Privacy Policy — ultra666

This Privacy Policy ("Policy") describes how ultra666 ("Company", "Platform", "We", "Us", "Our") collects, processes, stores, and protects the personal data of individuals ("User", "Player", "You", "Your") who access or use the ultra666 online casino and sports betting platform at https://ultra666.cam and all associated interfaces.

ultra666 is committed to protecting your privacy and handling your personal data with transparency, integrity, and full respect for your rights. This Policy is designed to be clear and accessible — not a document written to confuse. We set out plainly what data we hold about you, why we hold it, who may see it, and what you can do about it.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the ultra666 platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

ultra666 collects the following categories of personal data in connection with your use of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used for mandatory age verification — players must be 21 or older);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Email address and contact telephone number;
• Username and encrypted password credentials.

3.2 Identity Verification (KYC) Documents

• Copy of government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence);
• Proof of residential address (utility bill, bank statement, or telecommunications bill);
• Selfie verification photographs submitted alongside identity documents;
• Payment method confirmation documentation.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history, amounts (in MYR), timestamps, and payment method references;
• Payment method identifiers — e-wallet account references (Touch 'n Go, Boost, GrabPay), DuitNow references, FPX bank references, and cryptocurrency wallet addresses where applicable;
• Bonus and promotional credit history.

3.4 Gaming Activity Data

• Game session history, wager amounts, outcomes, and session durations;
• Sports betting slip history, including markets, odds accepted, and settlement outcomes;
• Responsible gambling tool settings — deposit limits, session reminders, and self-exclusion elections.

3.5 Technical and Device Data

• IP address and approximate geolocation (country/city level);
• Browser type, version, and operating system;
• Device type (desktop, mobile, tablet) and screen resolution;
• Session login timestamps, duration, and logout method.

3.6 Communications Data

• Records of live chat, email, and support ticket communications with the ultra666 support team;
• Feedback, complaints, and dispute submissions.

ultra666 collects personal data through the following means:

• Directly from you: During account registration, KYC document submission, payment transactions, form completions, and support communications;
• Automatically through the Platform: Via cookies, server logs, and browser fingerprinting technologies when you access the ultra666 website or mobile interface;
• From third-party service providers: Including payment processors (e.g., DuitNow, FPX, e-wallet providers), identity verification service providers, fraud detection services, and our licensed game content providers;
• From publicly available sources: Where necessary for fraud prevention, enhanced due diligence, or anti-money laundering compliance checks.

ultra666 processes your personal data for the following specific and documented purposes:

ultra666 processes your personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have entered into with ultra666 — including account creation, payment processing, and game access;
• Legal Obligation: Processing required for compliance with applicable laws, including KYC/AML regulatory requirements and record-keeping obligations;
• Legitimate Interests: Processing conducted in furtherance of ultra666's legitimate business interests — including fraud prevention, platform security, and service analytics — provided such interests are not overridden by your rights;
• Consent: Where you have provided clear, freely given consent for specific processing activities — primarily direct marketing communications. You may withdraw this consent at any time without affecting any prior processing.

ultra666 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We disclose personal data only to the following categories of recipients, and only to the extent strictly necessary:

• Payment Service Providers: Malaysian payment processors and financial institutions facilitating your transactions — including DuitNow, FPX operators, Touch 'n Go, Boost, GrabPay, and cryptocurrency exchange partners. These providers receive only the transaction data necessary to execute the payment;
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify your identity and conduct mandatory compliance checks;
• Game Content Providers: Licensed game studios and aggregators who power the casino and sports betting content on the Platform. These providers may receive anonymised session data for game integrity and RNG certification purposes;
• Technology and Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under strict data processing agreements;
• Regulatory and Law Enforcement Authorities: Where required by law, court order, regulatory direction, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity;
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged to advise ultra666, bound by confidentiality obligations.

ultra666 uses cookies and similar browser-based technologies on the Platform. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and CSRF protection cookies. These cannot be disabled without significantly impairing your ability to use the Platform;
• Functional Cookies: Store your preferences such as language settings and display options to improve your experience across sessions;
• Analytics Cookies: Collect anonymised data about how users navigate the Platform — pages visited, session duration, entry and exit points — to help us improve the user experience. No personally identifiable information is included in analytics data;
• Security Cookies: Used for fraud detection, rate limiting, and bot identification to protect the integrity of the Platform and your account.

ultra666 does not deploy third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies. You may manage cookie settings through your browser's built-in privacy controls. Disabling strictly necessary cookies may affect Platform functionality.

ultra666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your active membership with ultra666 and for a minimum period of five (5) years following account closure, in line with anti-money laundering record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later;
• Transaction Records: Retained for a minimum of seven (7) years for financial compliance and audit purposes;
• Support Communications: Retained for three (3) years from the date of the last communication or the resolution of any related dispute;
• Technical Logs: Retained for a rolling period of twelve (12) months, after which they are purged from active systems.

Where personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

ultra666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ultra666 Platform;
• AES-256 encryption for sensitive data fields stored at rest in our database infrastructure;
• Bcrypt hashing for all account passwords — plain-text passwords are never stored;
• Two-factor authentication (2FA) available for all Member accounts;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Segregated player fund accounts — operational funds and Member balances are held separately.

Notwithstanding the above, no internet transmission is completely secure. While ultra666 takes all reasonable precautions, we cannot unconditionally guarantee the security of data transmitted to us. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected breach.

Subject to applicable data protection law and certain legal limitations, you hold the following rights with respect to personal data processed by ultra666:

To exercise any of the above rights, please contact the ultra666 support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 days. We may request identity verification before actioning certain requests.

The ultra666 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step of our KYC process, and registrations from minors are refused and reported.

If you have reason to believe that a person under the age of 21 has provided personal data to ultra666, please notify us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete all personal data associated with the underage individual and close any associated account.

ultra666 operates with certain technology and service providers whose infrastructure may be located outside of Malaysia. Where personal data is transferred internationally, ultra666 takes all reasonable steps to ensure that an adequate level of protection is applied, including through:

• Engaging only service providers in jurisdictions with adequate data protection standards;
• Requiring all international Data Processors to execute data processing agreements that mandate compliance with applicable privacy obligations;
• Applying encryption and access controls to data in transit across jurisdictional boundaries.

We do not transfer personal data in a manner that would expose it to a materially lower standard of protection than it receives under this Policy.

ultra666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where material changes are made, we will provide reasonable advance notice to active Members via email or a prominent notice on the Platform.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the ultra666 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ultra666 holds about you, please get in touch through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the Platform — average first response under 3 minutes
• FAQ: Visit ourFrequently Asked Questions page for answers to common privacy and account queries

Our support team operates on Malaysian time (MYT, UTC+8) and handles all privacy-related communications in English. We are committed to resolving privacy queries promptly and transparently.