Ulta66 Privacy Policy – Malaysian Player Data Protection

Welcome to the ulta66 Privacy Policy. This document clearly and transparently explains how the ulta66 platform ("we", "Platform", or "ulta66") collects, processes, stores, and protects your personal information ("User" or "Player") when you use our services at ulta66.app or our mobile app. By registering or using the ulta66 platform, you agree to the privacy practices described in this document.

1 Our Introduction and Commitment

Ulta66 believes every player has the right to know how their personal information is managed. We do not treat privacy as a mere compliance checkbox — rather, it is a core value that shapes every decision we make when designing our systems and processes.

As an online entertainment platform serving Malaysian players, we understand how sensitive your financial and personal information is. That is why ulta66 continuously invests in high-grade security infrastructure, ensuring your data is always protected from both external and internal threats.

This policy applies to all information we collect through:

• The ulta66.app website and all associated subpages
• Ulta66 mobile app for Android and iOS
• Interactions with our customer support team
• Communications via email, live chat, or other channels we provide
• Bonus programmes, promotions, and competitions we organise

If you have any questions about how we handle your data, please contact our data protection team via the support email listed at the bottom of this page.

2 Personal Data We Collect

Ulta66 only collects data that is strictly necessary to provide safe, fair, and legally compliant services. The following are the categories of data we collect:

3 How We Collect Data

Ulta66 collects your personal information through several different channels depending on the type of data and its intended purpose:

• Account Registration: When you register a ulta66 account, you provide us directly with basic information such as your name, email, phone number, and date of birth.
• KYC Verification: To meet legal compliance requirements, we collect identity verification documents such as a copy of your MyKad or passport, proof of address, and a verification selfie during the KYC process.
• Transaction Activity: Each time you make a deposit or withdrawal, our system automatically records the transaction details, including the payment method, amount, and time of the transaction.
• Platform Usage: Our cookie technology and session monitoring automatically collect technical data as you browse the ulta66 platform, helping us detect and prevent fraudulent activity.
• Support Interactions: Every interaction you have with our customer support team — whether via live chat, email, or phone — is recorded for quality and compliance purposes.
• Third-Party Partners: In certain circumstances, we may receive additional information about you from third-party identity verification providers we use to process KYC.

We are committed to collecting only relevant and necessary data. We do not purchase or obtain user data lists from third parties for marketing purposes.

4 Purpose of Personal Data Use

Ulta66 uses your personal data only for legitimate, disclosed purposes. The following are the primary purposes for which your data is used:

• Service Provision: Enabling you to register, login, play games, make deposits and withdrawals, and access all features of the ulta66 platform.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 and confirming your identity before financial transactions are processed — a legal requirement that cannot be waived.
• Payment Processing: Processing your deposits and withdrawals securely and accurately through supported payment channels such as DuitNow, FPX, Touch 'n Go, and GrabPay.
• Fraud Prevention: Monitoring account activity to detect and prevent unauthorised use, money laundering, and any other fraudulent activities that could compromise platform security.
• Customer Support: Providing accurate and effective assistance whenever you contact our support team with any inquiry or technical issue.
• Legal Compliance: Complying with the Personal Data Protection Act 2010 (PDPA), anti-money laundering laws (AMLA), and reporting obligations to the relevant authorities.
• Platform Improvements: Analysing usage patterns and player feedback to improve the user experience, add new games, and enhance the platform's technical performance.
• Marketing Communications: Sending you information about relevant promotions, bonuses, and exclusive offers — only if you have consented to receive such communications.

5 Data Sharing with Third Parties

Ulta66 takes our responsibility to protect your data seriously. We do not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are specific situations where we need to share your data to keep the platform operating safely and in compliance with the law:

• Payment Service Providers: Transaction information is shared with payment providers such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay solely for the purpose of processing your financial transactions.
• KYC Verification Providers: Identity data is shared with our KYC verification partners who are certified and operate in accordance with strict industry security standards.
• Game Providers: Certain details may be shared with third-party game providers that offer games on the ulta66 platform — this is limited to information required to enable games to function properly.
• Legal Authorities: ulta66 will disclose your data to government authorities, law enforcement agencies, or regulatory bodies when required by Malaysian law or court order.
• Auditors and Professional Consultants: Lawyers, accountants, or auditors appointed by ulta66 may access certain data in the context of providing their professional services, subject to strict confidentiality agreements.

All third parties receiving data from ulta66 are required to comply with data protection standards equal to or higher than our own. We do not permit them to use your data for any purpose other than what has been agreed upon.

6 Data Security and Protection

Protecting your data is ulta66's top priority. We employ a combination of the latest security technologies and strict operational procedures to keep your information safe at all times:

• 256-bit SSL Encryption: All data transmitted between your browser or app and ulta66 servers is protected with 256-bit SSL encryption — the same security standard used by leading banking institutions worldwide.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using the AES-256 algorithm, which is not easily broken.
• 24/7 Monitoring: The ulta66 IT security team monitors our systems around the clock to detect any suspicious activity, intrusion attempts, or anomalies that could threaten data security.
• Two-Factor Authentication (2FA): ulta66 supports and encourages the use of 2FA to add an extra layer of security to your account, ensuring only you can access it even if your password is compromised.
• Internal Access Controls: Access to user data within ulta66 is restricted on a need-to-know basis — only staff who genuinely require access to carry out their duties are permitted.
• Regular Security Audits: ulta66 conducts periodic independent security audits by certified third-party cybersecurity firms to identify and address any system vulnerabilities.
• Incident Response Plan: We have a comprehensive incident response procedure. In the event of a data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by ulta66. Below is a summary of those rights:

To exercise any of the above rights, please contact the ulta66 data protection team. We will process your request within 30 business days from the date of receipt. In complex cases, this period may be extended to up to 60 days with notice to you.

8 Cookies and Tracking Technologies

Ulta66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform to function properly. They include login session cookies, security tokens, and basic site settings. These cookies cannot be disabled.
• Performance Cookies: These cookies help us understand how players interact with our platform by collecting anonymous statistical data. This data is used solely to improve website performance.
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, region, and display settings to provide a more personalised experience.
• Security Cookies: These specific cookies are used to detect and prevent fraudulent activity, monitor suspicious login attempts, and protect your account.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some ulta66 platform features. Please refer to your browser's help guide for more information on managing cookies.

9 Children's Data Protection

Ulta66 is an online entertainment platform dedicated to individuals aged 18 years and above only. We take our child protection responsibilities very seriously.

• We do not knowingly collect any personal information from individuals under the age of 18.
• Our registration and KYC verification process is designed to identify and block any individual below the stipulated age limit.
• Should we discover that we have inadvertently collected data from children or underage individuals, we will delete that data immediately and close the associated account.
• Parents or guardians who discover their children attempting to use the ulta66 platform are advised to contact our support team immediately.

10 Data Retention Period

Ulta66 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law. The following are our general data retention guidelines:

Once the retention period expires, your data will be securely deleted or converted into an anonymised format that cannot be linked back to your identity. Our deletion process uses industry-standard methods to ensure data cannot be recovered.

11 Amendments to the Privacy Policy

Ulta66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will notify you via:

• Prominent notifications on the ulta66 platform homepage
• In-account notification upon your next login
• Email to the address registered in your account
• Update the "Last Updated" date at the top of this page

Continued use of the ulta66 platform after changes take effect constitutes your acceptance of the amended policy. We encourage you to review this page periodically. If you disagree with any amendments, you have the right to close your account in accordance with the procedures set out in our Terms and Conditions.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ulta66's handling of your personal data, please do not hesitate to contact us:

• Data Protection Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the ulta66 platform
• Response Time: We are committed to responding to all privacy-related inquiries within 3 business days

For official complaints related to data protection that cannot be resolved directly with us, you may refer the matter to the Department of Personal Data Protection Malaysia (JPDP) or other relevant authorities. We are always prepared to cooperate fully in any official investigation.

Thank you for trusting ulta66 with your personal information. Your trust is the foundation of everything we do, and we are committed to always protecting your privacy as our top priority.