Ultra66 Privacy Policy — Your Personal Data Protection

Welcome to the ultra66 Privacy Policy. This document is written in clear, plain language so every member knows exactly how their personal data is handled on our platform.

Ultra66 ("we", "Platform") is an online casino platform operating in ultra66.top, offering Malaysian players a wide range of gaming options including slots, live casino, table games, and fish shooting games. In the course of operating this platform, we collect certain personal information from our users.

We are committed to protecting your privacy and ensuring that all data you entrust to us is handled responsibly, securely, and transparently. This Privacy Policy applies to all information collected through the Ultra66 website, mobile app, and all official communication channels.

Ultra66 only collects data that is strictly necessary to provide a safe, efficient, and legally compliant service. Here are the categories of data we collect:

We do not collect sensitive personal data such as health information, political views, or religious beliefs unless required by law or necessary for responsible gaming purposes.

Ultra66 collects your personal data through a variety of transparent and lawful means. We want you to know exactly how your information reaches us:

• Account Registration: When you register a new account at Ultra66, you provide basic personal information such as your name, email, phone number, and password.
• KYC Process: To fulfill identity verification requirements, you may be asked to upload a copy of your identification document and proof of address.
• Financial Transactions: Financial information is collected when you make a deposit or withdrawal via supported payment methods such as FPX, DuitNow, Touch 'n Go, GrabPay, and Boost.
• Platform Usage: Technical data and gaming data are collected automatically as you use our platform via web browser or mobile app.
• Support Interactions: Any communication with our customer support team via live chat, email, or other channels is also recorded for service quality purposes.
• Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to collect session data and user preferences in order to improve your experience.

The personal data we collect is used solely for legitimate purposes necessary for the operation of the Ultra66 platform. Below is a full list of the purposes for which your data is used:

• Account Management: Creating, managing, and maintaining your member account, including identity verification through the KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Gaming Services Provision: Ensuring all games function correctly and delivering a smooth gaming experience to every member.
• Fraud Prevention: Detecting and preventing any fraudulent activity, money laundering, or unauthorised use of the platform.
• Responsible Gaming: Monitoring gaming patterns to identify members who may need responsible gaming support and to enforce limits set by members themselves.
• Customer Support: Providing effective technical assistance and customer service to members who need it.
• Legal Compliance: Fulfilling legal obligations, reporting to authorities, and complying with applicable industry regulations.
• Platform Improvement: Analysing usage data to improve platform features, user experience, and new product offerings.
• Marketing Communications: Sending information about promotions, new offers, and platform updates — only to members who have given their consent.

Ultra66 never sells your personal data. However, there are certain situations where we may need to share information with specific parties to ensure smooth platform operations and legal compliance:

• Payment Service Providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions receive only the financial information strictly necessary for transaction processing.
• Game Providers: Third-party gaming companies that provide game content on our platform may receive the technical data required to deliver those games to you.
• Technical Service Providers: Companies that provide technical infrastructure, cloud hosting, and IT services to ultra66 are subject to strict confidentiality agreements.
• Legal Authority: ultra66 will disclose personal data to government authorities, regulators, or law enforcement when required by court order or applicable law.
• Fraud Prevention Service: Risk assessment and fraud prevention service providers that assist us in detecting and preventing suspicious activity on the platform.

All third parties that receive your personal data are bound by strict confidentiality and data protection agreements, and are only permitted to use that data for the specified purposes.

Your data security is our highest priority. ultra66 continuously invests in the latest security technologies and procedures to ensure your data is always protected:

• Transit Encryption: All communication between your browser and ultra66 servers is secured with TLS 1.3 protocol and 256-bit SSL certificates.
• Storage Encryption: Sensitive data such as passwords and financial information is encrypted using AES-256 algorithms before being stored in our database.
• Access Control: Only authorised personnel with a legitimate business need may access members' personal data, and all access is logged for audit purposes.
• Continuous Monitoring: Our systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts.
• Secure Backup: Data is regularly backed up to secure, geographically separated locations to ensure data resilience in emergency situations.
• Penetration Testing: Our platform undergoes regular security testing by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

The ultra66 platform uses cookies and similar tracking technologies to enhance your experience and keep your login session secure. Here are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform to function properly. They include session authentication cookies, CSRF security cookies, and language preference cookies. This type of cookie cannot be disabled as it is critical for basic platform operations.
• Functional Cookies: These cookies remember your preferences such as game settings, currency selection, and display preferences to deliver a more personalised experience.
• Analytics Cookies: We use internal analytics cookies to understand how members use the platform, which pages are visited most frequently, and where users encounter difficulties, for the purpose of continuous improvement.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, bot attacks, and suspicious login attempts.

You can control and manage cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality and you may be unable to login or use certain features.

As an ultra66 user, you have the following rights regarding your personal data under Malaysia's PDPA. You may exercise these rights by contacting our support team:

Ultra66 is a gaming platform exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from children or individuals under the age of 18.

• Our registration process requires age verification through the date of birth provided at sign-up.
• Our KYC process verifies each member's actual age through valid identification document checks.
• If we determine that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.
• Parents or guardians who believe their child has registered on our platform without permission are encouraged to contact our support team immediately.

In certain situations, your personal data may be transferred to or processed outside Malaysia, particularly by technical service providers and game providers operating in other countries.

• Ultra66 ensures that any international data transfer only takes place to countries or entities that provide a level of data protection equivalent to or higher than Malaysia's PDPA.
• All data recipients outside Malaysia are required to sign data processing agreements that comply with international data protection standards.
• We use internationally recognised standard contractual clauses to protect your data during such transfers.

Ultra66 retains your personal data only for as long as it is needed to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

Once the retention period has ended, your personal data will be securely deleted or anonymised so it can no longer be linked to you personally.

Ultra66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements.

• Any material amendments will be communicated to you via your registered email or in-platform notification at least 7 days before those amendments take effect.
• The "Updated" date at the top of this document will always reflect the date of the most recent amendment.
• Continued use of the ultra66 platform after any amendments take effect will be deemed as your acceptance of the revised policy.
• If you do not agree with the amendments, you have the right to close your account and request deletion of your data before the changes take effect.

This document is the latest version of the Ultra66 Privacy Policy and supersedes all previous versions. Effective date: 1 January 2026.