Privacy Policy

1Introduction

uo8my ("the Platform", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://uo8my.cam. This Privacy Policy describes how uo8my collects, processes, stores, and protects the personal data of individuals ("Players", "Users", or "you") who register an account with or otherwise interact with the Platform.

We are committed to handling your personal data responsibly and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions involving Malaysian data subjects. Where uo8my's operations involve data subjects located in other jurisdictions, we also apply standards consistent with internationally recognised data protection frameworks.

This Privacy Policy applies to all personal data collected through the Platform, our customer support channels, and any communications between you and uo8my. It should be read together with our Terms & Conditions, which govern the overall contractual relationship between you and the Platform.

By creating an account on uo8my, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2Definitions

For the purposes of this Privacy Policy, the following terms have the meanings ascribed to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means uo8my, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of uo8my under a written data processing agreement.
• "Consent" means a freely given, specific, and informed indication of the Player's agreement to the processing of their Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by the Platform's server to store session information and preferences.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia.
• "KYC" means Know Your Customer — the identity verification process required by anti-money laundering regulations.

3Personal Data We Collect

uo8my collects Personal Data that is necessary to operate the Platform, verify player identity, process transactions, comply with legal obligations, and improve the user experience. We do not collect more data than is required for these stated purposes. The categories of Personal Data we collect are described in the table below:

We do not collect special categories of sensitive Personal Data (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily disclose such information in the context of a responsible gambling self-assessment. Where such data is provided, it is processed solely for the purpose of delivering appropriate player protection measures and is not used for any other purpose.

4How We Process Your Data

uo8my processes your Personal Data for the following purposes:

• Account Management: To create, maintain, and administer your player account, including login authentication and account security.
• Transaction Processing: To process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and transfers from Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank. Transaction records are maintained for a minimum of seven years in compliance with financial regulations.
• Identity Verification (KYC): To verify your age (21+), identity, and source of funds as required by anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and abuse of the Platform.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and develop new features that improve the player experience.
• Responsible Gambling: To monitor gameplay patterns for signs of problem gambling behaviour, enforce deposit limits, process self-exclusion requests, and provide player protection interventions.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints submitted via live chat, email, or other support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies (see Section 13).

5Legal Basis for Processing

Under the Malaysian PDPA and applicable international data protection standards, uo8my processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and uo8my — including account operation, payment processing, and game delivery — is necessary for the fulfilment of our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable law, including AML/CTF obligations, KYC requirements, tax reporting obligations, and regulatory record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of uo8my's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalisation features, where we have obtained your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6Third-Party Sharing & Disclosure

uo8my does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with the following categories of recipients only where strictly necessary:

• Payment Service Providers: Financial institutions and e-wallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow/FPX, and partner banks) that process your deposits and withdrawals. These entities act as independent data controllers and are subject to their own privacy policies.
• KYC & AML Service Providers: Third-party identity verification and fraud detection platforms engaged under written data processing agreements to perform automated KYC checks and AML screening.
• Game Content Providers: Software providers whose games are hosted on the Platform may receive anonymised gameplay data for technical and certification purposes. No personally identifiable information is shared without necessity.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers that process data as part of our technical infrastructure, operating under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Competent authorities, regulators, or courts where uo8my is legally compelled to disclose information, or where disclosure is necessary to protect the safety of users or the public.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

7Cookies & Tracking Technologies

uo8my uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse user behaviour for platform improvement purposes. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences such as language settings, preferred currency display, and game interface settings. These improve your experience but are not essential.
• Analytical Cookies: Used to collect anonymised data about how Players navigate the Platform — pages visited, session lengths, and feature usage — to help us understand and improve performance. No personally identifiable information is included in analytical data.
• Marketing Cookies: Where you have provided consent, marketing cookies may be used to personalise promotional offers and track the effectiveness of our campaigns. These can be disabled at any time through your browser settings or by contacting support.

You may control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core functions, but may affect the availability of certain personalised features.

8Data Retention

uo8my retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Our standard retention framework is as follows:

• Active Account Data: Retained for the full duration of your account's existence and for a minimum of five (5) years following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial regulatory requirements applicable to the Platform's licensing jurisdiction.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

9Data Security

uo8my implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using 256-bit TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive Personal Data — including KYC documents and financial records — is stored in encrypted form within our data infrastructure.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. uo8my staff undergo background checks and are bound by confidentiality obligations. Multi-factor authentication is required for all internal systems access.
• Segregated Data Environments: Player data is held in environments logically separated from uo8my's operational systems and external networks.
• Regular Security Audits: The Platform and its data infrastructure are subject to regular penetration testing and security audits conducted by independent third-party specialists.
• Incident Response: uo8my maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

Notwithstanding the above, no data transmission over the internet can be guaranteed to be entirely secure. You are responsible for maintaining the security of your own account credentials and for logging out of the Platform when using shared or public devices.

10International Data Transfers

uo8my operates under international online gaming licensing and may engage service providers whose data processing infrastructure is located outside of Malaysia. Where Personal Data is transferred to servers or processors located outside Malaysia, uo8my implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that afforded under the Malaysian PDPA and applicable international standards.

Such safeguards include the use of standard contractual clauses in agreements with overseas Data Processors and the selection of processors located in jurisdictions with recognised data protection frameworks. Where you would like further information about the specific safeguards applied to international transfers of your Personal Data, please contact us using the details in Section 15.

11Your Data Rights

As a data subject under the Malaysian PDPA and applicable international data protection frameworks, you hold the following rights in respect of your Personal Data held by uo8my:

To exercise any of the above rights, please submit a written request to uo8my via the contact details provided in Section 15. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days, subject to identity verification. Requests will be processed free of charge unless manifestly unfounded or excessive.

12Minors & Age Policy

The uo8my Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to an underage individual will be immediately suspended and all associated data will be handled in accordance with applicable child data protection requirements.

If you are a parent or guardian and believe that a person under your care has registered an account on uo8my, please contact us immediately using the details in Section 15 so that we may take appropriate action, including the deletion of any Personal Data collected from the minor.

13Marketing Communications

uo8my may send you promotional offers, bonus notifications, and platform updates via email, SMS, or in-platform notifications where you have provided explicit consent during registration or at any later point. Marketing communications from uo8my are relevant to your activity on the Platform and may include personalised bonus offers based on your gameplay history.

Opting Out: You may withdraw your consent to receive marketing communications at any time by:

• Using the unsubscribe link included in every marketing email;
• Updating your communication preferences in your Account settings;
• Contacting our support team via live chat or email with a request to opt out.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue to be sent as they are necessary for account operation.

Please note that if you have self-excluded from the Platform under our Responsible Gambling programme, uo8my will not send you any marketing communications for the duration of your self-exclusion period. Please refer to our Responsible Gambling Policy for full details.

14Policy Amendments

uo8my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Reviewed" date at the top of this document and, where reasonably practicable, notify registered Players via their registered email address prior to the changes taking effect.

Your continued use of the Platform following notification of any material amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data.

15Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or uo8my's handling of your Personal Data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach our team for urgent privacy matters.
• Email: [email protected] — for formal data subject access requests, deletion requests, or privacy complaints, please use "Privacy Request" as your email subject line.
• Support Languages: Our privacy-related correspondence is handled in English, Bahasa Melayu, and Mandarin Chinese.

uo8my serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. We aim to respond to all privacy-related enquiries within five (5) business days and to resolve all formal data subject requests within thirty (30) days of receipt.