Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is issued by umibet88 (hereinafter "the Platform", "we", "us", "our"), the operator of the online casino and sports betting services accessible at umibet88.cam and any associated subdomains, mobile interfaces, or related services.

This Policy describes how umibet88 collects, uses, stores, shares, and otherwise processes personal data relating to users (hereinafter "you", "User", "Player", "Member") who access or interact with the Platform, including during account registration, gameplay, financial transactions, and customer support interactions.

By registering an account on or otherwise using the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions, which are incorporated by reference.

Definitions

For the purposes of this Policy, the following terms are defined as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, alteration, and deletion.
• "Data Controller" means umibet88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of umibet88 under a data processing agreement.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including identity document information, payment card details, and any health-related data submitted in connection with responsible gambling requests.
• "Cookie" means a small text file stored on a User's device by their browser at the instruction of the Platform, used to recognise returning visitors and maintain session state.
• "KYC Data" means identity verification documentation submitted by a User in fulfilment of our Know Your Customer obligations, including government-issued identification, proof of address, and payment method verification.

Data We Collect

umibet88 collects the following categories of Personal Data from Users of the Platform:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification purposes — 21+ requirement);
• Email address;
• Malaysian mobile phone number;
• Chosen username and encrypted password;
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

3.2 Identity Verification (KYC) Data

• Copy of Malaysian National Identity Card (MyKad) or passport;
• Proof of residential address (utility bill, bank statement header);
• Payment method verification documents (e.g., screenshot of Touch 'n Go eWallet, Boost, or bank account).

3.3 Financial Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method used (e-wallet provider, bank name, account number suffix);
• Transaction reference numbers and processing status;
• Currency denomination (Malaysian Ringgit — MYR).

3.4 Gaming & Behavioural Data

• Game types played (baccarat, slots, sports betting, etc.);
• Bet amounts, frequency, duration of sessions, and outcomes;
• Responsible gambling tool usage (deposit limits set, self-exclusion activity);
• Promotion and bonus interaction history.

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Browser type and version;
• Device type, operating system, and screen resolution;
• Session logs, access timestamps, and page interaction data;
• Cookie identifiers and similar tracking technologies.

3.6 Communications Data

• Live chat transcripts and email correspondence with our support team;
• Complaint and dispute records;
• Responses to surveys or feedback requests (where voluntarily provided).

How We Collect Data

Personal Data is collected through the following methods:

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you at the time of account registration, during KYC verification submissions, when making financial transactions, or in the course of communicating with our support team.

4.2 Automatically via Platform Technology

When you access the Platform, certain technical and behavioural data is collected automatically through server logs, cookies, web beacons, and similar technologies. This includes your IP address, device identifiers, browser characteristics, and interaction patterns within the Platform interface.

4.3 From Third-Party Service Providers

We may receive supplementary data from third-party service providers engaged in connection with our operations, including payment processors (such as FPX operators, DuitNow providers, and e-wallet platforms), identity verification services, fraud detection providers, and gaming content licensors. Such data is received only to the extent necessary for the relevant operational purpose and under appropriate contractual data-sharing frameworks.

4.4 From Publicly Available Sources

In connection with anti-fraud and compliance activities, we may consult publicly available databases, sanctions lists, or regulatory watchlists to verify user information or assess risk.

Purposes of Data Processing

umibet88 processes Personal Data for the following purposes:

Legal Basis for Processing

umibet88 processes Personal Data on the following legal bases, which may apply individually or in combination depending on the specific processing activity:

• Contractual Necessity: Processing required to establish or perform our contractual relationship with you — including account management, transaction processing, and gaming service delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and data retention mandates under our international gaming licence conditions;
• Legitimate Interests: Processing carried out in pursuit of umibet88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by the rights of the data subject;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

umibet88 does not sell, rent, or trade Personal Data to unaffiliated third parties for commercial purposes. We may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection safeguards:

7.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include: payment processing partners (including providers of DuitNow, FPX, and e-wallet processing infrastructure), identity verification and KYC service providers, gaming content licensors, cloud hosting and infrastructure providers, customer support software operators, and fraud detection specialists.

7.2 Regulatory & Law Enforcement Authorities

We may disclose Personal Data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive. This includes disclosure in connection with anti-money laundering investigations, criminal proceedings, or the enforcement of our gaming licence conditions.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of umibet88's business, Personal Data may be transferred to the relevant successor entity as part of that transaction. Users will be notified of any material change in data controller in such circumstances.

7.4 With Your Consent

We may share Personal Data with other parties not listed above where you have provided explicit prior consent for such sharing.

International Data Transfers

As an internationally operated platform, umibet88 may process and store Personal Data on servers located outside of Malaysia. In particular, data may be processed in jurisdictions where our gaming licence is registered and where our cloud infrastructure providers operate.

Where Personal Data is transferred to jurisdictions that do not offer an equivalent level of data protection to the standards applicable in Malaysia, we implement appropriate safeguards including: data processing agreements incorporating standard contractual clauses, binding corporate rules where applicable, and contractual commitments from recipient service providers to maintain data security standards consistent with this Policy.

By registering and using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia, subject to the safeguards described above.

Data Retention

umibet88 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing conditions. The following general retention principles apply:

• Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable regulatory obligations;
• Financial Transaction Records: Retained for a minimum of seven (7) years to satisfy financial record-keeping and audit requirements under our licensing conditions;
• Gaming & Behavioural Data: Retained for the duration of the account and for up to three (3) years thereafter for responsible gambling and fraud prevention analysis;
• Communications Data: Support correspondence and dispute records retained for up to three (3) years following resolution;
• Technical & Log Data: Retained for up to twelve (12) months for security and operational purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

Cookies & Tracking Technologies

10.1 What Cookies We Use

The Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gambling tool configurations;
• Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the Platform to help us improve navigation, performance, and content;
• Marketing & Retargeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns, where you have consented to this.

10.2 Managing Cookies

You may adjust cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. Where consent-based cookies are used, you may withdraw your consent through the cookie preference tool available within the Platform interface.

User Rights

Subject to applicable data protection law, you hold the following rights in relation to your Personal Data held by umibet88. To exercise any of these rights, please contact our Data Protection team via the channels listed in Section 16.

Children's Privacy

The Platform is strictly intended for persons aged 21 years and above. umibet88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step during the account registration and KYC processes.

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate verification having been completed, we will take immediate steps to close the associated account, void any transactions, and securely delete the data in question. If you believe that a minor has gained unauthorised access to the Platform, please contact us immediately via the details in Section 16.

Security Measures

umibet88 implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using current-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive Personal Data — including KYC documents and financial transaction records — is encrypted in storage;
• Access Controls: Access to Personal Data within our organisation is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication required for administrative systems;
• Intrusion Detection & Monitoring: Platform infrastructure is monitored continuously for suspicious activity, with automated and manual alerts for potential security incidents;
• Regular Security Audits: Internal and third-party security assessments are conducted periodically to identify and remediate vulnerabilities;
• Staff Training: All personnel with access to Personal Data receive data protection training and are bound by confidentiality obligations.

Notwithstanding the above measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised use of your account.

Third-Party Links

The Platform may contain references or links to third-party services, gaming content, or payment providers. This Privacy Policy applies exclusively to data processed by umibet88 in connection with the Platform. It does not govern the data practices of any third-party service provider, payment processor, or external website.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform, particularly your chosen e-wallet provider (such as Touch 'n Go eWallet, Boost, or GrabPay) or your banking institution. umibet88 accepts no responsibility for the data handling practices of third-party entities.

Amendments to This Policy

umibet88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material amendments will be communicated to registered Users via notice on the Platform homepage, an in-account notification, or by email to the address on file.

The effective date displayed at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with any amendment, please close your account and cease using the Platform.

Contact Us

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a data-related complaint, you may contact umibet88's Data Protection team through the following channels:

• Live Chat: Available on the Platform during Malaysian business hours (MYT, UTC+8), with extended evening coverage;
• Email (plain text — not a link): support@umibet88.cam — please mark your subject line as "Data Privacy Request" for prioritised handling;
• Response Timeframe: We aim to acknowledge all data rights requests within 5 business days and to resolve them within 30 calendar days of receipt.

When submitting a data rights request, please provide your Account username and a clear description of your request. We may require identity verification before processing your request to protect against unauthorised access to your Personal Data.

For general questions about your account or the Platform, please visit our FAQ page.