UG808 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which UG808 ("the Company", "we", "us", "our") collects, processes, stores, and uses the personal data of individuals who register for or access the UG808 online gaming and sports betting platform at https://ug808.lat ("the Platform"), including any associated services, mobile interfaces, or communications channels operated by the Company.

UG808 is committed to responsible and transparent data handling. We recognise that the personal data you share with us — including identity documents, financial information, and account activity — deserves the highest level of protection. This Policy is designed to give you a complete and honest picture of how your information is used.

By registering an account on the Platform, you acknowledge that you have read, understood, and agreed to the terms of this Policy. This Policy operates alongside our Terms and Conditions and our Responsible Gambling Policy, all of which form part of our overall commitment to player protection.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, identification number, contact details, financial data, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, UG808 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement, without exercising independent control over the data.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which you accept the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process conducted by the Company as described in Section 3 and our Terms and Conditions.
• "Cookie" means a small text file placed on your device by a website to store session information, preferences, or analytics data, as further described in Section 9.

UG808 collects Personal Data through several channels and at different stages of your relationship with us. The categories of data we collect are set out in the table below:

We do not collect special category data (such as health data, racial or ethnic origin, or political opinions) except where you voluntarily disclose health-related information in the context of a responsible gambling self-exclusion request, in which case that information is processed solely to fulfil the exclusion and protect your welfare.

UG808 processes your Personal Data for the following purposes:

• Account Management: Creating and maintaining your registered account, authenticating login sessions, and administering your profile and preferences;
• Identity Verification (KYC): Verifying your age, identity, and residential address to comply with anti-money laundering ("AML") obligations and to prevent underage gambling;
• Payment Processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method (Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency);
• Platform Security: Detecting, preventing, and investigating fraud, collusion, bonus abuse, money laundering, and other prohibited activities described in our Terms and Conditions;
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance;
• Regulatory Compliance: Meeting our obligations under applicable AML, counter-terrorism financing ("CTF"), and data protection laws;
• Responsible Gambling: Monitoring account activity for signs of problem gambling, enforcing self-exclusion requests, and administering deposit and session limits;
• Platform Improvement: Analysing aggregated usage data to improve game performance, payment system reliability, and the overall player experience; and
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to members who have consented to receive marketing communications, in the language of their preference.

Each processing activity conducted by UG808 is founded on one of the following lawful bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement formed when you register an Account — including account management, payment processing, and customer support;
• Legal Obligation: Processing required to comply with applicable AML, KYC, CTF, and data protection laws binding on the Company;
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your rights and freedoms; and
• Consent: Processing based on your explicit, freely given consent — applicable primarily to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

UG808 does not sell, rent, or otherwise trade your Personal Data. We share your data only in the following limited circumstances:

• Payment Service Providers: Malaysian payment processors and e-wallet operators (including DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and relevant banking partners) receive the financial data necessary to process your transactions. These providers operate under their own privacy frameworks and applicable Malaysian financial regulations.
• Identity Verification Partners: Third-party KYC and AML service providers process identity documents and verification data on our behalf, under strict data processing agreements, for the sole purpose of completing your verification.
• Game Studio Partners: Licensed game studios and sports data providers receive pseudonymised session and wager data to facilitate gameplay and resolve disputes. They do not receive your identity or financial data unless specifically required for dispute resolution.
• Regulatory and Law Enforcement Authorities: We are legally obligated to disclose certain data to competent authorities where required by applicable law, court order, or official investigation — including, where applicable, Malaysian regulatory bodies and financial intelligence units.
• Professional Advisers: Our legal, accounting, and auditing advisers may access Personal Data to the extent strictly necessary to provide professional services, under obligations of confidentiality.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale involving the Company, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

UG808 retains Personal Data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data and KYC Records: Retained for a minimum of five (5) years following the closure or last activity of an account, in compliance with AML and financial record-keeping requirements;
• Transaction Records: Retained for seven (7) years from the date of each transaction, consistent with standard financial regulatory requirements;
• Customer Support Correspondence: Retained for three (3) years from the date of the final communication in a given support thread, or longer if the matter is the subject of ongoing dispute or legal proceedings;
• Marketing Preferences: Retained until you withdraw consent for marketing communications, after which opt-out records are maintained indefinitely to ensure your preference is respected; and
• Technical and Analytics Data: Retained in aggregated or anonymised form for platform improvement purposes, without time limit, once individual identifiers have been removed.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Requests for early deletion are considered under Section 10 (Your Rights) below.

UG808 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including identity document files and financial records;
• Role-based access controls limiting staff access to Personal Data to those with a documented operational need;
• Regular penetration testing and vulnerability assessments of the Platform's infrastructure;
• Two-factor authentication options for registered member accounts;
• Audit logging of all access to sensitive data systems; and
• Staff training on data protection obligations, phishing awareness, and secure data handling procedures.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights, UG808 will notify affected individuals and relevant authorities in accordance with applicable data breach notification requirements.

UG808 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Strictly necessary for the Platform to function — including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences — such as your preferred language (English, Bahasa Melayu, or Mandarin), currency display, and account settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — including page visit frequency, session duration, and feature usage — to help us improve the user experience. Analytics data is never linked back to your individual identity.
• Security Cookies: Used by our fraud and bot-detection systems to identify and block malicious traffic patterns without affecting legitimate users.

UG808 does not use third-party advertising cookies or cross-site tracking technologies that would allow external parties to profile your browsing activity across other websites. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain Platform features from functioning correctly.

As a data subject, you have the following rights in relation to your Personal Data held by UG808. To exercise any of these rights, please submit a request to [email protected] with your registered account username and a description of the right you wish to exercise.

UG808 will only send you promotional communications — including bonus offers, reload promotions, VIP loyalty updates, and platform news — where you have expressly opted in to receive such communications at the time of registration or subsequently through your account settings.

Marketing communications may be delivered by email, SMS, or in-platform notification, in your preferred language (English, Bahasa Melayu, or Mandarin). You may withdraw your consent and unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send you;
• Updating your notification preferences in your Account Settings; or
• Contacting our support team at [email protected] with a clear request to be removed from marketing communications.

Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal, and does not affect your ability to continue using the Platform or receiving service-critical communications (such as account security alerts, transaction confirmations, and KYC verification requests).

The UG808 Platform is strictly intended for use by individuals who are 21 years of age or older. We do not knowingly collect, process, or retain the Personal Data of persons under 21 years of age. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that an Account has been registered by, or Personal Data has been submitted on behalf of, a person under 21, we will immediately suspend the Account, delete the associated data to the extent permitted by AML record-keeping requirements, and forfeit any remaining balance. Parents and guardians who believe that their child has registered an Account on the Platform are encouraged to contact us immediately at [email protected].

UG808 operates infrastructure and engages service providers that may be located in jurisdictions outside Malaysia. Where your Personal Data is transferred internationally — including to payment processors, game studio partners, or cloud infrastructure providers located in other countries — we ensure that appropriate safeguards are in place before the transfer, including:

• Contractual data processing agreements incorporating internationally recognised data protection standards;
• Transfers to jurisdictions assessed to provide an adequate level of data protection; or
• Other legal mechanisms permitted under applicable data protection legislation.

We will always protect your Personal Data to the same standard described in this Policy, regardless of where it is processed.

UG808 may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. All amendments will be published on this page, and the "Last Updated" date will be revised accordingly.

Where a change is material — meaning it significantly affects your rights or the way we process your Personal Data — we will provide at least 14 days' advance notice via email (to the address registered to your Account) or via a prominent notice on the Platform before the change takes effect. Non-material clarifications or administrative updates may be published without prior notice.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the Platform — average response time 3-5 minutes
• Response Languages: English, Bahasa Melayu, and Mandarin

When submitting a data rights request by email, please include your registered Account username and a clear description of your request to help us process it efficiently. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 business days.