en
U388 collects personal information in stages, not all at once. A username and a phone number get you an account. A verified phone number and a bank account in your own name get you a withdrawal. A full profile with an email address and a date of birth gets you into the VIP program and unlocks the Pro-account features.
That staged structure is useful to understand, because it tells you what you actually need to hand over to do the thing you came to do. It also tells you what a scammer will try to extract from you, and when. This page walks through both: each piece of information U388 asks for and why, then the account-safety habits that matter most on a platform where impersonation is an active, acknowledged problem.
The registration form is short. You give a username, a phone number with a country code (Malaysian accounts default to +60), and a password you enter twice. A referral code field sits at the bottom and is optional, so leave it empty if nobody referred you. Submitting the form confirms two things: that you are at least 18, and that you accept U388’s terms.
Notice what is not asked at this point. No full name, no email, no date of birth, no bank details. You can open an account and look around the lobbies before giving the site anything that identifies you beyond a mobile number.
The phone number is the piece that matters here. It becomes the anchor for your account, and it is the channel U388 uses for the one-time password that stands between your balance and a withdrawal. Use a number you control and intend to keep, because it is the detail that makes payout verification work.
Withdrawals are where identity checks arrive properly. Two requirements apply.
First, your phone number must be verified by OTP. Until that is done, no withdrawal goes through, regardless of how much you have won.
Second, the payout destination has to belong to you. U388 requires that the bank account or e-wallet used is in your registered full name, and its terms are explicit that a transaction may not be settled where the bank details and the registered name do not match. The same rule cuts the other way on deposits: the depositor’s account name must match your registered name, so paying in from a relative’s or a friend’s account creates a problem rather than a shortcut.
That is the practical reason U388 needs your real full name rather than just a username. Name matching is a standard anti-fraud and anti-money-laundering control across regulated payments in general: it keeps one person’s account from being funded or emptied through someone else’s bank account. Whatever you think of the operator, this particular rule works in your favour if your account is ever compromised, because money cannot simply be routed out to a stranger’s account.
Your payout details live in Bank Details in the member area, alongside My Profile, Change Password, Game Password, Messages, Referral, Rewards and Settings. Fill them in carefully. A mismatched or mistyped account name is an entirely avoidable reason for a payout to stall.
A related detail from the deposit rules is worth repeating here, because it is easy to get wrong: when you make a bank transfer, do not write U388, slots, casino, betting or any other gambling word in the payment reference. Keep the reference blank or neutral.
The deepest layer of information is voluntary, in the sense that you only need it if you want the extras.
To join the VIP program, U388 requires full verification: your profile information, a valid email address, your phone number and your date of birth. Tier progress then runs on your accumulated deposits over a 365-day window, and the tier you reach sets your daily withdrawal cap, how many withdrawals you can make per day and your cash rebate rate. If you have no interest in tiers, you do not need to complete this step.
Verification also gates the Pro account. The referral page is blunt about it: the feature is only available on a Pro account, and you have to verify before it unlocks. So if your plan involves inviting friends and collecting referral rewards, full verification is the price of entry rather than an optional nicety.
The date of birth supports age checking, and U388’s responsible gaming page states that proof of age can be requested at any time, with the account suspended and funds withheld until proof is provided. Under-18 play is not permitted. That is worth knowing in advance for one practical reason: if you enter a date of birth or a name that does not match the documents you can actually produce, you have built a problem into your own account that will surface at the worst possible moment, when you try to take money out.
This is the part of the page to read twice. U388 itself runs a scrolling warning that people are impersonating its staff and sending fake deposit requests, and a reminder pops up after login telling members to pay attention to account security, to use only authorised agents for transactions, and to verify an agent’s identity through the 24/7 in-site live chat.
A warning like that on the operator’s own site is a strong sign the problem is real. Treat it as the main security threat to your money here, ahead of anything technical.
The mechanics of this kind of fraud are predictable. Someone contacts you outside the site, presents themselves as staff or an agent, and gives you bank details to pay into, or asks you to confirm a code, or offers to sort out a bonus or a stuck withdrawal on your behalf. The money goes to them, not to your account balance, and there is nothing to reverse.
A few rules keep you clear of it:
If a bank account number or phone number you have been given looks doubtful, you can check it against reported scam cases on Semak Mule, the Royal Malaysia Police portal. A hit is a clear stop signal. No hit is not a clearance, since new accounts get used before anyone reports them, so the rule above still stands: pay only to details shown inside your own member area.
One more detail worth keeping straight. U388 has a Game Password in the member area, separate from your login password. Whatever its role, treat it exactly like the login password: private, not shared, not repeated from another site.
Good habits here are ordinary, and they are ordinary because they work.
Use a long, unique password that you have not used on any other gambling site, email account or e-wallet. Credential reuse is what turns one unrelated data breach somewhere else into someone logging into your account here. If you have any doubt at all about whether your password has leaked or been seen, change it through Change Password in the member area rather than waiting for evidence.
Log out when you finish on a shared or borrowed device, and do not save the password in a browser you do not control. Keep your phone secure with a screen lock, since the device that receives your OTP is effectively the key to your withdrawals.
Be careful about how you arrive at the site. Lookalike addresses and links sent by strangers in chat groups or messages are a standard route for harvesting logins. Reach the site the way you normally do, from your own saved route, and be suspicious of any link that arrives unprompted with a bonus attached.
Finally, read your Messages in the member area rather than trusting messages that arrive elsewhere. Communication that appears inside your logged-in account is a far stronger signal than anything that lands in your phone from an unknown sender claiming to be staff.
None of this is complicated. The two patterns to avoid are the same everywhere: information handed to someone who asked for it convincingly, and money sent to details supplied from outside the site. Keep both inside your own member area and you close off most of the risk. Account safety, not licensing, is where U388 gives you real tools, as our full review sets out.