Introduction
This Privacy Policy ("Policy") describes how Untung44 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data provided by or collected from individuals ("you", "User", "Player") who access or use the services available at untung44.cam ("the Services").
Untung44 is committed to handling your personal data with respect, transparency, and in full compliance with applicable data protection legislation. This Policy is intended to provide you with a clear understanding of what data we hold, why we hold it, the legal basis on which it is processed, and the rights you may exercise in relation to it.
This Policy applies to all Users of the Platform regardless of the device or method of access used. It should be read alongside our Terms and Conditions and Responsible Gambling Policy, both of which contain provisions relevant to your overall relationship with Untung44.
Your Acceptance
By registering an Account on the Platform or by continuing to use the Services following any update to this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Services.
Definitions
The following terms carry the meanings set out below throughout this Policy:
Personal Data We Collect
The categories of personal data Untung44 collects from Users are described in the table below. Data collection is limited to what is necessary for the stated purposes and is not extended beyond those purposes without additional lawful basis.
| Data Category | Specific Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (MyKad / Passport) | Account registration, KYC verification, age verification (21+ requirement) |
| Contact Data | Email address, mobile phone number, residential address | Account communication, support, notifications, KYC correspondence |
| Financial Data | Payment method type (e.g., Touch 'n Go, DuitNow, FPX), transaction reference numbers, MYR deposit and withdrawal amounts | Payment processing, fraud prevention, withdrawal verification |
| Technical Data | IP address, browser type, device type and OS, session timestamps, referring URL | Platform security, fraud detection, performance optimisation |
| Gameplay Data | Bet history, game sessions, wagering turnover, win/loss records, bonus usage | Account management, responsible gambling monitoring, VIP tier assessment |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support quality, dispute resolution, regulatory record-keeping |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel | Personalised promotional communications (with consent) |
Sensitive Personal Data
Untung44 does not intentionally collect special category sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where strictly required by applicable KYC regulatory obligations and only with appropriate safeguards in place. If you believe sensitive data has been submitted inadvertently, please contact our support team immediately.
How We Collect Your Data
Untung44 collects personal data through the following channels and mechanisms:
Data Provided Directly by You
- Information submitted during Account registration, including name, date of birth, contact details, and preferred currency (MYR).
- Identity documents and proof of address submitted during KYC verification.
- Payment method details entered during deposit and withdrawal transactions.
- Communications sent to our support team via live chat or email.
- Responses to surveys, feedback forms, or promotional participation requests.
Data Collected Automatically
- Technical data collected automatically when you access the Platform, including IP address, browser fingerprint, device type, operating system, and session duration.
- Cookie and tracking data collected via web analytics tools used to monitor Platform performance and User behaviour patterns in aggregate.
- Gameplay activity logs generated automatically as you interact with games, place bets, or use sportsbook markets.
Data Received from Third Parties
- Identity verification results returned by our authorised KYC service providers following document submission.
- Fraud risk scores and transaction risk signals provided by our payment processing and fraud prevention partners.
- Geolocation data used to detect access from restricted jurisdictions, provided via third-party IP geolocation services.
Legal Basis for Data Processing
Untung44 processes your personal data only where a lawful basis exists for doing so. The applicable legal bases for our processing activities are as follows:
How We Use Your Personal Data
The personal data we collect is used for clearly defined purposes, as set out below. We do not use your data for purposes that are incompatible with those originally specified unless we obtain your additional consent or are permitted to do so by law.
- Account Administration — Creating, managing, and maintaining your Player Account, including processing changes to Account details, password resets, and Account closure requests.
- Identity Verification — Verifying your identity and age (21+ requirement) in compliance with our KYC obligations prior to enabling full withdrawal access.
- Payment Processing — Facilitating MYR deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks.
- Fraud and Security — Detecting and preventing fraudulent activity, unauthorised Account access, money laundering, and other prohibited conduct. This includes automated risk scoring systems.
- Responsible Gambling — Monitoring gameplay patterns to identify indicators of potential problem gambling behaviour, and facilitating access to responsible gambling tools including deposit limits and self-exclusion.
- Customer Support — Responding to your support requests, live chat inquiries, and complaints. Support interactions are logged for quality assurance and dispute resolution purposes.
- Marketing Communications — Sending you personalised promotional offers, bonus notifications, and platform updates via email or on-site notification, where you have opted in to receive such communications.
- Legal Compliance — Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, data protection, and gaming regulatory requirements.
- Platform Improvement — Analysing aggregated, anonymised usage data to improve platform design, game selection, payment method offerings, and overall user experience.
Data Sharing & Disclosure
Untung44 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. We share your data only in the following defined circumstances, and only with parties that are subject to contractual data protection obligations consistent with this Policy:
Service Providers and Data Processors
- KYC and Identity Verification Providers — Third-party services that verify identity documents and cross-reference them against watchlists and sanctions databases as required by applicable regulations.
- Payment Processors and Gateway Providers — Partners facilitating MYR transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian bank transfer infrastructure.
- Fraud and Risk Management Services — Providers of fraud detection, chargeback management, and transaction risk scoring services used to protect both Players and the Platform.
- Cloud Hosting and Infrastructure Providers — Providers of the server infrastructure on which Platform data is stored and processed, operating under strict data security and confidentiality agreements.
- Customer Support Technology — Live chat and helpdesk platform providers that facilitate support ticket management and chat services.
Legal and Regulatory Disclosure
Untung44 may disclose personal data to regulatory bodies, law enforcement agencies, or competent courts where required to do so by applicable law, court order, or regulatory directive. In all such cases, we disclose only the minimum data required to satisfy the legal obligation.
No Sale of Personal Data
Untung44 has never sold and will never sell your personal data to third-party brokers, advertisers, or data aggregators. All third-party sharing is limited to essential service delivery and legal compliance purposes.
International Data Transfers
Some of the third-party service providers that process personal data on our behalf operate infrastructure located in jurisdictions outside of Malaysia. Where personal data is transferred outside of Malaysia to a country that may not provide an equivalent level of data protection, Untung44 takes the following measures to ensure adequate safeguards are in place:
- Standard contractual clauses or data processing agreements that impose data protection obligations on the receiving party equivalent to those applicable in the originating jurisdiction.
- Due diligence assessments of third-party data processors to confirm that appropriate technical and organisational security measures are maintained.
- Limitation of transferred data to only what is strictly necessary for the stated processing purpose.
By using the Services, you acknowledge that your personal data may be processed in jurisdictions outside of Malaysia. Where this is the case, we take all reasonably practicable steps to ensure your data receives equivalent protection to that afforded within Malaysia.
Data Retention
Untung44 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention framework is as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of Account plus minimum 5 years post-closure | Regulatory / AML compliance obligations |
| Transaction and Financial Data | Minimum 5 years from transaction date | Financial regulatory and tax compliance |
| KYC Verification Documents | Minimum 5 years post-Account closure | AML/CFT regulatory obligations |
| Customer Support Logs | 3 years from last interaction | Dispute resolution and quality assurance |
| Gameplay and Betting Records | Duration of Account plus 3 years post-closure | Responsible gambling monitoring and regulatory compliance |
| Marketing Preferences | Until consent is withdrawn or Account is closed | Consent-based processing |
| Technical / Log Data | 90 days rolling | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer considered personal data and is retained for aggregated analytical purposes without restriction.
Cookies & Tracking Technologies
The Untung44 Platform uses cookies and similar tracking technologies to ensure essential functionality, improve User experience, and gather anonymised usage analytics. The categories of cookies used are described below:
Essential Cookies
These cookies are strictly necessary for the Platform to function correctly. They manage your session authentication state, maintain your basket or game state, and enable core security features. Essential cookies cannot be disabled without materially impairing Platform functionality.
Performance and Analytics Cookies
These cookies collect anonymised information about how Users interact with the Platform — including which pages are visited most frequently, session duration, and error encounters. This data is used exclusively to improve Platform performance and User experience and is not linked to individual User identities.
Functional Cookies
These cookies remember your preferences, such as language settings, display preferences, and previously entered login identifiers (excluding passwords), to provide a more personalised experience on return visits.
Managing Cookies
You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookie categories may affect the availability or performance of some Platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
Your Data Rights
Subject to applicable data protection law and any overriding legal obligations, you have the following rights in relation to your personal data held by Untung44. To exercise any of these rights, please contact our support team via live chat or email as described in Section 16.
We will respond to all rights requests within 30 days of receipt. In complex cases requiring additional time, we will notify you of the extension and the reasons for it within the initial 30-day period. We may need to verify your identity before processing a request to protect against fraudulent or unauthorised access.
Regulatory Retention Overrides
Please note that the right to erasure is not absolute. Where we are required to retain your data to comply with a legal obligation — such as AML record-keeping requirements — we will inform you of this limitation at the time of your request. Erasure will be carried out to the extent legally permissible.
Data Security
Untung44 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encrypted storage of all sensitive personal data and financial records at rest using industry-standard encryption algorithms.
- Strict access controls limiting Platform employee access to personal data on a need-to-know basis, enforced through role-based access management systems.
- Regular independent penetration testing and vulnerability assessments of the Platform's technical infrastructure.
- Multi-factor authentication requirements for internal system access by Platform personnel.
- Comprehensive data breach detection, response, and notification procedures aligned with applicable regulatory requirements.
While Untung44 takes all reasonably practicable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for ensuring that your device and network connection are adequately secured when accessing the Platform.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Untung44 will notify affected individuals in accordance with applicable data protection law notification requirements.
Children's Privacy
The Services provided by Untung44 are strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and registration by persons under 21 years of age is expressly prohibited under our Terms and Conditions.
If we become aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or through any other means — we will take immediate steps to suspend the associated Account, delete the collected data to the extent permitted by law, and, where applicable, refer the matter to the appropriate authorities.
If you are the parent or guardian of a minor and believe that your child may have registered an Account on the Platform, please contact our support team immediately via live chat so that appropriate action can be taken without delay.
Third-Party Links & Services
The Untung44 Platform may contain references to or integrations with third-party services — including game providers, payment gateways, and live streaming providers — that operate under their own independent privacy policies. The inclusion of any such third-party service within the Platform does not constitute an endorsement of that party's privacy practices.
Untung44 is not responsible for the privacy practices, data collection activities, or security measures of third-party services. We strongly recommend that you review the privacy policies of any third-party service provider whose services you access in connection with your use of the Platform.
Payment method providers such as Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banking institutions accessed via FPX operate under their own privacy frameworks and are independently regulated. Your use of these payment methods is subject to the respective provider's terms and privacy policy in addition to this Policy.
Updates to This Policy
Untung44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. The "Last Updated" date displayed at the top of this page will be revised each time a material change is made.
Where changes are material — meaning they significantly affect your rights or the way we use your personal data — we will provide advance notice via email to your registered address or via a prominent on-site notification prior to the changes taking effect. For minor or administrative changes, the updated Policy will be published on this page without separate notice.
Your continued use of the Services following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Services and may request voluntary Account closure in accordance with the Terms and Conditions.
We encourage you to review this page periodically to stay informed about how Untung44 protects and manages your personal data.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact our team using the channels below. All contact details are displayed as plain text — please use on-site live chat for the fastest response.