Ug808 Privacy Policy — Malaysian User Data Protection

Ug808 ("we", "Platform") is committed to protecting the privacy and security of the personal information of all users who register for or use our services. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

By registering an account or using the ug808 platform, you acknowledge that you have read and understood this Privacy Policy. This policy covers all ug808 services including the website, Android and iOS mobile apps, and any related services we provide to Malaysian users.

We believe transparency is the foundation of trust. That is why we have written this policy in plain, easy-to-understand language — not confusing legal jargon — so you truly understand how your data is managed.

Ug808 collects the information necessary to provide, secure, and improve our services. The following are the categories of data we collect:

Every piece of data we collect has a clear and lawful purpose. ug808 uses your information for the following purposes:

• Account Operations: Creating and managing your account, verifying identity through the KYC process, and ensuring ongoing account security.
• Financial Processing: Processing deposits and withdrawals securely, verifying payment method ownership, and maintaining transaction records for audit purposes.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity or violations of our terms of use.
• Legal Compliance: Meeting reporting obligations to regulatory bodies, responding to lawful authority inquiries, and complying with PDPA requirements and related legislation.
• Service Communications: Sending transaction notifications, security alerts, service updates, and promotional information (where you have consented to receive them).
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve overall design, performance, and user experience.
• Responsible Gaming: Monitoring wagering patterns to identify users who may need support and providing relevant self-control tools.

Ug808 will not use your data for any purposes not stated here without obtaining your consent first. We do not conduct automated profiling that makes significant decisions about you without human involvement.

Ug808 does not sell, rent, or trade users' personal data to any third party for marketing purposes. However, in certain legitimate situations, we may share your information with the following parties:

• Payment Service Providers: Banks, eWallet companies, and payment processors used to carry out your financial transactions. Sharing is limited to the information required to complete the transaction only.
• Game Providers: Gaming software companies (such as slot, live casino, and fish shooting game providers) need to receive a minimum of player ID and session information in order to operate the games.
• Regulatory Authorities: When required by law, we will disclose the necessary information to government agencies, regulatory bodies, or legitimate law enforcement authorities.
• Audit & Security Services: Independent audit firms and cybersecurity service providers that help us verify game fairness and protect the integrity of the platform.

Ug808 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

The key security measures we use include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and ug808's servers.
• Encryption of data at rest for all sensitive information stored in our databases, including MyKad numbers and banking details.
• Two-Factor Authentication (2FA) available to all users to add an extra layer of protection to their account.
• 24/7 Monitoring by automated intrusion detection systems that immediately alert our security team.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Internal access controls strictly enforced — only staff who require access to perform their duties are permitted to view user data, and all access is automatically logged.

While we take all reasonable precautions, no online security system can be guaranteed 100% secure. In the event of a material security breach affecting your data, ug808 will notify you within the timeframe required by applicable law.

Ug808 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous data on how users interact with the platform to help us improve performance and stability.
• Functional Cookies: Saving your preferences such as language, display theme, and personal settings so you do not need to reconfigure them each time.
• Analytics Cookies: Used through trusted third-party analytics tools to understand usage patterns in aggregate, non-personal form.

You can manage cookie settings through your internet browser. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies in popular browsers, refer to your browser settings.

Under Malaysia's PDPA and the ug808 privacy policy, you have the following rights regarding your personal data:

Ug808 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, data retention periods are as follows:

• Financial transaction records: Stored for a minimum of 7 years after the last transaction, in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC documents (MyKad copy, passport): Stored for 5 years after account closure, in accordance with PDPA requirements and applicable gambling laws.
• Activity & security logs: Stored for 2 years for security investigation and dispute resolution purposes.
• Support communication records: Stored for 3 years for quality control purposes and reference in the event of a dispute.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. We use industry-grade data deletion software for this purpose.

Ug808 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or other legitimate operational reasons. The latest update date will always be displayed at the top of this document.

For changes deemed significant — such as changes to the types of data collected or how it is shared — ug808 will provide clear notice via email to your registered address or through a prominent in-platform notification at least 14 days before the changes take effect.

Continued use of the platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the established procedure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ug808 handles your personal data, our team is ready to assist through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Privacy Email: [email protected] — for specific enquiries related to data protection and user rights requests.
• General Support Email: [email protected] — for general questions regarding accounts and services.