Privacy Policy
Last updated: July 2026 · How U88 collects, uses and protects your data.
U88 collects registration, payment and device data to run your account, prevent fraud and meet legal duties. Data is SSL-encrypted, never sold, shared only with payment and compliance partners, and you can request access, correction or deletion at any time.
Why this page exists
Signing up hands over personal information, and you deserve a plain account of what happens to it. This policy covers the U88 registration process, the account it creates and everything you do inside that account afterwards.
What we collect at sign-up
The registration form asks for your full name, date of birth, mobile number, email address and a password. Nothing on that form is decorative; each field is used later for verification, payouts or account recovery.
What we collect after that
Verification records
When you request a first withdrawal we collect identity documents, proof of address and evidence that your payment method belongs to you. These are stored as compliance records, not as marketing material.
Payment information
Deposit and withdrawal history, amounts, currency and the channel used, whether DuitNow, Touch 'n Go eWallet, Maybank2u, another online banking route, Visa, Mastercard, USDT or Bitcoin. Full card numbers stay with the payment provider.
Device and connection records
IP address, browser, operating system, device type and the times you log in. This is the layer that makes duplicate-account detection possible, and it is also what tells us a login came from somewhere your account has never been used before.
Account activity
Balance movements, promotions claimed, support conversations, password resets and changes to your registered details. A change history matters: if a payout address is altered days before a withdrawal, we want the record.
What each purpose is
| We use it to | Because |
|---|---|
| Operate your account | Registration, login, balances and support cannot function without it |
| Process payments | Deposits and withdrawals in MYR must reach the right person |
| Prevent fraud | Duplicate registrations, stolen payment methods and account takeover |
| Meet legal duties | Confirming age and retaining financial records |
| Send marketing | Only where you ticked the box, and only until you untick it |
Who receives it
- Payment providers and banks, to settle transfers you initiate
- Verification services, to confirm documents are genuine
- Infrastructure suppliers such as hosting, SMS and email delivery, under contract
- Authorities, where a lawful request requires disclosure
Your information is never sold. We do not supply contact lists to advertisers, affiliates or data brokers, and no third party pays us for access to registered players.
Retention
Registration and verification records stay with us for as long as your account is open, plus a further period once it closes, so that identity and financial checks remain provable. Device logs are held on a shorter cycle. Marketing permissions end the moment you withdraw them, and support threads are cleared after a matter is resolved and the review window has passed.
Security, and the half of it that is yours
- Everything between your browser and our servers travels over SSL/TLS encryption
- Passwords are stored hashed, so nobody here can read yours
- Internal access follows role: support sees account status, not document images
- Verification must be complete before any payout leaves the platform
Your side matters just as much. A unique password, a mailbox nobody else opens, and scepticism towards anyone asking for a one-time code will defeat almost every realistic attempt on an account. We will never request a code or password from you.
Cookies and analytics
Essential cookies keep your session alive between pages and remember your language. Analytics cookies tell us how visitors reach the registration page, where they abandon the form and which devices struggle with it, all read as totals rather than individuals.
Browser settings let you clear or refuse cookies. Refusing essential ones will stop you logging in.
What you can ask for
- A copy of the personal information held on your account
- A correction where a name, date or contact detail is wrong
- Deletion of anything we have no legal reason to retain
- An end to marketing, by unsubscribe link or by asking us directly
- An explanation of where a particular piece of information came from
Turning marketing off leaves service messages untouched: password resets, verification updates and payment confirmations still arrive, because they concern your money rather than our offers.
Nobody under 18
Registration is restricted to adults aged 18 and over, and we do not knowingly hold data belonging to a minor. Where an underage account comes to light, it is closed, deposits are refunded and the personal information is deleted instead of archived. If you share a household device, parental filtering software is worth installing.
Getting in touch about your data
Message support from inside your account and state plainly what you need. Requests made from a verified session move fastest because your identity is already established; requests from an unrecognised address will need confirming first, which protects you rather than delays you.
The rules covering the account itself are in our terms.