Privacy Policy

Registration data: When you create a U2 Casino account, we collect your full name, date of birth, phone number, and preferred username.

Identity verification data: For KYC compliance, we may request a government-issued photo ID (MyKad or passport) and proof of address (utility bill or bank statement issued within 3 months).

Financial data: We collect payment method information, transaction records, and deposit/withdrawal history. We do not store full card numbers — payment processing is handled by certified payment processors.

Usage data: When you use our platform, we automatically collect device type, operating system, IP address, browser type, pages visited, gameplay activity, and session duration.

We use your personal data to:

• Process account registration, identity verification, and KYC compliance
• Process deposits, withdrawals, and other financial transactions
• Provide customer support and respond to enquiries
• Send account-related communications (security alerts, transaction confirmations)
• Send promotional communications where you have opted in to receive them
• Detect, investigate, and prevent fraud, money laundering, and prohibited activities
• Comply with applicable Malaysian law and regulatory obligations
• Improve our platform through anonymised usage analytics

U2 Casino implements industry-standard security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• Secure, access-controlled servers with encryption at rest
• Two-factor authentication available on all accounts
• Regular security audits and penetration testing
• Strict access controls — only authorised personnel can access personal data

While we implement robust security measures, no internet transmission is 100% secure. If you believe your account security has been compromised, contact us immediately.

We do not sell your personal data to third parties. We may share data with:

• Payment processors (FPX, DuitNow, TnG, and others) to complete financial transactions
• Game providers (JILI, Pragmatic Play, Evolution Gaming, and others) for gameplay functionality and RNG certification
• Identity verification services for KYC compliance
• Fraud prevention services to detect and prevent fraudulent activity
• Regulatory authorities where disclosure is required by Malaysian law, including Bank Negara Malaysia and law enforcement agencies

All third-party service providers are contractually bound to maintain the confidentiality of your data and may only use it for the specific purpose for which it was shared. For AML-related disclosures, see our Anti-Money Laundering Policy.

U2 Casino uses cookies and similar tracking technologies to:

• Essential cookies: Maintain your login session and remember your account preferences. These are required for the platform to function.
• Analytics cookies: Understand how users navigate the platform so we can improve the experience. Data is anonymised.
• Security cookies: Detect suspicious login activity and protect your account.

We do not use cookies for third-party advertising or to sell data to advertisers. You can disable non-essential cookies in your browser settings, though this may affect some platform functionality.

We retain personal data for as long as your account is active and for a period following account closure as required by applicable law:

• Transaction records and financial data: minimum 5 years for AML and regulatory compliance
• KYC and identity documents: minimum 5 years from account closure
• Communication and support records: 3 years
• Usage and gameplay data: up to 2 years in identifiable form, longer in anonymised form

After the applicable retention period, data is securely deleted or permanently anonymised.

Under applicable Malaysian data protection law, you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal retention requirements)
• Object to certain processing of your data, including marketing communications
• Withdraw consent for data processing where consent was the legal basis

To exercise any of these rights, contact our support team. We will respond to requests within 30 days. Identity verification may be required before processing data access or deletion requests.