UFA99 Malaysia Privacy Policy

1. Personal Information We Collect

UFA99 collects users' personal data to keep the platform running smoothly, securely, and in compliance with Malaysian legal requirements. The type of data we collect varies depending on how you interact with our platform.

1.1 Information Provided Directly

When you register a ufa99 account or use our services, you voluntarily provide the following information:

• Full name as shown on your MyKad or Malaysian passport
• National Identity Card number (MyKad) or passport number
• Date of birth for age verification
• Active email address
• Malaysian mobile phone number
• Current residential address in Malaysia
• Local bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for withdrawal purposes

1.2 Information Collected Automatically

Each time you access the UFA99 platform, our system automatically records the following technical information:

• Your device's IP address
• Web browser type and operating system version
• Device type (smartphone, tablet, or computer)
• Approximate location data based on IP address (state within Malaysia)
• Pages visited and session duration
• Game activity logs and betting history
• Deposit and withdrawal transaction data

1.3 Information from Third-Party Sources

In certain cases, UFA99 may receive additional information about you from payment service providers we work with, such as identity verification from FPX or local e-wallet providers. This information is used solely for verification and security purposes.

2. How UFA99 Uses Your Personal Data

UFA99 uses the data we collect for legitimate and limited purposes only. We will never use your data for anything unrelated to the provision of our platform services.

Purpose of Use	Types of Data Used	Legal Basis
Account registration & verification	Full name, IC number, email, phone number	Contract fulfilment
Processing deposits & withdrawals	Bank/e-wallet details, transaction history	Contract fulfilment
Fraud prevention & security	IP address, activity logs, device data	Legitimate interests
KYC & legal compliance	MyKad, full name, address	Legal obligations
Customer Support	Email, phone number, account history	Contract fulfilment
Platform improvements	Anonymised usage data	Legitimate interests
Marketing communications (with consent)	Email address, phone number	Consent

3. Data Sharing & Disclosure

Ufa99 does not sell, rent, or trade users' personal data to any third party for commercial purposes. However, there are limited situations where we may need to share your data with other parties:

3.1 Payment Service Providers

To process your deposits and withdrawals, UFA99 is required to share minimal transaction information with our payment providers — including FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow. Data shared is strictly limited to what is necessary to complete the transaction.

3.2 Legal Requirements

UFA99 may disclose users' personal data to Malaysian authorities where required by law, court order, or official investigation. In such circumstances, we will notify the affected users where permitted to do so by law.

3.3 Technology Providers

UFA99 uses trusted third-party services to manage the platform's technical infrastructure, including cloud hosting, platform analytics, and cybersecurity systems. All such providers are bound by strict confidentiality agreements and are only permitted to access data necessary for their designated tasks.

4. Data Security & Technical Protection

UFA99 implements a range of technical and organisational measures to protect users' personal data from unauthorised access, loss, destruction, or accidental disclosure.

The security measures we have in place include:

• 256-bit SSL/TLS encryption for all data communications between your browser and our servers
• User passwords are stored in hashed form using the bcrypt algorithm — no UFA99 employee can ever view your original password
• Two-factor authentication (2FA) is available and strongly encouraged for all UFA99 accounts
• Round-the-clock security monitoring, 24/7, by our in-house cybersecurity team
• Regular penetration testing by independent security firms
• Multi-layered internal access controls — sensitive user data is accessible only to staff with specific authorisation
• Daily data backups stored at a separate, secure location

While ufa99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. Users are also responsible for safeguarding their own login credentials. If you suspect any suspicious activity on your account, please contact the ufa99 support team immediately.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the UFA99 website. They help our platform recognise your device, remember your preferences, and improve your overall experience while using UFA99.

5.2 Types of Cookies Used by UFA99

• Session Cookies: Required to maintain your login session while using the platform. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saves your language, region, and display preferences so you don't have to reconfigure them each time you visit.
• Analytics Cookies: Helps UFA99 understand how users interact with our platform for improvement purposes. This data is aggregated and does not identify individuals.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

5.3 Managing Cookies

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies — particularly session cookies — may affect the functionality of the ufa99 platform, and you may be unable to log in or use some features properly.

6. Data Storage & Retention

UFA99 retains users' personal data for as long as the account remains active, and for the period required after account closure in accordance with Malaysian legal requirements. Specifically:

• Financial transaction data — retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements
• Gaming and betting activity logs — retained for 2 years from the date of activity
• Customer support communication records — retained for 3 years
• Identity verification data (KYC) — retained for 5 years after account closure
• Marketing data (where consent has been given) — retained until consent is withdrawn

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to any specific individual.

7. Third-Party Links

The UFA99 platform may contain links to third-party websites or services in certain contexts. The UFA99 Privacy Policy does not apply to those third-party websites or services. UFA99 is not responsible for the privacy practices or content of any external websites. We recommend reading the privacy policy of every website you visit.

8. Changes to This Privacy Policy

UFA99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any material amendments will be communicated to users via in-platform notification or email at least 7 days before taking effect.

The date of the most recent update to this Privacy Policy will always be displayed at the top of this document. We encourage you to review this page periodically. Your continued use of the ufa99 platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy.

9. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how UFA99 handles your personal data, please reach out to us through the following channels:

• Email: support@ufa99.my
• Live Chat: Available 24 hours a day, 7 days a week on the UFA99 platform
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days