Privacy and data protection

u388 Privacy Policy for Malaysian Online Users

This Privacy Policy explains how u388 collects, uses, stores, shares and protects personal information when Malaysian users browse the website, access account features, use MYR payment methods or participate in online casino and sports betting services.

Last reviewed: 1 January 2026. Please read this policy together with the u388 Terms & Conditions. By continuing to use the platform, you acknowledge the data practices described below.
Privacy at a glance

How u388 approaches personal information

u388 aims to collect only information reasonably required to operate the platform, verify eligible users, process transactions, protect accounts and meet applicable obligations. These summaries should be read with the complete u388 Privacy Policy below.

ID

Identity verification

u388 may verify identity, age and account ownership to maintain a 21+ environment and reduce misuse, fraud and duplicate registrations.

RM

Payment protection

Transaction information helps u388 process MYR deposits and withdrawals through supported Malaysian banks and e-wallets.

◆

Controlled data use

Personal information is used for defined operational, security, support and legal purposes rather than unrelated activities.

✓

Privacy choices

Eligible users may request access, correction or another available privacy action, subject to identity checks and lawful limitations.

Section 1

Introduction and Scope

This Privacy Policy applies to personal information processed through u388, including information supplied during registration, identity verification, customer support, account management, casino participation, sports betting and payment activity. It also covers technical information collected when a visitor accesses u388 using a computer, smartphone or other connected device.

For Malaysian users, u388 handles personal information with regard to applicable privacy and data protection requirements, including relevant principles reflected in Malaysia's Personal Data Protection Act 2010 where those requirements apply. This policy does not create rights beyond those provided by applicable law, but it explains the standards u388 uses when managing personal information.

The platform is intended only for eligible adults aged 21 and above. u388 does not knowingly invite minors to register or participate in gambling activities.

Section 2

Personal Information We May Collect

The information collected by u388 depends on how a person uses the platform. Visitors who only browse general content may provide less information than registered users who deposit, wager or request a withdrawal.

Data category Examples General purpose
Identity data Name, date of birth, nationality and identity document details Age, identity and KYC verification
Contact data Email address, residential information and communication preferences Account notices, support and security communication
Financial data Masked bank details, payment ownership evidence and transaction references MYR deposits, withdrawals, refunds and fraud prevention
Activity data Game sessions, wagers, bonus use, account limits and transaction history Service operation, settlement, risk review and responsible gambling
Technical data IP address, device type, browser, operating system and access logs Security, compatibility, diagnostics and misuse detection
Section 3

How Information Is Collected

u388 receives information directly when a user creates or updates an account, completes KYC, communicates with support, selects a responsible gambling control or submits payment details. Users should provide accurate information and update relevant details when they change.

Some technical information is generated automatically when the website is accessed. This may include server logs, browser signals, device identifiers, approximate location derived from an IP address and records of interactions with u388 features. Such information helps identify errors, maintain platform stability and recognise suspicious activity.

u388 may also receive limited information from payment processors, identity verification providers or other service providers involved in a requested transaction. For example, a bank or e-wallet service may confirm whether a payment succeeded without disclosing complete banking credentials.

Section 4

How u388 Uses Personal Information

u388 may process personal information for the following purposes:

  • Creating, maintaining and securing a user account.
  • Confirming that a user is aged 21 or above and eligible to use the platform.
  • Completing identity, address and payment ownership checks.
  • Processing deposits, withdrawals, bonuses and account balance adjustments.
  • Settling casino activity and sports wagers involving EPL, Liga Super Malaysia, UFC or other supported events.
  • Responding to questions, complaints and account support requests.
  • Detecting duplicate accounts, fraud, collusion, chargebacks and unauthorised access.
  • Applying deposit limits, cooling-off periods, self-exclusion measures and other responsible gambling controls.
  • Improving website performance, mobile compatibility and service reliability.
  • Meeting legal, regulatory, security and record-keeping requirements where applicable.

u388 will not use personal information in a manner materially incompatible with the purpose for which it was collected unless a lawful basis, valid consent or another permitted justification applies.

Section 5

MYR Payments and Financial Information

u388 may process payment information relating to Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. The payment channels available to an individual may depend on location, account status, transaction limits and provider availability.

u388 does not require users to disclose a complete online banking password or one-time passcode. Users should enter such credentials only within the authorised interface of their bank or e-wallet provider. Transaction records may include an amount, date, status, reference number, selected method and masked account details.

Financial records may be reviewed to verify payment ownership, investigate unusual activity and resolve a disputed deposit or withdrawal. Users must not deposit through a payment account belonging to another person.

Section 6

Cookies and Similar Technologies

u388 may use cookies, local storage and comparable technologies to remember essential preferences, maintain login sessions, support security controls and understand whether pages operate correctly. Some cookies are required for core platform functions, while others may help assess general site performance.

Browser settings can usually be used to restrict or remove cookies. Blocking essential cookies may prevent account login, saved preferences or other u388 functions from working as intended. Cookie settings do not remove information that has already been collected for legitimate security or transaction records.

Section 7

Sharing and Disclosure

u388 does not sell personal information as a general business practice. Information may be shared with service providers where reasonably necessary to deliver or protect the platform. Relevant providers may support hosting, security, identity verification, payments, customer assistance, fraud detection or technical maintenance.

Service providers should receive only the information necessary for their assigned role and may be subject to confidentiality, security or data handling obligations. u388 may also disclose information when required by an applicable law, valid legal process, regulatory request or investigation into suspected wrongdoing.

If ownership or operation of u388 changes through a legitimate corporate transaction, relevant information may transfer as part of that transaction, subject to appropriate safeguards and continued handling consistent with applicable requirements.

Section 8

International Data Processing

Online services may rely on technical infrastructure or providers located outside Malaysia. Accordingly, personal information may be processed in another jurisdiction where data protection rules differ from Malaysian requirements.

Where applicable, u388 takes reasonable steps to use contractual, organisational or technical measures appropriate to the information and processing risk. International processing does not remove the security and confidentiality responsibilities described in this u388 Privacy Policy.

Section 9

Data Security and Account Protection

u388 applies reasonable administrative and technical measures intended to protect information against unauthorised access, loss, alteration, misuse or disclosure. Measures may include access controls, encrypted transmission, account monitoring, audit records, verification procedures and restricted staff access.

No internet service can guarantee absolute security. Users also have an important role in protecting their information. A strong and unique password should be used for u388, verification codes must remain private, and shared devices should be logged out after use. Suspected unauthorised access should be reported promptly.

Section 10

Data Retention

u388 retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, security, accounting, dispute resolution or responsible gambling needs. Different categories of information may have different retention periods.

Closing an account does not always result in immediate deletion. u388 may need to preserve transaction history, KYC records, self-exclusion information, complaint records or security logs for an appropriate period. When continued identification is no longer required, information may be securely deleted or anonymised.

Section 11

User Rights and Privacy Choices

Depending on applicable law and the circumstances of processing, a user may request access to personal information held by u388, correction of inaccurate information or information about how data has been used. Other choices may include withdrawing consent where processing depends on consent or objecting to certain non-essential communications.

u388 may require sufficient information to verify the identity of the requester before completing a privacy request. A request may be limited or refused where necessary to protect another person's rights, maintain security, preserve responsible gambling controls or comply with a legal obligation.

Before making a privacy request

State the account identifier, explain the requested action clearly and avoid sending passwords, one-time passcodes or full banking credentials. u388 may ask for additional evidence where identity cannot otherwise be confirmed.

Section 12

Responsible Gambling Information

u388 may use account activity and transaction patterns to administer deposit limits, cooling-off periods, self-exclusion requests and other player protection measures. Information showing signs of possible gambling harm may be reviewed to determine whether an appropriate account intervention is required.

Self-exclusion information may be retained after account closure where necessary to prevent a restriction from being bypassed through a new account. These records support user safety and are not used to encourage further gambling. u388 services are restricted to eligible adults aged 21 and above.

Section 13

Information Relating to Minors

u388 does not knowingly provide casino or betting services to anyone under 21. If information indicates that an account holder is below the required age, the account may be restricted while the matter is investigated.

A parent or guardian who reasonably believes that a minor has supplied personal information to u388 may contact the website support team. Appropriate identity and relationship checks may be required before information can be reviewed or removed.

Section 14

Changes to This Privacy Policy

u388 may update this Privacy Policy to reflect changes in platform features, payment options, security practices or applicable requirements. The current version will be published on this page with an updated review date.

Users should review the u388 Privacy Policy periodically. Where a change materially affects the handling of personal information, an appropriate notice may be provided through the platform or another available communication channel.

Section 15

Contact Us

Questions about this policy, personal information or an available privacy request may be directed to the u388 website support team. The website email is [email protected].

The email address is provided as plain text. Users should verify the address before sending information and should never include a password, one-time passcode or complete financial credential. A request should contain enough detail for u388 to understand and assess the matter.

This Privacy Policy should be read together with the u388 Terms & Conditions and responsible gambling information. Online casino games and sports betting involve financial risk. Play responsibly and only with money you can afford to lose.

Continue securely

Explore u388 with informed privacy choices

Return to the homepage to explore u388, review the Terms & Conditions governing platform use, or read the responsible gambling guidance before participating in casino games or sports betting.

For eligible Malaysian players aged 21 and above only. Play responsibly.