Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which ulti188 ("we", "us", "our", "the Company") collects, processes, stores, uses, and protects personal data in connection with the operation of the ulti188 online gaming platform, accessible at ulti188.cam ("the Platform").

Ulti188 is committed to handling personal data responsibly and in accordance with applicable data protection principles. We recognise that the personal data you entrust to us is sensitive, and we take our obligations as a data controller seriously.

This Policy applies to all individuals who access or use the Platform, including registered account holders, prospective players who browse the site, and visitors who interact with any feature of ulti188.cam. By using the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, either directly (e.g., name, NRIC number) or indirectly (e.g., IP address, device identifier combined with other data).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means ulti188, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, the Player or Platform user.
• "Third Party" means any natural or legal person other than the Data Subject and the Company, including payment processors, game software providers, fraud prevention services, and regulatory bodies.
• "Cookies" means small text files placed on a user's device by a website to store session information, preferences, and tracking data.
• "KYC" means Know Your Customer — the identity verification process required by the Company for regulatory compliance and fraud prevention purposes.

Ulti188 collects the following categories of personal data in connection with the operation of the Platform:

We collect only the data that is reasonably necessary for the purposes described in this Policy. We do not seek to collect sensitive personal data beyond what is required for identity verification and regulatory compliance.

Ulti188 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing the KYC process, submitting a deposit or withdrawal request, contacting customer support, or participating in promotional activities.
• Automated collection: Technical data collected automatically when you access or browse the Platform, including IP addresses, device identifiers, browser settings, and session activity logs via cookies and similar technologies.
• Payment processors: Transaction data received from payment partners such as FPX, DuitNow, and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay) in connection with deposits and withdrawals.
• Identity verification services: Data received from third-party KYC and fraud prevention service providers in connection with the verification of identity documents.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, we may supplement account data with information from publicly accessible records or sanction screening databases.

Ulti188 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and ulti188 — including account registration, payment processing, and service delivery — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other applicable regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security monitoring, responsible gambling supervision, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of personal data for marketing communications and optional personalisation features is conducted on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without detriment to your continued use of core Platform services.

Ulti188 uses collected personal data for the following purposes:

• Account management: Creating, maintaining, and securing your ulti188 account; processing login authentication; managing account settings and preferences.
• Payment processing: Facilitating deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect; processing withdrawal requests in MYR; maintaining financial transaction records.
• KYC and regulatory compliance: Verifying player identity and age (21+), conducting AML screening, satisfying reporting obligations imposed by applicable regulatory requirements.
• Service delivery: Delivering the gaming products and services you request, including sports betting, live casino games, and slot titles; settling bets and game rounds; managing bonus credits and wagering requirements.
• Responsible gambling: Monitoring gaming patterns for indicators of problem gambling; enforcing self-exclusion requests; implementing deposit limits and session controls.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, duplicate accounts, bonus abuse, collusion, and other prohibited conduct.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience.
• Marketing (with consent): Sending promotional offers, bonus notifications, and sports betting updates via email or SMS, where you have provided consent and have not subsequently opted out.

7.1   Ulti188 does not sell, rent, or commercially transfer your personal data to any third party for their independent marketing or commercial use.

7.2   We may share personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment service providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and participating Malaysian banks, for the purpose of processing deposits and withdrawals.
• Identity verification and AML service providers: Third-party KYC verification companies that assist in confirming player identity and conducting sanctions screening.
• Game software providers: Licensed game studios and content aggregators that supply the games available on the Platform. These providers may receive session data necessary to operate their games.
• IT and infrastructure providers: Cloud hosting and server management partners responsible for the technical operation of the Platform.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts where disclosure is required by applicable law, court order, or lawful request.
• Fraud prevention networks: Industry fraud prevention services that operate shared databases of fraudulent patterns and bad actors in the online gaming sector.

7.3   All third-party service providers engaged by ulti188 are required by contract to maintain the confidentiality of personal data shared with them, to use it only for the specified purpose, and to implement appropriate technical and organisational security measures.

7.4   In the event of a merger, acquisition, or sale of all or substantially all of ulti188's assets, personal data held by the Company may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

8.1   Ulti188 uses cookies and similar tracking technologies (including web beacons and session storage) to operate and improve the Platform. Cookies enable functionality such as keeping you logged in across pages, remembering your language preferences, and monitoring Platform performance.

8.2   The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled as they are essential for authentication, session management, and security. They do not require consent.
• Functional cookies: Used to remember your preferences (such as account settings and notification choices) and enhance your experience. These cookies persist between sessions.
• Analytics cookies: Used to collect aggregated, anonymised information about how visitors use the Platform — including page visit frequency and navigation paths — to help us improve Platform performance. Individual users are not identified through analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic detection and duplicate login attempt monitoring.

8.3   Non-essential cookies (functional and analytics) are set only with your consent, which you may provide or withdraw by adjusting your browser settings. Please note that disabling certain cookies may impair some features of the Platform.

8.4   Ulti188 does not deploy third-party advertising cookies or tracking pixels that share your data with advertisers for retargeting purposes.

9.1   Ulti188 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

9.2   The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account registration and for a period of 5 years following account closure.
• Financial transaction records: Retained for a minimum of 5 years following the transaction date, in accordance with AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Support communications: Retained for 3 years following the resolution of the relevant interaction.
• Technical and access logs: Retained for 12 months from the date of generation, unless required to be retained longer in connection with a specific security investigation.
• Marketing preferences: Retained until you withdraw consent or close your account.

9.3   Where retention periods are extended due to ongoing legal proceedings, regulatory investigations, or disputes, data will be retained until the matter is fully resolved.

9.4   Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

As a data subject, you hold the following rights in respect of your personal data processed by ulti188. To exercise any of these rights, please contact our support team using the details in Section 15.

11.1   Ulti188 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of personal data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Continuous security monitoring and intrusion detection systems
• Regular security assessments and vulnerability testing
• Multi-factor authentication requirements for internal administrative access
• Secure, access-controlled data centres with physical security measures

11.2   While ulti188 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely immune to risk. We strongly encourage you to use a unique, strong password for your account and to avoid accessing your account over public or unsecured Wi-Fi networks.

11.3   In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ulti188 will take prompt action to contain the breach, notify relevant authorities as required, and where the risk is high, notify affected players without undue delay.

12.1   The ulti188 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

12.2   As part of the registration process, all applicants are required to confirm that they meet the minimum age requirement. KYC verification provides a secondary layer of age confirmation.

12.3   If we become aware that personal data has been provided by a person under the age of 21, we will immediately suspend the associated account, delete all personal data associated with that account, and return any deposits made, less any amounts subject to ongoing investigation.

12.4   If you believe that a minor may have registered an account using your or another adult's details, please contact our support team immediately at [email protected].

The Platform may contain references or contextual mentions of third-party services, including Malaysian payment providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. These references are provided for informational context only.

Ulti188 is not responsible for the privacy practices or the content of any third-party platforms, services, or websites. We encourage you to review the privacy policies of any third-party service you interact with, particularly your chosen payment provider, to understand how they handle your personal data independently of ulti188.

14.1   Ulti188 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision will be displayed at the top of this page.

14.2   Where changes to this Policy are material — meaning they significantly alter how we collect, use, or share personal data — we will notify registered account holders via the email address associated with their Account, or via a prominent notice on the Platform, prior to the changes taking effect.

14.3   Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with the process described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ulti188, please contact our support and data team using the following details:

We are committed to resolving all privacy-related concerns in a transparent, fair, and timely manner. Your trust in ulti188 to handle your personal data responsibly is something we take seriously, and we welcome all feedback that helps us improve our privacy practices.