u338 Privacy Policy for Malaysian Players

This Privacy Policy describes how u338 collects, records, organises, stores, uses, discloses, and otherwise processes personal data. It applies when a person visits the u338 website, opens or uses an account, plays casino games, places sports bets, participates in promotions, completes verification, communicates with support, or processes a deposit or withdrawal.

For the purposes of this policy, u338 acts as the platform operator responsible for determining why and how relevant personal data is processed. References to “personal data” mean information that identifies an individual or can reasonably be linked to an identifiable individual. Aggregated or irreversibly anonymised information is not treated as personal data where no individual can be identified.

By using u338, you acknowledge that you have read this policy. This policy should be considered together with the Terms & Conditions and the Responsible Gambling information. If you do not accept these practices, you should discontinue use of u338.

The categories collected by u338 depend on the services you use. Data may be supplied directly by you, created during platform activity, obtained from your device, or received from payment, identity-verification, fraud-prevention, and game-service providers.

u338 may request a MyKad, passport, proof of address, payment ownership evidence, or similar documentation where identity and account eligibility must be verified. Players should obscure information that u338 does not specifically request.

u338 processes personal information only where there is an appropriate purpose and a lawful or otherwise valid basis. Depending on the circumstances, processing may be necessary to provide contracted services, comply with legal or licensing obligations, protect legitimate operational interests, establish or defend claims, or act with your consent.

• To create, authenticate, maintain, secure, and close u338 accounts.
• To confirm that users are aged 21 or above and satisfy account eligibility requirements.
• To process deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, cards, or supported digital assets.
• To settle casino wagers, live football bets, EPL and Liga Super Malaysia markets, UFC markets, promotional rewards, and account balances.
• To detect unauthorised access, duplicate accounts, payment abuse, collusion, money laundering indicators, and other prohibited activity.
• To answer questions, investigate complaints, maintain service quality, and provide 24-hour support.
• To identify possible harmful play patterns and administer deposit limits, cooling-off periods, or self-exclusion requests.
• To improve u338 performance, understand feature usage, resolve technical faults, and maintain reliable mobile access.

u338 may use cookies, local storage, pixels, session identifiers, and comparable technologies to recognise a browser or device. Essential technologies support login sessions, security controls, navigation, language preferences, cashier functions, and protection against account misuse. Without them, parts of u338 may not operate correctly.

Analytics technologies may provide aggregated information about page performance, navigation patterns, device categories, and service errors. Where consent is required, optional technologies will be used only after valid consent has been obtained. You may manage browser storage through your device settings, although disabling essential cookies can affect access to account features.

u338 may disclose limited personal data to carefully selected organisations that perform services on its behalf. These may include payment processors, banks, e-wallet operators, identity-verification services, fraud-prevention specialists, hosting providers, security vendors, game suppliers, professional advisers, and customer-support technology providers.

Service providers are authorised to use information only for agreed functions and must apply appropriate confidentiality and security obligations. u338 seeks to share the minimum information reasonably necessary. For example, a payment partner may receive an account name, MYR amount, and transaction reference, but does not require a complete history of slots or sports betting activity.

u338 may also disclose information where required by law, a valid court order, regulatory requirement, licensing obligation, or a legitimate request from a competent authority. Information may be shared where reasonably necessary to protect players, investigate fraud, enforce the Terms & Conditions, or defend the legal rights of u338.

Online gaming infrastructure and specialist providers may operate outside Malaysia. As a result, personal data processed by u338 may be transferred to or stored in another jurisdiction. Data-protection standards can differ between countries.

When u338 arranges an international transfer, it uses measures appropriate to the nature of the information and destination. These may include contractual safeguards, confidentiality requirements, access restrictions, encryption, provider assessments, and transfer mechanisms recognised by applicable law.

u338 applies administrative, technical, and organisational controls designed to protect personal data against accidental loss, alteration, unauthorised disclosure, misuse, or access. Measures include encrypted network connections, account access controls, system monitoring, segregated permissions, secure backups, incident procedures, and staff confidentiality duties.

No internet transmission or storage system can be guaranteed to remain completely secure. Players also have an important role: use a unique password, protect one-time codes, sign out from shared devices, and contact u338 promptly if account activity appears unfamiliar. u338 will never ask for your password through email or live chat.

Where a data incident creates a material risk, u338 will investigate, contain, and document the event. Affected users and competent authorities will be notified where notification is required by applicable rules.

u338 retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, security, responsible gambling, dispute-resolution, and regulatory requirements. Retention periods vary by record category.

Account and transaction records may need to remain available after account closure to address chargebacks, complaints, fraud investigations, financial reconciliation, self-exclusion enforcement, or legal claims. When continued identification is no longer necessary, u338 will delete, securely dispose of, or anonymise the relevant information in accordance with its retention procedures.

Subject to applicable law, verification, and relevant exemptions, a u338 user may have rights concerning personal data. A request will not affect the fairness of ordinary service, although some services cannot continue if information required for account security, payment processing, or legal compliance is removed.

Before acting on a request, u338 may ask for information sufficient to verify identity and protect the account from unauthorised disclosure. u338 aims to respond within a reasonable period and will explain if more time is required or if a lawful exemption applies.

u338 may review account activity to support responsible gambling measures. Relevant information may include deposit frequency, session length, stakes, losses, repeated limit changes, support interactions, and previous cooling-off or self-exclusion requests. This processing helps u338 administer player-selected controls and identify cases where a welfare interaction may be appropriate.

Responsible gambling records are handled with restricted access. A self-exclusion record may be retained after account closure so that u338 can continue to respect the exclusion request. Players aged under 21 are not permitted to use u338. If u338 learns that an underage person has submitted personal information, the account will be restricted while appropriate verification and deletion steps are considered.

Where permitted and appropriately authorised, u338 may send information about platform updates, casino promotions, sports markets, cashback, or loyalty benefits. Marketing preferences are separate from essential service messages. Security alerts, withdrawal updates, changes to legal terms, and responsible gambling notices may still be delivered when necessary to operate the account.

A player may change marketing preferences through available account controls or by contacting support. u338 will process an opt-out as soon as reasonably practicable, although a message already scheduled for delivery may occasionally arrive before the preference change is fully applied.

u338 may amend this Privacy Policy to reflect operational changes, new services, security improvements, legal requirements, or updated data practices. The current version will be published on this page with a revised effective date.

Where a change materially affects how personal data is used, u338 will take reasonable steps to provide a prominent notice or direct account communication. Continued use of u338 after an update means the revised policy will apply to subsequent processing, subject to any consent that must be obtained separately.

Questions, privacy requests, corrections, or complaints may be directed to the u338 support team. Please provide your username or account reference, a clear description of the request, and a safe way for u338 to reply. Do not send passwords, one-time security codes, or complete card details.

• Email: [email protected]
• Live Chat: Available 24 hours / 7 days
• Service Area: Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru