uefa88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how uefa88 ("the Company", "we", "us", "our") collects, uses, discloses, and safeguards the personal information of individuals ("you", "Player", "User") who access the website at uefa88.win and all associated services and features (the "Platform").

The Company is the data controller in respect of personal data collected through the Platform. We are committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection laws and our obligations under our international gaming authority licence.

This Policy should be read in conjunction with our Terms & Conditions. Capitalised terms not defined here have the meanings given to them in the Terms & Conditions.

2. Data We Collect

We collect personal data in the following categories:

We do not collect special category data (such as racial or ethnic origin, political opinions, health data, or biometric data) unless specifically required for regulatory compliance and only with your explicit consent.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity (KYC), processing login authentication including OTP verification;
• Service Delivery: Processing deposits and withdrawals, enabling gameplay, crediting bonuses, and managing responsible gaming tools;
• Legal & Regulatory Compliance: Fulfilling anti-money laundering (AML) obligations, reporting to regulatory authorities, and responding to lawful data requests from competent authorities;
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, unauthorised account access, and platform abuse;
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of our support services;
• Platform Improvement: Analysing usage patterns to improve user experience, game performance, and platform stability;
• Marketing Communications: Sending promotional offers and updates — only where you have given consent or where we have a legitimate interest and you have not opted out.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, deposit processing, gameplay, and withdrawal settlement;
• Legal Obligation: Processing required to comply with AML legislation, licensing conditions, and other applicable laws;
• Legitimate Interests: Processing for fraud detection, platform security, service improvement, and direct marketing (where not overridden by your interests or rights);
• Consent: Where we rely on your consent (e.g., certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

We do not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: Banks, FPX operators, and eWallet providers (e.g., Touch 'n Go, Boost) to facilitate transactions;
• Identity Verification Providers: Third-party KYC and AML screening services to fulfil our regulatory obligations;
• Game Content Providers: Licensed game studios whose titles are hosted on the Platform — limited to the technical data required to deliver the game;
• Regulatory Authorities: Our gaming licence regulator, financial intelligence units, and law enforcement agencies where we are legally required to disclose;
• IT & Hosting Providers: Cloud infrastructure, security, and analytics vendors engaged under data processing agreements with equivalent data protection obligations;
• Professional Advisers: Lawyers, auditors, and insurers in connection with legal proceedings or compliance reviews.

Any third party to whom we disclose personal data is required by contract to maintain appropriate security standards and to use the data only for the stated purpose.

6. Cookies & Tracking Technologies

The Platform uses cookies and similar technologies to deliver and improve services. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for login sessions, security tokens, and core Platform functionality. These cannot be disabled.
• Performance Cookies: Collect anonymised data on page load times and errors to help us improve Platform stability.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and display options.
• Analytics Cookies: Help us understand how players navigate the Platform so we can improve the user experience. Data is aggregated and does not identify individual users.

You may configure your browser to block or delete cookies; however, doing so may impair the functionality of the Platform, including the ability to log in or complete transactions.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. Specifically:

• Account and identity data is retained for a minimum of five (5) years from account closure, as required by AML regulations;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter;
• Support communications are retained for two (2) years from the date of the interaction, unless required for an ongoing dispute.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with you.

8. Data Security

The Company implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest in our database systems;
• Multi-factor authentication for all internal administrative access to production systems;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and automated anomaly detection on all Platform infrastructure.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by the Company:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances;
• Right to Data Portability: You may request a copy of data you provided to us in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

The Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the account, delete the data, and void any associated activity.

If you believe a person under the age of 21 has registered on the Platform, please contact us immediately at [email protected].

11. International Data Transfers

The Company's infrastructure and some of our service providers are located outside Malaysia. Where personal data is transferred outside your home jurisdiction, the Company ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or equivalent protections — to ensure your data receives a standard of protection consistent with applicable data protection laws.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the Platform's features. When we make material changes, we will notify you via a prominent notice on the Platform and update the "Last updated" date at the top of this document.

We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

• Live Chat: Available 24/7 directly within the Platform — the fastest way to reach us
• Email (Data Enquiries): [email protected]

We aim to acknowledge all data-related requests within 72 hours and provide a full response within 30 calendar days.