Privacy Policy cari2u

1. Information We Collect

When you register and use the cari2u platform, we collect various categories of personal information to ensure a safe, compliant experience that meets the international licensing requirements we adhere to.

1.1 Identity and Account Information

This includes your full name as it appears on your identity card (MyKad), identity card number, date of birth, gender and nationality. This information is required for identity verification and compliance with know-your-customer (KYC) requirements under our licensing framework.

1.2 Contact Information

Your email address, mobile phone number and residential address are required for account communications, security notifications and customer support. Your mobile phone number is also used for two-factor authentication to protect your account.

1.3 Financial Data

We keep records of your deposit and withdrawal transactions, including the payment method used, amount, date and transaction status. However, we do not store any credit card or debit card information directly — payment processing is carried out through licensed and certified service providers.

1.4 Activity and Log Data

Our systems automatically record your IP address, device type, operating system, web browser used, pages visited, login and logout times, and gambling activity such as bets placed, winnings and bonus usage. This data is used for security, fraud detection and internal analysis.

2. Purpose of Use of Information

cari2u uses your personal information for legitimate and transparent purposes. We will not use your data for any purpose other than those stated below without obtaining your consent first.

• To verify the identity and age of users — our platform is only for users aged 21 and above.
• To process account registration, deposits, withdrawals and other transactions on the platform.
• To provide 24/7 customer support via live chat and email in Bahasa Melayu and English.
• To send account-related communications such as transaction confirmations, password resets and security notices.
• To comply with legal and international licensing obligations, including anti-money laundering (AML) requirements.
• To detect and prevent fraud, account abuse and illegal activity on the platform.
• To improve cari2u's services based on usage patterns and user feedback.
• To send promotional information and bonus offers — you can unsubscribe from marketing communications at any time.

3. Legal Basis for Data Processing

cari2u processes your personal data on valid legal grounds in accordance with the international data protection framework applied under our licensing.

3.1 Performance of Contract

Data processing required to provide platform services, process financial transactions and manage your account is based on the service contract between you and cari2u, formed when you register and accept our Terms and Conditions.

3.2 Legal Obligations

Some data is processed to fulfil the legal and international licensing requirements binding on cari2u, including KYC and AML requirements set by our licensing body.

3.3 Legitimate Interests

We process certain data based on our legitimate interests in maintaining platform security, preventing fraud and protecting the interests of other users and the integrity of the platform.

3.4 Consent

For marketing communications and certain cookie usage, we rely on your explicit consent, which can be withdrawn at any time.

4. Data Sharing and Disclosure

cari2u does not sell or transfer your personal information to third parties for marketing purposes. However, there are limited circumstances where we need to share data to ensure the platform operates properly.

4.1 Service Providers

We work with selected third-party service providers to assist with operations such as payment processing, identity verification, cloud computing and analytics. All such providers are bound by confidentiality agreements and are required to process data only according to cari2u's instructions.

4.2 Legal Requirements

We may be required to disclose information to relevant authorities when mandated by law, court order or international licensing requirements. In all such cases, we disclose only the minimum information necessary.

4.3 Business Transfers

In the event of any business restructuring, merger or acquisition, users' personal data may be transferred as part of the business assets. Users will be notified in advance and the same privacy policy will continue to apply.

5. Data Security

We take the security of user data very seriously. cari2u applies multiple layers of technical and organisational protection to safeguard your personal information.

• 256-bit SSL/TLS encryption for all data communications between users and our servers.
• Passwords are stored using a one-way hashing algorithm that cannot be decrypted by anyone, including our staff.
• Two-factor authentication is available and encouraged for all user accounts.
• Strict access controls ensure that only authorised staff can access user data.
• Continuous security monitoring to detect and respond to any threats or unauthorised access attempts.
• Regular security audits conducted by internal teams and independent external parties.

6. Data Retention Period

cari2u retains your personal information for as long as your account is active or as long as needed to provide services. We are also required to keep certain records for a period specified by relevant international licensing and legal requirements.

After an account is closed, financial transaction and identity records are retained for a period set by compliance requirements before being securely deleted. Data no longer needed for any valid legal or business purpose will be destroyed using secure, non-recoverable methods.

7. User Rights

As a cari2u user, you have the following rights regarding your personal information. To exercise any of these rights, please contact our support team.

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide a response within a reasonable time.

7.2 Right to Rectification

If any information we hold is inaccurate or incomplete, you have the right to request a correction. Some corrections may require verification with supporting documents.

7.3 Right to Erasure

You may request the deletion of your personal data under certain circumstances. However, we may need to retain certain records for periods required by legal and licensing obligations.

7.4 Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of processing that took place before the withdrawal.

7.5 Right to Object to Marketing

You may unsubscribe from cari2u marketing communications at any time via the unsubscribe link in emails or by contacting our support team.

8. Cookies and Tracking Technologies

The cari2u website uses cookies and similar tracking technologies to improve the user experience, analyse platform usage and maintain the security of your login session.

8.1 Essential Cookies

Essential cookies are required for basic platform functions including session authentication, security and language preferences. These cookies cannot be disabled without affecting platform functionality.

8.2 Analytical Cookies

We use analytical cookies to understand how users interact with the platform, which pages are visited most often and where users encounter issues. This information is used for the ongoing improvement of our services.

8.3 Cookie Controls

You can control and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the cari2u platform.

9. International Data Transfers

As a platform operating under international licensing, your data may be processed and stored on servers located in various locations outside the country. cari2u ensures that any such data transfers are carried out in accordance with appropriate data protection standards.

We use recognised safeguard mechanisms for international data transfers, including data processing agreements with standard contractual clauses and thorough data protection assessments of all third-party service providers.

10. Contact Us Regarding Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal information, the cari2u support team is ready to assist you.

Our customer support team operates 24/7 in Malay and English. You can reach us through the following channels:

• Live chat on the cari2u platform — immediate response at any time.
• Email: [email protected]

We aim to respond to all privacy-related enquiries promptly. For data deletion or data access requests, please provide your account information to speed up the identity verification process.