Data Protection

Privacy Policy utown — Player Personal Data Protection

Utown takes our responsibility to every user's privacy seriously. This document clearly outlines the types of information we collect, how it is used, who can access it, and your rights as the owner of that data.

Updated: 1 January 2026  |  Version 2.4  |  Applicable to all utown platform users
Privacy Commitment 256-bit SSL Encryption No sale of data to third parties Internal restricted access Right to data erasure

1. Introduction and Scope of This Privacy Policy

Utown ("we", "Platform", "utown.vu") is committed to protecting the privacy and security of the personal data of every individual using our platform. This Privacy Policy outlines our practices for collecting, using, storing, and protecting information, in accordance with internationally recognised data protection principles.

This policy applies to all users who access the utown platform via the official website or mobile app, including visitors without an account, registered members, and any individual who interacts with our platform in any way.

By registering an account or continuing to use the utown platform, you acknowledge that you have read and understood this privacy policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Language: This Privacy Policy was drafted in Bahasa Malaysia for the convenience of local users. The Bahasa Malaysia version shall prevail in the event of any inconsistency between language versions.

2. Types of Information We Collect

Utown collects information necessary to provide a safe, compliant, and quality service. We categorise the information collected into three main categories:

A. Information You Provide Directly

  • Registration Information: Full name, date of birth, email address, phone number and the password you create
  • Identity Verification (KYC) Information: Copy of national ID or passport, proof of residential address (utility bill or bank statement), and a selfie for identity verification
  • Financial Information: Bank account details, e-Wallet account numbers, and deposit and withdrawal transaction records
  • Communications: Conversation content with our customer support team

B. Information Collected Automatically

  • IP address and approximate location data based on IP
  • Device type, operating system and web browser version used
  • Date, time, and duration of each login session
  • Pages visited, games played and platform usage patterns
  • Cookie data and unique device identifiers

C. Information from Third Parties

  • Verification data from KYC service providers used to confirm your identity
  • Information from payment service providers during transaction processing
  • Data from fraud prevention and anti-money laundering (AML) bodies
Data Category Example Primary Purpose
Identity Name, ID number, date of birth Account verification (KYC)
Contact Email, phone number Communications & notifications
Financial Bank account number, e-Wallet Transaction processing
Technical IP, device, browser Security & fraud detection
Usage Games played, sessions Platform improvement

3. How We Use Your Information

Utown uses collected data solely for legitimate and necessary purposes in the operation of the platform. The following are the primary purposes for which your data is used:

  • Account Management: Creating, maintaining and securing your account; processing withdrawal and deposit requests safely
  • Identity Verification: Conducting mandatory KYC checks to ensure legal compliance and protect you from unauthorised account access
  • Platform Security: Detecting and preventing fraud, money laundering, multi-account usage and activities that violate the terms of service
  • Customer Service: Responding to enquiries, resolving complaints and providing effective technical assistance
  • Service Communications: Sending important notifications related to your account, security, policy changes and transaction status
  • Product Improvement: Analysing aggregated usage patterns to improve platform performance, refine the user interface and add needed features
  • Legal Compliance: Meeting reporting obligations to the relevant authorities in accordance with applicable legal requirements
Our commitment: utown does not use your personal data to sell to advertisers, unrelated third parties, or for any marketing purpose to which you have not explicitly consented.

4. Information Sharing and Disclosure

Utown does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, there are specific circumstances where your information may be shared with other parties:

  • Service Providers: Companies that help us operate the platform — such as payment processing providers, KYC services, licensed game operators, and cloud infrastructure providers — are given limited access only to the data necessary to perform their functions. They are bound by strict confidentiality agreements.
  • Legal Requirements: utown will disclose information to government authorities, law enforcement agencies, or regulatory bodies when required by a court order, writ, or valid legal requirement.
  • Security Protection: Where there is a serious threat to individual safety or an active fraud investigation, relevant information may be shared with the appropriate authorities.
  • Business Transfer: In the event of a company merger, acquisition, or asset transfer, user data may be transferred as part of the business assets, subject to prior notice to users.
Important: All third parties that receive your data from utown are bound by confidentiality and data protection obligations that are equivalent to or stricter than this policy. We do not permit them to use your data for any purpose other than what has been specified.

5. Data Security and Protection

Utown implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

  • Data Encryption in Transit: All communication between your device and utown servers is protected by TLS 1.3 protocol with 256-bit SSL encryption — the same standard used by leading banks in Malaysia
  • Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
  • Internal Access Control: Access to user data within the utown organisation is restricted to staff with a legitimate business need only, using a role-based access control (RBAC) system.
  • Continuous Monitoring: Our systems are monitored around the clock to detect suspicious activity, intrusion attempts, and security anomalies
  • Regular Security Audits: utown conducts regular penetration testing and security audits by independent parties
  • Two-Factor Authentication: Two-factor authentication is available and encouraged for all user accounts as an added layer of protection

While we take all reasonable measures to protect your data, no system is entirely risk-free. In the event of any data breach affecting your personal information, utown will notify you within a reasonable timeframe and take immediate remedial action.

6. Cookies, Tracking and Similar Technologies

Utown uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

Essential Cookies (Cannot Be Disabled)

These cookies are required for core platform functions such as maintaining your login session, remembering language preferences and securing transactions. Without them, the platform will not function properly.

Performance & Analytics Cookies

These cookies help us understand how users interact with the platform — which pages are visited most, where users encounter issues and how to improve the overall experience. Data collected is in aggregate form and cannot be used to identify any individual.

Functional Cookies

These cookies allow the platform to remember your preferences such as display settings, favourite games and preferred language to deliver a more personalised experience.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect platform functionality and your gaming experience.

7. Data Retention Period

Utown retains your personal data only for as long as necessary for the purposes stated in this policy, or for as long as required by applicable law:

Data Type Retention Period Reason
Active account data Throughout the active account period Service management
Financial transaction records 7 years after transaction AML & tax requirements
KYC Documents 5 years after account closure Regulatory requirements
Support communication logs 3 years Dispute references
Technical log data 12 months Security & debugging
Cookie data Sessions up to 12 months Platform functions & analytics

Upon expiry of the retention period, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

8. Your Rights as a Data Subject

As a utown platform user, you have the following rights regarding your personal data. All requests can be submitted through the utown customer support team:

Right of Access

You have the right to know what personal data we hold about you and to obtain a copy of it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete data.

Right to Erasure

You may request deletion of your data, subject to applicable legal data retention obligations.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Response Time: utown will respond to all data rights requests within 30 working days from the date the request is received. Some requests may require additional identity verification before being processed.

9. Protection of Children's Data

The utown platform is strictly for individuals aged 18 and above. We do not intentionally collect or store personal data from individuals under the age of 18.

Should we discover that we have unintentionally collected personal data from an individual under the age of 18, we will take immediate action to delete that data and close the relevant account.

If you believe we may hold data from a minor without proper consent, please contact our support team immediately so that corrective action can be taken as quickly as possible.

10. Amendments to This Privacy Policy

Utown reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our business practices. Whenever amendments are made, the "Updated" date at the top of this document will be revised to reflect the latest changes.

For amendments considered material — such as changes to how we use or share your data — we will notify you via an in-platform notification or email to your registered address at least 14 days before the amendment takes effect.

Your continued use of the utown platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we manage your data.

11. Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the utown Data Protection Officer (DPO) team through the following channels:

Live Chat
Available 24/7 within the utown platform
Privacy Email
Response Time
Within 5 working days for privacy enquiries

We encourage you to contact us first before filing a complaint with a regulatory body. Most privacy-related issues can be resolved directly and more quickly through our support channels.

Six Layers of Data Protection at utown

Your privacy is more than a document — it is a daily practice we uphold at every level of platform operations.

End-to-End Encryption

Every byte of data moving between your device and utown servers is protected by 256-bit SSL encryption. No third party can intercept or read your information in transit.

Strict Access Control

Only utown staff with a clear business need are permitted to access user data. Every access is logged and monitored — no room for internal misuse.

Independent Security Audit

Utown's security systems are regularly tested by independent cybersecurity experts through penetration testing and code audits. Audit findings are used for continuous improvement.

No Data Sales

Your personal data is never sold, rented, or traded to any third party for their marketing or commercial purposes. Your data remains yours.

Immediate Breach Notification

In the event of any security incident affecting your data, utown will notify you promptly and take remedial action as quickly as possible.

Full User Control

You have full control over your data — from updating information and requesting a data copy to submitting a deletion request. Everything can be done directly from your account.

Your Data Is Safe with utown

With multi-layered security and a transparent privacy policy, you can play with peace of mind knowing your personal data will not be misused. Join over 500,000 members who already trust utown.

For users aged 18 and above only. Gamble responsibly.

Bahasa Melayu