Privacy Policy ubet – Personal Data Protection for Malaysian Players

Ubet takes its responsibility to protect the privacy of everyone who uses our platform seriously. This Privacy Policy has been drawn up to meet the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010 and reflects ubet's commitment to operating transparently and responsibly in the handling of personal data.

This policy applies to all personal information collected through the ubet platform, including the website at https://ubet-bangla.com, the mobile application (where applicable), and all official ubet communication channels including support email, live chat, and telephone. It covers the full range of services ubet offers to Malaysian players — from Sports Betting on the Malaysia Super League and EPL, BWF badminton, and international cricket, to Live Casino, slots, virtual sports, and all customer service interactions.

Ubet operates as the data controller, responsible for determining the purposes and means of processing the personal information collected. All third-party service providers granted access to ubet member data act as data processors and are bound by strict data processing agreements to ensure an equivalent level of protection.

Ubet collects only the information needed to provide the services you request and to meet our legal obligations. The following are the categories of data we may collect:

Ubet does not collect special category data (sensitive personal data) such as medical information, political affiliations, or religious beliefs, except where strictly necessary for legal compliance and with your explicit consent.

Ubet uses the personal information it collects for the following purposes, all of which are aimed at ensuring a safe, fair, and enjoyable experience for our Malaysian members:

• Account Management: Creating and managing your ubet account, processing registrations, verifying identity, and managing secure logins.
• Transaction Processing: Processes all deposits and withdrawals in Malaysian Ringgit (MYR) via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks — accurately and securely.
• Service Provision: Provides access to all sections of the ubet platform, including Sports Betting (Malaysia Super League and EPL football, badminton, cricket), Live Casino, slots, virtual sports, and live In-Play matches.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, money laundering (AML), and other security threats that could harm fellow ubet members.
• Legal Compliance: Meeting legal and regulatory obligations, including identity verification (KYC) requirements and anti-money laundering reporting.
• Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and offering appropriate self-control tools to members who may need them.
• Customer Support: Resolving inquiries, complaints, and disputes submitted by members in Bahasa Malaysia through ubet's support team, which operates 24/7.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the design, performance, and features of the ubet platform.
• Marketing (with consent): Sending information about ubet promotions, bonuses, and new offers where you have given consent to receive marketing communications. You may withdraw this consent at any time.

Ubet will not use your personal data for any purpose not stated here without informing you in advance and, where required, obtaining fresh consent from you.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, ubet processes your personal information on the following valid legal grounds:

• Contract Performance: Processing necessary to perform the contract (membership agreement) between you and ubet — this includes account processing, financial transactions, and the provision of betting and gaming services.
• Legal Obligations: Processing required to comply with applicable Malaysian law, including identity verification (KYC) requirements, anti-money laundering (AML) reporting, and other regulatory reporting obligations.
• Legitimate Interests: Processing for the purposes of ubet's or a third party's legitimate interests — such as fraud prevention, platform security, and responsible gambling monitoring — provided those interests do not override your fundamental privacy rights.
• Consent: For processing not covered by the legal bases above — in particular, optional marketing communications — ubet will obtain your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.

Ubet does not sell or trade member personal information. However, in the course of operating the platform, ubet may share your personal data with a limited set of third-party categories as outlined below, subject to strict confidentiality and data protection agreements:

• Payment Provider: Malaysian e-wallet service providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow providers, and FPX participating banks (including Maybank and CIMB) receive the transaction information necessary to process your deposits and withdrawals in MYR.
• Game Software Providers: International Live Casino and slots providers partnering with ubet may receive gameplay session data necessary to deliver a seamless gaming experience.
• KYC Service Provider: Third-party identity verification services that assist ubet in verifying member identities and meeting AML requirements.
• IT Service Providers: Hosting, cybersecurity, and IT infrastructure companies that support the technical operations of the ubet platform.
• Legal Authority: Malaysian law enforcement agencies, courts, or regulatory bodies that require your information based on a legal obligation or a valid court order.

In all data sharing arrangements, ubet ensures that recipients are bound by equivalent data protection obligations and use the data only for permitted purposes. ubet maintains records of all data sharing for accountability purposes.

Ubet retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with applicable legal obligations in Malaysia. The data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Records: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Game Session Data: Retained for a sufficient period to allow the resolution of any disputes that may arise, generally not exceeding 2 years from the date of the session.
• Support Communication Data: Retained for 3 years for reference and service quality improvement purposes.

On the technical security front, ubet implements the following measures to protect your personal data:

• 256-bit SSL encryption on all communications between your device and ubet's servers;
• Encryption of sensitive data within the database using industry-recognised encryption algorithms;
• Role-based access control (RBAC) ensuring that only authorised staff can access members' personal data;
• Round-the-clock 24/7 security monitoring to detect any unauthorised access attempts or cyber threats;
• Regular data backups and a disaster recovery plan to ensure continuity of service;
• Regular security audits by independent third parties to verify the effectiveness of the security measures in place.

The ubet platform uses cookies and similar tracking technologies to enhance the user experience, maintain security, and understand how members interact with the platform. The following types of cookies are used:

• Essential Cookies: Required for the core functionality of the ubet platform — including login session authentication, security, and transaction integrity. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Preference Cookies: Saving your preferences such as interface language (Bahasa Melayu), display settings, and favourite sports so you do not need to reconfigure them each time you use the ubet platform.
• Analytics Cookies: Collects aggregated (non-individual) usage data to help ubet understand which areas of the platform are most popular, identify technical issues, and make meaningful improvement decisions.
• Security Cookies: Helps ubet's security systems detect suspicious activity, unauthorised login attempts, and combat fraud to protect all members.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of some areas of the ubet platform. For more information on how to manage cookies, please refer to your web browser's documentation.

As a ubet member based in Malaysia, you are protected under the Personal Data Protection Act (PDPA) 2010 and have the following rights regarding your personal information held by ubet:

To exercise any of the above rights, please contact ubet's Data Protection Officer by email at support@ubet-bangla.com, stating the specific right you wish to exercise and providing sufficient information to verify your identity. ubet will respond within the timeframe stipulated by Malaysia's PDPA.

Ubet is a platform designed exclusively for adults aged 18 and above. ubet does not knowingly collect personal information from individuals under the age of 18. All prospective members are required to verify their age during the registration process.

Should ubet discover that personal information belonging to an individual under the age of 18 has been collected without parental or guardian consent, ubet will take the following steps immediately:

• Immediate closure of the relevant account;
• Deletion of all associated personal information from our systems;
• Returning any remaining fund balance through the appropriate channel;
• Reporting the incident to the relevant authorities where required.

If you become aware or suspect that a minor has registered with ubet, please contact us at support@ubet-bangla.com immediately so that appropriate action can be taken.

The ubet platform may contain links to or integrations with certain third-party services — for example, live casino providers such as Evolution Gaming or Ezugi, which deliver live game video streams. When you interact with these third-party services through the ubet platform, your privacy may also be subject to those third parties' own privacy policies.

Ubet is not responsible for the privacy practices of any third-party websites, applications, or services outside of ubet's control. We encourage you to review the privacy policy of any third-party service you access through or in connection with the ubet platform.

Ubet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, amendments to applicable Malaysian laws and regulations, or changes to the services we offer to Malaysian members.

When we make material changes to this Privacy Policy, we will notify you through one or more of the following methods:

• In-platform notifications on ubet displayed when you log in;
• An email notification to your registered address;
• Updating the "Last Updated" date displayed at the top of this document.

Your continued use of the ubet platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated version. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 8.

If you have any questions or concerns, or wish to exercise your rights under ubet's Privacy Policy, please reach us through the following channels:

• Email: support@ubet-bangla.com (please mark the email subject as "Privacy Enquiry")
• Live Chat: Available directly on the ubet platform, 24 hours a day, 7 days a week in Bahasa Melayu

Ubet will acknowledge receipt of privacy inquiries within 24 hours and provide a substantive response within 10 business days. For complex requests or those involving large volumes of data, ubet reserves the right to extend the response period to up to 21 business days, with prior notification provided.

If you believe ubet has failed to handle your privacy complaint satisfactorily, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, established under the PDPA 2010.