ultra66 Privacy Policy

ultra66 is an internationally operated online gaming platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations. In the course of providing sports betting, live casino, slots, poker, loyalty rewards, payment processing, and customer support, ultra66 handles personal data about the individuals who use those services.

ultra66 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This policy applies to all personal data processed through the ultra66 website, mobile browser experience, and associated communications channels.

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" means ultra66, acting as the entity that determines the purposes and means of processing Personal Data.
• "Player" or "you" means any individual who registers for, accesses, or uses ultra66 Services.
• "Services" means the games, betting markets, payment infrastructure, promotions, loyalty programme, support, and other functions provided by ultra66.
• "KYC" means Know Your Customer — identity, age, address, and source-of-funds verification required by regulatory and anti-fraud obligations.

ultra66 collects Personal Data through account registration, ongoing use of the Services, identity verification, payment processing, customer support interactions, and automated technical means. The main categories are:

ultra66 uses Personal Data only for the purposes described in this policy. The primary purposes are:

• Account creation and management — registering your account, authenticating logins, managing account settings and preferences.
• Identity and age verification — confirming that you are 21 years of age or older, verifying your identity documents, and completing source-of-funds checks.
• Payment processing — processing MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Online, USDT, BTC, and any other supported method.
• Service delivery — providing access to sports betting markets (EPL, Liga Super Malaysia, UFC, etc.), slots, live dealer games, poker, lottery products, and associated features.
• Fraud prevention and security — detecting unusual account activity, preventing money laundering, identifying duplicate accounts, and maintaining platform integrity.
• Legal and regulatory compliance — retaining transaction records, responding to lawful authority requests, and fulfilling anti-money-laundering obligations.
• Customer support — handling enquiries, resolving disputes, processing complaints, and improving support quality.
• Responsible gambling — monitoring for signs of problem gambling, applying player-requested limits, and fulfilling self-exclusion requests.
• Service improvement — analysing aggregated, anonymised usage patterns to improve platform performance, game selection, and payment reliability.
• Promotional communications — where you have consented or where a legitimate interest applies, notifying you of relevant offers, bonuses, and platform updates. You may opt out at any time.

ultra66 processes Personal Data on the following legal bases:

• Performance of a contract — processing necessary to provide the Services you have agreed to use, including account management, payments, and game access.
• Compliance with a legal obligation — processing required by applicable anti-money-laundering, KYC, record-keeping, and regulatory reporting requirements.
• Legitimate interests — fraud detection, security monitoring, platform analytics, and responsible gambling measures, where those interests are not overridden by your rights.
• Consent — for optional marketing communications and non-essential cookies, where we have obtained your prior consent. Consent may be withdrawn at any time without affecting prior lawful processing.

ultra66 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share data with the following categories of third party only as necessary and under binding confidentiality arrangements:

• Payment service providers — Malaysian banks, FPX, DuitNow, e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency network processors, for the purpose of completing your requested transactions.
• Identity verification providers — third-party KYC and document-verification services that assist in confirming your identity and age.
• Game and content providers — software developers and live dealer studios whose games are made available on ultra66, where technically necessary to deliver the gaming service.
• IT and infrastructure providers — cloud hosting, content delivery, cybersecurity, and analytics service providers operating under strict data processing terms.
• Regulatory and law enforcement authorities — where disclosure is required by law, court order, or a lawful regulatory request.
• Professional advisers — lawyers, auditors, and consultants under legal professional privilege or equivalent confidentiality obligations.

Where personal data is shared with any processor, ultra66 maintains appropriate contractual safeguards and does not permit the processor to use the data for their own purposes.

As an internationally operated platform, ultra66 may process or store Personal Data on servers or with service providers located outside Malaysia. Where such transfers occur, ultra66 applies appropriate safeguards including standard contractual clauses, data processing agreements, and equivalent protective measures to ensure that your Personal Data receives a comparable level of protection to that applied in Malaysia.

Personal Data is kept for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer. As a general guide:

• Account and identity data — retained for the duration of your account plus a minimum regulatory retention period after closure.
• Transaction and financial records — retained in accordance with applicable financial record-keeping obligations, typically a minimum of five years from the date of the transaction.
• Communications and support records — retained for the period necessary to resolve the relevant matter and for a reasonable period thereafter.
• Technical and log data — generally retained for shorter periods appropriate to security and operational purposes.

When retention periods expire, data is securely deleted, anonymised, or destroyed. Where deletion is not immediately possible due to backup schedules or legal holds, the data will be isolated and protected until deletion is complete.

ultra66 maintains a range of technical and organisational security measures commensurate with the sensitivity of the data processed and the risks associated with the online gaming environment:

• 256-bit TLS encryption for all data transmitted between your browser or device and ultra66 servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Multi-factor authentication options for player account access.
• Real-time fraud and anomaly detection with automated and manual review.
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of platform infrastructure.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable obligations.

No security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account credentials and for notifying ultra66 promptly if you believe your account security has been compromised.

ultra66 uses cookies and similar technologies to operate the platform, secure your session, remember your preferences, and understand how the site is used. The main categories deployed are:

• Strictly necessary cookies — required for the platform to function. These include session authentication, security tokens, and load-balancing identifiers. They cannot be disabled without breaking core functionality.
• Functional cookies — remember your language preference, display settings, and previously entered information to improve convenience.
• Analytical cookies — collect aggregated, anonymised data about how players navigate ultra66. This information is used solely to improve platform performance. No cross-site tracking is performed.

Third-party advertising cookies that track you across external websites for profiling purposes are not deployed on ultra66. Consent for non-essential cookies may be managed through your browser settings or any preference control displayed at your first visit.

You have the following rights with respect to your Personal Data held by ultra66. Requests may be submitted through our support team and will be handled within a reasonable period, free of charge in most circumstances:

Exercising any of these rights will not affect the lawfulness of processing carried out before the request was received. ultra66 may need to verify your identity before fulfilling a request to prevent unauthorised disclosure.

If you believe a minor may have submitted Personal Data to ultra66, please contact us immediately at the address in Section 14 so that we can investigate and act promptly.

ultra66 may update this Privacy Policy to reflect changes in Services, legal requirements, payment integrations, security practices, or data processing arrangements. The effective date at the top of the page indicates the current version. Material changes will be communicated through the platform or at account login where required.

Continued use of ultra66 after an updated policy takes effect constitutes acknowledgement of the revised policy. If you do not agree with any material change, you should stop using the Services and request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact ultra66 through one of the following channels. Live chat is available 24 hours a day, seven days a week, with an average response time of 3–5 minutes.

[email protected]

The email address is displayed as plain text. Please include your account username, a brief description of your request, and any relevant reference numbers. Do not include passwords, complete payment card details, or sensitive identity numbers in your initial message.

For responsible gambling enquiries or self-exclusion requests, please also visit our Responsible Gambling page for additional guidance and tools.