Untung88
Privacy Policy

This Privacy Policy ("Policy") describes how Untung88 ("Platform", "we", "us", "our") — the operator of the online casino and sports betting platform accessible at untung88.cam — collects, uses, stores, processes, and protects personal data relating to users ("Players", "you") who access or interact with our services.

Untung88 is committed to protecting the privacy and personal data of all users. We operate in compliance with internationally recognised data protection principles and the standards required under our international gaming licence. While Malaysia does not currently have a comprehensive data protection framework specifically addressing online gambling platforms, Untung88 voluntarily adopts standards consistent with best practice in the jurisdictions where we hold our operating licence.

By registering an account, making a deposit, or otherwise accessing the Untung88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the platform and should contact our support team to close your account.

This Policy should be read in conjunction with our Terms & Conditions, which govern the broader use of the Untung88 platform, and our Responsible Gambling policy, which addresses data processing specific to player protection and self-exclusion programmes.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, including name, email address, phone number, payment details, IP address, device identifiers, and behavioural data tied to an identifiable account.
• "Data Controller" — Untung88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of Untung88 under a contractual agreement and pursuant to our instructions.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transfer, or deletion.
• "KYC Data" — identity and age verification documents submitted by a Player, including government-issued identification, proof of address, and any supporting documentation required during the account verification process.
• "Cookies" — small text files placed on a Player's device when they visit the Untung88 platform, used to maintain session state, recall preferences, and support analytics.
• "Third-Party Processor" — a licensed external service provider (payment gateway, fraud detection firm, KYC bureau, game studio) engaged by Untung88 to deliver specific functions in connection with the platform's operation.

Untung88 collects personal data only to the extent necessary for the legitimate operation of the platform, compliance with our regulatory obligations, and the delivery of a secure and personalised gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than a photograph for ID verification), or health data, unless specifically required by our regulatory obligations and disclosed to you at the time of collection.

Untung88 collects personal data through the following channels:

• Direct Collection — Account Registration: When you create an account on untung88.cam, you voluntarily provide your name, date of birth, email address, and contact number. This data forms the foundation of your player profile.
• Direct Collection — KYC Submission: When you submit identity documents for verification, we collect a copy of your government-issued ID, proof of address, and any additional documentation required by our KYC process.
• Direct Collection — Payment Transactions: When you make a deposit or withdrawal, payment method identifiers and transaction details are collected by us and by the relevant payment processor (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency network).
• Automatic Collection — Platform Usage: Technical data (IP address, device type, browser, session timing) is collected automatically when you visit and use the platform. This data is used for security, fraud detection, and platform improvement.
• Automatic Collection — Cookies and Tracking Technologies: Cookies and similar technologies capture session and preference data as described in Section 11 of this Policy.
• Third-Party Sources: We may receive supplementary identity verification data from licensed KYC bureaus and fraud screening services engaged to validate the information you have provided during registration.

Untung88 processes your personal data for specific, defined purposes. We do not process data beyond what is necessary for the purposes stated below:

• Account Management: Creating, maintaining, and administering your player account, including authentication, password management, and session security.
• Identity & Age Verification: Verifying that you are a natural person aged 21 years or above, in compliance with our strict age enforcement policy and international licensing obligations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method, reconciling transactions, and maintaining accurate financial records of all MYR movements on your account.
• Fraud Prevention & AML: Monitoring transactions and gaming behaviour patterns to detect and prevent money laundering, fraudulent activity, and misuse of the platform. Suspicious activity may be reported to relevant authorities as required under applicable law.
• Platform Delivery: Providing access to casino games, live dealer tables, sports betting markets, instant games, and all other platform features constituting the Untung88 service.
• Bonus & Promotions Administration: Assessing bonus eligibility, tracking wagering requirement progress, and applying promotional credits accurately to your account.
• Customer Support: Handling account queries, technical issues, payment disputes, and responsible gambling requests submitted through live chat and email.
• Responsible Gambling Programme: Monitoring gaming activity patterns to identify at-risk behaviour, administering self-exclusion and deposit limit requests, and conducting outreach to Players who may be exhibiting signs of problem gambling.
• Legal & Regulatory Compliance: Maintaining records required by our licensing authority, responding to lawful requests from regulatory or law enforcement bodies, and fulfilling AML reporting obligations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, UI/UX, and game content availability.

Untung88 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals, and deliver the gaming services you have contracted for constitutes the primary legal basis for most data processing on this platform.
• Legal Obligation: KYC verification, AML transaction monitoring, age verification, and regulatory reporting are processed on the basis of our legal and regulatory obligations under our international gaming licence.
• Legitimate Interests: Fraud detection, security monitoring, responsible gambling programme delivery, and platform improvement are processed on the basis of Untung88's legitimate interest in operating a secure, compliant, and sustainable platform — balanced against your privacy rights.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent. You may withdraw this consent at any time by contacting our support team or adjusting your communication preferences in your account settings.

Untung88 does not sell, rent, or trade your personal data. We share personal data only in the following limited and defined circumstances:

• Payment Processors: Transaction data is shared with the relevant payment service provider (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency processing services) strictly to process your deposit or withdrawal. These providers are subject to their own regulated privacy obligations.
• KYC & Identity Verification Bureaus: Identity documents and associated data may be shared with licensed third-party KYC service providers engaged to perform document authentication and database cross-referencing. These providers are contractually bound to process your data solely for verification purposes.
• Fraud & AML Screening Services: Transaction patterns and account data may be shared with fraud detection and anti-money laundering compliance platforms as required by our licensing obligations.
• Licensed Game Studios: Your player session identifiers (not your name or financial data) are shared with our licensed game content providers to the extent necessary to deliver game sessions and record outcomes. Game providers do not receive personally identifying information beyond what is technically required.
• Regulatory Authorities: We may disclose personal data to our licensing authority, law enforcement agencies, or other competent authorities where required by law, court order, or regulatory mandate. We are not obligated to notify you of such disclosures where doing so would compromise an investigation.
• Corporate Transfers: In the event of a merger, acquisition, or corporate restructuring involving Untung88, personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer.

Untung88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active account relationship with Untung88, plus a minimum of five (5) years following account closure, to meet our regulatory audit and AML record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, or longer where required by our licensing authority.
• Financial Transaction Records: All deposit and withdrawal records are retained for a minimum of seven (7) years in compliance with financial record-keeping requirements under our operating licence.
• Communication Records: Support chat logs and email correspondence are retained for up to three (3) years from the date of the interaction, except where the communication forms part of an ongoing dispute or regulatory investigation.
• Technical Logs: Server logs, IP records, and session data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
• Responsible Gambling Data: Self-exclusion records and deposit limit histories are retained indefinitely to prevent re-registration during active exclusion periods and to maintain accurate player protection audit trails.

Where data is no longer required for any legitimate purpose and no legal retention obligation applies, it is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Untung88 implements a layered approach to data security, incorporating both technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your browser and the Untung88 platform is protected by 256-bit TLS (Transport Layer Security) encryption. This is the same standard used by international banking platforms and is indicated by the HTTPS prefix in your browser.
• Encryption at Rest: Sensitive personal data stored in our systems — including KYC documents and financial data — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within Untung88's systems is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific operational role, and all access is logged and auditable.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all Players for their account login and is strongly recommended as a standard security measure.
• Security Monitoring: Our technical infrastructure is monitored continuously for anomalous activity, intrusion attempts, and potential data breaches. Security incidents are reviewed and escalated in accordance with our incident response procedures.
• Data Breach Procedures: In the event of a data breach that poses a material risk to your privacy rights, Untung88 will notify affected Players and, where required, the relevant regulatory authority, within the timeframes specified by our operating licence conditions.

While Untung88 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for promptly notifying us at [email protected] if you suspect any unauthorised access to your account.

Subject to the legal bases for processing and applicable retention obligations, you have the following rights with respect to your personal data held by Untung88:

• Right of Access: You may request a copy of the personal data we hold about you. Requests will be fulfilled within 30 days of receipt, provided we are able to verify your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Contact our support team with the specific data to be corrected and supporting evidence.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. Note that we are unable to delete data that we are legally required to retain (such as AML records and KYC documents).
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, where you contest the accuracy of the data, pending verification.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your personal data for transfer to another controller.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days with notice.

Untung88 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather anonymised analytics data to improve our service. A cookie is a small text file stored on your device by your browser when you visit a website.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security state, and remember your in-session preferences. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember settings and preferences (such as language selection and display settings) to provide a more personalised experience across sessions.
• Analytics Cookies: We use anonymised analytics data — such as page views, session duration, and navigation paths — to understand how Players use the platform and to identify areas for improvement. This data does not personally identify you.
• Security Cookies: Used for fraud detection, anomaly detection, and to support the integrity of the login process. These are classified as necessary cookies and cannot be disabled.

Non-essential cookies (functional and analytics) are only set with your consent, which is requested on your first visit to the platform. You may manage your cookie preferences at any time through your browser settings. Note that disabling certain categories of cookies may affect platform functionality.

The Untung88 platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

If we discover or have reason to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, retain any collected data only to the extent required to complete our investigation, and subsequently delete all associated personal data as soon as it is no longer required for that purpose.

If you are a parent or guardian and believe that a person under your care has registered an account on the Untung88 platform, please contact our support team immediately at [email protected] (plain text — not a clickable link). We take all such reports seriously and will investigate and act promptly.

The Untung88 platform may, from time to time, reference or link to third-party services such as payment provider portals, banking apps, or e-wallet platforms (for example, the Maybank2u portal, CIMB Clicks, or the Touch 'n Go eWallet app) in the context of completing a deposit or withdrawal transaction.

Once you leave the Untung88 platform and interact with a third-party service, your data is governed by that service's own privacy policy — not this one. Untung88 is not responsible for the privacy practices, security standards, or data handling of any third-party platform, even where those platforms are named in our payment options or referenced in our support documentation.

We encourage you to review the privacy policies of any third-party service you use in connection with your Untung88 account. If you have questions about how a specific payment provider handles your data, please consult that provider directly.

Untung88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our operational structure. The effective date displayed at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify active Players via the registered email address on their account at least 14 days before the changes take effect. Minor clarificatory amendments may be made without advance notice.

Continued use of the Untung88 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and request account closure through our support team before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact the Untung88 privacy team through the following channels:

• Email: [email protected] — displayed as plain text only; not a clickable link. Please mark privacy-related enquiries with the subject line "Privacy Request" to ensure prompt routing to the correct team.
• Live Chat: Available 24/7 on the platform. Privacy and data rights requests raised via live chat will be formally acknowledged in writing to your registered email address within 5 business days.
• Response Time: We acknowledge all privacy enquiries within 5 business days and aim to fully resolve requests within 30 calendar days. Complex requests may take up to 60 days with prior notice.

For concerns relating to responsible gambling data — including self-exclusion records, deposit limit histories, and gaming behaviour assessments — please visit our dedicated Responsible Gambling page or raise the matter directly with our support team, where it will be handled with priority.