bilacuci Privacy Policy

1. Data Controller

bilacuci ("we", "us", "our") is the data controller responsible for the personal data you provide when using the bilacuci platform at bilacuci.co. This Privacy Policy applies to all personal data collected through the bilacuci website, mobile-optimised platform, customer support channels, and any other point of interaction between you and bilacuci.

By registering an account on bilacuci or otherwise using the bilacuci platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

bilacuci collects personal data through several channels in the course of providing its services to registered players and visitors. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and gender;
• Residential address (including postcode and state in Malaysia);
• Email address and phone number;
• Username and encrypted password hash;
• Copies of identity documents submitted for KYC verification (e.g., Malaysian MyKad, passport);
• Proof of address documents (e.g., utility bill, bank statement).

2.2 Financial Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Partial payment method details (e.g., last four digits of a card, e-wallet account reference) retained for fraud prevention and reconciliation purposes. bilacuci does not store full card numbers or CVV codes.

2.3 Technical & Usage Data

• IP address and approximate geolocation at time of login;
• Device type, operating system, and browser version;
• Session duration, pages visited, games played, and betting history;
• Cookies and similar tracking technologies (see Section 6).

2.4 Communications Data

• Records of live chat conversations, email correspondence, and any other communications with bilacuci support or compliance teams;
• Survey responses, feedback submissions, and voluntary information provided by you.

3. How We Use Your Data

bilacuci processes your personal data for the following purposes:

• Account creation and management: To register your bilacuci account, verify your identity and age (21+), and maintain your account in accordance with our Terms & Conditions;
• Payment processing: To process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard, and to detect and prevent fraudulent transactions;
• Service delivery: To provide access to bilacuci's game library, sportsbook, live casino, and account features;
• Legal and regulatory compliance: To fulfil anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain records required under applicable law;
• Responsible gaming: To monitor player activity for indicators of problem gambling and to apply responsible gaming tools (deposit limits, self-exclusion) where triggered by the player or where required under our duty of care obligations;
• Customer support: To respond to queries, resolve disputes, and improve the quality of bilacuci's support service;
• Platform improvement: To analyse usage patterns, test new features, and improve the performance and stability of the bilacuci platform;
• Marketing communications: To send promotional offers and product updates to players who have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.

4. Legal Basis for Processing

bilacuci processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the bilacuci Terms & Conditions (e.g., account management, payment processing, game delivery);
• Legal obligation: Processing required to comply with applicable law, including AML legislation and licensing requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your data protection rights;
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent.

5. Data Sharing & Disclosure

bilacuci may share your personal data with the following categories of recipients:

• Payment processors: PCI-DSS-compliant payment service providers involved in processing your deposits and withdrawals (e.g., FPX network operators, e-wallet providers). These processors receive only the data necessary to execute the transaction;
• Game software providers: Licensed third-party game studios whose titles are accessible through the bilacuci platform may receive anonymised session data for technical support and RNG audit purposes. They do not receive your identity or financial data;
• Identity verification services: Third-party KYC and AML screening providers used to verify the identity and age of bilacuci players. These providers operate under data processing agreements with bilacuci;
• Regulatory and law enforcement authorities: Where bilacuci is required by law, court order, or lawful government request to disclose personal data;
• Professional advisers: Legal, compliance, and auditing professionals engaged by bilacuci, subject to professional confidentiality obligations.

6. Cookies & Tracking Technologies

bilacuci uses cookies and similar technologies on bilacuci.co to deliver and improve the platform experience. The categories of cookies in use include:

• Strictly necessary cookies: Required for core platform functions including login session management, security tokens, and language preference storage. These cannot be disabled without impairing platform functionality;
• Performance cookies: Used to collect anonymised data on how visitors navigate the bilacuci platform, which pages load slowly, and where technical errors occur. This data is used solely to improve platform performance;
• Functional cookies: Store your preferences such as game lobby filter settings, responsible gaming limit configurations, and notification preferences;
• Analytics cookies: Used to understand aggregate player behaviour across the bilacuci platform. Data collected is aggregated and does not identify individual users.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from completing the bilacuci login or using certain platform features.

7. Data Retention

bilacuci retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of the active account relationship plus a period of five years following account closure, to meet AML record-keeping obligations;
• KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later;
• Transaction records: Retained for five years in accordance with financial record-keeping requirements;
• Support communications: Retained for three years from the date of the most recent interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one year for audit trail purposes.

Upon expiry of the applicable retention period, bilacuci securely destroys personal data using industry-standard data deletion methods.

8. Data Security

bilacuci implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and bilacuci servers;
• Encryption of sensitive data fields at rest using AES-256;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of the bilacuci platform infrastructure;
• Incident response procedures in place to detect, contain, and notify affected parties in the event of a data breach.

While bilacuci takes data security seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bilacuci login credentials and for notifying us promptly if you suspect unauthorised account access.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bilacuci:

• Right of access: You may request a copy of the personal data bilacuci holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to bilacuci's legal retention obligations;
• Right to restriction: You may request that bilacuci restrict the processing of your personal data pending resolution of an accuracy dispute or objection;
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to bilacuci;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact bilacuci support. bilacuci will respond to verifiable requests within 30 days. We may need to verify your identity before processing a data rights request.

10. Children's Privacy

If bilacuci becomes aware that personal data has been collected from an individual below the age of 21, the account will be immediately closed, all personal data associated with the account will be deleted, and any deposited funds will be returned to the source payment method. If you believe a minor may have registered a bilacuci account, please contact our support team immediately.

11. Changes to This Policy

bilacuci reserves the right to update this Privacy Policy at any time. Where material changes are made, bilacuci will notify registered players by email to their registered address and post a prominent notice on the bilacuci platform prior to the effective date of the change. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of bilacuci following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

12. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bilacuci, please contact us through the 24/7 live chat available on the bilacuci platform, or by email at [email protected] (plain text — not a clickable link). bilacuci aims to acknowledge all privacy-related enquiries within two business days.