umb88 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data processed by umb88 in connection with the operation of the umb88 online gaming platform accessible at umb88.app. It covers data collected when you register an account, make deposits or withdrawals, play games, contact our support team, or otherwise interact with the platform.

By registering an account with umb88 or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not register or use the umb88 platform.

This Policy should be read alongside the umb88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection legislation, umb88 is the data controller in respect of personal data collected and processed through the platform. umb88 operates as an internationally licensed online gaming entity. For all data-related enquiries, the designated point of contact is the umb88 Data Protection team, reachable via [email protected].

3. Personal Data We Collect

umb88 collects the following categories of personal data in the course of operating the platform:

3.1 Registration & Identity Data

• Full legal name, date of birth, and gender (used for age verification and account identification);
• Email address, mobile number, and residential address;
• Username and encrypted account password;
• Government-issued photographic identification document (e.g., Malaysian MyKad, passport) submitted during KYC verification.

3.2 Financial Data

• Payment method details (e.g., bank account reference, e-wallet identifier, partial card numbers) sufficient to process deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and gaming wager records;
• Source-of-funds documentation where requested under anti-money laundering (AML) obligations.

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser type collected automatically on each session;
• Login timestamps, session duration, and navigation patterns within the platform;
• Game activity logs, including games played, wager amounts, outcomes, and session frequency;
• Cookie and similar tracking technology data (see Section 7).

3.4 Communications Data

• Content of live chat sessions, email correspondence, and support tickets submitted to umb88;
• Records of marketing preferences and consent status.

4. How umb88 Uses Your Personal Data

umb88 uses the personal data it collects for the following purposes:

• Account operation: Creating, maintaining, and securing your umb88 account; processing login authentication including 2FA; enabling access to platform products.
• Transaction processing: Processing deposits and withdrawals in MYR via your chosen payment method (Touch n Go eWallet, Boost, FPX, Visa/Mastercard, USDT, etc.).
• Identity and age verification: Conducting KYC checks to verify that you are aged 21 or older and to confirm your identity in compliance with regulatory requirements.
• Regulatory compliance: Meeting obligations under applicable gaming licensing requirements, AML regulations, and data retention mandates. This includes filing mandatory reports with relevant authorities where legally required.
• Responsible gaming: Monitoring gaming activity to identify indicators of problem gambling and to administer self-imposed limits, cooling-off periods, and self-exclusion requests.
• Customer support: Responding to enquiries, resolving disputes, and communicating with you about your account.
• Platform improvement: Analysing aggregated usage data to improve product features, game selection, and platform performance.
• Marketing communications: Sending promotional emails or in-platform notifications where you have provided consent (see Section 11).
• Fraud and security: Detecting and preventing unauthorised access, fraudulent transactions, bonus abuse, and other prohibited conduct.

5. Legal Basis for Processing

umb88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable gaming regulations, AML legislation, tax obligations, and regulatory reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where such interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

umb88 does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. We may share your data in the following limited circumstances:

• Service providers: Payment processors, KYC verification providers, cloud infrastructure providers, and customer support tooling providers engaged to deliver services on behalf of umb88, subject to contractual data protection obligations.
• Gaming software suppliers: Where necessary to operate licensed game content from third-party studios, limited technical data may be shared with the relevant supplier.
• Regulatory authorities: umb88 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law or pursuant to a valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of umb88's business, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

7. Cookies & Tracking Technologies

umb88 uses cookies and similar technologies to operate the platform, maintain session state, remember your preferences, and analyse platform usage. The categories of cookies used include:

• Strictly necessary cookies: Required for core platform functionality, including authentication sessions and security tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Analytics cookies: Used to collect aggregated, anonymised data on how players navigate and use the umb88 platform, to inform ongoing product improvement.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to or use umb88. umb88 does not use third-party advertising or retargeting cookies.

8. Data Retention

umb88 retains personal data for as long as is necessary for the purposes described in this Policy, subject to the following retention schedules:

• Account data: Retained for the duration of your account relationship with umb88 and for a minimum of 5 years following account closure, in compliance with gaming regulatory retention requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction for AML compliance purposes.
• KYC documents: Retained for a minimum of 5 years following the end of the account relationship or the completion of any related investigation, whichever is later.
• Support communications: Retained for 2 years from the date of the communication, unless the communication forms part of an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for as long as the consent is active and for 3 years following withdrawal of consent, as evidence of consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with umb88's data destruction procedures.

9. Data Security

umb88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Measures in place include:

• SSL/TLS encryption for all data in transit between your device and umb88 servers;
• Encryption of sensitive data fields at rest;
• Access controls limiting staff access to personal data on a need-to-know basis;
• Two-factor authentication available to all players and mandatory for staff administrative access;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, umb88 will notify you without undue delay in accordance with applicable regulatory requirements.

10. Your Data Protection Rights

Subject to applicable law and any overriding legitimate interests or legal obligations, you have the following rights in respect of your personal data held by umb88:

• Right of access: You may request a copy of the personal data umb88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction: You may request that umb88 restrict processing of your data in certain circumstances while a complaint or accuracy query is resolved.
• Right to object: You may object to processing based on legitimate interests, including processing for marketing communications.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, contact the umb88 Data Protection team at [email protected]. umb88 will respond to verified requests within 30 days. We may require identity verification before processing a data rights request.

11. Marketing Communications

umb88 will only send promotional or marketing communications to players who have provided explicit consent to receive them. You may withdraw your marketing consent at any time by updating your communication preferences within your account settings, or by contacting support. Withdrawal of marketing consent does not affect your ability to use the umb88 platform or receive operational communications relating to your account.

umb88 does not share your contact details with third parties for their independent marketing purposes.

12. Minors

The umb88 platform is strictly intended for adults aged 21 and above. umb88 does not knowingly collect personal data from individuals under the age of 21. Registration attempts by individuals who cannot satisfy age verification will be rejected. If umb88 becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the relevant account closed. If you believe a minor has registered on the umb88 platform, please notify us immediately at [email protected].

13. Changes to This Privacy Policy

umb88 reserves the right to update this Privacy Policy at any time. Where changes are material, umb88 will notify registered players via their registered email address or an in-platform notification prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the umb88 platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. We recommend reviewing this Policy periodically.

14. Contact & Complaints

For any questions regarding this Privacy Policy, to exercise your data protection rights, or to raise a data-related complaint, please contact the umb88 Data Protection team:

Email: [email protected]

umb88 aims to acknowledge all data-related enquiries within 5 business days and to resolve them within 30 days. If you are unsatisfied with umb88's handling of your data complaint, you may escalate to the relevant gaming or data protection authority in your jurisdiction.