Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy" or "the Privacy Policy") is published by umb88 (hereinafter referred to as "umb88", "the Company", "we", "us", or "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with your use of the umb88 online platform, accessible at https://umb88.cam, including all associated services, games, account features, and communications.

umb88 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is designed to give you a clear understanding of your rights and our obligations regarding your information.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete contractual and regulatory framework governing your relationship with umb88.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, financial data, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means umb88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of umb88, pursuant to a data processing agreement.
• "Cookies" means small data files placed on your device by theumb88 platform to facilitate session management, preference recall, and usage analytics.
• "KYC" means Know Your Customer — the identity and age verification process umb88 applies to registered members.
• "User" / "You" means any individual who accesses or uses the umb88 platform, whether as a registered member or visitor.

umb88 collects the following categories of Personal Data from Users, to the extent necessary for the purposes described in this Policy:

umb88 collects Personal Data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical and Usage Data collected automatically when you access and interact with the umb88 platform, including via cookies, server logs, and similar technologies described in Section 9.
• Payment Processors: Financial transaction data received from our payment service partners including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX, in connection with deposits and withdrawals.
• Identity Verification Services: Identity confirmation data returned by third-party KYC and age verification service providers used to validate your identity documents.
• Anti-Fraud and AML Systems: Risk assessment signals generated by automated systems monitoring for suspicious activity, in fulfilment of our anti-money laundering obligations.

umb88 processes your Personal Data for the following purposes:

• Account Registration and Management: To create and maintain your umb88 account, verify your identity and age, authenticate your logins, and manage your account settings and preferences.
• Service Delivery: To provide access to games, sports betting markets, live dealer tables, and all other platform features; to process deposits and withdrawals via Malaysian payment channels; and to administer promotions, bonuses, and VIP rewards.
• KYC and Regulatory Compliance: To conduct identity and age verification in accordance with applicable regulatory requirements, and to fulfil our anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations.
• Responsible Gambling: To monitor player activity for indicators of problem gambling behaviour; to apply self-imposed limits, cool-off periods, and self-exclusion requests; and to comply with responsible gambling obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via live chat, email, and other support channels.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Improvement: To analyse aggregate usage patterns, improve platform performance and game offerings, and personalise the platform experience where you have consented to such personalisation.
• Communications: To send you transactional notifications (account activity, deposit/withdrawal confirmations), important policy updates, and — where you have opted in — promotional communications regardingumb88 offers.

umb88 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to — including account management, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML/CFT obligations, and data retention requirements imposed by law.
• Legitimate Interests: Processing conducted for purposes that are reasonably expected by users and that do not override their fundamental rights — including fraud prevention, platform security, and aggregate analytics for service improvement.
• Consent: Processing for purposes beyond those described above, such as opt-in marketing communications or non-essential cookies, where we have obtained your explicit, freely given, and revocable consent. You may withdraw consent at any time by contacting our support team or adjusting your account settings.

umb88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following circumstances, and only to the extent necessary for each purpose:

• Payment Service Providers: We share financial transaction data with our payment processing partners — including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — solely to facilitate your deposits and withdrawals.
• KYC and Identity Verification Providers: We share identity document data with licensed third-party verification services solely for the purpose of age and identity validation.
• Game Studio Partners: Certain Usage Data (such as game session data and bet history) is shared with our licensed game studio partners to facilitate gameplay and resolve game-related disputes.
• Anti-Fraud and AML Service Providers: We share transaction and behavioural data with specialist fraud detection and AML screening services to fulfil our regulatory obligations.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required by law, court order, or other binding legal process, and without prior notice to you where such notification is prohibited.
• Professional Advisers: We may share data with legal, audit, or financial advisers under strict confidentiality obligations where required for the conduct of our business.

umb88 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your active account relationship with umb88, plus an additional period as required by applicable legal and regulatory obligations.
• Financial Transaction Records: Retained for a minimum of 6 years from the date of transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of 5 years following the closure of an account or the completion of the last relevant transaction, whichever is later.
• Customer Support Communications: Retained for a period of 3 years from the date of the last interaction, to facilitate dispute resolution and quality review.
• Marketing Consent Records: Retained for the duration of your consent or until you withdraw consent, plus a reasonable period thereafter as evidence of your consent history.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Where data is anonymised, the resulting anonymised dataset is no longer subject to this Privacy Policy and may be retained indefinitely for aggregate analytical purposes.

umb88 uses cookies and similar tracking technologies (including session tokens, local storage, and web beacons) to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and cookies that remember your logged-in state. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your platform experience.
• Analytics Cookies:
• Responsible Gambling Cookies: Technical cookies used to maintain your self-imposed limits, session reminders, and cool-off period status across devices.

umb88 does not deploy third-party advertising cookies or retargeting pixels. You may control non-essential cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into your account and using the platform.

umb88 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and umb88 servers.
• Encryption at rest for sensitive stored data, including financial records and identity documents.
• Multi-factor authentication options for account access.
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis.
• Regular security audits and penetration testing of platform infrastructure.
• Automated anomaly detection systems that flag unusual access patterns for security review.
• Secure data centre infrastructure with physical access controls and redundant backup systems.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach affecting your Personal Data, umb88 will notify affected users and relevant authorities in accordance with our legal obligations and within the timeframes required by applicable law.

You are responsible for maintaining the security of your own account credentials.umb88 recommends using a strong, unique password for your account and enabling two-factor authentication where available. Do not share your login details with any third party.

Subject to applicable law, you hold the following rights in relation to the Personal Data umb88 processes about you. To exercise any of these rights, contact our support team [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the Personal Data umb88 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Where technically feasible, you may correct certain account data directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing conducted on the basis of legitimate interests, including profiling for fraud prevention purposes, where you believe your individual circumstances warrant an override. You may also opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

All account registrations are subject to KYC age verification before withdrawal processing. umb88 takes its obligations regarding underage gambling prevention with the utmost seriousness and cooperates fully with relevant authorities where underage access is identified.

umb88 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to this Policy — meaning changes that significantly affect your rights or how we use your data — umb88 will provide at least 14 days' prior notice by publishing a prominent notice on the platform and, where appropriate, by emailing registered members at their address on file.

For minor, non-material amendments — such as clarifications of existing language, corrections of typographical errors, or administrative updates — the revised Policy will take effect upon publication to this page. The "Last Updated" date displayed at the top of this document will be updated to reflect the revision date.

Your continued use of theumb88 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to remain informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by umb88, please contact our support team through the following channels. For formal data rights requests, please indicate "Data Rights Request" in the subject line of your communication.

This Privacy Policy was last reviewed and updated on 1 January 2026. umb88 encourages all members to review this document periodically to stay informed of how we handle your personal data.