Privacy Policy UFC 333 – Personal Data Protection for Malaysia Members

This Privacy Policy applies to all users of the UFC 333 platform, covering all services we offer including Sports Betting, Live Casino, slots, virtual sports, the VIP programme, and all our customer support channels. It also covers data collected through our website, mobile app, and any electronic communications between you and UFC 333.

UFC 333 acts as the data controller under Malaysia's PDPA for all personal data belonging to members registered on our platform. This means we bear full responsibility for ensuring your data is handled in a manner that complies with the data protection principles set out under Malaysian law.

This policy should be read together with Terms & Conditions UFC 333 which contains additional provisions relating to account security and user responsibilities. Together, both documents form the legal foundation of the relationship between you as a member and UFC 333 as the platform operator.

UFC 333 collects several categories of personal data necessary to provide you with platform services. Below is a full explanation of the data we collect and the reasons for doing so:

Technical data is collected automatically when you use the UFC 333 platform. This includes your IP address, browser type and version, device operating system, screen resolution, and information about the pages you visit within the platform. This data is used for security, fraud detection, and improving the user experience — not for personal surveillance or monitoring.

UFC 333 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless specifically required for identity verification purposes in certain situations and with your explicit consent.

Every piece of data collected by UFC 333 is used for a specific, legitimate purpose. We do not use your data for any purpose beyond what is stated here without first obtaining your additional consent.

Your personal data is used by UFC 333 for the following purposes:

• Account management: Creating and maintaining your member account, processing logins, and managing account settings.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawals of winnings to your nominated payment account.
• Service delivery: Provides access to all UFC 333 platform features, including Sports Betting on Malaysia Super League football, EPL, badminton, e-sports, slots, and Live Casino.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account ownership, and any security threats to the platform or other members.
• Legal compliance: To fulfil applicable legal obligations, including financial record retention requirements.
• Service improvement: Analyzing usage patterns on an aggregate (not individual) basis to understand how the platform is used and to improve the overall user experience.
• Service communications: Sending important account notifications, betting results, deposit and withdrawal processing updates, and security alerts.
• Responsible gaming: Monitoring activity patterns to identify signs of problem gambling and providing appropriate support to members who may need it.

UFC 333 does not sell, rent, or disclose members' personal data to third parties for their marketing purposes. However, there are limited situations where we need to share certain data with carefully selected parties:

• Malaysian payment providers: Information required to process deposit and withdrawal transactions via local Malaysian payment methods is shared solely with the relevant payment service providers for the purpose of processing those transactions.
• Game providers: Technical data required to operate Live Casino games from providers such as Evolution Gaming, or slots from Pragmatic Play, is shared with the relevant providers within the limited scope necessary for those services. These providers are bound by strict confidentiality agreements.
• Legal authorities: UFC 333 may be required to disclose data to Malaysian authorities when directed by a valid court order or in the context of a legal investigation involving criminal activity.
• Fraud prevention services: Certain technical data may be shared with third-party fraud prevention services engaged by UFC 333 to protect the security of the platform and all its members.

In all of the above situations, only the minimum data necessary for the stated purpose is shared. All third parties that receive UFC 333 member data are bound by data protection agreements requiring them to handle that data with a level of security and confidentiality equal to or greater than that which applies to UFC 333.

UFC 333 employs multiple layers of technical and organisational security controls to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Transmission encryption: All communication between your browser and the UFC 333 platform is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. You can verify this by looking for the padlock icon in your browser's address bar while using the platform.
• Storage encryption: Sensitive data stored in UFC 333's databases — including payment account information and identity verification documents — is stored in encrypted format. Your password is never stored in plain text.
• Internal access controls: Access to UFC 333 members' personal data within internal systems is restricted to staff who require it to perform their job duties. All access is logged and regularly monitored.
• Two-factor authentication: ufc 333 offers optional two-factor authentication (2FA) for member accounts. We strongly encourage all members — especially those with significant account balances — to enable this feature.
• Continuous security monitoring: An automated monitoring system operates around the clock to detect suspicious access patterns, unauthorised login attempts, and other abnormal activity that may indicate a security threat.
• Regular security testing: The UFC 333 platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

UFC 333 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Retention periods vary by data type:

• Active account data: Data required to manage your active account is retained for the duration of your UFC 333 membership. This includes registration information, account preferences, and recent activity records.
• Financial transaction records: All deposit and withdrawal records involving Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods are retained for a minimum of 7 years from the date of the transaction, in line with financial compliance requirements.
• Betting records: Sports betting and casino game history logs are retained for 5 years from the date of activity for dispute resolution, security audits, and compliance purposes.
• Support communication data: Live chat conversation records and support emails are retained for 2 years for quality control purposes and to assist in resolving any disputes that may arise.
• Technical data and logs: System access logs and technical data are retained for 12 months for security and fraud detection purposes.
• Closed accounts: When you close your account, personal data that is not required for legal compliance will be deleted within 90 days. Data retained for legal purposes will be kept for the required period and then deleted.

As a UFC 333 member and data subject under Malaysia's PDPA, you have important rights protected by law. UFC 333 is committed to respecting and facilitating the exercise of these rights:

The ufc 333 platform uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and help us understand how the platform is used overall.

• Essential cookies: These cookies are required for the basic operation of the UFC 333 platform, including maintaining your login session and account security. The platform will not function properly without them. These cookies cannot be disabled through our cookie settings.
• Functional cookies: Used to remember your preferences such as your preferred odds format (decimal or Malay), interface language, and other display settings, so you do not need to reconfigure them each time you log in to UFC 333.
• Analytics cookies: This helps us understand, in aggregate, how pages on the UFC 333 platform are used — how many users visit the Sports Betting section versus the casino, average session duration, and which pages most frequently cause issues. This data is used to improve the platform, not to track individuals.
• Security cookies: Helps UFC 333's security systems identify the device you are using and detect unauthorised access attempts on your account.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the ufc 333 platform. For guidance on managing cookies in your preferred browser, please refer to your browser's help documentation.

Ufc 333 may send you communications relating to promotions, new bonuses, upcoming sports events, and platform updates. These communications fall into two categories:

• Service communications (non-disableable): This includes important notifications such as deposit and withdrawal confirmations, account security alerts, notices of changes to terms that affect you, and information related to your active bets. These communications are part of UFC 333's core service and cannot be disabled.
• Marketing communications (your preference): This includes notifications about new promotions, bonuses, special offers for specific sports such as Malaysia Super League football or BWF badminton tournaments, and new platform feature updates. You may opt out of these communications at any time through your UFC 333 account settings or by contacting our support team.

UFC 333 does not use aggressive marketing tactics or sell your contact information to third parties for their own marketing purposes. All marketing communications from UFC 333 will clearly identify the sender and provide a straightforward mechanism to unsubscribe.

The UFC 333 platform is an adult service available only to users aged 18 and above. UFC 333 does not knowingly collect or process personal data from individuals under the age of 18.

If you believe a person under the age of 18 has registered for or is using the UFC 333 platform, please notify us immediately by emailing support@ufc333.online. We will take prompt action to investigate and, if confirmed, close the account in question and delete all data associated with that individual.

Ufc 333 reserves the right to modify or update this Privacy Policy at any time. Amendments may arise from changes in how the platform operates, the addition of new services, technological developments, or updates to applicable Malaysian legal requirements.

For non-material amendments or those that enhance your privacy protection, updates may take effect without extended prior notice. For material amendments that may reduce your privacy rights or significantly change how your data is used, UFC 333 will provide at least 14 days' notice via in-account notifications before the changes take effect.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the ufc 333 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. The date of the most recent update is always shown at the top of this document.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ufc 333 handles your personal data, our privacy team is here to help.

• Email: support@ufc333.online — please include "Privacy Inquiry" in the email subject line to help us respond faster
• Live Chat: Available 24/7 directly within the UFC 333 platform — the fastest option for general enquiries
• WhatsApp VIP: Available to VIP Gold, Platinum, and Diamond members for sensitive inquiries requiring identity verification

The UFC 333 privacy team will endeavour to respond to all written enquiries within 5 business days. For more complex requests relating to data access or deletion rights, response times may extend to up to 21 business days, in line with the timeframe permitted under Malaysia's PDPA.

If you are unsatisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing the PDPA 2010 in Malaysia.