This Privacy Policy describes what personal information ultra888 may collect from eligible Malaysian players, why it is collected, how it is processed and what rights apply in relation to that information.
Effective date: 1 January 2026The following feature cards summarise the core principles that guide ultra888's approach to personal data. Full details are set out in the policy sections below and should be read carefully before using an account.
ultra888 collects personal information only for defined purposes such as account administration, identity verification, payment processing and responsible gambling support. Data is not used beyond those purposes without a legitimate basis.
KYC verification may require a valid Malaysian MyKad, driving licence or passport, proof of address and payment ownership evidence. These checks protect accounts and confirm that participation is limited to eligible adults aged 21 and above.
Information related to FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and other MYR payment channels is processed only for transaction administration and fraud prevention purposes.
Eligible players may request access to, correction of, or removal of personal data subject to applicable retention, legal, security and audit requirements. Rights can be exercised through the designated website contact.
ultra888 does not sell personal information. Limited disclosure to service providers, payment partners or fraud-prevention services may occur only to the extent necessary for operational, security or legal purposes.
Personal information is retained for as long as required to operate an account, meet compliance obligations, resolve disputes or support fraud investigations. Retention periods reflect the nature and sensitivity of each data category.
This policy applies to all ultra888 account holders and visitors. References to "you" or "your" mean the individual accessing ultra888. References to "we", "us", "our" or "ultra888" refer to the website operator.
ultra888 is an English-language online entertainment website designed for eligible Malaysian adults aged 21 and above. It provides information and access relating to casino-style games, sports betting markets, MYR payment options and responsible gambling tools.
This Privacy Policy explains how ultra888 collects, uses, stores, discloses and protects personal information in connection with account registration, identity verification, payment processing, customer support and other operational activities. It forms part of the agreement between ultra888 and each account holder alongside the Terms & Conditions.
By registering with ultra888 or continuing to use an account, you confirm that you have read and understood this Privacy Policy. If you do not agree with any provision, you should not proceed with registration or continued account use.
ultra888 may update this Privacy Policy from time to time. Significant changes will be communicated through an appropriate account or website notice. Continued use after the effective date of any revision constitutes acceptance of the updated policy, subject to applicable requirements.
When an eligible player registers with ultra888, we collect the information provided during the registration process. This may include your full name, date of birth, email address, contact number, preferred username, residential address and country of access. This information is required to create and administer an account and cannot be omitted without limiting account functionality.
Ultra888 may request copies of identity documents during initial registration or at a later date before processing a withdrawal or addressing an account concern. Documents typically requested include a valid Malaysian MyKad, driving licence or passport, a proof of address issued within three months (such as a utility bill or bank statement from a Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam address) and a selfie holding the identity document when required. Payment ownership evidence may also be requested where the account name and payment method name must be confirmed.
Transaction records are generated each time a deposit or withdrawal request is processed. This information includes the transaction amount in MYR, the payment method used, the transaction reference and the timestamp. ultra888 processes payment channel identifiers for available methods including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong. Full card or bank account numbers are handled through the relevant secure payment provider and are not stored on ultra888 systems beyond what is needed for transaction references.
Account activity information includes login history, session duration, game selections, stake values, bet settlements, tournament participation and bonus eligibility records. This information supports account management, responsible gambling monitoring, fraud prevention, dispute resolution and service improvement.
Technical information may be collected automatically when you access ultra888, including device type, operating system, browser version, IP address, network connection type, access timestamps and page interaction data. This information is used for security, fraud detection, session management and optimising the website experience across the mobile and desktop devices commonly used by Malaysian players.
When you contact ultra888 through a support channel, we may retain records of the communication, including the nature of the query, any documentation provided and the response given. These records may be used for quality review, dispute resolution and identifying patterns that could indicate account security issues.
ultra888 processes personal information for the following purposes, each supported by an appropriate lawful basis where required:
| Purpose | Description | Basis |
|---|---|---|
| Account administration | Creating, maintaining, updating and closing account profiles. | Contractual necessity |
| Identity and age verification | Confirming that participants are aged 21 or above and are who they claim to be. | Legal obligation and contractual necessity |
| Payment processing | Facilitating MYR deposits and withdrawals through available payment channels. | Contractual necessity |
| Fraud and security | Detecting, investigating and preventing unauthorized access, payment abuse and prohibited conduct. | Legitimate interest and legal obligation |
| Responsible gambling | Monitoring account activity to identify risk indicators and apply appropriate player protection measures. | Legal obligation and legitimate interest |
| Customer support | Responding to account queries, complaints and technical issues. | Contractual necessity |
| Legal compliance | Meeting applicable audit, investigation, record-keeping and disclosure obligations. | Legal obligation |
| Service improvement | Analysing aggregated usage patterns to improve the website, payment flows and player experience. | Legitimate interest |
ultra888 may use session cookies, persistent cookies and similar technologies to manage user sessions, maintain login state, detect fraud and collect the technical information described in section 3.5. Essential cookies are required for the website to function and cannot be declined without affecting account access.
Non-essential tracking technologies, if used, may be subject to separate consent where required by applicable standards. Players should review their browser or device settings if they wish to manage cookie preferences, bearing in mind that disabling essential cookies may prevent certain account features from working correctly.
ultra888 may share personal information with trusted service providers who assist with payment processing, identity verification, fraud prevention, customer support platforms and website hosting. These providers may access only the information necessary to perform their designated functions and are expected to handle it appropriately.
Transaction data is shared with the relevant payment network, bank, eWallet operator or digital-asset service provider when processing a deposit or withdrawal. This includes FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and any other available channel. Each payment partner operates under its own privacy terms.
ultra888 may disclose personal information to regulatory bodies, law enforcement or legal representatives when required or permitted by applicable law, court order, legal process or investigation. Such disclosure will be limited to what is required for the specified legitimate purpose.
In the event of a merger, acquisition, restructuring or transfer of all or part of ultra888's operational assets, personal data held at the time may form part of the assets transferred. Affected individuals should be notified through appropriate means where required by applicable standards.
ultra888 does not sell, rent, trade or otherwise commercially exploit personal information to unrelated third parties for their own marketing purposes.
Personal information is retained for as long as is reasonably necessary for the purposes described in this policy. Factors affecting retention include the duration of account activity, applicable legal obligations, audit requirements, fraud investigation periods and dispute resolution timescales.
Account closure does not trigger immediate deletion of all records. Financial, identity and compliance records may be retained for the period required by applicable rules before being securely disposed of. Players who wish to understand the retention period applicable to a specific category of data may submit a request to the website contact address.
Technical logs and session data may be retained for shorter periods sufficient for security and fraud review purposes. Aggregated, anonymised data that cannot be used to identify an individual may be retained for longer periods for service analysis purposes.
Subject to applicable law, an ultra888 account holder may have the following rights in relation to their personal information. The exercise of any right does not override legal, security or fraud-prevention obligations that require certain data to be retained or withheld.
Requests relating to personal data rights should be submitted in writing to the website contact shown in section 10. Identity confirmation will typically be required before a request is actioned. ultra888 will aim to respond within a reasonable period and will communicate if more time is needed due to complexity.
Send a written request to the ultra888 website email. Include your account reference or registered email address and a clear description of the right you wish to exercise. Identity confirmation may be requested for your protection before any action is taken.
ultra888 implements technical and organisational measures intended to protect personal information against accidental or unlawful access, alteration, disclosure or destruction. These include access controls, connection security and fraud-monitoring procedures.
No system is entirely immune from risk. Players are responsible for maintaining the security of their own accounts by using strong, unique passwords, protecting verification codes, signing out on shared devices and reporting suspected unauthorised access promptly. ultra888 is not responsible for losses caused by a player's voluntary disclosure of account credentials.
Identity documents submitted for KYC should be sent only through the secure designated area within the account. Sending identity documents via unsecured chat services, email or social platforms carries additional risk that is outside ultra888's control.
Never share your password, one-time verification codes or identity documents through a third-party channel. If you suspect your account has been accessed without your permission, report it through the official ultra888 support address immediately.
Questions, requests or complaints relating to this Privacy Policy may be directed to ultra888 using the website contact details set out below. Players submitting a data rights request should include their account reference or registered contact and a clear description of the request.
Privacy-related enquiries, data rights requests and security concerns may be submitted to the following address. This address is provided as plain text only and is not a clickable link.
ultra888 may process account activity and transaction information to support responsible gambling monitoring, including identifying patterns that may indicate problem gambling behaviour. This processing may result in account checks, limit suggestions or protective restrictions in appropriate circumstances.
Self-exclusion requests, where applicable, will be recorded and used to prevent re-registration or circumvention through new accounts during the exclusion period. This data is handled with appropriate care given its sensitive nature.
ultra888 is intended only for players aged 21 and above. Age verification information is therefore essential to account access and cannot be removed without affecting eligibility to participate.
ultra888 does not knowingly collect personal information from anyone under the age of 21. If it is discovered that a person below the minimum age has submitted information or created an account, that account will be closed and the associated data will be handled in accordance with applicable requirements. Parents or guardians who believe a minor has accessed ultra888 should contact us immediately.
ultra888 may revise this Privacy Policy to reflect changes in operational practices, applicable standards, payment services or the range of features available to Malaysian players. The effective date shown at the top of this page will be updated to reflect each revision.
Where a revision materially affects how personal data is used, appropriate notice will be given. Continued account use after the effective date of a revision indicates acceptance of the updated terms, subject to any requirements that apply in the relevant circumstances.
Players are encouraged to review this policy periodically, particularly before making significant account or payment decisions. The current version is always available at the privacy policy page address.
After reading this Privacy Policy, review the Terms & Conditions for account and participation rules, then visit the ultra888 homepage to explore what is available for eligible Malaysian players aged 21 and above.