This Privacy Policy explains how umg8 collects, uses, stores, discloses, and protects the personal data of players registered on the umg8 platform. We are committed to handling your personal information with transparency and in accordance with applicable data protection principles.
Six principles that guide how umg8 handles every piece of personal data you entrust to us.
All personal data is stored on encrypted servers with access controls restricted to authorised personnel only. We use 256-bit AES encryption at rest.
We only collect data that is necessary for the services you use. We do not sell your personal data to third parties for marketing purposes.
This policy clearly explains what data we collect, why we collect it, who we share it with, and how long we retain it — no hidden clauses.
You have the right to access, correct, and request deletion of your personal data, subject to legal retention obligations and ongoing account verification requirements.
Your data is not disclosed to any third party except where required by law, necessary to process your payments, or explicitly consented to by you.
umg8's data practices are designed to comply with applicable international gaming authority requirements and data protection standards relevant to our operating jurisdiction.
umg8 ("we," "us," "our," "the Platform") operates the online casino and sportsbook platform accessible at umg8.asia and through associated mobile applications (collectively, the "Services"). In the course of providing these Services to registered players ("you," "your"), umg8 necessarily processes personal data relating to you.
This Privacy Policy describes the categories of personal data umg8 collects, the purposes for which that data is processed, the legal basis for such processing, the parties to whom data may be disclosed, the period for which data is retained, and the rights available to you in respect of your personal data.
This Policy applies to all umg8 platform users, including registered players based in Malaysia and any other jurisdiction from which the platform may be accessed. It applies to data collected via the umg8 website, Android application, iOS PWA, customer support communications, and any other channel through which you interact with umg8.
Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as Malaysian MyKad, passport, or other official identity document) provided during registration and Know Your Customer (KYC) verification processes.
Email address, Malaysian mobile telephone number, and residential address (including postcode, city, and state). This includes updates to contact information submitted after initial registration.
Details of payment methods linked to your umg8 account — including e-wallet account identifiers (Touch 'n Go, Boost, GrabPay, DuitNow), bank account details used for FPX transactions or direct bank transfers (Maybank, CIMB, Public Bank, and others), transaction amounts, dates, and reference numbers. umg8 does not store full bank account passwords or PIN numbers.
Complete records of all deposits, withdrawals, bonuses claimed, bets placed, games played, session durations, wagering amounts, win/loss outcomes, and related activity across all platform features including casino games, sportsbook, and slots.
IP address, browser type and version, device type and operating system, screen resolution, time zone setting, session timestamps, login history, and geolocation data where consent is provided or where required for fraud prevention purposes.
Records of communications between you and umg8 customer support — including live chat transcripts, email correspondence, and any documents you submit in connection with a complaint, dispute, or verification request.
Your platform preferences, notification settings, promotional opt-in or opt-out status, and records of which promotional materials were presented to you and whether they were opened or acted upon — but only where you have provided consent for marketing communications.
umg8 collects personal data through the following channels:
umg8 processes your personal data for the following specific purposes:
umg8 processes your personal data on the following legal grounds, depending on the nature of the processing activity:
umg8 does not sell your personal data to third parties. We may disclose your data to the following categories of recipients for the purposes described in this Policy:
In operating a global online gaming platform, umg8 may transfer your personal data to countries outside Malaysia — including to servers, technology providers, or regulatory bodies located in other jurisdictions. Where such transfers occur, umg8 implements appropriate safeguards to ensure that your personal data receives a level of protection consistent with applicable data protection standards.
These safeguards include: contractual data protection clauses incorporated into agreements with third-party recipients; transfer only to jurisdictions recognised as providing adequate data protection under applicable frameworks; and maintaining records of all international transfer activities.
umg8 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for the minimum retention periods required by our operating licence obligations. Specific retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with umg8's data destruction procedures.
The umg8 platform uses cookies and similar tracking technologies to support platform functionality, maintain your session state after login, remember your preferences, and collect aggregated analytics about how the platform is used.
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your umg8 account.
The umg8 platform is strictly intended for users aged 21 years and older. umg8 does not knowingly collect personal data from any person under the age of 21. If umg8 becomes aware that personal data has been collected from a person under the minimum age threshold, that account will be immediately closed and all associated personal data will be deleted, subject only to any retention obligations required by law.
If you believe that umg8 may have collected data from an underage individual, please contact our support team immediately at the address provided in Section 15.
Subject to applicable law and to any exceptions that arise from umg8's legal obligations, you have the following rights in respect of your personal data held by umg8:
To exercise any of these rights, please contact umg8 via the support address in Section 15. We will respond to verified requests within 30 days of receipt, or within any shorter period required by applicable law.
umg8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:
As an operator under international gaming authority oversight, umg8 is subject to anti-money laundering (AML) and counter-terrorist financing (CTF) obligations that require us to collect, retain, and in certain circumstances report personal and financial data to relevant regulatory and law enforcement authorities.
These obligations supersede standard data protection rights in specific circumstances — meaning that certain data cannot be deleted upon request where deletion would conflict with mandatory AML record-keeping requirements. umg8 will notify you where a deletion request cannot be fulfilled for this reason, to the extent permitted by law.
umg8 may be required by law to file suspicious transaction reports with financial intelligence authorities without notifying the subject player. Processing of data for AML/CTF purposes is conducted on the basis of legal obligation.
umg8 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — such as changes to the categories of data collected, changes to third-party disclosures, or changes to retention periods — umg8 will notify registered players by email to the registered address or via a prominent notice on the platform prior to the changes taking effect.
The date of the most recent update is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed of how umg8 protects your personal data. Continued use of the umg8 platform following notification of any update constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or umg8's handling of your personal data, please contact our support team via 24/7 live chat available within the platform, or by email using the contact address displayed in the footer of the umg8 website.
umg8 will acknowledge all privacy-related enquiries within 48 hours and will aim to provide a substantive response within 14 business days. If you are not satisfied with umg8's response, you may escalate your concern to the relevant data protection authority in your jurisdiction.
Now that you've reviewed how umg8 protects your privacy — log in to your account or download the app and enjoy a secure gaming experience built for Malaysian players.