Official u2w2 Document · PDPA 2010 Compliant

Privacy Policy u2w2 – Personal Data Protection for Malaysian Members

U2w2 takes every member's privacy rights seriously. This document transparently outlines how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We believe you have the right to know what happens with your information — without confusing legal jargon.

Last updated: 1 July 2026 · Version 2.4
🔒

U2w2 Privacy Policy

Data Protection · PDPA 2010 · Malaysia

12 Section
256 SSL Bit
MY PDPA Compliant

U2w2's Commitment to Your Privacy

Six core principles that guide how u2w2 manages the personal data of every Malaysian member.

PDPA 2010 Compliance

All of u2w2's data management practices are designed and implemented in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. Your rights as a data subject are protected under applicable Malaysian law.

256-Bit SSL Encryption

All data transmitted between your device and u2w2's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions, including Maybank and CIMB.

No Data Sales

U2w2 has never and will never sell, rent, or commercialise members' personal data to third parties for marketing or any other purpose without your explicit consent.

Full Control in Your Hands

You have the right to access, correct, transfer, and delete your personal data held by u2w2 at any time — either through your account or by contacting our support team.

Data Minimisation

U2w2 only collects data that is strictly necessary to provide platform services. We do not collect excessive or irrelevant information beyond what is required for platform operations.

Immediate Breach Notification

In the event of any data security incident affecting your information, u2w2 is committed to notifying affected members within the timeframe required under applicable Malaysian law.

Important Note: By registering and using the u2w2 platform, you confirm that you have read and understood this Privacy Policy and consent to u2w2 processing your personal data as described herein. If you do not agree with any part of this policy, please discontinue your use of the u2w2 platform.

1 Introduction & Scope of the Privacy Policy

This Privacy Policy is published by u2w2 ("Platform", "we", or "u2w2") and applies to all users and members who access or use the u2w2 platform via u2w2.net. This Policy explains how we collect, use, disclose, transfer, and store your personal data as a platform member.

U2w2 recognises that privacy is a fundamental right of every individual. As an online entertainment platform — encompassing Live Casino, slots, table games, Sports Betting on the Malaysia Super League and EPL, BWF badminton, 4D and Toto lottery, and e-sports — we handle a wide range of sensitive personal data, and we take that responsibility seriously.

This Privacy Policy is governed by Malaysia's Personal Data Protection Act (PDPA) 2010 and any other applicable legislation relevant to our operations. We update this policy from time to time to reflect changes in our practices or legal requirements — the date of the most recent update is always displayed at the top of this document.

2 Personal Data We Collect

U2w2 collects your personal data in two ways — directly when you interact with the platform, and automatically through standard tracking technologies as you browse our website. The categories of data we collect are as follows:

Data CategoryExamples of InformationPurpose of Collection
Registration Data Full name, Malaysian phone number, date of birth, password (encrypted) Account creation and management, identity verification, age restriction
Verification Data (KYC) MyKad photo, verification selfie, residential address Mandatory identity verification, fraud prevention, legal compliance
Financial Data E-wallet account numbers (Touch 'n Go, DuitNow, GrabPay), deposit and withdrawal records, transaction history Payment processing, fraud detection, anti-money laundering (AML) compliance
Platform Activity Data Game records, Sports Betting history, lottery tickets, wins and losses Account management, dispute resolution, VIP rewards programme, personalised marketing
Technical Data IP address, device and browser type, operating system, cookie data Platform security, fraud detection, user experience improvement
Communications Data Customer support conversation records, emails, and filed complaints Issue resolution, service quality improvement, internal audits

We do not collect sensitive personal data such as health information, religious beliefs, or political affiliations unless specifically required for a purpose permitted by law. In all cases, we collect only the data genuinely necessary to operate the u2w2 platform effectively and securely.

3 How We Use Your Data

The personal data we collect is used for specific, lawful, and transparent purposes. u2w2 does not use your data for any purpose beyond what is stated in this Policy without obtaining your additional consent. The primary purposes for which your data is used are as follows:

  • Account Management: Creating and managing your u2w2 account, verifying your identity, processing logins, and managing account settings.
  • Transaction Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, ShopeePay and other Malaysian e-wallets, and handles the withdrawal of your winnings.
  • Platform Services: Providing access to all u2w2 games and services, including Live Casino, slots, table games, Sports Betting, badminton, lottery, and e-sports.
  • Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, duplicate account use, and any misuse of the platform.
  • Customer Support: Handling your enquiries, complaints, and disputes, as well as improving the quality of our Bahasa Malaysia support services.
  • VIP Programme & Marketing: Managing your participation in the u2w2 VIP Rewards Programme and delivering relevant promotional offers — such as deposit bonuses and weekly cashback — based on your playing activity.
  • Legal Compliance: Comply with legal and regulatory requirements applicable to our operations, including the PDPA 2010, anti-money laundering requirements, and lawful requests from authorities.
  • Platform Improvements: Analysing usage patterns to improve the performance, usability, and overall experience of the u2w2 platform.

u2w2 uses automated decision-making in certain situations — such as real-time fraud detection and transaction risk assessment. You have the right to request human review of any automated decision that materially affects your account or transactions. Please contact our support team if you wish to exercise this right.

4 Sharing Data with Third Parties

U2w2 does not sell, rent, or commercialise members' personal data to any third party for their own purposes. However, in the course of operating the platform, there are situations where we need to share certain data with specific parties:

  • Payment Service Providers: To process your deposits and withdrawals, we are required to share the necessary transaction details with payment gateways and Malaysian e-wallet providers such as Touch 'n Go, DuitNow, and GrabPay. This sharing is kept to the minimum required for payment processing purposes only.
  • Game Software Providers: To provide Live Casino, slots, and table games, we work with licensed game software providers. These providers may receive the minimum technical data required to operate games within your account.
  • Technology Service Providers: We work with cloud infrastructure providers, identity verification (KYC) services, and analytics tools to operate the platform. All such parties are bound by strict data processing agreements and are only permitted to process your data in accordance with our instructions.
  • Regulatory Authority: u2w2 will disclose personal data when required by law, court order, or a valid request from Malaysian law enforcement authorities. We will endeavour to notify you of any such request unless prohibited by law from doing so.

All third parties with whom we share data are required to uphold data security standards equivalent to our own, and to use that data solely within the permitted scope. u2w2 conducts thorough due diligence on all third-party service providers before entering into any agreement.

5 Cross-Border Data Transfers

As a platform operating on global technology infrastructure, a small portion of your data may be stored or processed on servers located outside Malaysia. This primarily involves the cloud infrastructure used to operate the platform and data backup systems.

Whenever your data is transferred outside Malaysia, u2w2 ensures that adequate safeguards are in place — including the use of recognised standard contractual clauses, confirmation that the recipient country has comparable data protection laws, or obtaining your explicit consent for the transfer.

Cross-Border Security Controls: Regardless of where your data is physically stored, the same level of technical and organisational security protection applies at all times. 256-bit SSL encryption, strict access controls, and defined data retention policies are maintained consistently across all storage locations.

6 Data Retention Period

U2w2 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law. Our general data retention guidelines are as follows:

  • Active Account Data: For as long as your u2w2 account remains active and you continue to use the platform.
  • KYC & Identity Verification Data: Minimum 7 years after account closure, in accordance with Malaysian anti-money laundering legislation.
  • Financial Transaction Records: Minimum 7 years from the date of transaction, in line with Malaysian accounting and tax requirements.
  • Support Communication Records: 3 years from the date of last interaction, for dispute resolution purposes.
  • Technical Data and Logs: 12 months, for security and audit purposes.

Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be linked to you personally. If you request early account closure, u2w2 will initiate the data deletion process within 30 days of the request, subject to any mandatory retention requirements prescribed by law.

7 Data Security

U2w2 continuously invests in cybersecurity infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures we employ include:

  • 256-bit SSL/TLS encryption for all data transmitted between our servers and your device.
  • Encryption of sensitive data at rest for financial and KYC information stored in our databases.
  • Role-based access control ensuring that only authorised personnel can access specific user data.
  • Two-factor authentication (2FA) for all internal staff access to systems containing user data.
  • Round-the-clock security monitoring with an intrusion detection system.
  • Regular penetration testing by independent security experts to identify and patch vulnerabilities.
  • Mandatory cybersecurity awareness training for all u2w2 staff who handle user data.
  • A comprehensive incident response plan to address any data breaches promptly and effectively.

Despite all these security measures, no system can guarantee absolute 100% security. u2w2 is committed to continuously strengthening our security posture and responding swiftly to any identified threats or incidents.

8 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have several important rights regarding the personal data we hold about you. u2w2 is committed to respecting and facilitating the exercise of these rights:

9 Cookies & Tracking Technologies

U2w2 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your login session, and analyse usage patterns for continuous improvement. The following are the types of cookies we use:

You can manage cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to log in and fully use certain features on the u2w2 platform.

10 Children's Privacy

The u2w2 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18. If you believe a minor has registered a u2w2 account or provided us with their personal data, please contact our support team immediately at support@u2w2.net.

Upon confirming that the data belongs to a minor, u2w2 will take immediate action to delete that data and close the account in question. We employ strict age verification systems during the registration process and during KYC to prevent underage membership.

11 Marketing Communications

U2w2 may send you marketing communications about the latest promotions, new bonuses, platform updates, and relevant offers based on your playing activity. These communications include notifications about welcome bonuses for new members, VIP cashback offers, enhanced odds for selected sports matches, and updates on new games in the casino or lottery.

All marketing communications are sent based on your consent provided during registration or subsequently through your account settings. You have the right to withdraw consent for marketing communications at any time in the following ways:

  • Click the "Unsubscribe" link at the bottom of any marketing email from u2w2.
  • Update your notification preferences under "Account Settings" on the u2w2 platform.
  • Contact the u2w2 support team via live chat or email at support@u2w2.net to request removal from our marketing communications list.

Withdrawing your marketing consent will not affect any platform features or services you receive. You will still receive important account-related communications such as security notifications, transaction confirmations, and service-related information — these are necessary operational communications, not marketing.

12 Policy Amendments & Contact Us

U2w2 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements. Material changes to this Policy will be communicated to members via their registered email or an in-platform notification at least 14 days before taking effect.

The date of the most recent update is always displayed at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions or concerns, or wish to exercise your rights as a data subject in relation to this Privacy Policy, please contact the u2w2 Data Protection Officer via:

  • Email: support@u2w2.net (please include "Privacy Enquiry" in the subject line)
  • Live chat: Available 24/7 on the u2w2 platform
  • Target response time: under 24 hours for privacy-related enquiries

Related Documents: This Privacy Policy should be read together with u2w2 Terms & Conditions and u2w2 Responsible Gaming Policy for a full overview of your rights and protections as a platform member.

Your Rights Under the PDPA
Right of Access
View the data we hold about you
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request data deletion subject to legal requirements
Right to Object
Object to data processing for direct marketing
Right to Data Portability
Receive a copy of your data in a portable format
Right to Withdraw Consent
Withdraw consent for data processing at any time

To exercise any of these rights, contact us at support@u2w2.net.

Privacy Enquiries

The u2w2 team operates 24/7 in Bahasa Malaysia to assist with any queries relating to your data privacy.

support@u2w2.net

Secure Payment Accepted
Touch 'n Go DuitNow FPX GrabPay Boost ShopeePay Maybank2u CIMB Clicks

Your Rights as a u2w2 Member

Malaysia's PDPA 2010 grants you important rights over your personal data. u2w2 is committed to respecting and facilitating all of these rights.

1
Right to Access Your Data

You may request a copy of the personal data u2w2 holds about you at any time. u2w2 will provide this in a readable format within 21 days of receiving your request. Contact our support team to initiate a data access request.

2
Right to Rectification

If you find that any personal data we hold is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update certain information directly through your u2w2 account settings.

3
Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain specific data — such as financial records and KYC information — for periods required under Malaysian law.

4
Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances. Objection requests will be processed within 14 days.

5
Right to Data Portability

You have the right to receive the personal data you have provided to u2w2 in a structured, machine-readable format, and to transfer it to another party if you wish. Such requests will be processed within 30 days of receipt.

6
Right to Withdraw Consent

Where the processing of your data is based on consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal. You can manage your consent preferences through your u2w2 account settings.

To exercise any of the above rights, contact us at support@u2w2.net by stating the right you wish to exercise along with your account details. We will respond within 3 business days.

FAQ – u2w2 Privacy Policy

The most frequently asked questions from members about how u2w2 manages and protects personal data.

No. u2w2 has never and will never sell, rent, or commercialise members' personal data to any third party for their own marketing or advertising purposes. Your data is only shared with the service providers we use to operate the platform — such as Touch 'n Go and DuitNow payment gateways for processing your transactions, and KYC providers for identity verification. All such parties are bound by strict confidentiality agreements and may only use your data for purposes we have explicitly authorised.

Identity verification via documents such as MyKad is standard practice in the responsible online entertainment platform industry. It serves three main purposes: first, to confirm that you are 18 years of age or older as required under our age restriction policy; second, to prevent the creation of duplicate accounts in violation of our Terms & Conditions; and third, to comply with anti-money laundering (AML) requirements, which are a legal obligation. Your MyKad copy is stored in encrypted format and accessed only by a strictly limited number of staff on a need-to-know basis.

You have the right to request the deletion of your personal data, and u2w2 will honour that request. However, certain limitations apply under Malaysian law — in particular, the requirement to retain financial and KYC records for a minimum of 7 years after account closure, in accordance with anti-money laundering legislation and tax requirements. Data that is not subject to these mandatory retention requirements will be deleted or anonymised within 30 days of your request. We will clearly inform you of what data must be retained and the reasons for doing so.

Your payment details — such as your DuitNow account number, Touch 'n Go, or GrabPay information registered to your u2w2 account — are stored in encrypted format using bank-grade encryption. Your full account number is never displayed on the platform interface; only the last few digits are shown for verification purposes. Payment transactions are processed through secure payment gateways, and u2w2 does not store or have access to your e-wallet password or PIN. All communication with payment gateways uses encrypted HTTPS protocols.

Once you close your u2w2 account, we will initiate the data closure process within 30 days. Data not subject to mandatory retention requirements will be deleted or anonymised so it can no longer be associated with you. Data that must be retained by law — such as KYC records and financial transactions — will continue to be stored for the prescribed period (minimum 7 years), but under more restricted access conditions and not used for any operational or marketing purpose. Once the mandatory retention period expires, all remaining data will be securely deleted.

There are three ways to stop receiving promotional emails from u2w2. First, click the "Unsubscribe" link at the bottom of any marketing email you receive — this is the quickest option. Second, log in to your u2w2 account, go to "Account Settings", and update your notification preferences. Third, reach out to our support team via live chat or email at support@u2w2.net. Unsubscribe requests are processed within 48 hours. Please note that you will still receive important account-related emails such as transaction confirmations and security notifications — these are operational communications, not marketing.
🔒

Your Privacy is Protected – Play with Confidence at u2w2

U2w2 protects your personal data with bank-grade encryption, is fully compliant with Malaysia's PDPA 2010, and will never sell your information to any third party. Register with confidence and enjoy Live Casino, Sports Betting, 4D lottery and more.

Terms and conditions apply. Play responsibly. For individuals aged 18 and above only.

Bahasa Melayu