UFA99 Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction & Scope of Privacy Policy

Welcome to the UFA99 Privacy Policy page. This document outlines UFA99's commitment to protecting your personal data as a member of Malaysia's premier online casino platform. UFA99 takes your privacy extremely seriously and adheres to internationally recognised data protection principles.

This Privacy Policy applies to all personal information we collect, use, store, and process in connection with your use of the UFA99 platform, including our website, online services, email communications, and any other interactions with us. By registering for and using UFA99's services, you consent to the collection and use of your information as described in this Privacy Policy.

2Personal Data We Collect

UFA99 collects various categories of personal information to enable us to deliver the best possible service to you. We only collect data that is strictly necessary and relevant to the stated purposes. The following are the categories of data we collect:

• Identity Information: Full name, date of birth, MyKad or passport number, gender, and nationality — required for identity verification and KYC compliance.
• Contact Information: An active Malaysian phone number, email address and residential address — used for service communications and account verification.
• Financial Information: Your Malaysian bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) used for deposits and withdrawals — stored in fully encrypted format.
• Game Activity Data: Betting records, game history, wins and losses, game preferences — used to personalise your experience and fulfil legal reporting requirements.
• Technical Data: IP address, device type and web browser, operating system, and screen resolution — collected automatically to enhance platform performance and security.
• Communications: Your conversation history with the UFA99 customer support team, complaints submitted, and feedback provided — retained for reference and service improvement purposes.

UFA99 does not collect special-category data such as health information, religious beliefs or political views. Should there ever be a need to collect any information beyond what is listed above, you will be informed and asked for your consent beforehand.

3How UFA99 Uses Your Data

Every piece of data we collect serves a clear and legitimate purpose. UFA99 uses your personal information solely for the following purposes:

• Account Management: Creating and managing your UFA99 account, processing registration, identity verification, and email and phone number confirmation.
• Service Provision: To process deposits and withdrawals via Malaysian payment methods such as DuitNow, Touch 'n Go eWallet, and GrabPay, and to enable you to enjoy all games available on the UFA99 platform.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-accounting, or any breach of UFA99's Terms & Conditions.
• Legal Compliance: Meeting reporting obligations to the relevant authorities, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated by law.
• Service Communications: Sending important notifications relating to your account, transactions, terms updates, and security-related information that requires your immediate attention.
• Platform Improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the interface, performance, and overall gaming experience at UFA99.
• Marketing (with consent): Sending information about UFA99 bonuses, promotions and special offers — but only if you have given your consent to receive such marketing communications.

4Information Sharing & Disclosure

UFA99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are limited circumstances in which we may need to share certain information with specific parties, as outlined below:

• Trusted Service Providers: Third parties that help us operate the UFA99 platform — such as technology infrastructure providers, payment processors (DuitNow gateway, Touch 'n Go eWallet) and analytics service providers — are bound by strict confidentiality agreements and may only use your data for the specific agreed purposes.
• Legal Requirements: We may be required by law to disclose certain information to Malaysian government authorities, courts, or regulatory bodies with legitimate jurisdiction — including for the purposes of financial crime investigations or anti-money laundering inquiries.
• Game Developers: Very limited game data may be shared with game developers who supply slots and live casino games on the UFA99 platform, strictly for technical maintenance and game fairness audit purposes.
• Protection of UFA99's Rights: Where necessary to protect the rights, property, or safety of UFA99, our members, or the public — for example, in cases of fraud or serious security threats.

In all of the above cases, we ensure that only the minimum necessary information is disclosed, and the receiving parties are bound by appropriate confidentiality obligations. UFA99 does not transfer your personal data across international borders except with adequate safeguards as required by applicable data protection laws.

5Security & Data Protection

The security of your personal data is UFA99's top priority. We have implemented a comprehensive range of technical and organisational measures to protect your information against unauthorised access, loss, damage, or accidental disclosure:

• 256-bit SSL Encryption: All communications between your device and UFA99 servers are encrypted using TLS 1.3 protocol with 256-bit encryption keys — the same standard used by Malaysia's leading banks.
• Server Security: UFA99 servers are housed in secure data centres with strict physical access controls, 24/7 monitoring and redundant backup systems to ensure continuous service availability.
• Internal Access Controls: Only UFA99 staff who require access to specific data in order to carry out their authorised duties are permitted to access that information — in accordance with the principle of "least privilege".
• Continuous Monitoring: Our security monitoring system operates 24 hours a day, 7 days a week to detect and respond immediately to any suspicious activity or unauthorised access attempts.
• Regular Security Audits: UFA99 conducts regular independent security audits to identify and address any vulnerabilities in our systems before they can be exploited by malicious parties.

While we take all reasonable steps to protect your data, no security system is completely foolproof or impenetrable. You also play a role in keeping your account safe — please use a strong password, never share your login credentials, and contact UFA99 immediately if you suspect any unauthorised activity on your account.

6Cookies & Tracking Technologies

UFA99 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit the UFA99 website. We use the following types of cookies:

• Essential Cookies: Required for the core functions of the UFA99 platform — such as maintaining your login session, remembering your language preferences, and ensuring financial transactions are processed securely. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how members use the UFA99 platform — the most frequently visited pages, time spent in each section and navigation flow. This data is used in aggregate form without identifying individuals.
• Functional Cookies: Remembering your preferences and personal settings — such as preferred bet sizes, favourite games and display preferences — to deliver a more personalised experience each time you log in.

You can control and manage cookies through your web browser settings. Please be aware, however, that disabling certain cookies may affect the functionality and your overall experience on the UFA99 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7Your Privacy Rights

As a UFA99 member and data subject, you have certain rights regarding your personal information. UFA99 fully respects these rights and provides straightforward mechanisms for you to exercise them:

• Right of Access: You have the right to know what personal data we hold about you and how it is used. Contact us to request a complete copy of your personal data.
• Right to Rectification: If any personal information we hold about you is inaccurate or out of date, you have the right to request an immediate correction. Most details can be updated directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data — commonly referred to as the "right to be forgotten". However, this right is subject to UFA99's obligation to retain certain records for legal compliance and regulatory requirements.
• Right to Object: You may opt out of having your personal data processed for direct marketing purposes at any time by updating your communication preferences in your account settings or by contacting our support team.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that UFA99 restrict the processing of your personal data — for example, while a dispute regarding data accuracy is being resolved.
• Data Portability Right: You have the right to receive a copy of your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.

To exercise any of the rights above, please contact UFA99's customer support team via email at [email protected] with the subject line "Privacy Rights Request". We are committed to responding to all requests within 30 business days of receiving a complete submission.

8Data Retention Period

UFA99 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. The following are our data retention guidelines:

Once the applicable retention period has elapsed, your personal data will be permanently deleted or converted into a non-identifiable format (anonymised) solely for aggregate analytics purposes.

9Changes to This Privacy Policy

UFA99 reserves the right to update or amend this Privacy Policy from time to time in line with changes to our services, legal requirements, or industry best practices in data protection. We are committed to being transparent about any changes made.

• Material changes to this Privacy Policy will be communicated to all UFA99 members via email at least 14 days before the effective date.
• An in-platform notification will be displayed on UFA99 when members log in following any update to the Privacy Policy, requiring acknowledgement before continued use.
• The date of the most recent update is always clearly stated at the top of this page for your easy reference.
• Previous versions of the Privacy Policy are archived and can be requested from our customer support team for historical reference purposes.

Continued use of the UFA99 platform after the effective date of any Privacy Policy update will be considered your acceptance of the updated version. If you do not agree with any changes, you have the right to close your account and withdraw your real money balance before the changes take effect.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding UFA99's Privacy Policy or the way we handle your personal data, please do not hesitate to reach out to us through the following channels. Our dedicated team is ready to assist you:

• Privacy Email: [email protected] — please include "Privacy Enquiry" or "Privacy Policy" in your email subject line for faster handling.
• Live Chat: The live chat function within the UFA99 platform — typically responding in under 3 minutes, available 24 hours a day, 7 days a week, including weekends and Malaysian public holidays.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days, and to formal data rights requests within 30 business days.