Ufo777 Privacy Policy – Data Protection
Malaysia Users

1Introduction

Ufo777 values the privacy of every member who uses our platform. This Privacy Policy is provided to clearly and transparently explain how we manage your personal data — from collection through to deletion — in line with industry best practices and applicable data protection requirements.

We understand that trust is the foundation of the relationship between ufo777 and our users. As such, we do not take lightly our responsibility to protect the information you entrust to us. Every data-related decision is made with the interests and safety of our users as the top priority.

This policy applies to all services offered through ufo777.pw, the ufo777 mobile app, and any other official channels operated by ufo777. If you have any questions after reading this document, our support team is available via live chat within the platform.

2Data Collected

Ufo777 collects your personal data when you register an account, use our services, or interact with our platform. The categories of data we collect are as follows:

Identity Data:

• Full name as it appears on official identification documents
• National identification number (MyKad) or passport number
• Date of birth and gender
• Current residential address
• Active mobile phone number
• Email address used for registration

Financial Data:

• Bank account number or e-wallet details (Touch 'n Go, GrabPay, DuitNow)
• Deposit and withdrawal transaction history
• Credit or debit card information (stored in encrypted format)
• Wagering records and game activity

Platform Usage Data:

• IP address and device information used
• Web browser or mobile app type and version
• Login session time and duration
• Pages visited and features used on the platform
• Error logs and technical diagnostic data

KYC Data (Verification Documents):

• Copy of identity card or passport
• Recent bank or utility statements (for address verification)
• Selfie or facial photo for live identity verification when required

In addition to data you provide directly, we also collect data automatically through cookie technology and analytics tools when you use our platform. Further details about cookies are explained in Section 5.

3How We Use Your Data

The personal data collected is used for the following purposes, which are necessary to operate the ufo777 platform safely and efficiently:

Purpose of Use	Types of Data Used	Legal Basis
Account registration and management	Identity data, email, phone number	Contract performance
Deposit and withdrawal processing	Financial data, transaction records	Contract performance
Identity verification (KYC)	Identity documents, KYC data	Legal obligations
Fraud prevention and security	Usage data, IP address, transaction records	Legitimate interests
Customer support	Identity data, account history	Contract performance
Marketing communications (with consent)	Email, phone number	Consent
Product improvement and analytics	Platform usage data (anonymised)	Legitimate interests
Regulatory compliance and reporting	All relevant data categories	Legal obligations

Ufo777 will not use your data for purposes other than those stated above without notifying you in advance and, where necessary, obtaining your fresh consent.

4Data Sharing

Ufo777 does not sell user personal data to any party. However, in the course of operating the platform, we may share data with the following parties under limited and controlled circumstances:

• Game providers: Usernames and session data required to grant you access to games from providers such as Playtech, Microgaming, and others. These providers are bound by strict data protection agreements.
• Payment processors: Transaction information required to process deposits and withdrawals via FPX, DuitNow, Touch 'n Go, GrabPay, and other supported payment channels.
• KYC service providers: Identity document data is shared with trusted third-party identity verification platforms to ensure a fast and secure KYC process.
• Legal authority: ufo777 will disclose data when required to do so by a court order, police warrant, or official request from a regulatory body with the relevant jurisdiction.
• Technical service providers: Cloud infrastructure providers, email services, and analytics tools that help us operate the platform. All these providers are bound by confidentiality agreements.

5Cookies & Tracking Technologies

Ufo777 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics data that helps us improve the platform. The types of cookies we use are as follows:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. The platform cannot function properly without them and they cannot be disabled.
• Preference Cookies: Used to remember your settings and preferences such as language, time zone, and preferred display layout. These cookies improve the usability of the platform.
• Analytics Cookies: Helps us understand how users interact with the platform — which pages are visited most frequently, how long sessions last, and where users encounter issues. This data is collected anonymously.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect user accounts from unauthorised access.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or user experience of the platform. For mobile apps, cookie settings can be managed through your device's privacy settings.

6Data Security

Ufo777 continually invests in security infrastructure to ensure user personal data is always protected at the highest level. The key security measures we practise are as follows:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using the latest TLS 1.3 protocol, ensuring data cannot be read by unauthorised parties while in transit.
• Data-at-rest encryption: Sensitive data such as financial information and KYC documents is encrypted at rest in the database using AES-256 encryption.
• Two-factor authentication (2FA): ufo777 supports and encourages the use of 2FA for all accounts. This additional security layer prevents unauthorised access even if your password is compromised.
• 24/7 security monitoring: Our intrusion detection system operates around the clock to identify and respond to any security threats promptly.
• Regular security audits: ufo777 conducts regular penetration testing and security audits by independent third parties to identify and patch any vulnerabilities.
• Internal access controls: Access to user data by UFO777 staff is governed by the principle of least privilege — only staff who require access for their specific duties are permitted.

7Data Retention & Deletion

Ufo777 retains user personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable law.

General retention period:

• Active account data: Retained for the duration your account remains active, plus any applicable legal retention period.
• Transaction data and financial records: Retained for a minimum of 7 years in accordance with anti-money laundering (AML) legal requirements and tax reporting obligations.
• KYC Data: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Security logs and usage data: Retained for 24 months for security investigation and fraud detection purposes.
• Customer support communications: Retained for 3 years for reference and service improvement.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process uses methods that ensure data cannot be recovered.

If you request account closure, ufo777 will initiate the deletion process for data not subject to legal retention obligations within 30 days of your request being confirmed.

8User Rights

As a ufo777 user, you have the following rights regarding your personal data. ufo777 is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days.
• Right to Rectification: If the data we hold is inaccurate or incomplete, you have the right to request a correction. You can also update most of your information directly through the profile settings on the platform.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data ("right to be forgotten"). This right is subject to legal retention obligations that may prevent immediate deletion.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while we investigate a dispute regarding data accuracy.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for certain purposes, including direct marketing. Once you object to direct marketing, we will immediately stop using your data for that purpose.
• Right to Withdraw Consent: For processing based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the ufo777 customer support team via live chat on the platform or by email at [email protected]. We will process your request within 30 days and may need to verify your identity before processing certain requests.

9Children's Data

Ufo777 is an online gambling platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we find that we have collected data from a minor, the account in question will be closed immediately and all related data will be deleted in accordance with our procedures. Parents or guardians who believe their child has registered an account on our platform are requested to contact us immediately via customer support.

10Cross-Border Data Transfers

In operating our platform, user personal data may be processed or stored on servers located outside Malaysia. This occurs when we use services from international cloud infrastructure providers or global game providers.

Ufo777 ensures that any cross-border data transfers are carried out with adequate safeguards in place, including:

• Comprehensive data processing agreements (DPA) with all vendors who receive user data
• Ensuring providers comply with data protection standards equal to or exceeding Malaysia's requirements
• Use of recognised standard contractual clauses to ensure continued data protection
• Periodic assessments of third-party providers' privacy practices

11Privacy Policy Changes

Ufo777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. The latest version of the Privacy Policy is always available on this page along with the update date.

When material changes are made to this Privacy Policy, UFO777 will notify users via one or more of the following: an in-platform notification upon login, an email to your registered address, or a prominent notice displayed on our website.

Continued use of the ufo777 platform after changes are published constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your data.

12Contact Us

If you have any questions, concerns, or complaints regarding how ufo777 handles your personal data, we encourage you to reach out to us directly. Our privacy and customer support team is ready to assist.

• Live Chat: Available 24 hours a day, 7 days a week via the chat button at the bottom corner of the ufo777 platform
• Email: [email protected] — we aim to respond within 24–48 business hours
• Service language: Bahasa Melayu and English

For complaints that our team is unable to resolve to your satisfaction, you have the right to refer the matter to the relevant regulatory body or data protection authority within your jurisdiction.