Privacy Policy —
How u2wallet Handles Your Data

This Privacy Policy ("Policy") describes how u2wallet ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "Player", "User") who access or interact with the u2wallet online gambling platform available at https://u2wallet.cam, including any associated mobile interfaces and digital services.

u2wallet is an English-language online gambling platform built specifically for players in Malaysia. Our operations involve the processing of personal data — particularly for the purposes of account management, Know Your Customer (KYC) verification, payment processing, regulatory compliance, and customer support. We take these responsibilities seriously and handle all personal data in accordance with internationally recognised data protection principles.

This Policy applies to all personal data collected through the Platform, regardless of whether you access it via desktop browser, mobile device, or any other interface. It should be read alongside our Terms & Conditions, which together form the complete legal framework governing your relationship with u2wallet.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

u2wallet collects personal data from you directly (information you provide during registration, KYC, and transactions) and automatically (technical data generated by your use of the Platform). We do not collect more data than is reasonably necessary for the purposes described in this Policy.

3.1 Registration & Account Data

• Full legal name as it appears on your identity document
• Date of birth (to verify 21+ age requirement)
• Email address and chosen username
• Residential address (including city — for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Mobile phone number
• Account preferences and communication settings

3.2 KYC & Identity Verification Data

• Scanned or photographed copies of government-issued identity documents (Malaysian MyKad, passport, or equivalent)
• Proof of address documentation (utility bills, bank statements dated within 3 months)
• Selfie or liveness verification images (where required for enhanced KYC)
• Source of funds documentation where required under anti-money laundering (AML) obligations

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts in MYR
• Payment method details — bank account references (not full account numbers), e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong transactions
• Cryptocurrency wallet addresses used for BTC, ETH, USDT, or BNB deposits
• Wagering history and game session records

3.4 Technical & Device Data

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser information
• Session timestamps, login/logout records, and access logs
• Cookie data and session identifiers (see Clause 7)

3.5 Customer Support Data

• Records of live chat, email, and support ticket interactions
• Details of any complaints, disputes, or responsible gambling requests submitted

u2wallet uses the personal data it collects for the following specific purposes:

u2wallet processes your personal data on the following legal grounds, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, and delivery of gambling services.
• Legal Obligation: Processing necessary to comply with applicable law — including KYC verification, AML record-keeping, and responding to lawful regulatory requests.
• Legitimate Interests: Processing carried out for the Platform's legitimate business interests where these are not overridden by your rights — including fraud prevention, security monitoring, and anonymised analytics.
• Consent: Processing based on your freely given consent — specifically for marketing communications and optional enhanced analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

u2wallet does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only where necessary and only with the following categories of recipients:

• Payment Service Providers: Banks and e-wallet operators (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, and Maybank/CIMB/Public Bank/Hong Leong transfers) receive transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Vendors: Third-party identity verification services that assist in processing and validating identity documents. These vendors operate under strict data processing agreements.
• Game Content Providers: Licensed game studios and content providers integrated into the Platform may receive pseudonymised session data necessary to deliver their games. They do not receive your full identity information.
• Fraud Prevention & AML Screening Services: Specialist third-party providers used to screen transactions and player activity against fraud and money laundering risk databases.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory demand, we may disclose personal data to competent authorities. We will inform you of such disclosures where legally permissible to do so.
• Professional Advisers: Legal, accounting, and audit professionals engaged to advise the Platform, subject to professional confidentiality obligations.

The u2wallet Platform uses cookies and similar tracking technologies to operate core platform functionality, maintain secure sessions, and analyse usage patterns. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your language preferences, interface settings, and recently viewed games to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform (pages visited, session duration, error events) to support ongoing performance improvements.
• Security Cookies: Help detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies (particularly strictly necessary and security cookies) may impair Platform functionality or prevent secure login. A cookie preference panel is available in your account settings.

u2wallet retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

u2wallet implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and u2wallet servers is encrypted using TLS 1.2 or higher (HTTPS). This applies to account login, payment processing, KYC document uploads, and all API communications.
• Encryption at Rest: Sensitive personal data (including identity documents and payment references) stored on u2wallet infrastructure is encrypted using AES-256 or equivalent industry-standard encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members with access to Player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to reduce the risk of unauthorised account access. Players are strongly encouraged to enable 2FA in their account security settings.
• Intrusion Detection & Monitoring: Automated monitoring systems detect and alert on suspicious access patterns, failed login attempts, and anomalous transaction behaviour.
• Penetration Testing: The Platform undergoes periodic third-party security testing to identify and remediate vulnerabilities.

While u2wallet takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, u2wallet will notify affected Players without undue delay and take all reasonable steps to mitigate harm.

You have the following rights in relation to your personal data held by u2wallet. To exercise any of these rights, please contact us via live chat or the email address set out in Clause 14.

u2wallet will respond to all data rights requests within 30 calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no charge for submitting a data rights request in normal circumstances.

Please note that some rights are subject to limitations where legal obligations require the Platform to retain certain data — for example, KYC records and transaction histories retained under anti-money laundering law cannot be deleted upon request during the mandatory retention period.

The u2wallet Platform is strictly for users aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 — whether through fraudulent registration, identity misrepresentation, or any other means — we will immediately close the associated account, delete all associated personal data to the extent permitted by applicable law, and return any deposited funds to the payment method of origin.

The KYC verification process is the primary mechanism through which u2wallet enforces the 21+ age requirement. Submission of identity documents confirming date of birth is a mandatory step in the account activation process. Accounts that cannot be verified as belonging to a player aged 21 or above will not be permitted to deposit, wager, or withdraw.

u2wallet is an internationally operated platform. In delivering our services to Malaysian players, personal data may be transferred to, and processed in, countries or territories outside Malaysia. This may include the jurisdiction in which the Platform holds its international gaming licence, as well as countries where our data processors and service providers are located.

Where personal data is transferred internationally, u2wallet ensures that appropriate safeguards are in place to protect the data in a manner consistent with internationally recognised data protection standards. Such safeguards may include:

• Contractual clauses requiring data processors to maintain equivalent data protection standards
• Transfers only to jurisdictions recognised as providing adequate data protection
• Technical and organisational security measures applied regardless of the transfer destination

By using the u2wallet Platform, you acknowledge and consent to the transfer of your personal data as described in this clause, where necessary for the provision of services.

u2wallet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform operations, or industry best practices. Material changes to this Policy will be communicated to registered Players via email notification and/or a prominent notice on the Platform homepage at least seven (7) days before the changes take effect.

The "Last updated" date displayed at the top of this document will be revised with each amendment. We encourage all Players to review this Policy periodically to remain informed about how we handle personal data.

Your continued use of the Platform following notification of a material change to this Policy constitutes your acknowledgement of the updated terms. If you do not agree to any revised terms, you must close your account before the effective date of the changes.

The current version of this Privacy Policy is always accessible at https://u2wallet.cam/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way u2wallet handles your personal data, please contact our team through either of the following channels:

• Live Chat: Available 24/7 directly through the u2wallet Platform. For privacy-related queries, please select the "Account & Privacy" category when initiating your chat. Peak English-language response times are 8am – 2am (MYT).
• Email (plain text — not clickable): [email protected]
  Please include "Privacy Enquiry" in your email subject line to ensure your message is directed to our data protection team.

We aim to respond to all privacy enquiries within five (5) business days. For formal data subject access requests or erasure requests, the 30-day response window set out in Clause 10 applies.

Our support team operates in English and is available to assist players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations across Malaysia.