u88my Privacy Policy

1. Who We Are (Data Controller)

For the purposes of this Privacy Policy, u88my is the data controller responsible for the personal data you provide or that is collected when you use the u88my Platform located at u88my.co. References to "u88my", "we", "us", and "our" in this Policy refer to the operator of the Platform. If you have questions about how we handle your personal data, please contact us using the details in Section 14 below.

2. Personal Data We Collect

u88my collects personal data in the following categories depending on how you interact with the Platform:

u88my does not collect special category personal data (such as racial origin, religious beliefs, or medical data) except where expressly required by applicable law or licensing obligations (for example, in the context of verifying a responsible gaming self-exclusion claim).

3. How We Use Your Personal Data

u88my uses your personal data for the following purposes:

• Account creation and management: To register your Account, verify your identity and age (21+ requirement), and maintain your Account in good standing;
• Service delivery: To provide access to the Platform's casino, sportsbook, and slot products; to process deposits and withdrawals; to credit bonuses and apply loyalty rewards;
• Legal and regulatory compliance: To fulfil obligations under our international gaming authority licence, including KYC verification, anti-money-laundering screening, fraud prevention, and responsible gaming enforcement;
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, bonus abuse, collusion, and other prohibited conduct on the Platform;
• Customer support: To handle your enquiries, resolve disputes, and provide account-specific assistance;
• Platform improvement: To analyse usage patterns and improve the design, stability, and content of the Platform;
• Marketing communications: To send you promotional offers, bonus notifications, and product updates where you have provided consent or where we have a legitimate interest to do so (subject to your right to opt out);
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to enforce deposit limits, cooling-off periods, and self-exclusion requests.

4. Legal Basis for Processing

u88my processes your personal data on the following legal bases:

• Contract performance: Processing necessary to perform the contract between u88my and you as a registered Member, including Account operation, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions, including KYC, AML obligations, and responsible gaming requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection, and Platform analytics where these interests are not overridden by your fundamental rights;
• Consent: Where we rely on your consent for marketing communications. You may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing message.

5. Data Sharing & Disclosure

u88my does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment processors and banking partners: To facilitate FPX transactions, Maybank2u, CIMB Clicks, Public Bank, Touch n Go eWallet, Boost, and other payment method operations. These processors are bound by confidentiality obligations and data processing agreements;
• Game and platform technology providers: To operate the gaming software, live dealer studios (including providers such as Evolution Gaming, SA Gaming, and Pragmatic Play Live), and sportsbook data feed services. These providers access only the minimum data necessary to deliver the contracted service;
• Identity verification and AML service providers: Third-party KYC and screening services used to verify identity documents and conduct regulatory compliance checks as required by our licence;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or our gaming licence conditions — including disclosures to our licensing authority and, in cases of suspected financial crime, to relevant law enforcement agencies;
• Professional advisers: Lawyers, auditors, and other professional advisers bound by duties of confidentiality, where necessary for the conduct of our business.

6. Cookies & Tracking Technologies

u88my uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your logged-in session, storing your language and display preferences, and ensuring security features function correctly. These cannot be disabled without impairing Platform functionality;
• Performance and analytics cookies: Aggregate, anonymised data on how Members navigate and use the Platform, used to identify and improve underperforming sections of the site;
• Functionality cookies: Storing your game preferences, preferred sports leagues, and display settings between sessions to improve your experience;
• Marketing cookies: Where you have provided consent, tracking technologies may be used to present relevant promotional content during your Platform session.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality, including the ability to remain logged in during a gaming session.

7. Data Retention

u88my retains personal data for the following periods:

• Active Account data: For the duration of your Account registration and for a period of 5 years after Account closure, in accordance with our licensing authority's record-keeping requirements;
• Financial transaction records: For a minimum of 7 years from the date of the transaction, as required under applicable AML legislation;
• KYC documentation: For the duration of the Account and for 5 years post-closure, unless a longer period is required by applicable law;
• Marketing consent records: Until you withdraw consent, plus a reasonable period thereafter to evidence prior consent;
• Support communications: For 3 years from the date of the last interaction, unless the matter relates to an unresolved dispute or legal proceedings.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

u88my implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and u88my's servers;
• Encryption of sensitive data fields (passwords, financial account numbers) at rest using industry-standard cryptographic protocols;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure;
• Incident response procedures for detecting, reporting, and mitigating data security incidents in accordance with applicable notification requirements.

While u88my takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and should report any suspected unauthorised access to u88my immediately.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by u88my:

• Right of access: You may request a copy of the personal data u88my holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing: You may request that we restrict processing of your personal data in certain circumstances (e.g., while a rectification request is pending);
• Right to data portability: Where processing is based on your consent or contract performance, you may request a copy of your data in a commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will cease processing for direct marketing purposes upon receipt of a valid objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to u88my's support team with your Account username and a clear description of the right you wish to exercise. u88my will respond within 30 days. Requests may require identity verification before we can act on them.

10. International Data Transfers

The u88my Platform is operated with infrastructure and service providers that may be located outside Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to that applicable in Malaysia, u88my ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating recognised standard contractual clauses — to protect your data in accordance with applicable requirements.

11. Children and Minors

The u88my Platform is strictly intended for persons aged 21 and above. u88my does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will promptly take steps to delete such data and close the associated Account. If you believe a minor has registered on the Platform, please contact our support team immediately.

12. Marketing Communications

u88my may send you promotional emails, SMS messages, and in-Platform notifications about bonuses, new games, and special events. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences in your Account settings;
• Contacting u88my support and requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional messages required for Account operation, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts.

13. Changes to This Privacy Policy

u88my reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Members via email or on-Platform notification no less than 14 days prior to the amended Policy taking effect. Continued use of the Platform after the effective date of an amended Policy constitutes your acceptance of the changes. The "last updated" date at the top of this Policy indicates when the most recent revision was made.

14. Contact & Complaints

For any questions, requests, or complaints regarding this Privacy Policy or u88my's handling of your personal data, please contact our Data Protection team via live chat on the Platform or by email. u88my will acknowledge data-related enquiries within 5 business days and aim to resolve them within 30 days.

Email (plain text, not a link): [email protected]

If you are not satisfied with u88my's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.