Privacy Policy

This Privacy Policy (the "Policy") is issued by utra66 (referred to herein as "utra66", "we", "us", or "our") and applies to all personal data collected, processed, stored, and transferred in connection with your use of the utra66 website at https://utra66.cam, our mobile applications, and all associated gaming, betting, payment, and customer support services (collectively, the "Platform").

utra66 is committed to protecting the privacy and personal data of all users ("you", "User", "Account Holder", or "Player") in accordance with applicable international data protection principles. This Policy sets out in clear terms what data we collect about you, the purposes for which we process it, the legal grounds on which we rely, and the rights you hold in respect of your personal data.

This Policy should be read together with our Terms and Conditions and Responsible Gambling Policy, each of which form part of the agreement between you and utra66. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly (such as a full name or identity card number) or indirectly (such as a device identifier or IP address combined with other data).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, use, disclosure, transfer, and deletion.
• "Data Controller" means utra66, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party engaged by utra66 to Process Personal Data on our behalf under documented instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" (Know Your Customer) means the identity and age verification procedures conducted by utra66 in compliance with applicable anti-money laundering and gaming regulatory requirements.
• "Sensitive Personal Data" means a subset of Personal Data warranting enhanced protection, including national identification numbers, financial account details, and biometric data where applicable.

utra66 collects Personal Data from you through multiple channels depending on how you interact with the Platform. The categories of data we collect are as follows:

3.1 Data You Provide to Us Directly

3.2 Data Collected Automatically

When you use the Platform, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time and duration of visits, game sessions played, betting patterns, feature interactions, and navigation paths within the Platform.
• Location Data: Country-level geolocation derived from your IP address, used to enforce geographic access restrictions and ensure regulatory compliance.
• Cookie & Tracking Data: Data collected via cookies, session tokens, and similar technologies as described in Section 7 of this Policy.

3.3 Data Received from Third Parties

In limited circumstances, utra66 may receive Personal Data about you from third parties, including identity verification service providers engaged for KYC purposes, payment processors confirming transaction status, fraud detection services, and responsible gambling screening databases where applicable.

utra66 processes your Personal Data for the following purposes:

• Account Creation & Management: To register your account, verify your identity and age, maintain your account records, and communicate important account-related updates.
• Service Delivery: To provide access to our full range of Gaming Services, process deposits and withdrawals in MYR and supported cryptocurrencies, and deliver an optimised platform experience.
• KYC & Regulatory Compliance: To conduct identity verification, anti-money laundering (AML) screening, politically exposed person (PEP) checks, and sanctions list screening as required by applicable gaming regulatory frameworks.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, unauthorised account access, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling, apply responsible gambling restrictions where applicable, and enforce self-exclusion and deposit limit requests in accordance with our Responsible Gambling Policy.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications, or where we have a legitimate interest in doing so based on your existing relationship with utra66. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, resolve technical issues, optimise platform performance, and develop new features based on aggregated, anonymised user behaviour data.
• Legal Obligations: To comply with applicable laws, regulations, court orders, regulatory requests, and to exercise or defend our legal rights.

utra66 processes your Personal Data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and utra66 — specifically, to operate your account, process transactions, and deliver Gaming Services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and gaming licence conditions.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform, prevent fraud, and improve our services, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit agreement, including where we send you direct marketing communications. Where we rely on consent, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

utra66 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following limited and controlled circumstances:

• Service Providers (Data Processors): We engage carefully selected third-party service providers to assist with payment processing, identity verification, fraud detection, customer support infrastructure, and data hosting. These providers are contractually obligated to process your data only on our instructions, apply appropriate security measures, and not use your data for any other purpose.
• Payment Partners: Information necessary to process your transactions is shared with your chosen payment provider, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency processors. Only the data required to complete the specific transaction is disclosed.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to competent authorities, gaming regulators, financial intelligence units, or law enforcement agencies where we are legally obliged to do so, or where it is necessary to prevent or detect a crime.
• Responsible Gambling Databases: Where required or appropriate under our responsible gambling obligations, we may share limited data with self-exclusion scheme administrators to give effect to exclusion requests.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of utra66's business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

utra66 uses cookies and similar tracking technologies (such as session tokens and local storage objects) to operate essential platform functions, improve the user experience, and maintain account security. We do not use third-party advertising cookies or cross-site tracking cookies.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in, security cookies that detect malicious activity, and cookies that remember your language and region preferences. These cannot be disabled without breaking core functionality.
• Functional Cookies: These remember your in-session preferences, such as game display settings, betting market filters, and notification choices, to provide a more personalised experience.
• Analytics Cookies: We use privacy-respecting analytics tools to understand aggregate usage patterns — which features are used, where users encounter friction, and how to improve platform performance. Analytics data is processed in anonymised or pseudonymised form and is not used to identify individual users.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may impair your ability to log in, place bets, or use other core Platform features.

utra66 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention framework is as follows:

Where retention is required beyond the closure of your account due to legal or regulatory obligations, we will restrict access to that data to personnel with a specific operational or compliance need.

utra66 implements a comprehensive set of technical and organisational security measures to protect your Personal Data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data fields at rest, including financial account identifiers, are encrypted at the database level.
• Password Security: Account passwords are stored exclusively in salted hash form. No utra66 employee has access to your plain-text password under any circumstances.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis, with role-based access controls and comprehensive audit logging of all data access events.
• Infrastructure Security: Our hosting infrastructure employs firewalls, intrusion detection systems, DDoS mitigation, and regular independent penetration testing.
• Staff Training: All personnel with access to Personal Data receive mandatory privacy and data security training as part of their onboarding and on an annual refresher basis.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals promptly and report to relevant regulatory authorities as required.

utra66 operates as an internationally licensed platform. In the course of providing our services, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. This may occur when, for example, we use cloud infrastructure hosted in other countries, or engage third-party service providers operating internationally.

Where such transfers occur, utra66 takes all reasonable steps to ensure that your Personal Data receives a level of protection consistent with this Policy, including by:

• Selecting data processors who are subject to appropriate data protection standards in their respective jurisdictions.
• Putting in place contractual safeguards with all third-party data processors.
• Conducting due diligence assessments on the data protection practices of all significant third-party partners prior to engaging their services.

By using the Platform and accepting this Policy, you acknowledge that your Personal Data may be transferred internationally in the manner described above.

As a data subject, you hold the following rights in respect of your Personal Data held by utra66. We are committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

To exercise any of these rights, contact our Data Protection team via Live Chat on the Platform or by email. We will respond to verified requests within 30 calendar days. In complex cases, this may be extended by a further 30 days with prior notice to you. Identity verification will be required before any request is actioned to protect against unauthorised disclosure.

The utra66 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from persons under the age of 21, and we do not permit persons under 21 to register an account, make a deposit, or participate in any gaming or betting activity on the Platform.

Age verification is conducted as part of our standard KYC process at account registration and at the point of first withdrawal. We use a combination of self-declaration and documentary verification to enforce this requirement. Where we have reason to believe that a user may be under the age of 21, we will suspend the account and conduct enhanced verification before permitting any further access.

If you believe that a minor has accessed the Platform and provided Personal Data, please notify us immediately via our support channels. We will investigate and, if confirmed, delete the data and close the account without delay.

utra66 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or improvements to our privacy framework. The most current version of this Policy will always be accessible at https://utra66.cam/privacy-policy, identified by the "Last Updated" date at the top of the page.

Where amendments are material — meaning they substantively affect your rights or the way we process your Personal Data — we will notify registered Account Holders by email and/or via a prominent notice on the Platform before the changes take effect. For non-material updates, continued use of the Platform following the posting of a revised Policy constitutes your acknowledgement of the changes.

If you disagree with any amendment to this Policy, you may close your account and request deletion of your Personal Data in accordance with the rights described in Section 11 of this Policy.

For all privacy-related queries, data subject rights requests, or concerns about how utra66 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 on the utra66 Platform — the fastest route for urgent privacy concerns, with an average response time of 3–5 minutes. Support is available in English, Bahasa Melayu, and Chinese.
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line and provide your registered username and the nature of your request. Allow up to 30 days for a full response.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. utra66 will cooperate fully with any such regulatory inquiry.