Untung88 Privacy Policy – How We Protect Malaysian Players' Data

untung88 cares about the privacy of every individual who uses our platform. This Privacy Policy ("Policy") clearly explains how we collect, use, store, protect, and in certain circumstances, share your personal data when you use the untung88 website and services at untung88.site.

This policy applies to all users of the untung88 platform — including website visitors, individuals who register an account, active members who make deposits and play, and anyone who contacts our customer support team. By using the untung88 platform, you agree to the collection and use of data as described in this Policy.

In this Policy, "personal data" refers to any information that can be used to identify you directly or indirectly — including your name, phone number, email address, IP address, and financial transaction information associated with your untung88 account.

Untung88 only collects data that is genuinely necessary to provide a safe, high-quality online casino service. We do not collect excessive data that is irrelevant to the stated purposes. The following are the categories of data we collect:

Personal Identification Data:

• Full name as per Malaysian identity card (MyKad)
• An active Malaysian phone number
• A valid email address
• Date of birth (for age verification — 18 years and above)
• Copy of identification document (in certain cases for identity verification)

Platform Usage Data:

• Login and logout records (date, time, and IP address)
• Gaming and betting history on the untung88 platform
• Account settings and personal preferences you have saved
• Interactions with the customer support team

Technical Data:

• Your device's IP address at the time of accessing the platform
• Browser type and operating system
• Mobile device information (model, OS) if accessing via phone
• Cookie data you have consented to have collected

Untung88 collects your personal data through several different channels. It is important for you to understand how each type of data is collected so you can make informed decisions about your use of our platform:

Directly from You: When you register an untung88 account, you voluntarily provide your name, phone number, email address, and other basic details. When you contact customer support via live chat or email, those conversations are also recorded for service quality and documentation purposes.

Automatically During Use: When you browse the untung88 platform, our systems automatically record your IP address, browser type, pages visited, and session duration. This data is used to detect suspicious activity, resolve technical issues, and improve platform performance.

Via Payment Partners: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the transaction is processed by a third-party payment gateway. untung88 receives confirmation that the transaction was successful, along with the amount and transaction reference — but does not receive your full bank account information or sensitive digital wallet details.

Untung88 uses collected personal data solely for legitimate, clearly stated purposes. We do not use your data for anything unrelated to the provision of our online casino services or platform security. The purposes for which data is used are as follows:

• Identity and age verification — verifying that every untung88 member is aged 18 or above and registers using their own real identity
• Account management — creating, maintaining, and updating your untung88 account, including processing password change requests and profile information updates
• Financial transaction processing — to verify deposits, process withdrawal of winnings, and resolve any transaction-related disputes
• Fraud prevention and security — detecting suspicious activity, preventing multi-account abuse, and protecting all members from fraud
• Customer support — delivering effective and relevant assistance based on your account history and previously reported issues
• Legal compliance — meeting applicable legal and regulatory requirements, including anti-money laundering (AML) obligations
• Platform Enhancements — analysing usage patterns in aggregate (not at an individual level) to improve user experience, platform performance, and the games catalogue
• Service communications — sending important notifications such as transaction confirmations, account security alerts, and policy updates

Untung88 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. This is an absolute commitment we do not compromise on. However, in the course of operating the platform, there are limited circumstances where data must be shared with certain parties:

Trusted Operating Partners:

• Game software providers — Pragmatic Play, Evolution Gaming, and other partners receive the game data necessary to operate and audit games. All such partners are bound by strict data protection agreements with untung88.
• Payment gateway — providers such as those handling Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions receive only the minimum information required to process transactions securely.
• Cloud service providers — the hosting and data storage infrastructure we use is subject to internationally recognised data protection agreements.

Legal Requirements: untung88 may be required to disclose user data to the relevant authorities if ordered by a court or lawful law enforcement body through proper legal process. In such cases, we will disclose only what is required by the order and will notify you if permitted by law to do so.

Untung88 takes security infrastructure seriously to protect every member's personal and financial data. Our security approach is multi-layered — meaning that even if one layer of protection is breached, the layers that follow continue to keep your data safe.

Technical Protection Layers:

• 256-bit SSL Encryption — all communications between your browser and untung88's servers are encrypted using the same bank-grade encryption technology used by Malaysia's leading financial institutions
• Two-Factor Authentication (2FA) — available free of charge to all untung88 accounts, adding an extra layer of security beyond your password
• 24/7 Security Monitoring — our security team and automated systems monitor all activity in real time to detect intrusion attempts or unusual behaviour
• Secure password storage — your password is never stored in plain text; we use a strong hashing algorithm with a unique salt for each password
• Sensitive data segregation — sensitive personal data is stored separately from operational data, with strict access controls in place

Access Controls: Only untung88 staff with a legitimate business need have access to member personal data — and all such access is logged for audit purposes. All staff undergo rigorous information security training and are bound by confidentiality agreements.

As an untung88 platform member, you have clear and enforceable rights over your personal data. untung88 fully respects these rights and will handle every request promptly and professionally:

• Right of Access — you may request a complete copy of all personal data we hold about you at any time
• Right to Rectification — if you find that the data we hold is inaccurate or out of date, you have the right to request an immediate correction
• Right to Erasure — in certain circumstances, you may request that we delete your personal data (the "right to be forgotten") — subject to any legal obligations to retain specific data
• Right to Restrict Processing — you may request that we restrict how we process your data under certain circumstances
• Right to Object — you may object to the processing of your data for specific purposes, including direct marketing communications
• Data Portability Rights — you may request a copy of your data in a machine-readable format for transfer to another service provider
• Right to Withdraw Consent — for processing that relies on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal

To exercise any of the above rights, please contact the untung88 customer support team via live chat or email at support@untung88.site, stating the type of request and your account number. We will respond within 14 working days from the date the request is received.

The untung88 platform uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and analyse how the platform is used. Cookies are small files stored on your device when you visit our website.

Untung88 uses several types of cookies, each serving a different purpose:

• Essential Cookies — required for core platform functions such as login, session security, and language preferences. Without these cookies, the platform cannot operate properly. This type of cookie cannot be disabled.
• Performance Cookies — collecting information about how you use the platform — pages visited, time spent, and errors encountered. This data is used in aggregate and does not personally identify you. It helps us improve platform speed and performance.
• Functional Cookies — remembering your preferences such as account settings, display theme, and preferred language to deliver a more personalised experience each time you log in.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the untung88 platform and your gaming experience. For guidance on managing cookies in your browser, refer to the help section of the browser you are using.

Untung88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law. We have a clear data retention policy for each data category:

• Active account data — retained for as long as your account is active with untung88, plus any additional period required to resolve outstanding disputes
• Financial transaction records — retained for seven years as required by applicable financial and anti-money laundering legislation
• Security and access logs — retained for 12 months for the purpose of security incident detection and investigation
• Customer support communications — retained for 24 months for service quality and dispute resolution purposes
• Closed account data — personally identifiable information is retained for seven years after account closure for legal compliance purposes, after which it is anonymised or deleted

Your financial data receives special attention at untung88. Because our platform involves real monetary transactions in MYR, we have put stricter measures in place to ensure every aspect of your financial information is protected to the highest standards.

Untung88 does not store your full bank account number, PIN, digital wallet password, or any financial card details. All deposit and withdrawal transactions are processed through payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard) — the most stringent international payment data security standard in the industry.

When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX through Maybank2u and CIMB Clicks, the financial interaction takes place directly between you and the respective payment service provider. untung88 only receives a verification token and the transaction amount — not your sensitive account details.

For withdrawal of winnings, untung88 transfers funds to the e-wallet or bank account you have registered and verified in your own name. Withdrawals cannot be made to third-party accounts — this is a security measure to protect you from fraud and money laundering.

Untung88 may use your email address and phone number to send communications related to our services. We distinguish between two types of communications:

Service Communications (Mandatory): This includes deposit and withdrawal transaction confirmations, account security alerts, Policy or Terms update notifications, and other communications essential to the security and operation of your account. You cannot opt out of these communications while your account is active, as they are critical to your security.

Marketing Communications (Optional): This includes information about new promotions, special bonuses, seasonal offers (such as promotions tied to the Malaysia Super League, EPL season, or Hari Raya Aidilfitri), new game announcements, and monthly newsletters. You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email you receive
• Updating your notification preferences in your untung88 account settings
• Contacting our customer support team to request that marketing communications be stopped

Untung88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. Whenever a material amendment is made, we will notify you via your registered email at least 14 days before the changes take effect.

The "Updated" date shown at the top of this page always reflects the date this Policy was last amended. We encourage you to review this page periodically — even if you have not received a direct notification — to ensure you remain informed of the latest policy governing the handling of your data.

Continued use of the untung88 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. If you do not agree with the changes made, you may close your account and request data deletion before the effective date of those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how untung88 handles your personal data, please do not hesitate to contact us. We take every privacy enquiry seriously and will respond helpfully within a reasonable timeframe.

• Live Chat: Available 24 hours a day, 7 days a week within the untung88 platform — the fastest way to get a response
• Email: support@untung88.site — for more detailed written requests; response within 48 hours

When contacting us about a privacy matter, please include the following to help us process your request promptly: your untung88 account number (if applicable), a clear description of your request or concern, and any additional relevant information that will help us understand and resolve your issue effectively.

For personal rights requests such as data access, rectification, or deletion, we will process your request within 14 working days and inform you of the action taken or the reasons if a request cannot be fulfilled in full.