Your data is protected with encryption SSL 256-bit at utf8 utf8 does not sell or share your personal data with third parties Data access & deletion rights available to all members utf8 Privacy request response within 72 hours working Comply with data protection standards international Your data is protected with encryption SSL 256-bit at utf8 utf8 does not sell or share your personal data with third parties Data access & deletion rights available to all members utf8 Privacy request response within 72 hours working Comply with data protection standards international
utf8 Member Data Protection & Privacy

Utf8 Privacy Policy — Our Commitment Protecting the Personal Data of Malaysian Players

At utf8, we understand that privacy is more than just a legal document — it is the trust you place in us when you register and play. This Privacy Policy document explains honestly and clearly how utf8 collects, uses, stores and protects your personal information as a member of Malaysia's trusted online casino platform.

Last Updated: 1 January 2026 Bahasa Melayu Full Compliance

By using the utf8 platform, you agree to the collection and use of information as described in this Privacy Policy. Please read this document carefully in its entirety before registering.

utf8 Data Protection
256-bit SSL Encryption
No sale of data to third parties
Right of access & data deletion
10 clearly defined policy sections
24/7 privacy support
utf8's Privacy Commitment
6 Ways utf8 Protects Your Privacy Every Day
Privacy is not an empty promise at utf8. It is a daily practice carried out by our team through technology, policies and a work culture that places member data security first.
Bank-Grade Encryption

All data transmitted between your device and utf8's servers is secured using TLS 1.3 with AES-256 encryption — the same security standard used by Malaysia's leading financial institutions such as Maybank and CIMB to protect online banking transactions.

No Sale of Data to Third Parties

Utf8 has never and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — it is not a utf8 business commodity.

You Are in Control of Your Data

Every utf8 member has the right to access, amend, download or request the deletion of their personal data at any time. Such requests are processed within 72 working hours by utf8's dedicated data privacy team.

Secure & Limited Data Storage

Your personal data is stored on servers protected by strict access controls. utf8 retains data only for as long as necessary for legitimate business or legal compliance purposes — no data is kept longer than required.

Regular Security Audits

Utf8's security systems and privacy policy are audited regularly by independent parties of international standing to ensure ongoing compliance with the latest standards. Audit findings are used to continually improve the protection of members' data.

Immediate Data Breach Notification

In the event of any security incident affecting members' personal data, utf8 is committed to notifying affected members within the timeframe stipulated by applicable regulations — with clear information on what occurred and the steps taken.

SSL 256-bitEncryption Standard
72 HoursData Request Response
500K+Member Data Protected
Since 2018Net Protection Records
24/7Privacy Support

This Privacy Policy ("Policy") is published by utf8.my ("utf8", "we", "platform") and applies to all users and members who access or use the utf8 platform via the utf8.my website, Android or iOS mobile app, or any other medium provided by utf8. This Policy describes our privacy practices with respect to the collection, use, storage, disclosure and protection of your personal information.

By using the utf8 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the utf8 platform and contact us to close your account if applicable.

1Introduction & Scope of the utf8 Privacy Policy

Utf8 is an online casino entertainment platform operating for users in Malaysia. As a platform that handles sensitive financial and personal information, utf8 places privacy protection at the forefront of all our business operations.

This Privacy Policy applies to all personal information we collect through the following channels:

  • The utf8.my website and all pages under that domain
  • The utf8 mobile app for Android and iOS
  • Interactions with the utf8 customer support team via live chat, email or WhatsApp
  • Account registration, identity verification (KYC) and account management processes
  • Deposit and withdrawal transactions made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, or any other accepted payment method
  • Gaming and betting activity within the utf8 platform

utf8 Data Protection Officer: utf8 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy. For any privacy enquiries, you may contact our Data Protection Officer at [email protected].

2Types of Personal Data We Collect

Utf8 only collects information that is genuinely necessary to provide our services, meet legal requirements and enhance the user experience. The following are the categories of data we may collect:

Personal Identity Information

Full name, date of birth, identity card or passport number, nationality, and gender. This information is collected during registration and the KYC process to verify the identity of utf8 members.

Contact Information

Email address, Malaysian mobile number, and residential address. This information is used for account communications, OTP verification, and customer support on the utf8 platform.

Financial & Transaction Information

Records of deposits and withdrawals in MYR, payment methods used (Touch 'n Go eWallet, GrabPay, DuitNow, and others), transaction history and utf8 account balance. utf8 does not store full credit or debit card details — this data is processed by certified third-party payment providers.

Gaming Activity Data

Records of games played, bets placed, winnings, losses, time spent playing and game preferences on the utf8 platform. This data is used for platform operations, licence compliance and the responsible gaming programme.

Technical & Device Data

IP address, browser type, operating system, device type, screen resolution, cookie data and session identifiers. This data is collected automatically for security, analytics and user experience improvement purposes on utf8.

Communication Records

Transcripts of live chat sessions with customer support, emails sent to utf8, and feedback provided. These records are retained for quality control purposes and for dispute resolution should the need arise.

3How utf8 Uses Your Personal Data

Utf8 uses the personal data it collects for legitimate and limited purposes. The following are the primary purposes for which utf8 uses your data:

  • Service Provision: To manage your account, process deposits and withdrawals in MYR, and enable you to access and enjoy all the games and features offered on the utf8 platform.
  • Identity Verification: To carry out the KYC process to verify your age, identity and eligibility as a utf8 member, in accordance with licensing requirements and applicable laws.
  • Account Security: To detect and prevent fraud, unauthorised access, money laundering and other unlawful activities on the utf8 platform.
  • Service Communications: To send transaction notifications, security updates, changes to terms or policies, and other important information regarding your utf8 account.
  • Marketing Communications: To send information about utf8 promotions, bonuses, new games and special offers — only if you have given explicit consent to receive such communications.
  • Responsible Gaming: To monitor gaming patterns that may indicate signs of problem gambling and to enforce the self-exclusion limits you have set through your utf8 account.
  • Legal Compliance: To comply with legal requirements, regulations, licensing obligations and directives from relevant authorities governing the operation of the utf8 platform.
  • Platform Improvements: To analyse usage patterns, identify technical issues and make improvements to the utf8 platform to enhance the experience for all members.

Data Minimisation Principle: utf8 adheres to the principle of data minimisation — we collect and use only the data genuinely necessary for the stated purposes. We do not collect excessive data beyond what is required for our legitimate operational and compliance needs.

4Data Sharing with Third Parties

Utf8 does not sell, rent or trade members' personal data to any party for marketing or commercial purposes. However, there are limited situations in which utf8 may share data with carefully selected third parties:

  • Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX and other supported Malaysian payment methods. These providers receive only the data necessary to process the relevant transaction and are bound by strict confidentiality agreements with utf8.
  • Game Providers: Gaming technology companies that provide games for the utf8 platform may receive the minimum technical data required for proper functionality. These providers do not receive complete personal identity or financial information.
  • Identity Verification Services: A third-party KYC provider that assists utf8 in conducting identity and age verification for new members in compliance with licensing requirements.
  • Analytics Services: Analytics providers that help utf8 understand platform usage patterns for improvement purposes — shared data is aggregated and anonymised to the greatest extent possible.
  • Legal Authorities: utf8 will disclose personal data to government authorities, law enforcement or regulators when required to do so by law or a valid court order.

All third parties that receive utf8 members' personal data are bound by data protection agreements requiring them to handle such data to security and confidentiality standards equivalent to those upheld by utf8.

5Data Security Measures at utf8

Utf8 implements multiple layers of technical and organisational security to protect members' personal data from unauthorised access, loss, alteration, disclosure or destruction:

  • Encryption in Transit: All communications between your device and utf8's servers are encrypted using TLS 1.3 with AES-256 — the standard adopted by internationally recognised financial institutions.
  • Encryption at Rest: Sensitive data stored within utf8's databases is encrypted using robust encryption algorithms, ensuring the data remains protected even in the event of a physical infrastructure breach.
  • Internal Access Controls: Only authorised utf8 staff with a legitimate business need are permitted to access members' personal data. Such access is monitored, logged, and reviewed on a regular basis.
  • Two-Factor Authentication (2FA): All utf8 internal systems containing members' personal data require two-factor authentication for access — providing protection against unauthorised access even in the event of a compromised password.
  • Regular Vulnerability Scanning: utf8 conducts regular penetration testing and vulnerability scanning to identify and address any security weaknesses before they can be exploited.
  • Security Awareness Training: All utf8 staff undergo regular data protection and information security training to ensure proper data handling practices are observed at every level of the organisation.

Important Steps for You to Take: Data security is a shared responsibility. Please ensure your utf8 account password is unique and strong, do not share your login credentials with anyone, and enable two-factor authentication in your account settings. If you suspect your account has been compromised, contact utf8 support immediately via [email protected].

6Cookies & Tracking Technologies on the utf8 Platform

The utf8 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly and gather useful analytics data. The following are the types of cookies we use:

  • Session Cookies: Temporary cookies that are deleted when you close your browser. Used to maintain your login session and ensure a smooth gaming experience on the utf8 platform.
  • Preference Cookies: Storing your preferences such as interface language, currency denomination and display settings to make repeat use of the utf8 platform more convenient.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of your utf8 account login sessions.
  • Analytics Cookies: Helping utf8 understand how members use the platform — pages visited, games played, time spent and navigation flow. This data is used in aggregate form for platform improvement.

Most modern web browsers allow you to manage or block cookies through your browser settings. However, blocking certain cookies may affect the functionality of the utf8 platform — in particular, session cookies required for the login process and maintaining your gaming session.

7Your Rights Regarding Personal Data at utf8

As a utf8 member and the owner of your own personal data, you have the following rights, which you may exercise at any time:

Right of Access

Request a copy of all personal data utf8 holds about you

Right to Rectification

Requesting correction of any personal data that is inaccurate or out of date

Right to Erasure

Requesting the deletion of your personal data under certain permitted circumstances

Right to Restriction

Requesting that utf8 restrict the processing of your data under certain circumstances

Right to Portability

Receive your personal data in a machine-readable format

Right to Object

Objecting to the processing of your data for direct marketing purposes at any time

To exercise any of the above rights, please contact utf8's Data Protection Officer by email at [email protected] or through utf8 customer support. Your request will be processed within 72 business hours. utf8 may require identity verification before processing any request involving data access or deletion.

8Data Retention & Deletion Period

Utf8 adheres to the principle of storage limitation — personal data will not be retained longer than is necessary for the purpose for which it was collected. The following is a general guide to data retention periods at utf8:

  • Active Account Data: For the duration that your account remains active on utf8 and for a reasonable period following account closure to meet audit and legal compliance requirements.
  • Financial Transaction Records: A minimum of 7 years from the date of the transaction, in line with Malaysian accounting legislation and applicable anti-money laundering compliance requirements.
  • KYC & Identity Verification Records: A minimum of 5 years after account closure or the end of the business relationship, in accordance with applicable licensing compliance requirements.
  • Support Communication Records: Up to 3 years from the date of communication, for quality control purposes and in the event of any dispute that may arise.
  • Technical Log Data: Between 90 days and 1 year depending on the log type, for security purposes and technical incident investigation where necessary.

Once the retention period has expired and there is no longer a legitimate legal or business need to continue storing the data, utf8 will securely delete or anonymise the data in accordance with established data deletion procedures.

9Children's Privacy & Minors

The utf8 platform is an adult entertainment service that may only be accessed and used by individuals aged 18 years and above. utf8 does not knowingly collect, store or process any personal data from individuals under the age of 18.

Utf8 employs multiple mechanisms to prevent access by minors, including an age verification process during registration, the use of date-of-birth data validated through KYC, and a monitoring system designed to identify accounts that may belong to underage individuals.

If utf8 discovers that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. If you believe that a minor has registered for or used the utf8 platform, please notify us immediately via [email protected].

10Amendments to the utf8 Privacy Policy

Utf8 reserves the right to amend this Privacy Policy from time to time in response to changes in business operations, legal requirements or industry best practices in data protection. When any material amendments are made to this policy, utf8 will:

  • Updating the "Last Updated" date shown at the top of this document
  • Sending email notifications to all active utf8 members to inform them of the changes made
  • Displaying a clear notice on the utf8 homepage and Privacy Policy page for at least 14 days before material changes take effect
  • Obtaining fresh consent from members in situations where changes involve using their data in a manner different from what was previously agreed upon

We encourage you to review this Privacy Policy periodically to stay informed about how utf8 protects your information. Your continued use of the utf8 platform after any amendments take effect will be considered your acceptance of the revised policy.

Contact Us for Privacy Enquiries: If you have any questions, concerns or complaints regarding this Privacy Policy or the way utf8 handles your personal data, please contact our Data Protection Officer at [email protected] or through utf8 customer support, which operates 24/7. We are committed to addressing every enquiry seriously and within the stipulated timeframe.

Related Policies at utf8

Terms & Conditions

This Privacy Policy is to be read alongside Terms & Conditions utf8, which governs the use of the platform as a whole. Please read both documents for a full understanding of your rights and responsibilities.

Responsible Gaming

Some of your gameplay activity data is used to support utf8's responsible gaming programme. To learn more about the self-control tools available, visit the Responsible Gaming us.

Frequently Asked Questions (FAQ)

Have a specific question about privacy or data security at utf8? Our Frequently Asked Questions we may have the answers you're looking for — updated regularly with the latest questions from our members.

In-Depth Review

Data Privacy on Online Casino Platforms — Why It Matters More Than You Think

When we talk about data privacy on an online casino platform such as utf8, it goes well beyond just your name and phone number. It encompasses sensitive financial data — records of deposits and withdrawals in MYR, betting history, winnings and losses — information that, in the wrong hands, could reveal a great deal about a person's financial habits and lifestyle. That is why utf8's approach to data privacy is far more serious and comprehensive than most ordinary online platforms.

One of the most common concerns raised by utf8 Malaysia members relates to the security of their bank card and e-wallet information. This is a very valid concern — and utf8's answer is clear: we do not store your full credit card, debit card, or e-wallet account details in our systems. When you make a deposit using Touch 'n Go eWallet, GrabPay, or DuitNow, your payment data is processed directly by payment providers certified to the strict PCI-DSS (Payment Card Industry Data Security Standard). utf8 only receives confirmation that the payment was successful — not your full payment details.

Many players also ask about their gaming activity data — does utf8 track every game they play? The answer is yes, and for good reason. utf8 monitors gaming activity for several important purposes: first, to ensure game integrity and detect any attempts at cheating; second, to meet licensing reporting requirements that oblige operators to maintain records of gaming activity; third, and most importantly to utf8, for its responsible gaming programme. By monitoring playing patterns, utf8 can identify members who may be experiencing difficulties and offer assistance before the situation becomes serious.

Regarding cookies and tracking technologies, utf8 takes a balanced approach between operational needs and user privacy. Session and security cookies are essential for the platform's core functions — without them, you would not be able to log in or maintain your gaming session. The analytics cookies utf8 uses collect data in aggregate form that cannot be attributed to any specific individual — they tell us that "500 people played Fan Tan on Saturday night" but not "Ahmad from Petaling Jaya played Fan Tan for 2 hours." This approach allows utf8 to improve the platform based on real usage data without compromising the privacy of individual members.

The KYC (Know Your Customer) process that utf8 carries out is one aspect of data management that often raises questions. Why does an online casino platform need a copy of your identification card? This is a standard requirement across the financial and online entertainment industries worldwide — including all Malaysian banks and financial institutions. The purpose is to verify that you are who you claim to be, that you are at least 18 years of age, and that you are not on any exclusion or self-exclusion list. KYC documents you submit to utf8 are stored in an encrypted system with restricted access and are never shared with third parties except as required by law.

The right to erasure — commonly known as the "right to be forgotten" — is something utf8 fully respects, within the limits permitted by law. If you close your utf8 account and request data deletion, utf8 will delete or anonymise any data that does not need to be retained for legal or compliance purposes. However, financial transaction records must be kept for the minimum period required under Malaysian law — this is not utf8's choice, but a requirement that applies to all regulated financial and entertainment operators. Once the mandatory retention period has elapsed, utf8 will permanently delete the data.

When it comes to marketing communications, utf8 operates a clear consent policy. You will not receive promotional emails, offer notifications or marketing messages from utf8 unless you have actively opted in during registration or through your account settings at a later stage. And should you wish to stop receiving such communications at any time, you can easily do so via the "unsubscribe" link in any email we send, or through the notification settings in your utf8 account.

In conclusion, data privacy at utf8 is an ongoing commitment, not merely a document written to satisfy legal requirements. Every day, utf8's privacy and security team works to ensure that Malaysian members' data is protected to the highest standards we are capable of achieving. We are not perfect — no system is — but we are always striving to improve and to be more transparent in how we handle the significant responsibility you place in us when you choose utf8 as your online entertainment platform.

Your Data Is Safe at utf8

Play with Peace of Mind — Your Privacy is Fully Protected at utf8!

Join over 500,000 utf8 members who play with confidence, knowing that their personal data and financial information are protected by bank-grade security systems. Register for free today — simple, secure and fast!

For adults (18+) only • Data protected by 256-bit SSL • Terms & Conditions apply

Bahasa Melayu