Privacy Policy GangCuci – Malaysia User Data Protection

01 Introduction & Scope of This Policy

Gangcuci takes our responsibility to user privacy seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the gangcuci platform via gangcuci.vu or its associated mobile app.

This document applies to all gangcuci platform users, including unregistered visitors, registered members, and users accessing the platform via any device — laptop, smartphone, or tablet. By continuing to use the gangcuci platform, you agree to the privacy practices described in this document.

Gangcuci complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and is committed to ensuring your personal data is handled in a transparent, responsible, and secure manner at all times. If you have any questions about how we handle your data, our team is ready to assist.

02 Types of Personal Data We Collect

Gangcuci collects your personal data through three main methods: information you provide directly during registration, information collected automatically when you use the platform, and information received from trusted third parties for identity verification purposes.

Gangcuci does not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable law. All data collected is for legitimate purposes and limited to what is strictly necessary to operate the gangcuci service safely and efficiently.

03 How We Use Your Data

Gangcuci uses your personal data solely for legitimate purposes necessary to operate the platform effectively. We do not use your data for unrelated purposes without your prior consent.

• Account Management – To create, verify, and maintain your gangcuci account, including the required KYC process.
• Transaction Processing – To process deposits, withdrawals, and all financial transactions you carry out on the platform.
• Platform Security – To detect and prevent fraud, duplicate account usage, and any suspicious activity that could compromise platform security.
• Customer Service – To respond to enquiries, complaints, and assistance requests you submit through gangcuci's support channels.
• Platform Communications – To send important account notices, service updates, and relevant promotions (you may unsubscribe from promotional notifications at any time).
• Legal Compliance – To fulfil legal obligations including anti-money laundering (AML) requirements and reporting mandated by regulatory authorities.
• Service Improvements – To analyse aggregated usage patterns in order to improve platform features, performance, and overall user experience.

Gangcuci will not use your data to make automated decisions that materially affect you without human intervention. Any significant decisions, such as account closures or suspensions, always involve a review by our team.

04 Data Sharing & Disclosure

Gangcuci does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is only shared in limited situations and solely for legitimate purposes.

• Third-Party Service Providers – Includes payment processors (such as DuitNow, FPX, TNG eWallet, GrabPay, and Boost), cloud service providers, and identity verification systems. All such providers are bound by strict confidentiality agreements.
• Legal Requirements – gangcuci may disclose your data when required by a court order, regulatory authority, or law enforcement agency following proper legal procedures.
• Fraud Detection – Limited information may be shared with trusted industry partners for fraud prevention and anti-money laundering purposes.
• Business Transfers – In the event of a merger, acquisition, or transfer of gangcuci assets, user data may be transferred as part of those assets, with appropriate notice provided to users.

05 Security & Data Protection

Gangcuci implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL/TLS encryption for all data transmitted between your device and gangcuci's servers.
• Encryption of sensitive data stored in databases using AES-256 standards.
• Multi-layer access controls with two-factor authentication (2FA) for administrative access.
• Round-the-clock 24/7 security monitoring and real-time intrusion detection systems.
• Regular third-party security audits and routine system penetration testing.
• Mandatory cybersecurity training for all gangcuci staff with access to user data.
• Clear incident response procedures to manage any data breaches swiftly and effectively.

While gangcuci takes all reasonable measures to protect your data, no security system can be guaranteed one hundred percent safe. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

06 Cookies & Tracking Technologies

Gangcuci uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help the platform remember your preferences and improve service performance.

• Essential Cookies – Required for core platform functions such as login sessions and account security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies – To gather information on how you use the platform, helping us improve site speed and usability.
• Functional Cookies – To save your preferences such as language, region, and display settings for a more personalised experience.
• Analytics Cookies – To help us understand aggregated, anonymised usage patterns for the purpose of improving the gangcuci platform.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain gangcuci platform features. For more information on managing cookies, please refer to your web browser's help documentation.

07 Data Retention Period

Gangcuci retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data – Retained for the duration your account is active, plus a 30-day recovery period following a requested account closure.
• Financial Transaction Records – Retained for seven (7) years in compliance with Malaysia's accounting and anti-money laundering legal requirements.
• Security Logs – Retained for 12 months for the purposes of security incident investigation and fraud prevention.
• KYC Data – Retained for five (5) years after account closure in accordance with applicable regulatory requirements.
• Support Communication Records – Retained for two (2) years to ensure consistency in customer service.

Once the defined retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to you. gangcuci conducts regular reviews of stored data to ensure compliance with this retention policy.

08 Your Rights as a User

As a gangcuci user, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). gangcuci is committed to making it easy for you to exercise these rights.

To exercise any of the above rights, please contact the gangcuci support team via Live Chat or our support email. We will process your request within 30 working days and may require identity verification before fulfilling it.

09 Child Protection

The gangcuci platform is exclusively for users aged 18 and above. gangcuci does not knowingly collect, process, or store any personal data from individuals under the age of 18.

All gangcuci account registrations require age verification through a strict KYC process. Should gangcuci identify that personal data of an underage individual has been collected unintentionally, we will take immediate action to delete that data and close the account without prior notice.

Parents or guardians who are concerned that their child may have registered a gangcuci account can contact our support team to ensure the account is closed and all related data is permanently deleted from our systems.

10 Amendments to the Privacy Policy

Gangcuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational reasons. The "Updated" date at the top of this document will always reflect the date of the most recent amendment.

For material amendments that significantly affect your privacy rights, gangcuci will provide advance notice via your registered email or a prominent in-platform notice at least seven (7) days before the amendment takes effect. Your continued use of the gangcuci platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding gangcuci's Privacy Policy or how we handle your personal data, our data protection team is ready to assist through the following channels:

• In-platform Live Chat – available 24/7 for immediate enquiries.
• Privacy email: [email protected] – responses within 3 business days for privacy-related inquiries.
• For a formal data rights request, please include "Data Rights Request" in your message subject line to help expedite processing.

Gangcuci is committed to resolving any privacy concerns fairly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.