Privacy Policy u88 —
Your Data, Our Responsibility

U88 collects various categories of personal information depending on how you interact with our platform. This collection occurs directly from you, automatically through your use of the platform, and in some cases, via trusted third parties.

We do not collect sensitive information such as biometric data, medical records, religious beliefs, or political views unless required by applicable law. All data collected is kept to the minimum necessary to deliver quality service to you.

Personal data you provide to u88 is used responsibly for the following purposes only. We will not use your data beyond the scope stated here without first obtaining fresh consent from you.

• Account Management: Creating, maintaining, and protecting your account on the u88 platform.
• Identity Verification (KYC): Fulfilling legal obligations to verify user identity before financial transactions are processed.
• Transaction processing: Handling deposits, withdrawals, and all financial transactions securely and promptly.
• Customer support: Providing effective assistance whenever you contact the u88 support team.
• Platform security: Detecting and preventing fraud, money laundering, and suspicious activity.
• Service Improvements: Analyzing aggregated usage patterns to improve the user experience.
• Marketing communications: Sending promotional information and exclusive offers — only if you have given your consent.
• Legal compliance: Meeting reporting obligations to the relevant authorities when required.

U88 processes your personal data on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You have given explicit consent for data processing for specific purposes, such as marketing communications.
• Contract performance: Processing is necessary to perform the service agreement between you and u88, including account management and transaction processing.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) and KYC requirements.
• Legitimate interest: Processing is necessary for the legitimate interests of u88 or third parties, such as detecting fraud and ensuring platform security.

For each processing activity, we ensure the most appropriate legal basis is identified and documented. You have the right to obtain an explanation of the legal basis applied to each instance of processing your data.

U88 do not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your information in the following limited circumstances:

• Trusted service providers: Companies that help us operate the platform — such as payment processors, cloud service providers, and identity verification firms — are all bound by strict data protection agreements.
• Regulatory authorities: When required by Malaysian law or directives from a competent authority, such as Bank Negara Malaysia or the Malaysian Anti-Corruption Commission (MACC).
• Fraud Investigation: To law enforcement agencies in cases of fraud, money laundering, or serious security threats.
• Business transfers: In the event that u88 undergoes a corporate restructuring, merger, or acquisition, users will be notified in advance.

U88 continually invests in high-grade security infrastructure to protect your personal data from unauthorised access, loss, misuse, or disclosure. The technical and organisational measures we implement include:

• Data encryption in transit using 256-bit SSL/TLS.
• At-rest encryption for all sensitive information.
• Two-factor authentication (2FA) is mandatory for internal system access.
• 24/7 security monitoring by a dedicated information security team.
• Quarterly penetration testing conducted by independent security firms.
• Role-based access control (RBAC) to limit internal data exposure.
• Regular data backups and a disaster recovery plan that is periodically tested.
• Security awareness training for all u88 staff twice a year.

While we take all reasonable precautions, no system can guarantee 100% absolute security. We encourage you to also take your own protective measures, such as using a strong password and never sharing your login credentials with anyone.

U88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Specific retention periods are as follows:

When the retention period expires, data will be securely deleted or anonymised for statistical purposes. You may request information on the specific retention period for your data by contacting our privacy team.

Under Malaysia's PDPA and international best privacy practices, you have the following rights regarding your personal data held by u88:

The u88 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform performance. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login and secure sessions. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display settings, and game preferences for a more personalized experience.
• Analytics Cookies: Collecting information about how you use the platform (anonymously) to help us improve our services.
• Security Cookies: Detecting suspicious activity and protecting your account from unauthorized access.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect your ability to use certain platform features. Third-party cookies from our analytics providers are subject to their own privacy policies.

In conducting global operations, your personal data may be transferred to and stored on servers located outside Malaysia. u88 ensures all such transfers are protected by appropriate safeguard mechanisms, including:

• Data processing agreements with internationally recognised standard protection clauses.
• Data Protection Impact Assessment (DPIA) prior to transfers to new jurisdictions.
• Ensuring recipients comply with equivalent or higher data protection standards.

U88 prioritises the use of data centres based in the Asia-Pacific region to minimise latency and ensure that Malaysian users' data remains within an area governed by robust data protection frameworks.

The u88 platform is strictly for individuals aged 21 and above. We do not intentionally collect any personal information from minors. Should we discover that we have inadvertently collected personal data from an underage individual, we will take immediate action to delete that information and close the relevant account.

U88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant amendments are made, we will:

Continued use of the u88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how u88 handles your personal data, we are here to help. Our Data Protection Officer (DPO) team can be reached via:

• Email: [email protected]
• Live Chat: Available 24/7 on the u88 platform
• Response time: Within 24 business hours for general enquiries; 72 hours for formal data subject rights requests

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in your jurisdiction.