Privacy Policy

1. Who We Are

ultra666 ("we", "us", "our") operates the online gaming platform accessible at ultra666.lat (the "Platform"), offering casino games, sportsbook, poker, and related entertainment services to eligible Members. This Privacy Policy applies to all personal data processed by ultra666 in connection with your use of the Platform, whether you access it from Kuala Lumpur, Penang, Johor Bahru, or any other location.

For the purposes of applicable data protection legislation, ultra666 is the data controller in respect of personal data collected directly through the Platform. ultra666 processes personal data in accordance with its obligations under its operating licence and applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

When you register an ultra666 account or interact with our Platform, we collect information that you actively provide, including:

• Identity data: full legal name, date of birth, gender, nationality;
• Contact data: email address, mobile phone number, residential address;
• Identity verification documents: copies of government-issued identification (e.g., MyKad, passport) and supporting address verification documents submitted in connection with Know Your Customer (KYC) procedures;
• Financial data: payment method details (e-wallet account references, bank account numbers) used for deposits and withdrawals; transaction amounts and history;
• Account credentials: username and encrypted password;
• Communications: the content of messages, enquiries, and complaints submitted to the ultra666 support team.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, and browser type;
• Pages visited, time spent on each page, and navigation paths;
• Game activity logs, bet amounts, game outcomes, and session durations;
• Cookies and similar tracking technology data (see Section 6);
• Geolocation data at the country or region level, derived from your IP address.

3. How We Use Your Information

ultra666 uses the personal data we collect for the following purposes:

• Account management: to create, administer, and maintain your ultra666 account, including processing your ultra666 login authentication;
• Identity and age verification: to verify that you meet eligibility requirements, including the 21+ age restriction mandated by our licence;
• Transaction processing: to process deposits, withdrawals, and bonus credits denominated in MYR;
• Regulatory compliance: to fulfil anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming obligations under our operating licence;
• Platform operation: to provide, maintain, and improve the gaming products and services available through ultra666;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, account abuse, and technical security incidents;
• Customer support: to respond to enquiries, resolve complaints, and provide assistance;
• Marketing communications: where you have provided consent or where we have a legitimate interest, to send promotional communications about offers, new games, and events on ultra666. You may opt out at any time;
• Analytics and improvement: to understand how Members use the Platform and to improve game offerings, user experience, and cashier functionality.

4. Legal Basis for Processing

ultra666 processes your personal data on one or more of the following legal bases, depending on the processing activity:

• Contract performance: processing is necessary to perform the contract with you (i.e., to provide the gaming services you have registered to use);
• Legal obligation: processing is required to comply with applicable law, including AML/CTF regulations, age verification requirements, and licence conditions;
• Legitimate interests: processing is necessary for ultra666's legitimate interests in operating a secure, fraud-free platform, subject to those interests not being overridden by your data protection rights;
• Consent: where we rely on consent (e.g., for certain marketing communications), you may withdraw that consent at any time by contacting us or using the opt-out mechanism in any marketing message.

5. Sharing Your Personal Information

ultra666 does not sell your personal data to third parties. We may share your information with the following categories of recipients, strictly for the purposes described in this Policy:

• Game providers and platform technology partners: who supply the software and infrastructure enabling ultra666's games and cashier functions. These parties act as data processors under contract with ultra666;
• Payment processors and e-wallet operators: such as Touch 'n Go eWallet, Boost, and banking partners, for the purpose of processing your financial transactions;
• Identity and age verification service providers: who assist ultra666 in fulfilling its KYC obligations;
• Regulatory and law enforcement authorities: where ultra666 is legally required to disclose personal data under the terms of its operating licence, AML/CTF legislation, or a valid court or government order;
• Professional advisers: including lawyers, auditors, and compliance consultants, subject to applicable professional confidentiality obligations;
• Successor entities: in the event of a merger, acquisition, or sale of all or part of the ultra666 business, your personal data may be transferred as part of that transaction, subject to the acquiring party maintaining equivalent privacy protections.

6. Cookies & Tracking Technologies

The ultra666 Platform uses cookies and similar technologies to operate correctly and to improve your experience. Categories of cookies used include:

• Strictly necessary cookies: essential for Platform functionality, including maintaining your ultra666 login session and remembering your language preferences. These cannot be disabled without disrupting Platform operation;
• Performance and analytics cookies: used to collect anonymised information about how Members use the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve Platform performance;
• Functional cookies: used to remember your preferences and personalise your experience, such as remembered game settings;
• Security cookies: used to detect suspicious behaviour, support fraud prevention, and maintain session integrity.

You can control cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. Strictly necessary cookies are not subject to cookie consent controls as they are essential for the Platform to function.

7. Data Retention

ultra666 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting requirements. Specific retention periods include:

• Active account data is retained for the duration of your membership with ultra666;
• Following account closure, personal data (including identity documents, transaction records, and game logs) is retained for a minimum of five (5) years to satisfy AML/CTF regulatory obligations;
• Marketing consent records are retained for three (3) years from the date of consent or last interaction, whichever is later;
• Customer support communications are retained for two (2) years from the date of closure of the relevant support case.

When personal data is no longer required, it is securely deleted or anonymised in accordance with ultra666's data destruction procedures.

8. Data Security

ultra666 implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ultra666 Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Access controls limiting personal data access to authorised personnel only, on a need-to-know basis;
• Two-factor authentication (2FA) available to all Members for ultra666 login security;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures to address any personal data breach promptly and in accordance with regulatory notification requirements.

Whilst ultra666 takes reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. We encourage Members to use strong, unique passwords and to enable 2FA on their ultra666 account.

9. Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by ultra666:

• Right of access: you may request a copy of the personal data ultra666 holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: in certain circumstances, you may request deletion of your personal data. Note that regulatory retention obligations (see Section 7) may limit the scope of this right;
• Right to restriction: you may request that ultra666 restrict processing of your personal data in certain circumstances;
• Right to object: you may object to processing based on legitimate interests or direct marketing;
• Right to data portability: where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, commonly used format;
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact the ultra666 support team. We will respond within thirty (30) days. We may need to verify your identity before processing a request.

10. Children's Privacy

The ultra666 Platform is strictly intended for individuals aged 21 years and above. ultra666 does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has provided personal data to ultra666, please contact us immediately.

11. International Data Transfers

ultra666's operations involve the use of technology infrastructure, game providers, and service partners located in various jurisdictions. As a result, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as Malaysia.

Where such transfers occur, ultra666 ensures appropriate safeguards are in place, including contractual data processing agreements that require recipients to protect your personal data to a standard equivalent to that applied by ultra666. By using the Platform, you acknowledge that such international transfers may occur.

12. Third-Party Links

The ultra666 Platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies solely to data processed by ultra666 directly through the Platform. ultra666 is not responsible for the privacy practices of third-party sites. We encourage you to read the privacy policies of any third-party services you access through or in connection with ultra666.

13. Changes to This Privacy Policy

ultra666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our services. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will provide notice via a prominent notice on the Platform or by email to your registered address. Continued use of the ultra666 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ultra666, please contact our support team:

This Privacy Policy was last reviewed and approved on 1 June 2026. ultra666 reserves all rights not expressly granted herein.