Ubet Privacy Policy – How We Protect the Personal Data & Information of Malaysian Members

This Privacy Policy is published by ubet, an online entertainment platform operating under the domain ubet-khelo.com and designed for Malaysian users. This document clearly and transparently explains how we collect, store, use, share, and protect your personal data when you use ubet's services.

By registering an account and using any ubet service — including live casino, slots, blackjack, live matches, cricket, and the VIP Rewards programme — you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the ubet platform.

Ubet complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant regulations. We have appointed a Data Privacy Officer responsible for ensuring that all of ubet's data handling practices are in line with current Malaysian law.

Ubet collects several categories of personal data depending on how you interact with our platform. Below is a full breakdown of those data categories:

• Registration Data: Full name, date of birth, email address, phone number, and encrypted password when you create a ubet account.
• Identity Verification (KYC) Data: A copy of your MyKad or passport, a selfie for facial verification, and proof of address such as a utility bill or bank statement when required for compliance purposes.
• Financial Data: A full record of all deposit and withdrawal transactions, including date, amount in RM, payment method used (e.g. Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u), and transaction reference number.
• Platform Activity Data: Gaming history including game type, bet amounts, results, and winnings; sports betting history including selected matches, market types, and outcomes; as well as Cash Out activity and in-play feature usage.
• Technical Data: IP address, web browser type and version, operating system, screen resolution, access time, pages visited, and actions taken within the platform.
• Communication Data: Records of all live chat sessions, emails sent to the ubet support team, and any feedback you have submitted through official ubet channels.

Your personal data is collected by ubet through several channels:

• Directly from You: When you complete the registration form, submit KYC documents, make a deposit, contact customer support, or fill in any form on the ubet platform.
• Automatically: Through cookies, tracking pixels, and similar technologies as you browse and use the ubet platform. This includes technical device information and platform usage patterns.
• From Payment Providers: Transaction verification information from Malaysian payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX — limited to transaction status and payment reference only.
• From Third-Party Service Providers: In certain situations, ubet may receive information from third-party identity verification providers used for KYC processing or fraud prevention checks.

Ubet processes your personal data only for legitimate, clearly defined purposes. The legal basis for each processing purpose is either the consent you have provided, contractual necessity, legal obligation, or ubet's legitimate interests:

• Account Management: Registration, identity verification, secure login, password management, and two-factor authentication.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and FPX; processing winnings withdrawals; transaction verification; and bonus programme management.
• Provision of Gaming Services: Operates live matches, slots, blackjack, Live Casino, and all other entertainment products; stores betting history and results for audit and verification purposes.
• Platform Security: Fraud detection, anti-money laundering, unauthorised access detection, collusion monitoring, and protection of the integrity of ubet's betting systems.
• Legal Compliance: Fulfilling requirements under the PDPA 2010, anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and any directives issued by Malaysian authorities.
• Service Improvement: Analysing platform usage patterns to improve the user experience, resolve technical issues, and develop new features suited to the needs of Malaysian members.
• Marketing Communications (with consent): Sending promotional information, bonus offers, updates on new games, and the VIP Rewards programme to members who have consented to receive such communications.

Ubet does not sell or trade members' personal data to any third party for marketing purposes. However, in the course of operating the platform, ubet may share necessary personal data with the following categories of third parties, and only to the extent required:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX financial institutions (Maybank, CIMB) for processing deposit and withdrawal transactions. Data sharing is limited strictly to information required for transaction processing.
• Game Service Providers: Casino providers such as Evolution Gaming and Pragmatic Play, and slots providers such as PG Soft, NetEnt, and Habanero receive the technical data necessary to operate their games. They do not receive personal identity information that could be used to directly identify you.
• Identity Verification Service Providers: Companies that assist ubet in verifying member identities for KYC and AML compliance purposes. All such providers are bound by strict confidentiality agreements.
• Cloud Service Providers: ubet's server infrastructure may utilise internationally recognised cloud services. All data is stored in encrypted environments with strict access controls.
• Legal Authorities: ubet will disclose personal data to Malaysian law enforcement agencies, courts, or regulatory bodies when required by court order, subpoena, or applicable legal requirement. ubet will notify affected members where permitted to do so.

All third parties that receive data from ubet are bound by data processing agreements requiring them to protect that information to a standard no less stringent than ubet's own.

Ubet invests seriously in security infrastructure to protect members' personal data. The technical and organisational measures we have in place are as follows:

• 256-bit SSL Encryption: All communications between your browser and ubet's servers are encrypted using the latest TLS protocol, rendering data unreadable even if intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in ubet's databases — including passwords, MyKad numbers, and financial information — is encrypted using industry-standard encryption algorithms.
• Multi-Layer Access Controls: Only authorised ubet staff who require data access to carry out their duties are granted permission, following the principle of least privilege.
• 24/7 Security Monitoring: Automated security monitoring systems operate around the clock to detect suspicious activity, intrusion attempts, and unauthorised access.
• Regular Security Audits: ubet conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Two-Factor Authentication: Available to all ubet members and strongly recommended to be activated to protect your account from unauthorised access.

Ubet retains your personal data for as long as your account is active and for the period required thereafter in accordance with legal obligations and the purposes stated. Below are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and has not been formally closed.
• Financial & Transaction Data: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysia's tax and financial regulatory requirements. This is a non-negotiable compliance obligation.
• KYC (Identity Verification) Data: Retained for 5 years from account closure or the date of the last transaction, in accordance with Malaysia's anti-money laundering (AML) legislation.
• Security Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communication Records: Retained for 3 years for dispute resolution and service quality improvement purposes.

Once the relevant retention period has expired, ubet will permanently delete or anonymise the data in accordance with secure data disposal procedures.

Ubet uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the ubet website. The following are the types of cookies we use:

• Strictly Necessary Cookies: Required for core platform functions such as maintaining your login session and account security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language, display format, and game settings so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Collects anonymised data on how members use the ubet platform — including the most visited pages, time spent, and navigation patterns. This information helps us improve the platform.
• Security Cookies: Used to detect fraud attempts, unauthorised access, and suspicious behaviour that may compromise member account security.

You can manage and control cookies through your web browser settings. Disabling certain cookies may affect your experience on the ubet platform, particularly those required for login functionality and security.

The ubet platform is exclusively for individuals aged 18 and above. ubet does not knowingly collect any personal data from individuals under 18. Our registration process includes age verification steps designed to prevent underage sign-ups.

In the course of its operations, ubet may transfer or store your personal data on servers located outside Malaysia – for example, when using international cloud services or working with international gaming providers such as Evolution Gaming and Pragmatic Play, which operate global infrastructure.

Ubet ensures that any transfer of personal data outside Malaysia is carried out with adequate safeguards in place, including:

• Data transfer agreements that require recipients in other countries to comply with data protection standards equivalent to or higher than those required under Malaysia's PDPA.
• Use of recognised standard contractual clauses to safeguard members' privacy rights in international data transfers.
• Confirmation that the destination country maintains adequate data protection laws, or that appropriate protective mechanisms have been put in place.

To exercise any of the privacy rights outlined in this policy – whether that is access, correction, deletion, marketing opt-out, data portability, or processing restriction – please follow the procedure below:

• Email the ubet privacy team at support@ubet-khelo.com with the subject line "Privacy Rights Request – [Request Type]".
• Include your ubet account number or registered email address to verify your identity.
• Clearly state the right you wish to exercise and provide relevant details about your request.
• Ubet will send an acknowledgement within 2 business days and fulfil the request within 14 business days, or sooner where possible.

Ubet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the technologies we use. When significant changes are made, we will:

• Publishing an updated version on this page with a clearly stated revision date.
• Notifying members via their registered email or in-platform ubet notifications at least 7 days before changes take effect, except for minor changes that do not affect your core privacy rights.
• For significant changes that require fresh consent, we will actively seek your approval before implementing them.

We encourage you to review this Privacy Policy from time to time to stay informed about how ubet protects your information. The "last updated" date at the top of this document indicates when the most recent revision was made.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ubet handles your personal data, please contact us through the following channels:

• Privacy Email: support@ubet-khelo.com – use the subject line "Privacy Enquiry" for a prioritised response
• Live Chat: Available 24/7 on the ubet platform — response time under 2 minutes

The ubet privacy team will respond to all written enquiries within 3 business days. If you are not satisfied with the response provided, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department, the regulatory body overseeing PDPA compliance in Malaysia.