U2wallet Privacy Policy – Data Protection Malaysia Members

This Privacy Policy is published by u2wallet ("we", "Platform") and applies to all members and users of the u2wallet.xyz platform in Malaysia. This document explains transparently how we collect, store, use, protect, and in certain circumstances share your personal data when you use u2wallet's services — including Sports Betting, Live Casino, slots, lottery, e-sports, virtual sports, and all other products available on our platform.

U2wallet takes its privacy responsibilities very seriously. We understand that your trust is our most valuable asset, and that trust is built through transparency about what we do with your data. That is why this policy is written in plain, straightforward language — free from confusing legal jargon — so that every u2wallet member in Malaysia can clearly understand their rights and how we manage their information.

By registering a u2wallet account, making a deposit or using any part of our platform, you confirm that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein. If you do not agree with any part of this policy, please stop using the u2wallet platform and contact us to request account deletion.

U2wallet follows the principle of data minimisation — we only collect information that is strictly necessary for a legitimate purpose. The categories of personal data we collect are as follows:

U2wallet does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless specifically required for compliance with applicable legal obligations and with your explicit prior consent.

U2wallet collects your personal data through a number of different methods depending on the context of your interaction with the platform:

• Directly from you: Information you provide during account registration, KYC document submission, deposits or withdrawals, promotional form submissions, customer support enquiries and any updates to your u2wallet account profile.
• Automatically during platform use: Technical data such as IP address, device and browser type, activity timestamps, session cookies, and navigation logs are collected automatically when you access the u2wallet platform via browser or mobile app.
• From payment service providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks, the respective provider will share the necessary transaction information with u2wallet for verification and processing purposes.
• From legitimate third-party sources: In certain situations relating to fraud prevention or identity verification, u2wallet may receive information from authorised identity verification agencies or permitted public databases.
• Via cookies and tracking technologies: The u2wallet platform uses cookies to enhance the user experience, remember your preferences and analyse overall usage patterns. Further details are provided in Section 8.

U2wallet uses your personal data solely for the following legitimate purposes. Each purpose is supported by a clear legal basis:

• u2wallet account management and maintenance: Creating and maintaining your account, processing logins, managing account settings, and ensuring the security of your account.
• Financial transaction processing: Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other accepted methods; processing winnings withdrawals and ensuring every transaction is settled accurately in Malaysian Ringgit (RM).
• Identity verification (KYC): Complying with customer identity verification requirements aimed at preventing fraud, money laundering, and the financing of illegal activities.
• Provision of betting and casino services: Enabling you to place bets on Malaysia Super League, EPL, and other football leagues, play slots, Live Casino and e-sports, and access all other products on the u2wallet platform.
• Customer support: Helping you resolve technical issues, answer account-related enquiries, and handle complaints effectively.
• Service communications: Sending important account-related notifications, platform updates, terms change information, and security alerts via email or SMS to your registered Malaysian mobile number.
• Platform improvements: Analysing anonymised usage data to understand usage patterns, identify areas for improvement, and develop better new products for the u2wallet Malaysia player community.
• Fraud prevention and security: Detecting and investigating suspicious activity, preventing the use of multiple accounts, and protecting the u2wallet platform and its members from security threats.
• Legal compliance: Complying with any applicable legal requirements, regulations, or directives from the relevant authorities.

U2wallet will not use your personal data for any purpose not listed above without first obtaining your explicit consent.

U2wallet does not sell, rent, or share your personal data with third parties for marketing purposes. However, in the course of operating the platform, we may need to share certain information with carefully selected parties in the following circumstances:

• Payment service providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX services receive only the minimum transaction information required to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements and industry security standards.
• Game software provider: Licensed casino and slots game providers partnered with u2wallet may receive unique identifiers (not your full name or personal details) required to run game sessions and accurately calculate game outcomes.
• Technology service providers: Companies that provide u2wallet with server infrastructure, cloud services, cybersecurity, and technical support may access data as necessary to perform their functions. All such providers are bound by strict data protection agreements and may only use data for purposes specified by u2wallet.
• Competent authorities: u2wallet may disclose personal data to the relevant authorities when required to do so by law or a valid court order. In all such cases, u2wallet will disclose only the minimum information necessary to satisfy the applicable legal requirement.
• Fraud prevention agencies: In cases involving suspected fraud or unlawful activity, u2wallet may share relevant information with fraud prevention agencies or the relevant authorities for investigation and prosecution purposes.

U2wallet continually invests in security infrastructure to ensure members' personal data is always protected to the highest standard. The technical and organisational security measures we implement include:

• Data encryption in transit: All communications between your browser or mobile app and u2wallet's servers are secured with 256-bit TLS/SSL protocol, ensuring that your data cannot be intercepted or read by unauthorised parties during transmission.
• Data encryption at rest: Sensitive data such as passwords (stored as irreversible hashes), financial information and identity verification documents are encrypted at rest on u2wallet's servers.
• Two-factor authentication (2FA): u2wallet offers a two-factor authentication option that adds an extra layer of security to your account login process. We strongly encourage all members to enable this feature.
• Strict access controls: Access to member data within u2wallet's internal systems is granted only to staff who have a specific operational need (least privilege principle). All internal access is logged and audited on a regular basis.
• Real-time security monitoring: An automated threat detection system monitors u2wallet's infrastructure around the clock to identify any suspicious activity, intrusion attempts, or unusual usage patterns.
• Regular security assessments: u2wallet conducts regular penetration testing and security audits by independent third-party experts to identify and address any potential security vulnerabilities.
• Incident response plan: u2wallet has a comprehensive security incident response procedure in place. In the event of a data breach affecting members, we will notify affected members within a reasonable timeframe and take steps to mitigate the impact.

While u2wallet takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your u2wallet account secure by using a strong password, not sharing your login credentials, and ensuring you log out when using a shared device.

U2wallet retains your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable laws and regulations. The following are our general data retention guidelines:

• Active account data: For as long as your u2wallet account remains active or for as long as is necessary to provide services to you.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction in order to comply with applicable financial record-keeping legal requirements.
• KYC documents (identity verification): Retained for a minimum of five years from the account closure date or the date of the last transaction, whichever is later, in accordance with anti-money laundering requirements.
• Customer support communication logs: Retained for two years from the date of the last interaction for dispute resolution and service improvement purposes.
• Technical data and security logs: Retained for 12 months for security analysis and incident investigation purposes.
• Closed account data: Once a u2wallet account is closed at the member's own request, personal data that is no longer required by law will be deleted or anonymised within 30 days. Data that must be retained for a longer period under legal requirements will be stored in a form with restricted access.

The u2wallet platform uses cookies and similar tracking technologies to enhance your user experience and keep essential platform functions running smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session, remembering your security settings, and enabling you to carry out transactions. These cookies cannot be disabled as they are essential to the operation of the u2wallet platform.
• Performance Cookies: Collects anonymous information about how visitors use the u2wallet platform — which pages are visited most frequently, errors encountered, and platform response times. This data is used solely for platform improvement and contains no personally identifiable information.
• Functional Cookies: Remembering your preferences such as display language, odds display settings and other interface preferences so you do not have to reset them each time you log in to u2wallet.
• Analytics Cookies: Enables u2wallet to understand overall platform usage patterns and make better-informed product development decisions. Analytics data is processed in aggregate and anonymised form.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the u2wallet platform and you may not be able to access all features properly. For guidance on managing cookies in your browser, please refer to your browser's help section.

As a u2wallet member in Malaysia, you have the following rights regarding your personal data. u2wallet is committed to facilitating the exercise of these rights at no charge:

In the course of operating the u2wallet platform, your personal data may be processed or stored on servers located outside Malaysia — for example, by cloud infrastructure providers or gaming software vendors based in other countries. u2wallet ensures that any such data transfers are carried out with adequate safeguards:

• U2wallet only engages third-party providers in countries with data protection standards that are equivalent to or higher than those in Malaysia.
• All service agreements with overseas providers include strict data protection clauses requiring them to comply with the standards set by u2wallet.
• Data transfers are carried out solely for legitimate operational purposes such as transaction processing, cybersecurity, or data backup.
• U2wallet does not transfer members' personal data to countries that lack adequate data protection standards without first putting in place appropriate additional safeguards.

The u2wallet platform is an online betting and casino platform designed exclusively for adults aged 18 and above. u2wallet does not knowingly collect, store or process personal data of individuals under the age of 18.

Should u2wallet discover that it has collected data from a minor — whether through falsified information at registration or by any other means — the account in question will be closed immediately and all collected data will be deleted as soon as possible in accordance with established procedures.

If you believe a minor may have registered a u2wallet account, please contact us immediately at support@u2wallet.xyz so we can take the appropriate action without delay.

U2wallet reserves the right to update or amend this Privacy Policy at any time when necessary — for example, in response to changes in applicable data protection laws, changes in platform operating practices or the introduction of new features involving data processing.

When material amendments are made, u2wallet will notify you through the following methods:

• Email to the address registered with your u2wallet account, sent at least seven days before the amendments take effect.
• An in-platform notice will be displayed during your login session until you confirm that you have read the relevant amendments.
• Update the "Last Updated" date in the header section of this document.

We encourage you to review this Privacy Policy page periodically to stay informed about how u2wallet manages your personal data. Continued use of the u2wallet platform after any amendments are published will be considered your acceptance of the updated privacy terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how u2wallet handles your personal data, we encourage you to get in touch. The u2wallet privacy team is ready to assist you:

• Email: support@u2wallet.xyz (please use the subject line "Privacy Enquiry" to help us respond faster)
• Live Chat: Available directly within the u2wallet platform — click the support icon at the bottom of the screen while logged in to your account
• Response time: Our team aims to respond within 24 hours for all privacy-related enquiries

For formal requests relating to data subject rights (accessing, amending, deleting or transferring your data), please contact us by email stating the type of request and your relevant u2wallet account details. We will verify your identity before processing the request and will respond within 14 working days.