bound by strict confidentiality obligations:

• Payment Service Providers: Payment gateways that process your deposits and withdrawals — including FPX, and eWallet providers such as Touch 'n Go, GrabPay, Boost, and ShopeePay — receive only the minimum data necessary to complete each transaction. They are not permitted to use this data for any other purpose.
• Technical Service Providers: Cloud service, IT infrastructure and cybersecurity providers that help us maintain secure and stable platform operations. All such providers are bound by strict data processing agreements.
• Legal Authorities: Where we are required to comply with a court order, regulation, or lawful request from a Malaysian law enforcement agency, we will disclose only the data specified within the legally defined scope.
• Fraud Prevention: In cases of serious fraud or suspected illegal activity involving money laundering, we may be required to share data with relevant parties such as financial institutions or authorities for investigation purposes.

6 Our Data Security Measures

7ecuci implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction or disclosure:

• Encryption in Transit: All data transmitted between your device and 7ecuci's servers is encrypted using TLS 1.3 with AES-256 encryption — the highest standard available today in web security.
• Encryption at Rest: Sensitive data stored in our databases is encrypted at rest. Passwords are never stored in plain text — we use the secure bcrypt hashing algorithm.
• Strict Access Controls: Only staff with a legitimate operational need are granted access to member data. Access is managed through a role-based permission system, protected by two-factor authentication (2FA), and all access is recorded in an audit log.
• 24/7 Security Monitoring: An automated threat monitoring system operates around the clock to detect suspicious activity or intrusion attempts and respond immediately.
• Regular Security Testing: Platform 7ecuci undergoes regular penetration testing and independent third-party security audits to identify and address any vulnerabilities before they can be exploited.
• Incident Response Procedure: We have a comprehensive incident response plan in place. Should a data breach occur that may affect members, we will notify the relevant parties within the timeframe required by law.

While we take all reasonable steps to protect your data, no system is 100% immune. You also play an important role in keeping your account secure — use a strong and unique password, enable two-factor authentication where available, and never share your login credentials with anyone.

7 Data Retention Period

7ecuci retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by Malaysian law. The following is a general guide to our retention periods:

• Active Account Data: Retained for the duration of your account's active period and for 7 years after account closure, in accordance with financial record-keeping requirements under Malaysian law.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of 7 years to comply with Malaysia's tax and financial regulations.
• Identity Verification Data (KYC): Identity documents collected for KYC verification purposes are retained for 7 years from the date of verification or account closure, whichever is later.
• Customer Support Logs: Live chat and email conversation records are kept for 3 years from the date of each interaction.
• Technical Log Data: System and security logs are retained for 12 months for security monitoring and technical troubleshooting purposes.
• Marketing Data: If you have given consent for marketing communications, that data is retained until you withdraw your consent or close your account.

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked back to you as an individual.

8 Your Rights Under the PDPA

As a data subject in Malaysia, you have certain rights under the Personal Data Protection Act 2010 (PDPA) with respect to the personal data we hold about you. 7ecuci committed to making it easy for you to exercise these rights: