This Privacy Policy explains how uefa888, accessible at https://uefa888.cam, collects, processes, stores, and protects personal data provided by or relating to users of our platform. We are committed to handling your information with transparency, security, and strict compliance with applicable data protection standards. Please read this document carefully before registering or using our services.
uefa888 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use our online casino and sports betting services at https://uefa888.cam. This Privacy Policy ("Policy") sets out the basis on which personal data we collect from you — or that you provide to us — will be processed by us.
This Policy applies to all Users of the Platform, including registered account holders, visitors who browse without registering, individuals who contact our support team, and any other natural persons whose personal data is processed in connection with our services.
By registering an account, accessing the Platform, or providing personal data to us through any channel, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
Your Privacy Matters: We process personal data only for legitimate, defined purposes. We do not sell your personal data to third parties for marketing purposes, and we do not share your information with unrelated commercial entities without your explicit consent or a lawful obligation to do so.
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. In relation to this Platform, the Data Controller is the operator of uefa888. |
| "Data Processor" | Any third-party entity that processes personal data on behalf of the Data Controller under a data processing agreement. |
| "User" / "You" | Any individual who accesses the Platform, registers an account, or whose personal data is otherwise processed in connection with Platform services. |
| "KYC" | Know Your Customer — identity and address verification procedures required under anti-money-laundering and responsible gambling regulations. |
| "Cookies" | Small data files placed on your device by the Platform to enable functionality, remember preferences, and facilitate analytics. |
| "Sensitive Data" | Personal data that merits heightened protection, including government-issued identification numbers, financial account details, and biometric identifiers where collected. |
We collect and process the following categories of personal data in connection with your use of the Platform:
3.1 Identity & Contact Data
3.2 Financial Data
3.3 Account & Activity Data
3.4 Technical & Device Data
Sensitive Identification Data: Government-issued identification numbers and copies of identity documents are collected solely for KYC compliance purposes under applicable AML regulations. This data is encrypted at rest using AES-256 and access is restricted to authorised compliance personnel only.
We collect personal data through the following channels and methods:
We process your personal data only where a lawful basis for processing exists. The primary purposes and corresponding legal bases are set out below:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to provide Platform services |
| Identity verification (KYC) | Legal obligation — required under AML and gaming regulations |
| Processing deposits and withdrawals in MYR | Performance of contract — necessary for financial service delivery |
| Fraud detection and prevention | Legitimate interest — protecting the Platform and its users from financial crime |
| Responsible gambling monitoring | Legal obligation and legitimate interest — compliance with gaming licence conditions |
| Customer support and complaint handling | Performance of contract and legitimate interest |
| Platform analytics and performance optimisation | Legitimate interest — improving service quality and user experience |
| Promotional communications (where opted in) | Consent — provided at point of opt-in and withdrawable at any time |
| Legal compliance and regulatory reporting | Legal obligation — required under applicable licensing and financial regulations |
All personal data collected by the Platform is processed in accordance with the following principles, consistent with internationally recognised data protection standards:
Automated Decision-Making: The Platform uses automated systems to flag accounts for fraud, AML, and responsible gambling monitoring. Where an automated decision materially affects your account (e.g., a suspension triggered by risk scoring), you may request human review of that decision by contacting our compliance team through the live chat support channel.
We do not sell, rent, or trade your personal data to third parties for marketing or commercial profiling purposes. Personal data may be shared only in the following strictly defined circumstances:
We retain personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention schedule:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory obligation |
| KYC documents | 5 years from date of submission | AML / gaming licence requirement |
| Financial transaction records | 7 years from transaction date | Financial records legislation |
| Betting and gaming history | 5 years from activity date | Gaming regulatory requirement |
| Customer support records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Session and device logs | 12 months | Security and fraud detection |
| Marketing consent records | Duration of consent + 2 years | Compliance with consent obligations |
Following expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
The Platform uses cookies and similar tracking technologies to deliver core functionality, remember user preferences, maintain session security, and gather analytics on Platform performance. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain Platform features or maintaining a secure login session. The Platform does not use cookies to serve third-party advertising or to track your activity across unrelated websites.
Browser Controls: Most modern browsers allow you to view, manage, block, or delete cookies through the browser's privacy or settings menu. Instructions vary by browser — refer to your specific browser's help documentation for guidance.
The Platform applies a multi-layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our primary security measures include:
User Responsibility: The security of your personal data also depends on you maintaining the confidentiality of your login credentials. Never share your password with another person. If you believe your account has been accessed without your authorisation, contact our support team immediately via live chat.
Subject to applicable data protection law and certain conditions, you have the following rights in relation to your personal data held by the Platform. To exercise any of these rights, contact our Data Protection team at [email protected] (plain text — not a clickable link). We will respond to valid requests within 30 days.
Request a copy of the personal data we hold about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data held in your account record.
Request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to legal retention obligations.
Request that we limit how your data is used in certain circumstances, for example while a dispute is being investigated.
Receive a structured, machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
Object to processing based on legitimate interests, including profiling for fraud detection, in certain defined circumstances.
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting prior processing.
Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe your rights have been infringed.
Identity Verification for Rights Requests: To protect your data, we will verify your identity before processing any rights request. You may be asked to provide confirmation of your account username and a copy of your identity document before we release or modify any personal data.
The Platform is strictly for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data relating to persons under the age of 21. This age restriction is enforced through our registration process, KYC verification, and ongoing account monitoring.
If we become aware that personal data belonging to a person under 21 years of age has been collected — whether through deliberate misrepresentation or otherwise — we will immediately suspend the associated account, delete or securely destroy the relevant personal data to the extent permitted by law, and where appropriate, report the matter to the relevant regulatory authority.
Parents or guardians who believe that a minor has registered an account on the Platform are requested to contact our support team immediately via live chat or by emailing [email protected] (plain text address — not a link) so that the account may be reviewed and appropriately actioned.
The Platform may transfer personal data to servers, data processors, or service providers located outside of Malaysia in order to deliver our services. This may include transfers to jurisdictions for the purpose of operating our technology infrastructure, processing payments, or performing identity verification services.
Where personal data is transferred outside of Malaysia to countries that may not have data protection laws equivalent to those in your home jurisdiction, we ensure that appropriate safeguards are in place. These safeguards may include:
By providing your personal data and using the Platform, you acknowledge and consent to the international transfer of your data in the circumstances described above, provided that equivalent protections remain in place.
The Platform reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. Where changes are material, we will notify registered Users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this document reflects when the current version of the Policy was published. We encourage Users to review this Policy periodically to remain informed about how we process personal data.
Your continued use of the Platform following publication of an amended Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure through our live chat support channel.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels. All contact details are provided as plain text only — they are not clickable links.
We serve players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. All privacy-related enquiries are handled by our compliance team, and we commit to acknowledging formal data subject requests within 72 hours and responding in full within 30 days.
Subject Access Requests: To submit a formal data access or erasure request, please include your full registered name, account username, and a brief description of your request in your email or live chat message. We will verify your identity before processing the request and will confirm receipt within 3 business days.
Our Data Commitments
These six commitments underpin every data decision we make at uefa888. Privacy protection is not a compliance checkbox — it is a core part of how we operate as a trusted platform for Malaysian players.
All personally identifiable data stored on Platform servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256, the same standard used by financial institutions globally.
Your personal data is never sold, rented, or traded to third-party marketers or data brokers. We share data only with service partners directly required to deliver our Platform services, under strict contractual data protection obligations.
Every data processing activity is mapped to a specific lawful basis — contract performance, legal obligation, legitimate interest, or consent. We do not process data without a defined and documented purpose.
We support all eight data subject rights including access, rectification, erasure, portability, and objection. Rights requests are acknowledged within 72 hours and resolved within 30 days by our compliance team.
Data is retained only for as long as legally required — no longer. Once retention periods expire, records are securely deleted or anonymised. We maintain a documented data inventory to ensure consistent retention compliance.
In the event of a data security incident, affected users and relevant authorities will be notified in accordance with applicable breach notification timelines. We do not suppress or delay reporting of genuine security incidents.
Our compliance and support teams are available 24/7 in English, Bahasa Melayu, and Chinese. If you'd like to know more about how your data is used, or to exercise any of your privacy rights, we're here to help.