Privacy Policy

1. Who We Are and How to Contact Us

uo8my is an international online gaming platform operating at uo8my.app. The Platform offers slots, live casino, sportsbook, and lottery services to eligible users. For all privacy-related queries, corrections, access requests, or complaints, contact our Data Protection team at:

Email: [email protected]
Subject line: Privacy Request – [Your Username]
Response time: Within 30 calendar days of receipt

2. Data We Collect

uo8my collects personal data in the following categories:

2.1 Registration Data

When you create an uo8my account, we collect: full name, date of birth, email address, mobile phone number, and country of residence. This data is mandatory for account creation and identity verification.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, uo8my may request copies of government-issued identification (e.g., MyKad, passport), proof of residential address (e.g., utility bill, bank statement), and proof of payment method ownership. This applies to all accounts prior to first withdrawal and at any point where our compliance obligations require it.

2.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and wagers placed through your uo8my account. This includes transaction amounts, payment method identifiers (truncated card or e-wallet account references, FPX bank codes), timestamps, and transaction statuses. Full payment credentials (e.g., full card numbers, e-wallet PINs) are never stored by uo8my — these are processed directly by our licensed payment service providers.

2.4 Technical and Usage Data

When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, session duration and activity logs, pages visited and features used, and referral source. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

2.5 Communications Data

If you contact uo8my support, we retain the content of those communications — including chat transcripts, emails, and any documents you submit — for service quality and dispute resolution purposes.

2.6 Responsible Gaming Data

If you interact with uo8my's responsible gaming tools — including setting deposit limits, activating session reminders, or requesting self-exclusion — that data is stored separately with restricted internal access and is used solely to give effect to your responsible gaming preferences.

3. How We Use Your Data

uo8my uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and authenticating your uo8my account; processing deposits and withdrawals; communicating account-related information.
• Identity and Fraud Verification: Verifying your identity for KYC compliance; detecting and preventing fraudulent activity, bonus abuse, and money laundering.
• Service Delivery: Enabling access to games, sportsbook markets, and platform features; processing financial transactions through our licensed payment processors.
• Customer Support: Responding to your queries, resolving disputes, and improving support quality based on communication records.
• Legal and Regulatory Compliance: Meeting obligations under applicable anti-money laundering laws, gaming licensing conditions, and data protection regulations in force in the jurisdictions where uo8my operates.
• Security and Platform Integrity: Monitoring for unauthorised access, cheating, collusion, and technical vulnerabilities; maintaining audit logs for regulatory purposes.
• Responsible Gaming: Applying deposit limits, self-exclusion instructions, and session alerts as requested by you.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve Platform design, game selection, and performance.

uo8my does not use your personal data for third-party advertising profiling, sell your data to data brokers, or use it for any purpose incompatible with those stated above without obtaining your prior consent.

4. Legal Basis for Processing

uo8my processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have registered for.
• Legal obligation: Processing required to comply with AML, KYC, and gaming licensing requirements applicable to uo8my's operations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform optimisation where these interests are not overridden by your privacy rights.
• Consent: Where required by applicable law for specific processing activities (e.g., optional marketing communications), we will obtain your explicit consent before proceeding, and you may withdraw it at any time.

5. Cookies and Tracking Technologies

uo8my uses cookies and similar tracking technologies to maintain your authenticated session, remember your preferences, and collect technical usage data as described in section 2.4. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming parameters you have set.
• Analytics cookies: Used to understand how the Platform is used in aggregate — page load performance, feature usage patterns, and error rates. Analytics data is anonymised before analysis.

uo8my does not use third-party advertising cookies or allow advertising networks to set cookies on the Platform.

6. Third-Party Data Processors

uo8my engages third-party service providers who process personal data on our behalf as data processors. These include:

• Payment service providers (for processing deposits and withdrawals via FPX, Touch 'n Go eWallet, Boost, and cryptocurrency rails).
• KYC and identity verification service providers (for document verification and identity matching).
• Game content providers (who receive anonymised session data necessary for game functionality — no personally identifiable information beyond a hashed user token is shared with game providers).
• Cloud infrastructure and hosting providers (who store Platform data in secure, access-controlled environments).

All third-party processors engaged by uo8my are bound by contractual data processing agreements that restrict them to processing your data solely for the purposes specified, using appropriate security measures, and not retaining data beyond the agreed period.

7. International Data Transfers

uo8my may transfer your personal data to service providers located outside Malaysia where necessary for service delivery. Where such transfers occur, uo8my implements appropriate safeguards — including contractual data protection clauses — to ensure your data receives a standard of protection consistent with this Policy.

8. Data Retention

uo8my retains personal data for the following periods:

• Active account data: Retained for the duration of your account plus a minimum of five years following account closure, to meet AML and gaming licensing record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the last communication or dispute resolution, whichever is later.
• Technical/usage logs: Retained for 12 months unless a longer retention period is required for a specific security investigation.

9. Your Rights

Subject to applicable law and uo8my's legal obligations, you have the following rights in respect of your personal data:

• Right of access: Request a copy of the personal data uo8my holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to uo8my's legal retention obligations.
• Right to restriction: Request that uo8my restrict processing of your data in certain circumstances (e.g., while a rectification request is being assessed).
• Right to object: Object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a request to [email protected] with the subject line "Privacy Request". uo8my will respond within 30 calendar days. Identity verification may be required before fulfilling access or deletion requests.

10. Children and Age Verification

uo8my strictly prohibits use of the Platform by persons under 21 years of age. The Platform is not directed at, and does not knowingly collect personal data from, individuals below the minimum age threshold. Age verification is a mandatory step in the registration and KYC process. If uo8my discovers that personal data has been collected from an underage individual, that account will be immediately closed and associated data deleted, except where retention is required by law.

11. Security Measures

uo8my implements technical and organisational measures appropriate to the nature of the data processed, including: TLS 1.3 encryption for all data in transit; encryption at rest for sensitive data fields; access controls limiting staff access to personal data on a need-to-know basis; regular security assessments and penetration testing; and incident response procedures for data breach scenarios.

No system is perfectly immune to compromise. If you become aware of any security vulnerability or suspect your uo8my account has been compromised, contact [email protected] immediately.

12. Changes to This Policy

uo8my reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via Platform notification or email to the registered address. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of uo8my after notification of changes constitutes acceptance of the revised Policy.