Privacy Policy

Welcome to Delicuan ("we", "us", "our", "the Platform"). Delicuan operates the online gambling platform accessible at https://delicuan.cam, offering sports betting, live casino, slots, lottery, and related gambling entertainment services principally to users in Malaysia.

We take the privacy and security of your personal data seriously. This Privacy Policy ("Policy") describes how Delicuan collects, uses, stores, shares, and protects the personal information of users ("you", "your", "User") who register for an account on, access, or interact with the Delicuan Platform, including any associated web or mobile interfaces.

This Policy is incorporated into and forms part of our Terms and Conditions. By registering an account on the Platform or by continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

The following terms carry the meanings assigned below throughout this Policy:

Delicuan collects personal data through several channels in the ordinary course of operating the Platform. The categories of data we collect are set out below:

When you create a Delicuan account, we collect the information you provide directly, including: full legal name, date of birth, email address, mobile phone number, residential address (including city and postcode — relevant for Users in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other Malaysian locations), and a self-selected username and password.

In compliance with applicable anti-money laundering (AML) and fraud prevention obligations, we collect KYC Data when you request withdrawals above applicable thresholds or when otherwise required. This includes: copies of government-issued identification documents (Malaysian MyKad, Passport, or Driver's License), proof of residential address (utility bill or bank statement dated within three months), and a selfie photograph holding your identification document.

We collect records of all deposits, withdrawals, wagers, and account balance movements processed through your account. This includes payment method identifiers (such as the partial account number associated with your Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX account), transaction timestamps, MYR amounts, and transaction reference numbers. We do not store full bank account numbers or full card numbers on our servers.

We automatically collect certain technical data when you access the Platform: IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, pages visited, and error logs. This data is collected through server logs and analytics tools and is used primarily for security monitoring, fraud detection, and Platform performance optimisation.

If you contact our support team — whether via live chat, email to [email protected], or any other channel — we retain records of those communications, including the content of messages, timestamps, and any information you voluntarily disclose in the course of seeking support.

Where you make use of responsible gambling tools — such as setting deposit limits, loss limits, session time reminders, or self-exclusion — we record your preferences and the dates on which such measures were activated or modified. This data is retained for compliance and player protection purposes.

Delicuan processes your personal data on one or more of the following legal bases:

Delicuan uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, verifying, and administering your registered player account on the Platform.
• Transaction processing: Processing deposits, withdrawals, and wager settlements in MYR through your chosen payment method (including local Malaysian payment channels such as DuitNow, FPX, and Touch 'n Go eWallet).
• Identity verification: Conducting KYC checks to comply with AML obligations and to prevent fraudulent account activity.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance through our 24/7 support team.
• Security and fraud prevention: Monitoring transactions and user behaviour for indicators of fraud, collusion, money laundering, or Terms violations.
• Responsible gambling compliance: Administering deposit limits, self-exclusion records, and other responsible gambling measures you have activated on your account.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the Platform.
• Legal and regulatory compliance: Retaining records as required by applicable regulations and responding to lawful requests from regulatory or law enforcement authorities.
• Marketing communications (with consent only): Sending you promotional offers, bonus notifications, and platform updates — only where you have expressly opted in. You may unsubscribe at any time.

Delicuan does not share your personal data with third parties except in the specific circumstances described below:

We share the minimum necessary financial and identity data with payment processing partners — including providers facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and bank transfers via Maybank, CIMB, Public Bank, and Hong Leong Bank — solely for the purpose of processing your deposit and withdrawal transactions. These providers are bound by their own data protection obligations and are prohibited from using your data for any other purpose.

Where automated or third-party-assisted KYC checks are used, your identity documents and verification data may be shared with licenced identity verification service providers. These providers operate as Data Processors under contractual data processing agreements with Delicuan.

Delicuan may disclose personal data to applicable regulatory bodies or law enforcement authorities where required by law, court order, or lawful regulatory instruction. We will only share the minimum data necessary to satisfy the legal obligation.

We use third-party technology providers for hosting, analytics, security monitoring, and communication services. These providers access personal data only to the extent necessary to perform their contracted services and are bound by strict confidentiality and data protection obligations.

In the event of a merger, acquisition, restructuring, or sale of all or part of Delicuan's business, personal data held by Delicuan may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer where required by applicable law.

The Delicuan Platform uses cookies and similar tracking technologies to support core Platform functionality, maintain session state, detect fraudulent activity, and — where consent has been obtained — to analyse Platform usage patterns.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may impair your ability to log in to or use the Platform.

Delicuan retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity documents: Retained for the duration of the account relationship plus five (5) years, unless a longer period is required by applicable regulatory obligations.
• Support communications: Retained for up to two (2) years following the resolution of the relevant query or complaint.
• Technical and device logs: Retained for up to twelve (12) months for security monitoring purposes.
• Marketing consent records: Retained for three (3) years following the date on which consent was withdrawn.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data destruction protocols.

Delicuan implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption across all Platform communications and data transmissions.
• Two-factor authentication (2FA) available to all registered Users as an additional layer of account security.
• Encrypted storage of passwords using industry-standard hashing algorithms. Delicuan staff do not have access to plaintext passwords.
• Restricted access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need.
• Regular security audits and penetration testing by qualified security professionals.
• Real-time transaction monitoring for indicators of account compromise, fraud, or suspicious activity patterns.

Subject to applicable law, you hold the following rights in relation to your personal data held by Delicuan. To exercise any of these rights, please submit a request to [email protected] with your registered account username and a clear description of your request.

• Right of Access: You have the right to request confirmation of whether Delicuan holds personal data about you, and to receive a copy of that data in a readable format.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that Delicuan delete your personal data. Note that this right is subject to overriding legal obligations — for example, where we are required to retain transaction records for AML compliance purposes, those records cannot be erased on request alone.
• Right to Restriction of Processing: You may request that Delicuan restrict the processing of your personal data in certain circumstances, such as while an accuracy dispute is under review.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to Delicuan in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. Where your objection relates to direct marketing, we will cease processing immediately. For other legitimate interests processing, we will assess your objection and respond accordingly.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will endeavour to respond to all data rights requests within thirty (30) calendar days. If your request is complex or if you have submitted multiple simultaneous requests, we may extend this period by a further sixty (60) days, in which case we will notify you accordingly.

The Delicuan Platform is strictly intended for use by individuals who are 21 years of age or older. We do not knowingly collect, store, or process the personal data of individuals under the age of 21.

During account registration, all Users are required to confirm that they meet the minimum age requirement. We conduct age verification checks as part of our KYC process and reserve the right to request documentary proof of age at any time.

If we become aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take prompt steps to delete that data and close the associated account. If you believe that an under-age individual has registered on our Platform, please contact us at [email protected] immediately.

The Delicuan Platform may contain references to, or integrations with, third-party services — including payment processors, identity verification providers, game content providers, and analytics tools. This Privacy Policy applies solely to Delicuan's own data collection and processing activities.

Third-party service providers operate under their own independent privacy policies and data practices. Delicuan is not responsible for the privacy practices of any third-party service. We encourage you to review the applicable privacy policies of any third-party providers you interact with in connection with your use of the Platform.

Where third parties act as Data Processors on our behalf — processing personal data only on our instructions — we ensure that appropriate data processing agreements are in place before any data is shared, and that those providers implement adequate technical and organisational security measures.

Delicuan operates server infrastructure and engages service providers that may be located in jurisdictions outside of Malaysia. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence.

Where personal data is transferred internationally, Delicuan takes appropriate steps to ensure that the receiving entity provides an adequate level of data protection — for example, through the use of contractual data protection clauses, data processing agreements, or transfers to jurisdictions recognised as providing equivalent protection.

By using the Delicuan Platform, you acknowledge and consent to the transfer of your personal data to such international locations as described in this Policy.

Delicuan reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The "Last Updated" date displayed at the top of this page will always indicate the date of the most recent revision.

Where amendments to this Policy are material — for example, introducing new categories of data collection or new purposes for processing — we will notify registered Users by email or via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

If you do not agree with the revised Policy, you should cease using the Platform and submit an account closure request to [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by Delicuan, please contact us using the details below. When submitting a data rights request, please include your registered account username and a clear description of your query to enable our team to assist you efficiently.