U2 ewallet takes the privacy and personal data protection of every member seriously. This document clearly outlines the types of data we collect, how we use it, who can access it, and your rights as a user under Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles that govern how we handle your personal data on a daily basis.
All personal data and financial transactions transmitted between your device and U2 eWallet's servers are protected by 256-bit SSL encryption — the same technology used by Malaysia's leading banking institutions such as Maybank and CIMB. Your data cannot be intercepted while in transit.
U2 eWallet only collects data that is strictly necessary for the platform to operate — nothing more, nothing less. We do not collect data unrelated to the services you use. Data minimisation is a core principle of how we operate.
U2 ewallet has never and will never sell, rent, or transfer your personal data to any third party for marketing or advertising purposes. Your data belongs to you — it is not a business asset for us to sell to others.
As a U2 eWallet member, you have full rights to access, correct, and request deletion of your personal data at any time. We provide a straightforward process for managing your own data without the need for complicated procedures.
All of U2 eWallet's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect your legal rights as a data subject and conduct our operations within the regulatory framework established by the Malaysian government.
In the event of any security incident affecting your data, u2 ewallet is committed to notifying you promptly — within 72 hours of becoming aware of the incident. Transparency in incident management is part of our responsibility to you.
This Privacy Policy ("Policy") explains in detail how U2 eWallet ("Platform", "we", "us") collects, uses, stores, protects, and in certain circumstances shares the personal information you provide when registering for or using our services at u2ewallet.best.
This policy applies to all users of the u2 ewallet platform, including registered members, website visitors, and anyone who interacts with our services in any capacity. By registering an account or continuing to use our platform, you agree to the terms set out in this Privacy Policy.
U2 eWallet operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations issued by the Department of Personal Data Protection Malaysia. We are committed to respecting your privacy and handling your personal data responsibly in every aspect of our operations.
U2 eWallet collects your personal data through several means — directly from you during registration and platform use, automatically via tracking technologies, and in certain circumstances from relevant third parties such as payment service providers.
U2 eWallet uses the personal data collected for legitimate purposes directly related to the provision of our platform services. Every use of data has a clear legal basis under Malaysia's PDPA.
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Identity verification & account registration | Phone number, name, KYC | Contractual fulfilment |
| Processing deposits & withdrawals | Payment information, transaction records | Contractual fulfilment |
| Fraud prevention & account security | IP address, activity logs, device data | Legitimate interest |
| Customer support & dispute resolution | Communication records, transaction history | Contractual fulfilment |
| Sending promotional notifications & offers | Phone number, usage data | Your Consent |
| Legal Compliance & Reporting | Identity data, transaction records | Legal obligation |
| Analytics & platform improvement | Anonymised usage data | Legitimate interest |
U2 ewallet will send you notifications about promotions, bonuses, and new offers via text message or platform notifications. You may opt out of these marketing communications at any time by contacting our support team or adjusting your notification settings within your u2 ewallet account. Unsubscribing from marketing will not affect the delivery of important notifications related to your account and transactions.
U2 eWallet does not sell, rent, or disclose your personal data to third parties for marketing or advertising purposes. However, there are limited circumstances where sharing data with certain parties is necessary to deliver our services effectively.
When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (including Maybank2u and CIMB Clicks), the transaction details required will be shared with the relevant payment service provider solely for the purpose of processing your transaction. This data sharing is necessary and strictly limited to the information required.
The u2 ewallet platform uses games from third-party providers. Game providers may receive minimal technical data (such as anonymous session IDs) necessary for the games to function properly. Our game providers are bound by strict data protection agreements and are not permitted to use any data for other purposes.
U2 eWallet may be required to disclose your personal data to Malaysian authorities (such as the Royal Malaysia Police, Bank Negara Malaysia, or the Securities Commission) when mandated by law, court order, or in the context of an official investigation. Where permitted by law, we will notify you of any such disclosure.
Protecting the personal data of u2 ewallet members is our top priority. We continuously invest in security infrastructure and operational processes to keep your data safe from unauthorised access, loss, alteration, or disclosure.
The security of your u2 ewallet account also depends on your own actions. We encourage you to use a strong and unique password, enable two-factor authentication (2FA), never share your login credentials with anyone, and log out of your account when you are done using a shared device.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a U2 eWallet user have the following rights regarding your personal data:
You have the right to request a copy of the personal data held by U2 eWallet. Access requests will be processed within 21 business days.
If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction at any time through your account settings or by contacting support.
You may request the deletion of your personal data upon account closure, subject to the minimum record retention obligations required under Malaysian law.
You have the right to object to the processing of your data for marketing purposes at any time. Opting out of marketing communications is straightforward.
You have the right to receive a copy of your data in a machine-readable format (such as CSV) for transfer to another service if desired.
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
The U2 eWallet platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and gather analytics data that helps us continuously improve the platform.
| Cookie Type | Purpose | Duration | Status |
|---|---|---|---|
| Session Cookies | Keeping you logged in | Until logout | |
| Preference Cookies | Saving language & display settings | 30 days | |
| Security Cookies | CSRF token validation & fraud protection | Session only | |
| Analytics Cookies | Anonymised usage statistics for platform improvement | 90 days | |
| Performance Cookies | Monitoring platform load times and performance | 30 days |
Essential cookies are required for the U2 eWallet platform to function properly and cannot be disabled. Optional cookies can be managed through your web browser settings or via the privacy settings panel in your U2 eWallet account. Disabling analytics cookies will not affect your gaming experience.
As U2 eWallet involves financial transactions in Malaysian Ringgit (RM), we have a specific policy on the handling of payment-related data that you should be aware of.
U2 eWallet maintains records of all deposit and withdrawal transactions, including the amount in RM, payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX), transaction date and time, and transaction status. These records are required for account-keeping, dispute resolution, and compliance with Malaysian financial laws.
U2 eWallet does not store full credit or debit card numbers, e-wallet PINs, or passwords. All sensitive payment data is processed directly by payment service providers that hold their own security certifications. U2 eWallet only receives confirmation of transaction success or failure and does not retain any sensitive payment data.
As a responsible financial platform, U2 eWallet conducts automated transaction monitoring to detect suspicious patterns that may be associated with money laundering or other unlawful activities. Transaction data is used for this purpose and may be reported to the relevant Malaysian authorities where required by law.
U2 eWallet does not retain your personal data for longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements in Malaysia.
Once the retention period expires, or upon your request for deletion (where no legal obligation to retain the data exists), U2 eWallet will securely delete or anonymise your personal data using methods that ensure it cannot be recovered.
The u2 ewallet platform is a service strictly restricted to individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.
If you are a parent or guardian and discover that your child under the age of 18 has registered an account on U2 eWallet, please contact us immediately at support@u2ewallet.best. We will investigate the matter, close the account, and permanently delete all associated data without delay.
We perform age verification at registration and reserve the right to request identity verification documents to confirm that all members meet the minimum age requirement. Any account found to have been registered by an underage individual will be closed immediately.
U2 eWallet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, technological developments, or updates to data protection laws and regulations in Malaysia.
For material amendments — meaning changes that significantly affect your privacy rights or how we use your data — U2 eWallet will provide notice of at least 30 days before the amendment takes effect. Notice will be delivered via in-platform notifications or a message to your registered phone number. The "Last Updated" date at the top of this page always reflects when the latest version of this Privacy Policy was published.
Your continued use of the u2 ewallet platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion before the amendments come into effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by U2 eWallet, please reach out to us through the following channels:
Our team is Malay-speaking and will respond to privacy enquiries within 3 working days. For formal rights requests under Malaysia's PDPA, the maximum processing time is 21 business days.
You also have the right to lodge a complaint directly with the Department of Personal Data Protection Malaysia if you believe your personal data has been mishandled by U2 eWallet and the matter has not been resolved to your satisfaction by our team.
The data protection flow from the moment you enter your information to when it is securely stored.
Information submitted through secure forms on the U2 eWallet platform
Data is encrypted with 256-bit SSL before transmission over the internet
Data is verified and processed by our secure systems with strict access controls
Data is stored on certified servers with at-rest encryption and multi-layer backups
Real-time threat monitoring ensures no unauthorized access occurs
U2 ewallet is committed to ensuring all members play within healthy limits. Our self-control tools are available 24 hours a day to help you stay in control.
Set daily or weekly deposit limits from your account settings.
Temporarily suspend your account if you feel you need a break from playing.
This platform is for users aged 18 and above only.
Set play-time reminders to keep your sessions from running too long.
Alert system that notifies you when you are approaching your set loss limit.
Contact our team at any time if you need assistance.
Answers to the most frequently asked questions from members about our privacy and data protection practices.
Register a free account today and play with peace of mind — your privacy and data security are our top priority, always.