ultra888 Privacy Policy

1Introduction

ultra888 is committed to protecting the privacy and security of the personal data of all Members and visitors to the platform. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We encourage you to read this Policy carefully to understand our practices regarding your personal data.

As an online gaming platform serving Members across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond — ultra888 is required to collect and process certain categories of personal data in order to provide its services, comply with applicable regulatory obligations, and maintain the security and integrity of the platform.

2Data We Collect

2.1 Data You Provide Directly

When you register an account or interact with ultra888, we may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and a copy of a government-issued identity document where verification is required.
• Contact data: Email address, mobile telephone number, and residential address.
• Financial data: Payment method details (e.g., Touch 'n Go eWallet, Boost, or bank account information used for deposits and withdrawals), transaction history, and balance information.
• Account data: Username, password (stored in hashed form only), account preferences, and communication history with our support team.
• Responsible gaming data: Any limits, exclusions, or restrictions you apply to your account through the responsible gaming tools.

2.2 Data Collected Automatically

When you use the ultra888 platform, certain data is collected automatically through technical means, including:

• Usage data: Pages visited, games played, session duration, features accessed, and navigation paths within the platform.
• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Location data: General geographic location inferred from IP address, used for regulatory compliance and fraud detection purposes.
• Cookie data: Data collected through cookies and similar tracking technologies, as described in Section 6 below.

3How We Use Your Data

ultra888 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your ultra888 account, process your login credentials, and communicate with you about your account.
• Service delivery: To enable access to the full ultra888 platform, including live casino, sportsbook, slots, and other features.
• Financial processing: To process deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, Boost, and FPX bank transfers.
• Identity and age verification: To verify that you meet the 21+ age requirement and that the information you have provided is accurate, as required by our regulatory obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited activity.
• Regulatory compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming requirements imposed by our licensing authority.
• Customer support: To respond to your enquiries, process complaints, and provide assistance via our 24/7 live chat support team.
• Platform improvement: To analyse usage patterns, conduct testing, and improve the functionality and content of the ultra888 platform.
• Marketing communications: To send you relevant promotions and offers where you have given your consent, and subject to your communication preferences as set in your account.

4Legal Basis for Processing

ultra888 processes your personal data on the following legal bases:

• Performance of contract: Processing is necessary to provide the services described in our Terms & Conditions, including account management, financial transactions, and platform access.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including AML, KYC, and responsible gaming obligations.
• Legitimate interests: Processing is necessary for ultra888's legitimate interests, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your account communication preferences.

5Data Sharing

ultra888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and financial institutions: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment channels.
• Identity verification providers: To conduct age and identity verification checks as required by our licensing obligations.
• Fraud detection and security service providers: To identify and prevent fraudulent activity on the platform.
• IT infrastructure and hosting providers: Who process data on our behalf under contractual obligations of confidentiality and data protection.
• Regulatory authorities: Where we are required to disclose information by law, court order, or pursuant to a request from a competent regulatory or law enforcement authority.
• Gaming authority and licensing body: Where required by the terms of our operating licence, including for audit, compliance review, or dispute resolution purposes.

All third parties with whom ultra888 shares personal data are required to process that data in accordance with applicable data protection obligations and are prohibited from using it for any purpose beyond that for which it was shared.

6Cookies & Tracking Technologies

ultra888 uses cookies and similar tracking technologies to improve your experience on the platform, analyse usage, and support security functions. The categories of cookies we use include:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session and account preferences. These cannot be disabled.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members use the platform, enabling us to identify areas for improvement.
• Security cookies: Used to detect and prevent fraud, identify unusual login patterns, and protect the integrity of accounts.
• Preference cookies: Used to remember your platform settings and personalisation choices between sessions.

You may configure your browser settings to decline non-essential cookies. Please note that disabling certain cookies may affect the functionality of the ultra888 platform.

7Data Retention

ultra888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. In practice:

• Account data is retained for the duration of the account and for a period of at least five (5) years following account closure, in accordance with applicable AML and record-keeping obligations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support correspondence and complaints records are retained for a minimum of three (3) years.
• Marketing consent records are retained until consent is withdrawn, plus a reasonable additional period for compliance purposes.

Where data is retained beyond the active account period, it is subject to appropriate access controls and is not used for any active operational purpose other than regulatory compliance.

8Data Security

ultra888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ultra888 platform.
• Hashed storage of all password credentials — no password is ever stored in recoverable plain-text form.
• Two-factor authentication (2FA) available to all Members as an additional layer of account security.
• Automated login anomaly detection to identify and block unauthorised access attempts.
• Segregation of player funds from operational funds, with independent reconciliation.
• Regular internal security reviews and penetration testing of platform infrastructure.

While ultra888 takes reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying ultra888 immediately if you suspect any unauthorised access to your account.

9Your Rights

Subject to applicable law and regulatory requirements, you have the following rights in relation to your personal data held by ultra888:

• Right of access: You may request a copy of the personal data ultra888 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data where ultra888 no longer has a lawful basis for processing it, subject to any overriding legal or regulatory retention obligations.
• Right to restrict processing: You may request that ultra888 restrict the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the ultra888 support team via live chat or at the email address listed in Section 13. We will respond to all valid requests within a reasonable timeframe in accordance with applicable data protection law.

10Children's Privacy

The ultra888 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If ultra888 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be closed immediately. If you believe a minor has created an account on the ultra888 platform, please notify us via live chat so that appropriate action can be taken promptly.

11International Data Transfers

ultra888 may process or store your personal data on servers located outside of Malaysia in connection with the provision of its services. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia, ultra888 will take appropriate steps to ensure that such transfers are subject to adequate safeguards, including the use of contractual data protection clauses with the relevant data processors.

12Changes to This Policy

ultra888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Any material changes will be communicated to registered Members via notification within the platform or by email to the address associated with the account. The updated Policy will take effect from the date indicated at the top of this page. We encourage you to review this Policy periodically to stay informed of how ultra888 processes your personal data.