ultra66 Privacy Policy

1. Introduction

ultra66 ("ultra66", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at https://ultra66.win ("the Platform"). This Privacy Policy ("Policy") describes how ultra66 collects, uses, discloses, stores, and protects personal information in connection with the provision of our online casino, sportsbook, and related gaming services ("Services").

This Policy applies to all registered players, visitors to the ultra66 website, and individuals who interact with ultra66 through our customer support channels. It should be read alongside the ultra66 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

By accessing the ultra66 platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the ultra66 Services.

2. Data Controller

ultra66 is the data controller in respect of the personal data processed in connection with the Services. For the purposes of applicable data protection law, the data controller is responsible for determining the means and purposes of processing your personal information.

All enquiries relating to this Privacy Policy or ultra66's data handling practices should be directed to our support team via Live Chat or by email at [email protected]. Email addresses in this policy are provided as plain text reference only and are not clickable links.

3. Personal Data We Collect

ultra66 collects personal data in a number of contexts depending on how you interact with the platform. The categories of personal data we may collect include:

3.1 Registration & Identity Data

• Full legal name as shown on government-issued identification;
• Date of birth (for mandatory age verification);
• Nationality and country of residence;
• Email address and, where provided, mobile telephone number;
• Username and encrypted account credentials.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., MyKad, passport);
• Proof of address documentation (e.g., utility bill, bank statement);
• Payment method verification documentation where required.

3.3 Financial Data

• Bank account details, FPX transaction references, or eWallet account identifiers (Touch n Go eWallet, Boost) used for deposit and withdrawal processing;
• Transaction history, including deposits, wagers, wins, losses, and withdrawals;
• Responsible gaming limit settings and self-exclusion records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Session data, including login times, session duration, and pages visited;
• Game activity logs, including games played, bet amounts, and outcomes;
• Cookie identifiers and similar tracking technologies (see Section 6).

3.5 Communications Data

• Records of Live Chat conversations and email correspondence with ultra66 support;
• Feedback and survey responses where voluntarily provided.

4. How We Use Your Personal Data

ultra66 uses the personal data it collects for the following purposes:

• Account creation and management: To establish, maintain, and manage your ultra66 account, including authenticating your identity on login;
• Age and identity verification: To comply with mandatory Know Your Customer (KYC) obligations and confirm that players meet the 21+ age requirement;
• Payment processing: To process deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, Maybank FPX, and other supported methods;
• Service delivery: To provide access to casino games, sportsbook markets, live dealer tables, and all other platform features;
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity;
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer deposit limits, self-exclusion, and cooling-off periods;
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and the conditions of our gaming licence;
• Platform improvement: To analyse usage patterns and improve the functionality, design, and performance of the ultra66 platform;
• Marketing communications: To send promotional offers and newsletters where you have provided consent (see Section 12).

5. Legal Basis for Processing

ultra66 processes your personal data on the following legal bases, as applicable under data protection law:

• Contractual necessity: Processing required to perform the contract between ultra66 and the player — including account operation, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable laws and the conditions of ultra66's gaming licence, including KYC, anti-money laundering, and responsible gaming obligations;
• Legitimate interests: Processing necessary for ultra66's legitimate business interests, including fraud prevention, security monitoring, and platform analytics — provided such interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, and informed consent, such as the receipt of direct marketing communications. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

ultra66 uses cookies and similar tracking technologies on its platform to provide and improve the Services. Cookies are small text files placed on your device that allow the platform to recognise you across sessions, maintain your login state, and understand how you interact with the site.

6.1 Types of Cookies Used

• Essential cookies: Strictly necessary for the platform to function, including session management and security cookies. These cannot be disabled without affecting platform functionality;
• Functional cookies: Enable personalisation features such as language preferences and remembered login states;
• Analytical cookies: Used to collect aggregated information about how players use the platform, allowing ultra66 to improve navigation and performance.

You may configure your browser to refuse or delete cookies; however, doing so may affect the availability and functionality of certain ultra66 features.

7. Sharing Your Personal Data

ultra66 does not sell your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment processors: Financial data is shared with authorised payment service providers (including FPX operators, eWallet providers, and card processors) solely for the purpose of processing your transactions;
• Identity verification providers: KYC documentation may be shared with third-party verification services to fulfil our regulatory obligations;
• Game software providers: Game activity data may be shared with licensed game suppliers in the course of providing gaming services. These providers are contractually bound to handle such data in accordance with applicable law;
• Regulatory and law enforcement authorities: ultra66 may disclose personal data to competent authorities where required by law, court order, or the conditions of our gaming licence;
• Group companies: ultra66 may share data within its corporate group for internal business, compliance, or risk management purposes, subject to equivalent data protection standards.

All third parties to whom ultra66 discloses personal data are subject to contractual obligations to process such data lawfully and to implement appropriate security measures.

8. International Data Transfers

The personal data ultra66 collects may be stored and processed in countries outside of Malaysia. Where such transfers occur, ultra66 will take all reasonable steps to ensure that your personal data receives an equivalent level of protection as it would in Malaysia, including through the use of appropriate contractual safeguards.

By using the ultra66 platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia for the purposes described in this Policy, where such transfers are necessary for the provision of the Services.

9. Data Retention

ultra66 retains personal data for as long as your account remains active and for such additional periods as are required by applicable law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering legislation;
• Transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Communications with support are retained for a period of three (3) years from the date of the communication;
• Analytical and usage data may be retained in aggregated, anonymised form indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ultra66's data retention procedures.

10. Your Data Protection Rights

Subject to applicable law and regulatory constraints, ultra66 players have the following rights with respect to their personal data:

• Right of access: You may request a copy of the personal data ultra66 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction: You may request that ultra66 restrict processing of your data in certain circumstances;
• Right to data portability: Where technically feasible, you may request that your personal data be transferred to another data controller in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests or to direct marketing at any time;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact ultra66 via Live Chat or at [email protected]. ultra66 will respond to valid requests within 30 days. Some requests may be subject to identity verification before processing.

11. Children's Privacy

The ultra66 platform is strictly for persons aged 21 years and above. ultra66 does not knowingly collect personal data from individuals under the age of 21. If ultra66 discovers that personal data from an underage individual has been collected, the relevant account will be immediately closed and the data deleted in accordance with our data retention policy.

Parents or guardians who believe a minor has accessed or registered on the ultra66 platform are encouraged to contact our support team immediately.

12. Marketing Communications

ultra66 may send promotional emails, SMS notifications, or in-platform messages regarding bonuses, new games, and special offers where you have opted in to receive such communications during registration or subsequently in your account settings.

You may opt out of marketing communications at any time by updating your preferences in your account settings or by contacting ultra66 support. Opting out of marketing does not affect the receipt of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent as part of the core service.

13. Data Security

ultra66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the ultra66 platform;
• Encrypted storage of sensitive data, including account credentials and payment information;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular penetration testing and security audits of platform infrastructure;
• Two-factor authentication available for all player accounts.

While ultra66 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. ultra66 cannot guarantee the absolute security of information transmitted via the platform and recommends that players use strong, unique passwords and enable two-factor authentication on their accounts.

14. Changes to This Privacy Policy

ultra66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the requirements of our gaming licence. Where changes are material, ultra66 will provide advance notice to registered players via email notification or a prominent on-site notice.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the ultra66 platform following publication of a revised Privacy Policy constitutes acceptance of the updated Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ultra66's data handling practices, please contact our support team:

Live Chat: Available 24/7 within your ultra66 member dashboard.

Email: [email protected]

Contact details are provided as plain text for reference purposes only. ultra66 does not accept data subject requests submitted via social media or other channels not listed above. We aim to respond to all privacy-related enquiries within 30 calendar days.