U388 Privacy Policy – Transparent and Responsible Personal Data Protection for Malaysian Members

1.Introduction

This Privacy Policy explains how u388 ("we", "Platform") collects, uses, stores and protects the personal information you provide when registering for and using our services at u388.my. We take your privacy seriously and are committed to handling your data in a transparent, responsible and secure manner.

U388 is an online entertainment platform offering a wide range of live casino games including Blackjack, Roulette, Poker, and Table Games, as well as a Sports Betting platform covering the Malaysia Super League, EPL, BWF badminton, and e-sports. All these services require certain personal data processing to operate effectively and comply with applicable legal requirements in Malaysia.

This policy applies to all users of the u388 platform, including unregistered visitors, registered members, and any individual who interacts with our platform through the u388.my website or the u388 mobile app. By continuing to use the u388 platform, you confirm that you have read and understood this Privacy Policy.

2.Personal Data We Collect

U388 only collects personal data that is necessary for legitimate purposes related to the operation of the platform. The following are the categories of data we may collect:

Registration & Identity Data:

• Full name as per your Malaysian identity card (MyKad) or passport.
• Date of birth for age eligibility verification (18 years and above).
• An active Malaysian mobile number.
• A valid, accessible email address.
• Your chosen username and password (passwords are stored in encrypted format).

Financial & Transaction Data:

• Information relating to the payment method used – DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks.
• Deposit and withdrawal records in Malaysian Ringgit (RM).
• Transaction history and account balance.
• Malaysian bank account details for withdrawal of winnings.

Platform Activity Data:

• Gaming activity records including sports betting history, live casino sessions, and e-sports gameplay.
• Login and logout times on the u388 platform.
• Game preference settings and limits set by the member.
• Betting history across the Malaysia Super League, EPL, BWF badminton and other sports.

Technical Data:

• The IP address of the device used to access u388.
• Browser type and version, or device operating system.
• Permitted cookies and tracking technology data.
• Information relating to technical errors or issues reported to u388 customer support.

3.How We Use Your Data

U388 uses members' personal data solely for legitimate purposes as set out below. We do not use your data for any purpose outside this scope without first obtaining your explicit consent.

U388 does not use fully automated decision-making that materially affects member rights without human review. Any significant decisions — such as account suspension or withdrawal rejection — are subject to review by qualified members of the u388 team.

4.Data Sharing with Third Parties

U388 does not sell or rent member personal data to any third party. However, there are limited circumstances in which u388 may need to share personal data with certain parties, as outlined below:

• Licensed Malaysian payment processors – to process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. These processors receive only the minimum data necessary to complete a transaction and are bound by strict data protection agreements.
• Technology service providers – companies that support u388's technical infrastructure, including server hosting and cybersecurity systems. All such providers are bound by data processing agreements that require them to uphold data protection standards equivalent to or higher than Malaysia's PDPA.
• Malaysian law enforcement authorities – u388 is required to disclose personal data if ordered to do so by a court or relevant authority under applicable Malaysian law.
• Financial compliance and AML authority – to fulfil anti-money laundering (AML) and counter-terrorism financing (CFT) obligations as required by Malaysian authorities.

5.Data Security

U388 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration or destruction. The key measures we have in place are as follows:

• Encryption in transit: All data transmitted between your device and u388 servers is protected with 256-bit SSL/TLS encryption. This covers login data, financial transactions in MYR, and all in-platform communications.
• Stored data encryption: Sensitive data such as passwords and financial information is stored in encrypted format using the latest encryption algorithms on u388 servers.
• Layered access controls: Access to members' personal data within u388's internal systems is restricted using the principle of least privilege – only staff who require access to carry out their duties are permitted.
• 24/7 security monitoring: u388 systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts. Incident response is initiated immediately upon identification of any threat.
• Regular security testing: Security audits and penetration testing are conducted on a regular basis to identify and address any vulnerabilities in u388's systems before they can be exploited.

While u388 takes every reasonable step to protect your data, no security system can be guaranteed to be 100% secure. You also play an important role in keeping your data safe – by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to the u388 team.

6.Cookies & Tracking Technologies

U388 uses cookies and related tracking technologies to enhance the user experience, understand how the platform is used, and maintain the security of member login sessions. The following are the types of cookies in use:

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some areas of the u388 platform.

7.Data Retention Period

U388 retains member personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or for as long as required under applicable Malaysian law. The following is a general guide to data retention periods:

• Active account data: Retained for the duration your u388 account remains active, plus any additional period required by legal compliance obligations following account closure.
• MYR financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in accordance with Malaysian financial and tax legislation.
• Betting records and gaming activity: Retained for 3 years from the date of activity, for dispute resolution and responsible gambling compliance purposes.
• Customer support communication logs: Retained for 2 years after the last interaction, for quality control and recurring issue resolution purposes.
• Technical data and server logs: Retained for 90 days, or longer if required for an ongoing security investigation.

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

8.Your Rights as a u388 Member

Under Malaysia's Personal Data Protection Act (PDPA), you have the following rights regarding your personal data held by u388:

To exercise any of the rights above, please contact the u388 team by email at support@u388.my or via live chat within the u388 platform. Valid requests will be processed within 14 to 21 business days. u388 reserves the right to request identity verification before processing any requests relating to personal data.

9.Children's Data

The u388 platform is strictly for adult users aged 18 and above. u388 does not knowingly collect or process personal data of any individual under the age of 18. All prospective members are required to verify their age during registration, and u388 enforces rigorous age verification as part of its KYC process.

Should u388 discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and terminate the associated account. If you believe a child has registered on the u388 platform, please contact us at support@u388.my immediately so that appropriate action can be taken.

10.Changes to the Privacy Policy

U388 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, new legal requirements, or member feedback. The "Last Updated" date at the top of this document will be updated each time a change is made.

For material and significant changes, u388 will notify members via their registered email address or in-platform notification at least 14 days before the changes take effect, unless immediate changes are required for security reasons or urgent legal requirements. Your continued use of the u388 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically so you always know how u388 is protecting your privacy. The most current version of the Privacy Policy is always available on this page.

11.How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how u388 handles your personal data, you are welcome to reach us through the following channels:

• Email: support@u388.my – for detailed enquiries or formal requests relating to personal data.
• Live Chat: Available directly within the u388 platform, 24 hours a day, 7 days a week — for immediate enquiries in Malay.

The typical response time for privacy-related enquiries is within 3 business days for email, and within minutes for live chat. For formal data rights requests — such as access, correction, or deletion — processing time is 14 to 21 business days depending on the complexity of the request.

U388 is committed to handling every privacy enquiry with seriousness, transparency, and within the stated timeframes. Your trust in us to manage your personal data responsibly is something we take seriously every day.