Privacy Policy — ufa888 Online Casino Platform

1Introduction

ufa888 ("we", "us", "our", "the Platform") is committed to protecting the personal data of all individuals who interact with our platform. This Privacy Policy has been prepared in accordance with applicable data protection principles and the requirements of our international gaming authority licensing framework.

This document describes the types of personal data ufa888 collects, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to data subjects regarding their personal information. We encourage all players — whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or elsewhere in Malaysia — to read this policy before using our services.

2Data Controller

For the purposes of this Privacy Policy, ufa888 acts as the data controller in respect of personal data collected through the Platform. As data controller, ufa888 determines the purposes and means of processing personal data in connection with its online casino, sportsbook, and live dealer services.

All data protection enquiries, subject access requests, and requests to exercise data rights should be directed to our Data Protection contact as specified in Section 15 of this Policy.

3Personal Data We Collect

ufa888 collects personal data in a number of ways in the course of providing its services. The categories of personal data we process are set out in the table below:

4How We Use Your Personal Data

ufa888 processes personal data only for specified, legitimate purposes. The primary purposes for which we use your data are as follows:

• Account registration and management: Creating, maintaining, and administering your ufa888 account, including processing ufa888 login credentials and verifying account ownership.
• Identity and age verification (KYC): Confirming that all players are at least 21 years of age and validating identity in compliance with applicable licensing requirements.
• Transaction processing: Processing deposits via Touch n Go eWallet, Boost, GrabPay, FPX, and USDT TRC20, and managing withdrawal requests to your nominated payment method.
• Service delivery: Providing access to live casino games, slot titles, baccarat, and sportsbook betting services through the ufa888 platform.
• Responsible gaming compliance: Implementing and monitoring deposit limits, session controls, self-exclusion periods, and age restriction enforcement across all ufa888 accounts.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account abuse, money laundering, and other prohibited conduct as defined in the ufa888 Terms & Conditions.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance to ufa888 players.
• Legal and regulatory compliance: Fulfilling obligations under applicable licensing conditions and responding to lawful requests from regulatory authorities.
• Platform improvement: Analysing usage patterns to improve the functionality, performance, and user experience of the ufa888 platform.
• Marketing communications: Sending promotional offers, bonus notifications, and product updates to players who have provided explicit consent to receive such communications. Players may withdraw consent at any time via their Account settings.

5Legal Basis for Processing

ufa888 processes personal data in accordance with recognised legal bases. The applicable legal basis for each category of processing is as follows:

• Contractual necessity: Processing required to enter into and perform the contract between ufa888 and the Player, including account creation, game provision, and financial transactions.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, anti-money laundering checks, and age restriction enforcement.
• Legitimate interests: Processing undertaken for ufa888's legitimate business interests, including fraud prevention, platform security, and analytics, where such interests are not overridden by the data subject's rights and interests.
• Consent: Processing based on the data subject's explicit and freely given consent, including marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6Data Sharing & Disclosure

ufa888 does not sell, rent, or trade personal data to third parties for commercial purposes. We may disclose personal data only in the following circumstances:

• Licensed game software providers: ufa888 shares necessary technical data with game content providers (including Pragmatic Play, PG Soft, and Spadegaming) solely to facilitate game delivery and session management.
• Payment processors: Financial data is shared with payment service providers (including FPX payment gateway operators, e-wallet platforms, and cryptocurrency exchange services) strictly for the purpose of processing deposits and withdrawals.
• Identity verification services: Identity and document data may be shared with third-party KYC verification service providers engaged by ufa888 to conduct age and identity verification checks.
• Regulatory authorities: ufa888 may disclose personal data to regulatory bodies, licensing authorities, or law enforcement agencies where required by law or in response to a lawful request.
• Corporate transactions: In the event of a business restructuring, merger, acquisition, or sale of assets, personal data held by ufa888 may be transferred to the acquiring entity subject to equivalent data protection obligations.

All third parties with whom ufa888 shares personal data are bound by data processing agreements requiring them to handle personal data securely and only for specified purposes.

7Cookies & Tracking Technologies

7.1 The ufa888 Platform uses cookies and similar tracking technologies to support core platform functionality, analyse user behaviour, and improve the player experience. Cookies are small text files placed on your device by the Platform when you visit ufa888.vu.

7.2 The following categories of cookies are used by ufa888:

• Strictly necessary cookies: Required for the Platform to function — including session management, ufa888 login state persistence, and security token maintenance. These cannot be disabled.
• Performance and analytics cookies: Used to understand how players interact with the Platform — pages visited, session duration, and navigation patterns. Data collected is aggregated and anonymised.
• Functional cookies: Used to remember player preferences such as language settings and responsible gaming configurations.
• Marketing cookies: Used with player consent to personalise promotional content. These cookies may be disabled at any time via browser settings or the cookie consent management tool on the Platform.

7.3 You may control cookie preferences through your browser settings. Please note that disabling certain cookies may impair functionality of the ufa888 Platform, including the ability to maintain a logged-in session.

8Data Retention

ufa888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing conditions. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and betting history: Retained for a minimum of five (5) years to support dispute resolution, regulatory reporting, and audit obligations.
• Customer support records: Retained for three (3) years from the date of the most recent interaction.
• Technical and usage data: Retained for up to twelve (12) months from the date of collection unless required for longer for security investigation purposes.
• Self-exclusion and responsible gaming records: Retained indefinitely to ensure compliance with self-exclusion requests and to prevent re-registration during exclusion periods.

9Data Security

ufa888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Security measures applied to the ufa888 Platform include:

• 256-bit SSL/TLS encryption for all data transmission between player devices and ufa888 servers.
• Cryptographic hashing of all stored passwords — plain-text passwords are never retained or accessible to ufa888 personnel.
• Segregated storage of player financial data from operational platform data.
• Access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments conducted by independent third parties.
• Two-factor authentication (2FA) availability for all ufa888 accounts to protect against unauthorised access.

Notwithstanding the measures described above, no data transmission over the internet or data storage system is completely impenetrable. ufa888 cannot guarantee absolute security but commits to promptly notifying affected players in the event of a personal data breach that is likely to result in a risk to individual rights and freedoms.

10Your Data Rights

Subject to applicable law, players whose personal data is processed by ufa888 have the following rights in respect of their personal data:

• Right of access: The right to request confirmation of whether ufa888 processes your personal data and, if so, to receive a copy of the data held.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by ufa888. Players may update most account details directly through their ufa888 Account settings.
• Right to erasure: The right to request deletion of your personal data in certain circumstances, subject to ufa888's legal retention obligations under applicable licensing and anti-money laundering requirements.
• Right to restriction: The right to request that ufa888 restricts the processing of your personal data in certain specified circumstances.
• Right to data portability: The right to receive personal data you have provided to ufa888 in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data where ufa888 relies on legitimate interests as its legal basis, including processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact ufa888 using the details in Section 15. ufa888 will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

11Children & Minors

The ufa888 Platform is strictly for adults aged 21 years and above. ufa888 does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory component of the account registration process for all ufa888 accounts. In the event that ufa888 becomes aware that personal data has been collected from an individual below the minimum age, all associated data will be promptly deleted and the Account closed without notice.

If you believe a minor has registered or attempted to register an ufa888 account, please contact our support team immediately using the details in Section 15.

12International Data Transfers

Due to the nature of ufa888's technology infrastructure and third-party service providers, personal data collected from Malaysian players may be transferred to and stored in jurisdictions outside of Malaysia. Where such transfers occur, ufa888 ensures that appropriate safeguards are in place to protect personal data at a standard equivalent to applicable data protection requirements — including contractual obligations on data processors and technical security measures consistent with those described in Section 9 of this Policy.

13Third-Party Links

The ufa888 Platform does not contain links to external third-party websites beyond those necessary for its core gaming and payment services. Where game content or payment processing involves redirection to a third-party interface, ufa888 is not responsible for the privacy practices of those third-party services. Players are encouraged to review the privacy policies of any third-party platforms they interact with in connection with ufa888 transactions.

14Amendments to This Policy

ufa888 reserves the right to amend this Privacy Policy at any time. Material changes to the way in which ufa888 processes personal data will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the changes taking effect. The most current version of this Privacy Policy will always be accessible at ufa888.vu/privacy-policy. Continued use of the ufa888 Platform following notification of any amendment constitutes acceptance of the revised Privacy Policy.

15Contact & Data Protection Enquiries

For all privacy-related enquiries, data rights requests, or concerns regarding ufa888's handling of your personal data, please contact our Data Protection team: