U388 Privacy Policy – Data Protection & Personal Information

This Privacy Policy ("Policy") clearly describes how u388 ("Platform", "we", "us"), which operates the website u388.wine, collects, processes, stores, shares, and protects your personal information as a user of our platform.

We understand that your trust is the most valuable asset we protect. Every data management decision at u388 is made with player privacy as the top priority. This policy is crafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This Policy applies to all users who access or use u388's services through the website, mobile app, or any other official channels operated by us. By registering an account or using this platform, you agree to the collection and use of information as described in this document.

U388 only collects information that is strictly necessary to provide a safe, fair, and efficient service to all players. The following are the categories of data we collect:

Information You Provide Directly

• Full name as stated in your official identification document
• An active and reachable email address
• Mobile phone number registered in Malaysia
• Date of birth for age verification (18 years and above)
• Bank account or digital wallet details for deposit and withdrawal purposes
• Copy of identification document (MyKad, passport) during the KYC verification process
• Passwords stored in encrypted form — we cannot read your password

Automatically Collected Information

• IP address and approximate location information based on IP
• Device type, operating system, and web browser version used
• Platform usage data including pages visited, session duration, and in-account actions
• Betting records, deposits, withdrawals, and transaction history
• Cookie and similar tracking technology data (see Section 6)

Every piece of data we collect is used for a clear and legitimate purpose. u388 does not process your data for any purpose beyond the operational requirements of the platform as stated below:

• Service Provision: Creating and managing player accounts, processing deposits and withdrawals, and ensuring a smooth and stable gaming experience.
• Identity Verification (KYC): Verifying that every player is a real individual aged 18 and above and eligible to use the platform under local law.
• Fraud Prevention: Detecting and investigating any suspicious activity, including unauthorised access attempts, multi-account usage, or money laundering.
• Communication: Sending transaction notices, security updates, promotional information (if you have opted in), and customer service responses.
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve the functionality, design, and performance of the u388 platform.
• Legal Compliance: Fulfilling reporting obligations and record-keeping requirements mandated by applicable Malaysian law.
• Responsible Gaming: Monitoring wagering patterns to identify players who may need self-control support or self-exclusion.

U388 does not sell, rent, or trade your personal information to any third party for commercial purposes. We only share your data in the limited situations outlined below:

Trusted Service Providers

We work with carefully selected third-party service providers to support platform operations, including payment processors (DuitNow, FPX, TNG eWallet, GrabPay, Boost), cloud infrastructure providers, identity verification services, and analytics systems. All providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

Legal Compliance & Security

U388 may disclose your personal information to the relevant authorities when required by law, court order, or direction from a legitimate regulatory body. This includes investigations related to financial fraud, money laundering, or public security threats.

Business Transfer

In the event that u388 undergoes corporate restructuring, a merger, or an acquisition, user information may be transferred as part of the business assets. In such cases, you will be notified in advance and the same or stricter privacy policy will continue to apply.

The security of your data is u388's absolute priority. We implement multiple layers of technical protection and organisational procedures to ensure your personal information is always safeguarded against unauthorised access, loss, or misuse.

• 256-bit SSL Encryption: All communications between your device and u388's servers are encrypted using the latest TLS protocol, making your data unreadable to unauthorised parties during transmission.
• Stored Data Encryption: Sensitive information such as passwords and financial data is stored in encrypted form using industry-recognised encryption algorithms.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA to add an extra layer of security to their accounts.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or unusual activity promptly.
• Internal Access Control: Only u388 staff who require data access for their specific job duties are permitted, and every access is logged and audited on a regular basis.
• Regular Penetration Testing: The u388 security team conducts regular penetration testing and vulnerability assessments to identify and address any system weaknesses.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach that affects your rights, u388 is committed to notifying you as promptly as practically possible and taking appropriate remedial action.

U388 uses cookies and similar tracking technologies to enhance platform functionality, remember your preferences, and analyse how you use our services. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality and security of your login session on the u388 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we adhere to, you have the following rights regarding the personal information we hold:

To exercise any of the above rights, please contact the u388 support team by email at [email protected] or via the platform's Live Chat. We will process your request within 14 business days.

U388 retains your personal information only for as long as it is needed for the purposes stated in this policy or as required by applicable Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and in use on the u388 platform.
• After Account Closure: Basic account information and transaction records are retained for a minimum of 7 years after account closure to meet financial reporting and legal audit requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, in line with anti-money laundering (AML) requirements.
• Security Log: Access and security log data is retained for 90 days for the purpose of security incident investigation.
• Analytics Data: Anonymised usage data is retained indefinitely as it cannot be linked back to any specific individual.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to your identity.

The u388 platform is strictly for individuals aged 18 and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

All new players are required to verify their age during registration and undergo KYC verification that includes an identity document check. Should we find that a minor's personal information has been collected inadvertently, we will take immediate action to delete that information and close the account without delay.

U388 reserves the right to modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform improvements. Each update will include a new effective date at the top of this page.

For significant and material changes, we will notify you through one or more of the following methods:

• Notices displayed prominently on the platform's home page upon login
• Notification emails sent to your registered account email address
• Messages in your u388 account inbox

Your continued use of the u388 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

If you have any questions, concerns, or wish to exercise your data privacy rights, you may contact the u388 privacy team through the following channels:

• Privacy Email: [email protected] (use subject: "Privacy Inquiry")
• Live Chat: Available 24/7 directly on the u388 platform
• Telegram: Via the official u388 Telegram channel

Our response time for data privacy enquiries is within 3 business days. For more complex requests such as data deletion or data export, the process may take up to 14 business days. We are committed to handling every request carefully and thoroughly to fully protect your interests.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and data security on the u388 platform.