Privacy Policy — u88my

Introduction

This Privacy Policy ("Policy") describes how u88my ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible athttps://u88my.cam, collects, processes, stores, and protects the personal data of individuals ("User", "you", "your") who access, register on, or use our platform and services.

This Policy applies to all personal data processed in connection with your use of the88my platform, including data collected during account registration, identity verification (KYC), payment processing, customer support interactions, and general platform usage.

By creating an account at u88my or by otherwise engaging with our platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not consent to this Policy, you must not use the u88my platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — a data subject — who can be identified, directly or indirectly, by reference to that information.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, including collection, storage, use, disclosure, alteration, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For users of the u88my platform, the Data Controller is the Company.
• "KYC Data" means identity verification documents and associated personal information submitted to fulfil Know Your Customer (KYC) obligations, including government-issued ID documents, selfies, and proof of address.
• "Cookies" means small text files placed on your device by the u88my platform to facilitate session management, analytics, and personalisation.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in connection with commercial transactions in Malaysia.
• "Third-Party Service Providers" means external companies engaged by u88my to perform specific functions — such as payment processing (e.g., Touch 'n Go, DuitNow, FPX operators), fraud detection, and customer support infrastructure — who process data on our behalf under contractual data processing agreements.

Data We Collect

u88my collects personal data across several categories, depending on how you interact with our platform. The table below summarises the main data categories, specific data points collected, and the context in which each category arises:

Legal Basis for Processing

u88my processes your personal data on the following lawful bases, applied as appropriate to each specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and u88my — specifically, to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal obligation: Processing is required to comply with our obligations under international gaming licence conditions, anti-money laundering (AML) regulations, and KYC requirements mandated by our licensing authority.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud detection and prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit consent — for example, to receive marketing communications or optional platform personalisation features — we process data on the basis of that consent. You may withdraw consent at any time by contacting our support team.

How We Use Your Data

Your personal data is used by u88my exclusively for the following purposes:

5.1 Account Management

To create, maintain, and administer your u88my account — including processing your registration, verifying your identity, managing your account wallet, and communicating account status updates.

5.2 Payment Processing

To process deposits and withdrawals through your selected payment method — including Touch 'n Go eWallet, DuitNow, FPX bank transfers (Maybank, CIMB, Public Bank, Hong Leong Bank), GrabPay, Boost, and cryptocurrency networks. Financial transaction data is shared with the relevant payment service providers solely to execute transactions.

5.3 Identity Verification (KYC)

To verify your identity and age as required under our international licensing obligations, specifically to confirm that you are at least 21 years of age and to prevent fraudulent account use. KYC documents are processed by our compliance team and, where necessary, shared with third-party identity verification service providers operating under strict data processing agreements.

5.4 Regulatory Compliance & Anti-Money Laundering

To fulfil our legal obligations regarding anti-money laundering (AML) and counter-terrorist financing (CTF) monitoring, including transaction monitoring, source of funds verification where required, and cooperation with law enforcement and regulatory authorities upon lawful request.

5.5 Responsible Gambling Monitoring

To monitor betting patterns and account usage for indicators of problematic gambling behaviour. Usage data may trigger automated responsible gambling tool notifications or manual review by our player safety team. This processing is in your genuine interest and forms part of our licence obligations.

5.6 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance. Communications data — including live chat transcripts and email correspondence — is retained for quality assurance and dispute resolution purposes.

5.7 Platform Improvement & Security

To analyse aggregated usage data for the purpose of improving platform performance, game offering, and user experience. Technical data is also used to detect, investigate, and prevent fraud, unauthorised access, and other security incidents.

5.8 Marketing Communications (Consent-Based Only)

Where you have opted in to marketing communications, we may use your contact details to send you promotional offers, bonus notifications, and platform updates. You may unsubscribe at any time by following the opt-out instructions in any marketing email or by contacting support directly.

Data Sharing & Disclosure

u88my does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data may be shared with the following categories of recipients, solely to the extent necessary for the stated purposes:

• Payment service providers: Touch 'n Go eWallet, DuitNow, FPX network banks (Maybank, CIMB, Public Bank, Hong Leong), GrabPay, Boost, and cryptocurrency processing services — to execute your payment transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to process identity documents on our behalf under data processing agreements.
• Fraud prevention and security services: Providers of fraud detection, IP analysis, and risk scoring services that help us maintain platform integrity.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts — where we are required by law to disclose your data, or where disclosure is necessary to protect the rights, property, or safety of u88my, its users, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Cookies & Tracking Technologies

u88my uses cookies and similar tracking technologies to operate certain platform functions, analyse platform performance, and enhance your user experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options. Disabling these may affect your personalised experience but will not prevent access to the platform.
• Analytics cookies: Used to collect aggregated, anonymised data on how users navigate and interact with the platform — such as pages visited, session duration, and feature usage rates. This data helps us improve the platform. We do not link analytics data to your individual account.
• Security and fraud prevention cookies: Help us identify and block suspicious access patterns, bot activity, and potentially fraudulent sessions.

You may manage cookie preferences through your browser settings. Please note that blocking strictly necessary cookies may prevent you from accessing or using certain parts of the u88my platform.

Data Retention

u88my retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following general retention guidelines apply:

• Active account data: Retained for the duration of your active account relationship with u88my.
• KYC documents and identity verification records: Retained for a minimum of five (5) years following account closure, in accordance with standard AML/KYC record-keeping obligations under international gaming licensing requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date for audit, compliance, and dispute resolution purposes.
• Customer support communications: Retained for a minimum of two (2) years following resolution of the relevant query or dispute.
• Marketing preference records: Retained until you withdraw consent or close your account, plus a brief period thereafter for compliance audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Data Security

u88my implements a multi-layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• TLS/SSL encryption: All data transmitted between your device and the u88my platform is encrypted in transit using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest in our secure data storage infrastructure.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: Available and encouraged for all registered user accounts to prevent unauthorised access.
• Intrusion detection systems: We deploy automated systems to monitor for and alert on suspicious access patterns, potential data breaches, and attempted unauthorised access.
• Vendor security assessments: Third-party service providers with access to personal data are subject to security due diligence and contractual data protection requirements before engagement.

International Data Transfers

As an international online gaming platform operating under international licensing, u88my's infrastructure and some of its third-party service providers may be located outside of Malaysia. Your personal data may therefore be transferred to and processed in countries other than Malaysia, including countries in which data protection laws may differ from those in Malaysia.

Where such international transfers occur, u88my takes steps to ensure that appropriate safeguards are in place to protect your personal data, including:

• Execution of data processing agreements with all third-party processors that include binding data protection obligations consistent with applicable international standards.
• Transfers only to processors located in jurisdictions that provide adequate levels of data protection, or where contractual protections are in place to bridge any gap.
• Regular review of international data transfer arrangements to ensure ongoing adequacy.

Your Privacy Rights

As a user of the u88my platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid requests within 14 business days.

Minors & Age Protection

The u88my platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all accounts requesting withdrawals.

If we become aware that personal data has been collected from a user under the age of 21, we will take immediate steps to close the account, delete all associated personal data (subject to any legal hold obligations), and return any deposits made to the payment method used, in accordance with our Terms & Conditions.

Malaysian PDPA Notice

u88my acknowledges the existence and principles of the Personal Data Protection Act 2010 (PDPA) of Malaysia. While u88my operates under international licensing and is not a Malaysian-registered entity, we design our data handling practices with awareness of the PDPA's seven core data protection principles for the benefit of our Malaysian users:

• General principle: Personal data is processed only with the data subject's consent, unless one of the statutory exceptions applies.
• Notice and choice principle: We inform you of the purposes for which your data is collected and provide you with choices where practicable.
• Disclosure principle: Personal data is not disclosed without your consent, except as described in this Policy.
• Security principle: Practical steps are taken to protect personal data from misuse and unauthorised access.
• Retention principle: Personal data is not retained longer than necessary for the fulfilment of its purpose.
• Data integrity principle: Reasonable steps are taken to ensure personal data is accurate, complete, and up-to-date.
• Access principle: Data subjects may request access to and correction of their personal data.

For formal PDPA-related enquiries from Malaysian users, please direct your query to [email protected] with the subject line "PDPA Data Request — [Your Registered Email]".

Policy Amendments

u88my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, licensing requirements, or operational changes. The most current version of this Policy will always be published on this page, identified by the "Last Updated" date at the top of the document.

Material changes to this Policy — particularly those affecting how your data is used or shared — will be communicated to registered users via email notification or a prominent on-platform notice. Your continued use of the u88my platform following the publication of an amended Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how u88my handles your personal information, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the u88my platform for immediate assistance with privacy queries.
• Email: [email protected] — formal written privacy requests, data subject access requests, and PDPA-related correspondence. Please allow up to 14 business days for a substantive response to data rights requests.

When submitting a privacy-related request by email, please include: (a) your registered account email address or username, (b) a clear description of your request or concern, and (c) any relevant reference numbers if your query relates to a specific transaction or previous support interaction.