Privacy Policy u388 — Your Data Protection

1 Privacy Policy Introduction & Scope

This Privacy Policy applies to all users of the u388 platform, including visitors who browse our website without registering an account, as well as registered members using any of our services. This policy covers all channels operated by u388, including the main website, mobile app, and our official communication channels.

By using the u388 platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our platform.

2 Information We Collect

U388 collects personal information from you through several different means. Below are the main categories of information we collect and the purposes for collecting them:

We do not collect information that is unnecessary for platform operations. Every category of data collected has a clear and valid justification, whether to comply with legal requirements, process transactions, or improve your experience on the u388 platform.

3 How We Use Your Data

The personal information we collect is used solely for lawful and transparent purposes. Here are the main ways we use your data:

• Account management: Creating, verifying, and maintaining your u388 account, including secure login processes and account recovery.
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and securely to your Malaysia bank account.
• KYC & AML Compliance: Verifying member identity and fulfilling anti-money laundering (AML) and know your customer (KYC) legal requirements applicable to iGaming platforms.
• Platform security: Detecting and preventing fraud, money laundering, account abuse, and other security threats.
• Service improvement: Analyzing usage patterns to improve platform features, enhance the user interface, and introduce new games that match member interests.
• Service communications: Sending you important notifications related to your account, transactions, policy changes, and security information.
• Marketing (with consent): Informing you about promotions, bonuses, and special offers — only if you have agreed to receive marketing communications during registration or through your account settings.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support to members who need it.

4 Data Sharing & Third Parties

U388 does not sell, rent or transfer members' personal data to third parties for their own commercial purposes. However, there are specific situations where we need to share your data with carefully selected third parties, as follows:

• Payment service providers: Banks, e-wallet operators, and payment gateway providers that process your transactions. They receive only the information necessary to process the relevant payment and are bound by strict confidentiality agreements with us.
• Game software providers: Game providers such as slot, Live Casino and Sports Betting providers that need to verify player identity for their own licensing compliance purposes.
• Legal authorities: u388 will disclose required data to the police, courts or regulatory bodies when directed to do so by law or a valid court order.
• Analytics & security services: Third-party providers that help us detect fraud, analyze platform traffic, and enhance system security — all under data processing agreements that comply with data protection standards.

5 Data Security

U388 continually invests in the latest security infrastructure to ensure your personal data is always protected. Key security measures we employ include:

• Data encryption in transit: All communication between your browser and u388 servers is protected by TLS 1.3 protocol and AES-256 encryption, ensuring that data in transit cannot be intercepted or read by any third party.
• Data encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form using secure cryptographic algorithms. Your password is never stored in plain text.
• Layered access controls: Only u388 staff granted specific authorisation based on their job requirements may access member data. All access is logged and continuously monitored.
• Two-factor authentication (2FA): We offer and encourage the use of 2FA for all member accounts, adding an extra layer of protection against unauthorised access.
• Periodic security audits: The u388 system undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and remediate any potential vulnerabilities.
• 24/7 Monitoring: The u388 security team monitors our systems around the clock to detect any suspicious activity or intrusion attempts in real time.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of any data breach that affects you, we will notify you and the relevant authorities within the timeframe required by law.

6 Cookies & Tracking Technologies

U388 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use our platform — most visited pages, response times, and errors encountered — to help us improve platform performance.
• Functionality cookies: Saving your preferences such as language, display settings, and game choices so you do not need to reconfigure them every time you log in.
• Analytics cookies: Used to understand platform usage patterns in aggregate and anonymised form, helping us make better development decisions.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality and your experience on the u388 platform. By continuing to use our platform after receiving the cookie notification, you consent to the use of cookies as described above.

7 Your Rights as a u388 Member

As a u388 member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act (PDPA):

• Right of access: You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 14 working days.
• Right to rectification: If any of your information is inaccurate or outdated, you have the right to request an immediate correction. You may also update most details directly through your account profile page.
• Right to erasure: You may request the deletion of your personal data, subject to legal retention requirements related to financial activity and regulatory compliance.
• Right to restriction of processing: In certain situations, you may request that we temporarily restrict the processing of your data while a dispute or investigation is ongoing.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, and we are required to honour that objection immediately.
• Right to data portability: You may request your data in a machine-readable format for transfer to another service provider of your choice.

8 Data Retention & Deletion

U388 does not retain your personal data longer than necessary. Our data retention periods are based on the following requirements:

• Active account data: Retained for the duration your account is active on the u388 platform, plus any additional period required following account closure.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, as required by Malaysian financial and anti-money laundering laws.
• Communication records: Customer support chat records are retained for 3 years for reference and dispute resolution purposes.
• Technical and security logs: Retained for 12 months for security investigation and fraud detection purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which the data is deleted or unsubscribed within 30 days.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be associated with you as an individual. Our data deletion process follows industry-standard security methods to ensure deleted data cannot be recovered.

9 Privacy Policy Amendments

U388 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements or relevant technological developments. Members will be notified of any significant amendments via:

• In-account notifications on your u388 platform that will appear upon your next login.
• Emailed to your registered address at least 14 days before amendments take effect for significant changes.
• Update the "Last Updated" date at the top of this document.

By continuing to use the u388 platform after the effective date of any amended Privacy Policy, you are deemed to have accepted the updated terms. If you do not agree with the amendments, you have the right to close your account before the effective date of those changes.

10 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how u388 handles your personal data, we encourage you to contact us directly. The u388 privacy and compliance team is ready to assist you.

You can reach us through the following methods:

• Live Chat: The fastest channel — available 24/7 directly within the u388 platform. Our team will respond to your privacy enquiries within minutes.
• Official Email: Send your written enquiry to the official u388 support email address. We guarantee a response within 24 hours on working days.
• FAQ Page: For frequently asked questions on privacy and security, visit our FAQ which is updated on a regular basis.

When contacting us regarding privacy, please include your full name and account username along with the details of your request so we can verify your identity and process it more efficiently. We are committed to handling every privacy inquiry seriously, transparently, and within the stated timeframe.