Utra66 Privacy Policy — Data Protection Malaysian Member Privacy

Utra66 ("we", "Platform") values the privacy of every member and user of our platform. This Privacy Policy clearly explains how we handle your personal data when you use the website, mobile app, or any service offered through the utra66 platform.

We operate in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, and all our data handling practices are designed to ensure your data is processed lawfully, fairly, and transparently.

By using the utra66 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised to discontinue use of our platform. For any inquiries, our support team is ready to assist.

Utra66 collects your personal data through several different channels. The following are the categories of data we may collect:

Data You Provide Directly:

• Full name as shown on your identity document
• National Identity Card (MyKad) number or passport
• Date of birth and gender
• Email address and mobile number
• Current residential address
• Payment method details (account holder name, bank account number — full card numbers are not stored)
• Identity verification documents for the KYC process

Automatically Collected Data:

• IP address and device information (device type, operating system, browser version)
• Access log data (login time, pages visited, session duration)
• State/region-level geolocation data (not precise location)
• Cookie information and session identifiers
• Gaming activity and transaction records

Data From Third Parties:

• Identity verification information from trusted KYC service providers
• Payment verification data from financial service providers
• Blacklist information from relevant regulatory bodies

The personal data collected is used solely for legitimate, stated purposes. We do not use your data for any other purpose without notifying you in advance. The following are the purposes for which your data is used:

• Account Management: Registration, identity verification, password recovery and the maintenance of your account.
• Transaction Processing: Processing deposits, withdrawals and all financial activities securely and accurately.
• KYC & AML Compliance: Verifying your identity and complying with the requirements of the Anti-Money Laundering Act (AMLA) and applicable KYC regulations.
• Platform Security: Detecting and preventing fraud, multi-account abuse, money laundering and any other illegal activities.
• Service Enhancement: Analysing usage patterns to improve the platform experience, introduce new features and resolve technical issues.
• Service Communications: Sending transaction notifications, platform updates, security alerts and responses to your support enquiries.
• Promotions & Offers: Sending promotional information, bonuses and exclusive offers — only if you have consented to receive them.
• Legal Compliance: Meeting reporting obligations to the relevant authorities when required by law.

The legal bases for our data processing include: performance of a contract (service provision), compliance with legal obligations, our legitimate interests as a platform operator, and your consent in specific cases such as marketing communications.

Utra66 does not sell, does not rent, and does not trade your personal data to any third party for their own marketing purposes. However, in certain limited situations, we may share your data with the following parties:

• Technical Service Providers: Hosting companies, cloud service providers, and technical infrastructure providers that help us operate the platform. All such parties are subject to strict confidentiality agreements.
• Payment Providers: Financial service providers such as FPX, DuitNow, and digital wallets to securely process your transactions.
• KYC Providers: Trusted third-party identity verification services to meet compliance requirements.
• Regulatory Authority: Government agencies, law enforcement bodies, or courts where required by Malaysian law or a valid court order.
• Business Partners: In the event that utra66 undergoes corporate restructuring, a merger, or acquisition — data will be transferred with equal or greater levels of protection.

Utra66 invests seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with the highest industry-grade encryption.
• Encrypted Data Storage: Sensitive data stored in our databases is encrypted using the AES-256 algorithm, ensuring data remains unreadable even if servers are accessed without authorisation.
• Real-Time Monitoring: Intrusion detection systems (IDS) and security monitoring operate 24/7 to detect and prevent any suspicious access attempts.
• Internal Access Control: Only staff with specific authorisation may access members' personal data, and every access is logged for audit purposes.
• Periodic Penetration Testing: We conduct regular security audits by independent security experts to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Our internal systems are secured with 2FA; members are also encouraged to enable 2FA on their own accounts.

While we take all reasonable precautions, no security system can guarantee absolute 100% protection. In the event of a data breach affecting you, we are committed to notifying you within the timeframe required by law.

Utra66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect certain platform functions.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by utra66:

To exercise any of the above rights, please contact our support team via live chat or email. We may require identity verification before processing your request to ensure account security.

Utra66 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure, in line with financial legal requirements.
• Transaction Records: Retained for 7 years from the transaction date in accordance with AMLA and tax law requirements.
• KYC Documents: Retained for 5 years after the end of the business relationship in accordance with regulatory requirements.
• Communication Logs: Retained for 2 years for dispute resolution and service quality audit purposes.
• Marketing Data: Deleted immediately when you withdraw consent or unsubscribe.

When data is no longer needed, it will be securely deleted or anonymised so that it can no longer be linked to any individual.

The utra66 platform may contain links to websites of game providers or business partners. Please note that this Privacy Policy applies solely to the utra66 platform.

When you click on links to third-party websites, you will be subject to their own privacy policies. utra66 is not responsible for the privacy practices or content of those third-party websites.

We recommend that you read the privacy policy of every website you visit, especially before providing any personal information. If you have any concerns, please contact our support team.

The utra66 platform is restricted to individuals aged 18 years and above only. We do not knowingly collect any personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, such data will be deleted immediately and the account in question will be terminated without any refund.

If you suspect a minor is using the utra66 platform, please report it to our support team immediately. We take the protection of young people seriously and are committed to ensuring this platform is used only by eligible adults.

Utra66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any changes will take effect immediately upon publication on this page.

For material changes that significantly affect your rights, we will:

• Sending notifications to the email address registered to your account
• Displaying a clear notice on the platform's home page for a minimum of 14 days
• Ensuring the "Last Updated" date at the top of this page is refreshed accordingly

Your continued use of the utra66 platform after any changes are published will be considered your acceptance of the updated policy. We encourage you to review this page from time to time.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the utra66 Data Protection Officer through the following channels:

For complaints that cannot be resolved through our internal channels, you have the right to submit a complaint to Department of Personal Data Protection (JPDP) Malaysia through their official channels.

This Privacy Policy is written in Bahasa Melayu and English. In the event of any discrepancy between the two versions, the Bahasa Melayu version shall prevail. Last updated: January 2026.