Privacy Policy ulta66 — Player Personal Data Protection

1Information We Collect

Ulta66 collects various types of information depending on how you interact with our platform. Generally, the data we collect falls into three main categories:

a) Information you provide directly:

• Registration information — full name, date of birth, email address, phone number, and chosen password.
• Identity verification information (KYC) — a copy of your MyKad or passport, a selfie for facial verification, proof of residential address, and a bank statement.
• Financial information — bank account details, e-wallet account numbers, deposit and withdrawal history, and transaction records.
• Communications — messages you send to our support team, feedback submitted, and complaints raised.

b) Information collected automatically:

• Technical data — IP address, device type, operating system, browser type and version.
• Usage data — pages visited, session duration, games played, bets placed, and in-platform activity.
• Location data — general location based on IP address for jurisdiction verification and security purposes.
• Cookie data — language preferences, login status, display settings, and session data.

c) Information from third-party sources:

• Identity verification reports from trusted KYC providers.
• Sanctions list screening information from financial compliance agencies.
• Analytics data from authorised service providers working with us.

2How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. ulta66 does not process your data for purposes unrelated to the services we provide. Below is the complete list of data use purposes:

3Legal Basis for Data Processing

Ulta66 processes your personal data only where a valid and lawful basis exists under applicable data protection laws. There are four primary bases we rely on:

• Contract Performance — processing is required to fulfil the service agreement between you and ulta66, including managing your account, processing bets, and paying out your wins.
• Legal Obligations — we are legally required to collect and process certain data for KYC, anti-money laundering (AML), and reporting purposes to relevant authorities.
• Legitimate Interests — we process certain data in pursuit of legitimate business interests such as detecting and preventing fraud, enhancing platform security, and improving the user experience, provided these interests do not override your rights.
• Consent — for optional activities such as marketing communications and non-essential cookie usage, we will obtain your explicit consent beforehand.

4Information Sharing

Your trust is our most valuable asset. ulta66 does not share your personal information with third parties except in the following limited and controlled situations:

• Service providers — we work with trusted service providers such as payment processors, KYC providers, cloud service providers, and analytics providers, all bound by strict data confidentiality agreements.
• Game providers — to ensure smooth gameplay, certain session data is shared with licensed game providers who supply content on our platform.
• Regulatory body — we may be required to disclose information to relevant authorities, law enforcement agencies, or regulatory bodies if mandated by a court order or applicable law.
• Protection of ulta66's rights — where necessary to prevent fraud, protect the safety of other users, or enforce our Terms and Conditions.

5Data Security

Ulta66 continuously invests in the most advanced security infrastructure to ensure your data is always protected. The technical and organisational security measures we employ include:

• Data encryption in transit — all communications between your browser and the ulta66 platform are protected with TLS 1.3 protocol and AES-256 encryption.
• Data encryption at rest — sensitive data stored in our databases, particularly financial information and identity documents, is encrypted using recognised cryptographic algorithms.
• Multi-layered access controls — only staff who require access to specific data to perform their authorised duties are permitted. Access is logged and continuously monitored.
• Regular security audits — ulta66 conducts regular penetration testing and security audits by independent cybersecurity firms.
• Two-factor authentication (2FA) — you are encouraged to enable 2FA on your account as an additional layer of security.
• Real-time threat monitoring — our systems are monitored 24/7 to detect and respond to any suspicious activity.

6Data Retention Period

Ulta66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The general data retention guidelines are as follows:

• Active account data — retained for the duration your account is active, plus the minimum retention period prescribed by law.
• KYC and identity documents — retained for a minimum of 7 years after account closure in line with Malaysia's AML legal requirements.
• Financial transaction records — retained for 7 years for audit, tax reporting, and financial regulatory compliance purposes.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Analytics and usage data — aggregated data without personal identifiers may be retained indefinitely for platform improvement purposes.
• Marketing data — retained until you withdraw consent, plus 30 days for cancellation processing.

Upon expiry of the retention period, your data will be securely deleted or permanently anonymised so it can no longer be linked to your identity.

7Your Rights

As a registered ulta66 player in Malaysia, you have the following rights regarding your personal data under the PDPA 2010 and our internal policies:

To exercise any of the above rights, please contact our privacy team by email at [email protected]. All requests will be processed within 14 business days. We may require identity verification before processing your request to protect your account security.

8Cookies & Tracking Technologies

Ulta66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance cookies — collects information on how visitors use our platform, helping us identify technical issues and improve performance.
• Functional cookies — remembers your preferences such as display settings, preferred betting denominations, and interface preferences.
• Analytics cookies — helps us understand aggregated usage patterns for product improvement purposes.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. To manage your cookie preferences, please access your account settings or contact our support team.

9International Data Transfers

As a global online platform, ulta66 may process and store your personal data on servers located outside Malaysia. This is a technical requirement to ensure optimal platform performance and service continuity.

When your data is transferred outside Malaysia, ulta66 ensures protection equivalent to that required under Malaysian data protection law through:

• Binding data processing agreements with all third-party service providers.
• Use of internationally recognised standard contractual clauses.
• Ensuring data recipients in other countries comply with equivalent or higher data protection standards.
• Regular audits of service providers to ensure ongoing compliance.

10Child Privacy

Ulta66 is an online gambling platform accessible only to individuals aged 18 and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• Response Time: Within 3 business days for general inquiries, 14 business days for formal data rights requests.
• Language: Requests may be submitted in Malay or English.

You can also use our platform's 24/7 live chat for general privacy inquiries. For formal requests involving data rights, email is the recommended channel to ensure proper records are maintained.

12Privacy Policy Amendment

Ulta66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. We are committed to informing you of significant changes through:

• A prominent notice on the platform's home page at least 14 days before the changes take effect.
• Email notification to your registered email address for material changes.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the ulta66 platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.