Privacy Policy — Urus888

Introduction

Urus888 (hereinafter "Urus888", "we", "us", "our", "the Company", "the Platform") operates the online casino and sports betting platform accessible at https://urus888.cam. This Privacy Policy (hereinafter "Policy") describes in detail how Urus888 collects, uses, processes, stores, shares, and protects the personal data of individuals (hereinafter "User", "Player", "you", "your") who access or use our platform.

This Policy applies to all personal data processed by Urus888 in connection with the operation of its platform, including data collected during account registration, identity verification (KYC), payment processing, gameplay, customer support interactions, and marketing communications where you have provided consent.

By registering an account with Urus888, depositing funds, or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data Controller

Urus888 acts as the Data Controller with respect to personal data collected and processed through the platform at https://urus888.cam. As Data Controller, Urus888 determines the purposes for which personal data is collected and the means by which it is processed.

Where Urus888 engages third-party service providers (Data Processors) to carry out specific processing activities — such as payment gateway providers, identity verification services, or fraud detection systems — those processors are engaged under contractual agreements that bind them to process personal data only on Urus888's documented instructions, to implement appropriate security measures, and to delete or return all personal data upon the conclusion of their engagement.

All queries related to the processing of personal data should be directed to our Data Protection contact, reachable via [email protected]. Please mark the subject of your message "Privacy / Data Protection Request" for expedited handling.

Categories of Personal Data We Collect

Urus888 collects personal data across several functional categories, each corresponding to a specific operational need. The following table describes what we collect and why:

How We Collect Personal Data

5.1 Directly from You

The majority of personal data we hold is provided directly by you at the time of account registration, during the KYC verification process, when making a deposit or withdrawal request, when contacting our customer support team, and when completing any form or survey on the platform.

5.2 Automatically via Technology

When you access or use the Urus888 platform, certain technical data is collected automatically by our systems. This includes your IP address, browser fingerprint, session duration, pages visited, and device metadata. This data is collected using server logs, session management technology, and strictly functional cookies (see Section 13).

5.3 From Third-Party Verification Services

In connection with our KYC and AML obligations, we may receive supplementary data from identity verification service providers, fraud detection databases, and sanctions screening tools. This data is used solely to verify the accuracy of information you have provided and to comply with our regulatory obligations.

5.4 From Payment Processors

When you initiate a deposit or withdrawal via Malaysian payment channels — including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, or cryptocurrency networks — the relevant payment processor may share transaction reference data with us for the purpose of reconciling your account balance. We do not receive full payment account credentials; payment processors handle sensitive financial credentials directly.

Purposes of Data Processing

Urus888 processes your personal data for the following specific and documented purposes:

1. Account Creation and Management: To register your account, maintain accurate records of your profile, and enable you to access platform features;
2. Identity Verification (KYC): To verify your identity, confirm your age (21+), and comply with anti-money laundering regulations applicable to licensed gaming operators;
3. Payment Processing: To facilitate deposits and withdrawals via Malaysian and international payment methods, and to maintain accurate records of all financial transactions;
4. Fraud Detection and Prevention: To identify and prevent fraudulent activity, account takeovers, money laundering, collusion, and abuse of promotional systems;
5. Responsible Gambling Compliance: To monitor gameplay for indicators of problem gambling, to implement and enforce deposit limits and self-exclusion requests, and to fulfil our duty of care obligations;
6. Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes;
7. Platform Improvement: To analyse aggregated, anonymised usage data for the purposes of improving platform performance, game selection, and user experience;
8. Legal and Regulatory Compliance: To meet our obligations under applicable gaming licensing conditions, AML regulations, and any lawful request from a competent authority;
9. Marketing Communications (where consented): To send you information about bonuses, promotions, and new features where you have opted in to receive such communications.

Legal Basis for Processing

Urus888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and Urus888 — including account management, payment processing, and provision of gaming services;
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations under our gaming licence conditions;
• Legitimate Interests: Processing necessary for Urus888's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and platform improvement — where those interests are not overridden by your rights and interests;
• Consent: Processing for optional activities such as marketing communications and non-essential cookies, where you have provided express, freely given consent. You may withdraw consent at any time without detriment to your account.

Data Sharing & Disclosure

8.1 We Do Not Sell Personal Data

Urus888 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. This is an absolute policy.

8.2 Authorised Data Processors

We engage certain categories of third-party service providers as Data Processors to assist in the delivery of our platform services. These providers process your data only on our documented instructions and are contractually prohibited from using it for any other purpose. Categories of processors include:

• Identity verification and KYC service providers;
• Payment gateway and transaction processing providers (including those supporting DuitNow, FPX, e-wallet integrations, and cryptocurrency payment rails);
• Fraud detection and AML screening services;
• Customer support and live chat platform providers;
• Cloud hosting and data storage providers;
• Email delivery service providers (for transactional and, where consented, marketing communications).

8.3 Legal Disclosure

Urus888 may disclose personal data to competent regulatory, law enforcement, or governmental authorities where required to do so by law, by a court order, or by our gaming licence obligations. We will notify affected users of any such disclosure where legally permitted to do so.

8.4 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of our assets, personal data held by Urus888 may be transferred to the successor entity. We will notify affected users of any such transfer prior to their data becoming subject to a different privacy policy, and users will retain the right to request deletion in accordance with Section 11.

International Data Transfers

As an internationally operating platform, Urus888 may transfer personal data to, and process it in, countries other than the country in which it was collected — including countries where our Data Processors' infrastructure is hosted. Where such transfers occur, Urus888 ensures that appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or transfer to jurisdictions that provide adequate data protection standards.

For Malaysian users, personal data submitted to Urus888 may be stored and processed on servers located outside of Malaysia. By using the platform and agreeing to this Policy, you consent to the transfer of your personal data to such locations, provided that the standards described in this Policy are maintained.

Data Retention

Urus888 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements under applicable gaming licence conditions;
• KYC documents: Retained for a minimum of 5 years following the end of the customer relationship, or longer if required by regulatory direction;
• Transaction records: Retained for a minimum of 5 years for AML and financial auditing purposes;
• Support interaction records: Retained for 3 years following resolution of the interaction, or longer if the subject matter is subject to an ongoing dispute;
• Marketing consent records: Retained for the period of the consent plus 3 years following its withdrawal, as evidence of consent history;
• Technical and device data: Retained for up to 12 months in identifiable form; subsequently anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

Your Data Rights

You have the following rights with respect to your personal data held by Urus888. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

Security Measures

Urus888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and our servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within Urus888 is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit;
• Two-Factor Authentication: Account login supports two-factor authentication (2FA), which we strongly recommend all users enable;
• Intrusion Detection: Real-time monitoring and intrusion detection systems are deployed across all platform infrastructure;
• Regular Security Testing: Our platform undergoes regular penetration testing and vulnerability assessments by independent security specialists;
• Staff Training: All Urus888 staff with access to personal data receive mandatory data protection and security awareness training.

Cookies & Tracking Technologies

13.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are used to remember your preferences, maintain your session, and in some cases to collect analytics data about how the platform is used.

13.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your account settings, and facilitate secure payment processes. These cookies cannot be disabled.
• Functional Cookies: These remember your preferences such as language settings, responsible gambling tool configurations, and display preferences to enhance your experience.
• Analytical Cookies: Where used, these are fully anonymised and used solely to understand aggregate patterns of platform usage — such as which features are most frequently accessed. No individual user profiling is conducted.

13.3 What We Do Not Use

Urus888 does not place third-party advertising cookies, behavioural tracking cookies, or social media tracking pixels on its platform. We do not share cookie-derived data with advertising networks.

13.4 Managing Cookies

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may prevent you from accessing your account. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

Minors & Age Restriction

The Urus888 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If we discover that personal data belonging to a minor has been submitted — whether through an underage registration or otherwise — we will immediately close the relevant account, delete all associated personal data, and withhold any funds pending investigation.

If you are a parent or guardian and believe that a minor under your care has registered an account with Urus888, please contact us immediately at [email protected]. We will treat such reports as a priority and take immediate action.

Third-Party Links

The Urus888 platform does not contain links to third-party external websites for general browsing. Where references are made to third-party payment providers — such as Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, or cryptocurrency networks — users interact with those services via their own applications and interfaces, each governed by that provider's own privacy policy and terms. Urus888 accepts no responsibility for the privacy practices or content of third-party services.

Changes to This Privacy Policy

Urus888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date displayed at the top of this page will be revised to reflect any changes.

Where changes are material — meaning they significantly affect your rights or the way in which we process your personal data — we will notify you via a prominent platform notice or by email to your registered address prior to the changes taking effect. Your continued use of the platform following such notification constitutes acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically so that you remain informed of how your data is being handled.

Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy / Data Protection Request" in the subject line. We respond within 30 days.
• Live Chat: Available 24/7 on the platform — for urgent privacy matters, live chat is the fastest initial contact route.

If you are dissatisfied with our response to a data rights request or believe that we are processing your personal data unlawfully, you have the right to raise a complaint with the relevant supervisory authority in your jurisdiction. For Malaysian users, you may consult publicly available information about your rights under applicable Malaysian law or seek independent legal advice.

For questions about responsible gambling or self-exclusion — which involve the processing of behavioural data — please visit our dedicated Responsible Gambling page. For general platform enquiries, our FAQ section may have the answer you need.