Privacy Policy u388 — How We Protect Malaysian Members' Information

To provide a secure, personalised, and fully functional u388 service, we need to collect certain categories of information from our members. Below is a full explanation of the types of information we collect and the reasons for doing so.

Information you provide to us directly:

• Registration information: Full name, date of birth, mobile number, email address and the password you create when registering your u388 account.
• Identity verification information (KYC): A copy of your identity card (MyKad), passport or other identity document that u388 may request to verify your identity before processing your first withdrawal or for other security purposes.
• Financial information: Details of the payment methods you use for deposits and withdrawals — including your Touch 'n Go, GrabPay, Boost, ShopeePay or DuitNow e-wallet account numbers, or FPX bank information (Maybank2u, CIMB Clicks). We do not store full credit card numbers as u388 does not accept credit card payments.
• Communication information: Any messages, support requests or feedback you send to the u388 team via live chat, email or other communication channels.

Information collected automatically when you use u388:

• Technical data: IP address, browser type, operating system, screen resolution, device name, and other technical details about how you access the u388 platform.
• Gaming activity data: Gaming history, total wagers, wins and losses, active session duration, and game preferences — used for account management, fraud detection, and licence compliance.
• Transaction data: A complete record of all deposits and withdrawals made through your u388 account, including the date, time, amount and payment method used.
• Cookie and tracking data: Information collected through cookies and similar tracking technologies — described in further detail in Section 5 of this document.

Information collected by u388 is used solely for legitimate purposes directly related to providing platform services to you as a member. The following are the primary purposes for which your data is used.

• Account management: Creating, verifying and maintaining your u388 account securely, including the login process, identity verification and password management.
• Transaction processing: Deposits are processed via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and winnings are withdrawn through the same payment methods — accurately and securely.
• Gaming service provision: Enjoy slots, Live Casino, table games, Sports Betting — including the Malaysia Super League and EPL — lottery, and all other content available on u388.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple account usage, bonus abuse, and other security threats that could compromise the integrity of the u388 platform and the safety of other members.
• Customer support: Providing 24-hour technical assistance and support services in both Malay and English, based on your account history and transaction records.
• Service communications: Sending important notifications about your account, security updates, changes to the Terms & Conditions or Privacy Policy, and other relevant operational information.
• Marketing (with consent): Sending you information about u388 promotions, bonuses and special offers that may interest you — but only if you have consented to receive marketing communications during registration or subsequently through your account settings.
• Licence and legal compliance: Meeting reporting requirements set by the relevant licensing authorities and regulatory bodies, including AML (Anti-Money Laundering) and KYC (Know Your Customer) obligations.

U388 does not sell, rent or trade members' personal information to any third party. However, there are limited circumstances in which u388 may need to share your information with certain parties for legitimate operational purposes.

All third parties working with u388 are required to sign a data protection agreement that prohibits them from using your information for any purpose other than those specified in the agreement. u388 carefully selects its service partners and ensures they adhere to security standards equal to or higher than u388's own.

U388 invests seriously in security infrastructure to ensure that members' personal and financial data is always protected against unauthorised access, data breaches and increasingly sophisticated cyber threats.

• Data transmission encryption: All data transmitted between your device and u388's servers is encrypted using TLS 1.3 protocol with 256-bit SSL standards. This ensures that your information cannot be intercepted or read during transmission over the internet.
• Stored data encryption: Sensitive information such as passwords is stored using strong one-way hashing. Even in the unlikely event of a data breach, your actual password will not be exposed in a readable format.
• Internal access controls: Access to members' personal data within u388 systems is restricted to staff who genuinely require it to perform their job responsibilities. All access is logged and audited regularly to detect any unauthorised use.
• 24-hour security monitoring: u388's automated monitoring system runs around the clock to detect any suspicious activity, intrusion attempts, or unusual access patterns that may indicate a security threat.
• Two-factor authentication (2FA): u388 provides and encourages the use of two-factor authentication for all accounts. With 2FA enabled, even if someone knows your password, they still cannot log in without the second verification code sent to your phone.
• Regular security audits: u388 conducts regular security testing and internal audits to identify and address any vulnerabilities in our systems before they can be exploited by malicious parties.

The u388 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how members use our platform. Below is an explanation of the types of cookies we use.

Essential cookies are required for the u388 platform to function properly — without them, you will not be able to log in or enjoy a smooth gaming experience. All other cookies are optional and can be managed through your browser settings or the u388 account settings panel.

Please note that disabling all cookies other than essential ones may affect certain features on the u388 platform, such as saving your game preferences or receiving personalised game recommendations.

As a u388 member, you have certain rights regarding the personal data we hold about you. u388 is committed to respecting and facilitating the exercise of these rights.

• Right of access: You may request a copy of all personal data u388 holds about you. We will provide this information in a readable format within 30 days of the date of your request.
• Right to rectification: If you find that any personal information u388 holds about you is inaccurate or out of date, you may request a correction at any time through your account panel or by contacting our support team.
• Right to erasure: Under certain circumstances, you may request that u388 delete your personal data. Please note, however, that we may be legally or contractually required under applicable laws or licensing conditions to retain certain records even after account closure.
• Right to restriction of processing: You may request that u388 restrict how we process your data in certain situations, such as when you are disputing the accuracy of your data or while a complaint is under investigation.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider if you wish.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time — and u388 will cease such processing immediately upon receiving your objection.

U388 retains members' personal data only for as long as necessary to fulfil the stated purposes, or as required by applicable laws and licensing obligations.

• Active account data: For as long as your u388 account remains active, your profile information, gaming history, and transaction records are retained to enable the continuous provision of our services.
• After account closure: When you close your u388 account, we will delete or anonymise any personal data that is no longer needed within a reasonable timeframe, typically within 90 days.
• Financial records and transactions: Financial transaction records, including deposit and withdrawal history, may be retained for up to 7 years from the date of the transaction, in line with the financial reporting and legal compliance requirements applicable to licensed gambling platform operators.
• KYC records: Identity verification documents may be retained for up to 5 years after the end of the business relationship, in line with applicable AML (Anti-Money Laundering) requirements for licensed operators.
• Security logs: Technical and security logs related to account activity are retained for 12 months for investigation purposes in the event of a security incident or complaint.

U388 is an online gambling platform intended exclusively for adults aged 21 and above. We take the protection of children and minors extremely seriously.

• Strict prohibition: u388 does not intentionally collect, store, or process any personal information from individuals under the age of 21. This platform, its gaming content, and all marketing materials are not directed at children or minors.
• Age verification: During registration, you are required to confirm that you are 21 years of age or older. u388 reserves the right to, and may, require documentary proof of your age at any time as part of the KYC process.
• Actions upon occurrence: Should u388 discover that personal data belonging to individuals under the age of 21 has been collected inadvertently, we will take immediate action to delete that information and close the account in question. If you believe a minor has an account with u388, please contact us right away at support@u388.site.
• Parental control tools: u388 encourages parents and guardians to use parental control software to restrict children's access to online gambling platforms. More information on these tools is available from your internet service provider or device operating system.

U388 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements.

• Amendment notification: Any material changes to this Privacy Policy will be communicated to you via a notification within the u388 platform or by email to your registered address at least 14 days before the changes take effect.
• Minor changes: Minor changes such as spelling corrections, language clarifications, or reformatting that do not alter the substance of the policy may be made without specific notice — the "Updated" date at the top of this document will always reflect the date of the most recent revision.
• Acceptance of amendments: Continued use of the u388 platform after the effective date of an updated Privacy Policy will be deemed as your acceptance of the changes. If you do not agree with any amendments made, you have the right to close your u388 account before the changes take effect.
• Periodic reviews: We encourage you to review this Privacy Policy page periodically to stay informed about how u388 protects your information.

If you have any questions, concerns, or requests relating to u388's Privacy Policy or the way we handle your personal data, please do not hesitate to reach us through the following channels.

• Privacy email: For specific enquiries about personal data, your rights as a data subject, or privacy-related complaints, please email support@u388.site with a clear subject line such as "Privacy Request" or "Data Protection Complaint".
• 24-hour live chat: For general questions about the Privacy Policy or account security, the u388 support team is available via the live chat function accessible from any page on the u388 platform — available 24 hours a day, 7 days a week in both Bahasa Melayu and English.
• Response time: We aim to respond to all privacy-related enquiries within 5 business days. For more complex data subject access requests, we will provide a full response within 30 days of receiving the request.