Ubox88 Privacy Policy – Member Personal Data Protection

Your privacy is not merely a legal obligation for ubox88 — it is a core value we have upheld since the very first day this platform was established. We understand that when you entrust us with your personal information, that is a great responsibility we do not take lightly.

This Privacy Policy is written in plain language, not filled with confusing legal jargon. We want every member to truly understand what happens with their data — not just click "Agree" without knowing what they are agreeing to.

This policy applies to all users of the ubox88 platform, including the website ubox88.fun and our official mobile app for Android and iOS. By registering or using any of our services, you agree to the practices described in this document.

1 Introduction & Scope of This Policy

Ubox88 is an online betting platform operator running under a valid license. As a responsible operator, we are bound by various data protection laws and regulations applicable in our jurisdiction, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy explains:

• The types of personal data we collect from you.
• How and why we use that data.
• Who your data may be shared with, and under what circumstances.
• How we protect your data from unauthorised access.
• The rights you have regarding your personal data.
• How to contact us if you have any questions or concerns.

This policy applies only to data we collect directly through the ubox88 platform. Any third-party websites or services that may be linked from our platform have their own privacy policies and are not covered by this document.

2 Types of Data We Collect

We collect data in several ways depending on how you interact with our platform. Below is a comprehensive overview of the types of data we may collect:

A) Data You Provide Directly

• Registration information: Full name, date of birth, identification number (MyKad/Passport), email address, phone number, and residential address.
• Financial information: Your bank account number, account holder name, and the payment method you use for deposits and withdrawals.
• KYC verification documents: A copy of your MyKad or passport, proof of address (recent utility bill or bank statement), and any other documents required for the identity verification process.
• Communications: Any messages, complaints, or enquiries you submit to our support team.

B) Automatically Collected Data

• Technical data: IP address, web browser type, operating system, device type, and screen resolution.
• Usage data: Pages you visit, time spent on each page, links clicked, and navigation patterns within the platform.
• Transaction data: Records of all deposits, withdrawals, wagering activity, and other financial transactions in your account.
• Location data: General location information based on your IP address for compliance and security purposes.

C) Data from Third Parties

• Verification information from the KYC service providers we use.
• Transaction data from payment gateway providers such as FPX, DuitNow, and e-wallet providers.
• Solvency information or risk assessments from credit rating agencies where applicable.

3 How We Use Your Data

Ubox88 uses your personal data only for legitimate and reasonable purposes. Below is a full list of how your data is used:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process required before your first withdrawal.
• Transaction processing: Processing deposits, withdrawals, bonuses, and all other financial transactions securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, multiple-account usage, and other suspicious activities.
• Legal compliance: Fulfilling legal obligations including reporting to relevant authorities when required.
• Customer support: Answering enquiries, resolving complaints, and providing technical assistance to members.
• Service improvement: Analysing usage patterns to improve the user experience, platform performance, and product offerings.
• Marketing communications: Sending promotional information, exclusive offers, and platform updates — only to members who have consented to receive such communications.
• Responsible wagering: Monitoring wagering patterns to identify signs of problem gambling and offer appropriate support.

4 Data Sharing & Disclosure

Ubox88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. This is a commitment we will not waive even if compensation is offered.

However, there are certain situations where we may need to share your data with selected parties:

• Service providers: Technical partners who help us operate the platform, including payment gateway providers, KYC services, cloud infrastructure providers, and gaming software providers. All parties are bound by strict confidentiality agreements.
• Regulatory authority: Licensing bodies and relevant authorities that may require access to certain records within the compliance framework.
• Law enforcement: Police, courts, or law enforcement agencies when required by a valid court order or applicable law.
• Fraud prevention: An integrated fraud prevention agency that helps us identify and block illegal activity.

5 Security & Data Protection

We continually invest in security infrastructure to ensure your personal and financial data is always protected. Our security measures encompass multiple layers:

• Transit encryption: All data transmitted between your device and our servers is protected by TLS 1.3 encryption — the same security protocol used by leading banking institutions.
• Storage encryption: Sensitive data such as banking information and identification card numbers are stored in encrypted format using AES-256 algorithms.
• Access controls: Only authorised staff may access member personal data, and every access is recorded in a tamper-proof audit log.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an extra layer of security on their account.
• 24/7 Monitoring: Our cyber threat monitoring system operates around the clock to detect any unauthorised access attempts.
• Penetration testing: Our platform undergoes regular security testing by independent cybersecurity firms.

While we do everything in our power, no system can be completely guaranteed secure. Should a data breach occur that affects your information, we will notify you within the timeframe required by applicable law and take immediate steps to mitigate its impact.

6 Cookies & Tracking Technologies

The ubox88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference cookies: Saving your settings such as preferred language and interface display so you do not need to reconfigure them each time.
• Analytics cookies: Helping us understand how users interact with the platform for continuous improvement. This data is collected in aggregate and does not identify individuals.
• Security cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can control and delete cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your overall experience.

7 Your Rights as a Data Subject

Under applicable data protection laws, you have several important rights regarding your personal data. ubox88 respects and facilitates the exercise of these rights:

8 Protection of Children's Data

The ubox88 platform is inappropriate and not permitted for individuals under 21 years of age. We do not knowingly collect or process personal data from children or minors below the stipulated age limit.

If we discover that we have inadvertently collected personal data from individuals who do not meet the minimum age requirement, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who discover that their child or ward has registered on the ubox88 platform are urged to contact us immediately so that we can take appropriate action.

9 Cross-Border Data Transfers

As ubox88 operates as an online platform, your personal data may be stored or processed on servers located outside Malaysia. This includes cloud infrastructure servers we use to ensure fast platform performance and high reliability.

In all cases of cross-border data transfers, we ensure that:

• The recipient country or region has an equivalent or higher level of data protection.
• Appropriate data transfer agreements have been established with all parties involved.
• Appropriate technical and organisational measures are taken to protect your data during transfer.

10 Data Retention & Deletion

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements.

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date as required by anti-money laundering laws.
• KYC records: Retained for a minimum of 5 years after the termination of the business relationship.
• Support communication logs: Retained for 3 years for dispute resolution purposes.
• Marketing data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

11 Changes to This Privacy Policy

Ubox88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, updated legal requirements, or improvements to our services.

Each time we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all registered members via their registered email address.
• Displaying a clear notice on the platform's home page for at least 14 days.

Your continued use of the ubox88 platform after any changes take effect constitutes your acceptance of the updated policy. If you do not agree, you have the right to close your account before the changes come into effect.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) team through the following channels:

• Live Chat: Available 24/7 directly within the ubox88 platform — the fastest way to get a response.
• Email: [email protected] — for written inquiries that require an official record.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex requests such as data access or data deletion requests, processing may take up to 30 business days.