U8Asia Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") describes u8asia's privacy practices regarding the collection, use, disclosure, transfer, and storage of personal information belonging to members who use our platform. This Policy applies to all services provided by u8asia through our website, mobile applications, and other digital channels we operate.

U8asia takes your privacy seriously. We understand that the information you share with us – from your full name and Malaysian phone number to your transaction records and playing habits – is sensitive data that you have entrusted to us. We do not take that trust lightly.

This policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards. By using the u8asia platform, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please discontinue use of our platform.

U8asia collects various types of personal information depending on how you interact with our platform. The following are the categories of data we collect:

A. Data You Provide Directly:

• Identification Information: Full name (as per MyKad), MyKad number, date of birth, gender, and nationality.
• Contact Information: Malaysian phone number (+60), active email address and residential address.
• Account Information: Username, password (stored in encrypted form), security questions, and account preferences.
• Financial Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, FPX information, and deposit and withdrawal transaction records in MYR.
• Verification Documents: A copy of your MyKad, bank statement or other documents requested during the KYC (Know Your Customer) process.

B. Automatically Collected Data:

• Technical Data: IP address, browser type and version, device operating system, screen resolution, and unique device identifier.
• Usage Data: Pages visited, games played, session duration, clicks and interactions within the u8asia platform.
• Location Data: Approximate location based on IP address, to verify access from Malaysia and comply with service geographic restrictions.
• Cookie Data: Information collected through cookies and other tracking technologies (see Section 7 for more details).

C. Data from Authorised Third Parties:

• Verification information from Malaysian payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) to validate transactions.
• Information shared with regulatory bodies or law enforcement authorities when required by law.

U8asia uses the personal data we collect for legitimate and specific purposes only. We will not use your data for any other purpose without prior notice and your consent. The following are the primary purposes for which data is used:

Account Operations & Services:

• Creating, managing and verifying your u8asia member account.
• Processing MYR deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Processing withdrawal requests to your registered payment method.
• Providing access to slots, live table games, lottery, jackpots, e-sports and all u8asia products.
• Managing the VIP Rewards programme and calculating the reward points you accumulate.

Security & Compliance:

• Carrying out the Know Your Customer (KYC) process and identity verification.
• Detecting and preventing fraud, money laundering, and other unlawful activities on the u8asia platform.
• Ensuring age compliance – the u8asia platform is strictly for users aged 21 and above.
• Meeting applicable legal and regulatory obligations.
• Investigating member disputes and complaints effectively.

Communications & Support:

• Sending important notifications relating to your account, security and transactions.
• Providing customer support in Bahasa Melayu via live chat, email, and WhatsApp.
• Sending information about relevant u8asia bonuses, promotions and offers (subject to your communication preferences).

Platform Improvements:

• Analysing usage patterns to improve the interface design and overall user experience of the u8asia platform.
• Evaluating game performance and identifying technical issues that require improvement.
• Developing new products and features that are more relevant to the needs of Malaysian players.

U8asia does not sell or rent members' personal data. However, under the limited circumstances described below, we may share data with certain parties:

Authorised Service Providers:

U8asia works with third-party service providers that help us operate the platform, including:

• Malaysian Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supported banks – for processing your financial transactions in MYR.
• Game Providers: Game development companies providing slots, live table games, and other products – data is shared only to the extent necessary to deliver the games.
• Cloud Services: Cloud infrastructure providers that store data on servers located in Malaysia.
• Analytics Services: Analytics tools to measure platform performance – data is shared in aggregated, non-identifiable form only.

All third-party service providers are required to sign data confidentiality agreements and are only permitted to use your data for the specific purposes set out in their agreement with u8asia.

Legally Required Disclosures:

U8asia may be required to disclose your personal data to the relevant authorities in the following circumstances:

• Ordered by a Malaysian court or regulatory body.
• Required to fulfil legal obligations relating to anti-money laundering (AML) or counter-terrorism financing (CFT).
• Required to protect the rights, property, or safety of u8asia, our members, or the general public.

U8asia implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

Technical Security Measures:

• Encryption in Transit: All communications between your device and u8asia's servers are protected with 256-bit SSL/TLS encryption – the same standard used by Maybank2u and CIMB Clicks.
• Encryption at Rest: Sensitive data such as passwords is stored in encrypted form using strong hashing algorithms. No individual – including u8asia staff – can view your password in plain text.
• Access Controls: Access to the member database is restricted to staff who genuinely require it, with all access logged and audited.
• Two-Factor Authentication: u8asia's critical systems are protected with multi-factor authentication (MFA).
• Security Monitoring: An intrusion detection system (IDS) operates 24/7 to identify suspicious activity in real time.

Organisational Measures:

• Independent security audits are conducted quarterly by qualified third parties.
• All u8asia staff with access to personal data undergo regular data security training.
• An incident response procedure is in place to ensure members are notified within 72 hours in the event of a serious data breach.

U8asia retains your personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Data Retention Period Guidelines:

• Active Account Data: For as long as your u8asia account is active and for one year following your last activity.
• Financial Transaction Records: Minimum 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• KYC & Identity Verification Data: 5 years from the date of last verification or account closure, whichever is later.
• Support Communication Logs: 2 years from the date of interaction.
• Technical & Log Data: 90 days for standard access logs; 1 year for logs relating to security incidents.
• Marketing Data: Until you choose to opt out of receiving marketing communications.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. This deletion process is permanent and irreversible.

The u8asia platform uses cookies and similar tracking technologies to enhance your experience, maintain account security, and understand how members interact with our platform.

Types of Cookies Used:

• Essential Cookies (Required): Required for core platform functions such as login, session security, and connection stability. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies: Stores your preferences such as interface language, game settings, and display options, allowing u8asia to deliver a personalised experience.
• Analytics Cookies: Collects aggregated information on how pages are used – such as the most-played games and session duration. This data is used to improve the platform and cannot be used to identify any individual.
• Security Cookies: Helping detect suspicious activity, prevent fraud, and protect member accounts from unauthorised access.

Managing Cookies:

You can control and manage cookies through your browser settings (Chrome, Safari, Firefox, etc.). Disabling certain cookies may affect the functionality of the u8asia platform. Cookie settings can be changed at any time from your browser's Settings menu under the "Privacy" or "Security" section.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and u8asia's policies, you hold several important rights regarding your personal data. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, send a written request to privacy@u8asia.asia stating the right you wish to exercise along with sufficient identity verification details. We will respond within 14 business days from the date the request is received.

The u8asia platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data of children or minors under the age of 21.

If we discover that a minor has registered a u8asia account or provided us with their personal data, we will take immediate action to delete that data and close the account in question. An age verification process is carried out at registration as a preventive measure.

The u8asia platform may contain links to or integrations with third-party services to enhance your experience, particularly in the context of payment processing and game delivery. This Privacy Policy does not apply to those third-party websites or services.

For example, when you make a deposit via Touch 'n Go eWallet, GrabPay or Boost, you will be interacting with the interface or systems of those third parties. The collection and use of data by these payment providers are governed by their own separate privacy policies, which are independent of u8asia's Policy.

U8asia is not responsible for the privacy practices of any third-party websites or services. We encourage you to read the privacy policy of each third-party service you use alongside the u8asia platform.

U8asia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology used, legal requirements, or other legitimate operational reasons.

Change Notification Procedure:

• Significant changes to this Policy will be communicated to all members via their registered email address at least 14 days before taking effect.
• A change notice will also be prominently displayed on the u8asia platform homepage for a minimum of 30 days.
• The "Updated" date at the top of this document indicates when it was last revised.
• Your continued use of the u8asia platform after any changes take effect will be considered your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you disagree with any changes made, you have the right to close your account and request deletion of the relevant data.

If you have any questions, concerns, or complaints regarding u8asia's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: privacy@u8asia.asia – dedicated to data protection enquiries and privacy rights requests. Response within 14 business days.
• General Support: support@u8asia.asia – for general enquiries including those related to account privacy. Available 24/7.
• Live Chat: Available directly through the u8asia platform with an average response time of under 2 minutes.

For formal privacy rights requests (access, rectification, deletion, portability), please submit a written request by email to privacy@u8asia.asia with the following details: your full name as registered on your u8asia account, the type of right you wish to exercise, the reason or context for the request, and a Malaysian phone number for identity verification if required.