1Introduction and Scope of Privacy Policy
Untung44 is a digital entertainment platform offering Sports Betting, live casino, e-sports, and casino games to adult users in Malaysia. We are committed to protecting every member's privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.
This Privacy Policy applies to all personal information collected through the untung44 website, mobile application, customer support services, and any other interactions you have with our platform. This Policy should be read together with Terms & Conditions which together form the entire agreement between you and Untung44.
If you disagree with any part of this Privacy Policy, please stop using the Untung44 platform immediately. Continued use of our platform following any policy updates constitutes acceptance of the changes made.
2Personal Information We Collect
2.1 Information You Provide Directly
When you register an account, complete your profile, or contact the Untung44 support team, we collect the following information:
- Identity information: Full name, date of birth, gender, and Malaysian identity card number (NRIC) for identity verification purposes when required.
- Contact information: An active Malaysian phone number, email address and, where required, residential address for verification purposes.
- Account information: Your username, password (stored as a secure hash, never in plain text) and account preferences.
- Financial information: Your preferred payment method (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks), transaction history, and deposit and withdrawal records. We do not store credit or debit card details directly — payments are processed through secure third-party payment gateways.
- Communications: The content of messages you send to our support team via Live Chat, email or other communication channels.
2.2 Automatically Collected Information
When you use the Untung44 platform, our systems automatically record certain technical information to ensure smooth operation, fraud detection, and improvements to the user experience:
- Device data: Device type, phone model, operating system, unique device identifier and screen resolution.
- Network data: IP address, internet service provider (ISP), connection type, and approximate geographic location (city or state level, not precise GPS coordinates).
- Usage data: Pages visited, session duration, buttons clicked, games played, bets placed, and navigation patterns within the platform.
- Cookie data: Information collected through browser cookies and related tracking technologies as described in Section 7.
2.3 Information from Third-Party Sources
In certain circumstances, Untung44 may receive information about you from legitimate third-party sources, including identity verification service providers, payment processing companies, and, in cases of fraud investigation, relevant authorities. This information is used solely for security, verification, and compliance purposes.
3How Untung44 Uses Your Information
The personal information we collect is used only for clearly defined, legitimate purposes. Below is a summary of the data types and their intended uses:
| Type of Information | Primary Purpose of Use | Legal Basis |
|---|---|---|
| Name & Contact | Account registration, customer support communications, identity verification | Contract fulfilment |
| Financial Information | Deposit and withdrawal processing, fraud detection, AML compliance | Legal compliance |
| Usage Data | Platform improvements, product analytics, technical issue detection | Legitimate interests |
| Device & IP Data | Account security, suspicious login detection, duplicate account prevention | Legitimate interests |
| Betting History | Promotional calculations, responsible gaming support, dispute resolution | Contract fulfilment |
| Email & Phone | Operational communications, transaction notifications, and security alerts | Contract fulfilment |
Untung44 also uses de-identified aggregate data — data that cannot be traced back to any specific individual — for internal market research, product development, and general statistical reporting. In this form, the data is no longer considered personal information and is not subject to the usage restrictions outlined in this policy.
4Sharing of Information with Third Parties
4.1 Core Principle – No Data Selling
Untung44 does not sell, rent, exchange, or disclose members' personal information to third parties for marketing, advertising, or commercial purposes without your explicit consent. This is a core commitment we will never compromise on.
4.2 Trusted Service Providers
Untung44 works with carefully selected third-party service providers to support platform operations. Data shared with these parties is strictly limited to what is necessary for their specific functions, and all third parties are bound by rigorous data confidentiality agreements. These service provider categories include:
- Payment gateway: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX services for processing deposits and withdrawals in MYR.
- Game software provider: Live casino software and slots game providers that supply gaming content on our platform — only technical session data is shared, not full identity information.
- Analytics services: Platform analytics tools that help us understand usage patterns — aggregated, de-identified data only.
- Cybersecurity services: Threat detection and fraud prevention providers that help protect member accounts.
4.3 Legally Required Disclosures
Untung44 may be required to disclose member personal information to authorities where mandated by Malaysian law, court order, or a legitimate request from a law enforcement agency. In such circumstances, we will disclose only the minimum information necessary and, where permitted by law, will inform you of the disclosure.
5International Data Transfers
As a digital platform operating on modern technology infrastructure, Untung44 data may be stored or processed on servers located outside Malaysia, including data centres in the Asia Pacific region that comply with international data security standards. In all cases of international data transfer, Untung44 ensures that:
- Transfers only take place to countries or providers that offer an adequate level of data protection.
- Appropriate data processing agreements have been signed with all involved service providers.
- Your data is protected by the same encryption standards and access controls regardless of its physical location.
6Data Security Measures
Untung44 implements a range of technical and organisational measures to protect your personal information from unauthorised access, alteration, unintended disclosure, or destruction. Our key security measures include:
- Encryption in transit: All data transmitted between your device and Untung44's servers is encrypted using TLS 1.3 with 256-bit SSL encryption.
- Encryption at rest: Sensitive information such as passwords (stored as bcrypt hashes), ID card numbers, and payment details are kept in encrypted form on our servers.
- Tiered access controls: A role-based access control system ensures that only staff who require access for their specific job functions are able to view particular categories of data.
- 24/7 security monitoring: A real-time threat monitoring system that automatically detects and responds to suspicious activity.
- Regular penetration testing: Security audits and penetration testing conducted periodically by independent cybersecurity experts.
- Secure data backups: Automatic data backup to a separate encrypted location to ensure recovery in the event of a system failure.
Important Note: While we implement comprehensive security measures, no digital system can guarantee absolute 100% security. You also play an important role — use a strong, unique password for your Untung44 account, never share your login credentials with anyone, and log out from shared devices after every session.
7Cookies and Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files stored on your device when you visit the Untung44 website. They help us recognise you on future visits, remember your preferences and deliver a more personalised experience.
7.2 Types of Cookies We Use
- Essential cookies (required): Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled without affecting platform functionality.
- Functional cookies: Saves your preferences such as language, preferred odds format, and other display settings to improve your experience on the platform.
- Analytics cookies: Helps us understand how users interact with the platform through aggregated statistical data. This information contains no personally identifiable data.
- Security cookies: Helps detect fraudulent activity, suspicious login attempts, and duplicate accounts to protect all members.
7.3 Cookie Controls
You can manage your cookie settings through your web browser. Most browsers allow you to view, delete, or block cookies. However, disabling essential cookies will affect your ability to log in and use the Untung44 platform properly. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
8Data Retention Period
Untung44 retains your personal information for as long as your account remains active or as long as necessary to provide services to you. Following account closure, we retain certain records in accordance with the following retention schedule:
- Financial transaction records: Stored for 7 years after the transaction date to comply with Malaysian legal and tax requirements.
- Identity verification records: Stored for 5 years after account closure for Anti-Money Laundering (AML) compliance requirements.
- Support communication logs: Stored for 2 years for training, service quality and dispute resolution purposes.
- Game activity data: Stored for 3 years for responsible gambling, dispute resolution and regulatory compliance purposes.
- Cookie and analytics data: Session data is automatically deleted after 13 months.
Once the applicable retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.
9Your Personal Data Rights
As an Untung44 member whose data we process, you have the following rights, which you may exercise at any time by contacting our support team: