Rujukan Laman

Your Rights and Our Legal Commitments

At rm1cuci, every account, transaction, and data point you share is handled under a clear legal framework designed for Malaysian jurisdiction.

Malaysian JurisdictionData Privacy PolicyAccount TermsCookie PolicyTouch 'n Go & FPX Covered
rm1cuci Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

How to Reach Our Legal and Compliance Team

Questions about our terms, a data access request, or a concern about how your account information is held — our compliance team handles all of these through the channels below.

Email Compliance Send a written request or data access query to our compliance address. We log every message on receipt and reply within one business day to confirm we have your request.
Live Chat Start a live chat session on rm1cuci and ask to be connected with the legal team. Our agents will raise a compliance ticket on your behalf and give you a reference number immediately.
Account Settings Log into your account and navigate to Settings to submit a data correction or deletion request directly. The form routes straight to our data team without going through general support.
DATA AND SECURITY PRACTICES

How rm1cuci Handles Your Account and Data

Security and transparency sit at the core of how we run accounts and process personal data.

Encrypted Data Storage

All personal data you provide at registration and during transactions is stored using AES-256 encryption. This applies equally to identity documents, contact details, and the payment tokens generated when you use Touch 'n Go or FPX.

Cookie Controls

We use session cookies for account security and optional analytics cookies to improve the lobby. You can accept, reject, or customise cookie categories through the banner shown on your first visit or in your browser settings at any time.

Account Security Layers

Two-factor authentication is available on every rm1cuci account. Login attempts from unrecognised devices trigger an email alert, and repeated failed logins lock the session automatically to prevent unauthorised access.

Data Retention Schedule

We hold transaction records for the period required by Malaysian financial regulations and delete non-essential data after your account has been closed for 12 months. You may request an early review of your retention status via the compliance email.

Third-Party Processors

Payment processors for GrabPay, Boost, and FPX are contractually bound to our data standards. They receive only the transaction data needed to clear your deposit or withdrawal — no browsing history or bonus-claim data is shared with them.

Your Rights Under PDPA

Under Malaysian personal data protection law you have the right to access the data we hold, correct inaccuracies, and withdraw consent for marketing communications. Submit any of these requests through Settings or the compliance email and we will act within seven business days.

Common Legal Questions About Your Account

The questions below cover the legal matters our account holders ask about most frequently — from data access to payment record retention and cookie preferences. If your question is not answered here, use the compliance email or live chat to raise it directly.

We collect your name, contact details, identification number, and payment method tokens needed to verify your identity and process deposits via Touch 'n Go, GrabPay, Boost, or FPX. No additional data is collected without your explicit consent.

Log into your account, go to Settings, and submit a Data Access Request form. Alternatively, email our compliance team with your account username. We will deliver a full data export to your registered email within seven business days of receiving the request.

Yes. Where deletion is not blocked by a legal retention obligation — such as transaction records required under Malaysian financial regulation — we will erase your data and confirm in writing. Submit the request through account Settings or the compliance email.

Our terms are governed by Malaysian law. Access to our services depends on local law and is available where local law permits. Any legal dispute arising from your use of rm1cuci will be subject to Malaysian jurisdiction unless a specific law in your region provides otherwise.

Transaction records for deposits and withdrawals processed via Touch 'n Go, GrabPay, Boost, and FPX are retained for the period stipulated by Malaysian financial regulations. After your account closes, non-essential records are deleted within 12 months.

Contact our compliance team first — we aim to resolve disputes within seven business days. If the matter remains unresolved, you have the right to raise a complaint with the relevant Malaysian authority responsible for personal data protection enforcement.

Go to Settings and adjust your communication preferences at any time, or click the unsubscribe link in any marketing email we send. Changes take effect within 48 hours and do not affect transactional or security-related messages tied to your account activity.