Privacy Policy ubox88 – Our Commitment to Protecting the Personal Data of Malaysian Members

In operating our betting and digital entertainment platform, ubox88 collects various types of personal data necessary to provide services that are secure, efficient, and legally compliant. The data we collect falls into several key categories:

ubox88 use your personal data only for the lawful and specified purposes set out below. We will not use your data beyond the scope described without first obtaining your consent:

• Account Management: Creating and managing your account, verifying your identity, and processing deposits and withdrawals in MYR via local methods such as Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX.
• Service Delivery: Gives you access to all ubox88 products, including football betting (EPL, Malaysia Super League), badminton, cricket, e-sports, live casino, slots, and jackpots.
• Legal Compliance: Meeting licensing compliance requirements, KYC (Know Your Customer) procedures, and anti-money laundering (AML) obligations set by regulatory authorities.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised access, and platform abuse.
• Customer Support: To efficiently handle your inquiries, complaints, and technical support requests.
• Marketing (With Consent): Sending information about ubox88 promotions, bonuses, and special offers — only if you have given consent to receive marketing communications.
• Platform Improvements: Analysing usage patterns to improve the performance, usability, and features of our platform.

The legal basis for each of our data processing activities is either (i) performance of a contract to provide the services you have requested, (ii) compliance with our legal obligations, or (iii) legitimate interests that do not override your privacy rights.

ubox88 does not sell or trade your personal data. However, in the course of operating our platform, we may need to share certain information with selected and regulated parties:

• Payment Providers: E-wallet and banking processors such as Touch 'n Go, GrabPay, DuitNow, and the FPX network require transaction details to process your deposits and withdrawals.
• Game Providers: Companies such as Pragmatic Play, PG Soft, and Microgaming, which provide slots and live casino games, may receive session data required for gameplay functionality.
• KYC Verification Services: Third-party providers who assist us in verifying member identities in accordance with legal requirements.
• Relevant Authorities: We are required by law to disclose certain information to law enforcement agencies, regulatory bodies, or courts when ordered to do so.
• Professional Advisors: Lawyers, accountants, and consultants bound by strict professional confidentiality obligations.

Protecting your personal data is our highest priority. ubox88 implements a range of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or destruction:

• Data Encryption: All data in transit is protected with TLS 1.3 and 256-bit SSL encryption. Data stored in our databases is also encrypted using AES-256.
• Strict Access Controls: Access to member personal data within our internal systems is restricted to staff with a legitimate operational need only, in accordance with the principle of least privilege.
• 24/7 Monitoring: Our systems are continuously monitored to detect and respond swiftly to any security threats or suspicious activity.
• Penetration Testing: Independent security audits and penetration testing are conducted regularly to identify and address any vulnerabilities.
• Secure Password Management: Member passwords are stored in a non-decryptable hashed format using the bcrypt algorithm.

Platform ubox88 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how our platform is used. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Strictly Necessary Cookies: Required for core platform functions such as login verification, session security, and basket management. These cookies cannot be disabled.
• Performance Cookies: Collects aggregated information on how users interact with our platform without identifying individuals. Used to improve performance and usability.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and sports preferences to deliver a more personalized experience.
• Analytics Cookies: Helps us understand traffic and usage patterns to make better-informed development decisions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you. ubox88 respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please submit your request to support@ubox88.bet with the subject line "Privacy Request – [Right Type]". We will respond within 14 business days.

ubox88 retain your personal data only for as long as it is needed for the stated purposes or as required by applicable law. Our retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active, plus any additional period required following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years as required under Malaysia's tax and anti-money laundering laws.
• KYC Data (Identity Verification): Retained for 5 years after the business relationship ends, in line with compliance requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie & Session Data: Session cookies expire automatically when you close your browser; persistent cookies expire after a set period (typically 30–365 days).

Once the designated retention period expires, data will be securely deleted or permanently anonymised so that it can no longer be linked to you.

Platform ubox88 is not intended for anyone under the age of 21. We do not knowingly collect or process personal data of minors. Account registration requires age verification, and we employ automated screening systems to prevent underage sign-ups.

ubox88 may update this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other reasonable grounds. We will notify you of all material changes through:

• Emails sent to the address registered with your account.
• Notifications displayed within the ubox88 platform when you log in.
• Announcements on the homepage of our website.

Notice will be given at least 14 days before the changes take effect, giving you the opportunity to review and consider the implications. Continued use of our platform after the effective date will be deemed acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding how ubox88 handling your personal data, we encourage you to contact us directly first. Our Privacy Team is ready to assist:

• Email: support@ubox88.bet (subject: "Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week within the ubox88 platform
• Response Time: We aim to respond to all privacy enquiries within 3 business days, and data rights requests within 14 business days.

If you are not satisfied with our response after contacting us directly, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant regulatory authority in your jurisdiction.