ufc888 Privacy Policy

01 Introduction

ufc888 ("We", "Us", "Our", "Platform") operates the online gaming and sports betting platform accessible at ufc888.app. ufc888 is committed to protecting the privacy and personal data of all Members and visitors ("You", "User") in accordance with applicable data protection legislation, including principles consistent with the Malaysian Personal Data Protection Act 2010 ("PDPA") and applicable international gaming authority data protection requirements.

This Privacy Policy applies to all personal data collected by ufc888 through the Platform, including via web browser, mobile browser, and any official ufc888 application or API integration. It applies to all Members, prospective Members, and casual visitors to the ufc888 platform.

By registering an account on ufc888, or by continuing to use the Platform after being directed to this Privacy Policy, you acknowledge that you have read, understood, and consent to the collection and use of your personal data as described herein.

02 Personal Data We Collect

ufc888 collects personal data through multiple channels and processes, including account registration, KYC verification, ongoing platform use, payment processing, and customer support interactions. The categories of personal data we collect include:

03 How We Use Your Personal Data

ufc888 uses personal data collected from Members and visitors for the following purposes:

• Account management: To create, maintain, and administer your ufc888 account, verify your identity, and enable access to Platform Services.
• Transaction processing: To process MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, FPX, and other accepted Malaysian payment methods; to maintain accurate financial records; and to comply with anti-money laundering obligations.
• Platform operation and improvement: To monitor and analyse usage patterns, optimise page performance, identify and resolve technical issues, and develop new features and products that serve Malaysian betting preferences.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, and other prohibited conduct as defined in the ufc888 Terms & Conditions.
• Legal and regulatory compliance: To comply with obligations under international gaming authority licensing requirements, anti-money laundering regulations, and applicable Malaysian law, including responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To administer self-exclusion requests, enforce deposit and loss limits, monitor for indicators of problem gambling, and provide targeted responsible gaming support where warranted.
• Marketing and promotions: Where you have provided explicit consent, to send you information about ufc888 promotions, new games, sportsbook offers, and platform updates via email or SMS. You may withdraw this consent at any time.
• Customer support: To respond to and resolve Member queries, complaints, and disputes in a timely and effective manner.

04 Legal Basis for Processing

ufc888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the membership contract — account creation, bet settlement, payment processing, KYC verification, and support — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Processing carried out to comply with anti-money laundering requirements, gaming licensing conditions, tax reporting obligations, and lawful regulatory requests.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, where such interests are not overridden by your rights and freedoms.
• Consent: Marketing communications are sent only where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing and Disclosure

ufc888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors: Personal and financial data necessary to process MYR transactions is shared with authorised payment service providers, including e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX, and banking partners (Maybank, CIMB, Public Bank). These processors are contractually bound to process data only as directed by ufc888.
• KYC and identity verification providers: Identity documents submitted during verification may be processed by authorised third-party identity verification service providers operating under data processing agreements with ufc888.
• Game content providers: Certain game providers who supply live casino or slot content via the ufc888 platform may receive limited session data (e.g., player session tokens) necessary to deliver the game experience. These providers do not receive full identity or financial data.
• Fraud prevention and AML service providers: Data may be shared with specialist anti-fraud and anti-money laundering service providers for the purpose of screening transactions and member activity against risk databases.
• Regulatory and law enforcement authorities: ufc888 will disclose personal data to competent regulatory, gaming, tax, or law enforcement authorities where required to do so by applicable law, court order, or gaming licence condition.
• Corporate group entities: ufc888 may share data within its corporate group for internal administrative purposes, subject to group-wide data protection standards.

06 Cookies and Tracking Technologies

ufc888 uses cookies and similar tracking technologies (including local storage, session storage, and device fingerprinting) to operate and optimise the Platform. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function — session authentication, security tokens, load balancing, and account state persistence. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Members navigate and use the Platform, enabling ufc888 to identify and resolve performance issues and improve user experience.
• Functional cookies: Store preferences such as language settings, remembered usernames (where enabled), and display preferences to personalise your experience.
• Marketing cookies: Where consent has been provided, used to track interaction with ufc888 promotional content and to deliver relevant offers. These may be managed via the cookie consent tool accessible from the Platform footer.

You may manage non-essential cookie preferences at any time. Disabling performance or functional cookies may affect certain aspects of the Platform experience but will not prevent access to core betting features.

07 Data Retention

ufc888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations:

• Account data: Retained for the duration of membership and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 7 years from the date of the transaction.
• KYC documentation: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of closure of the relevant support interaction.
• Usage and session logs: Retained for 12 months for operational and security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the consent period and for 3 years following withdrawal of consent, as evidence of compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with ufc888's data disposal procedures.

08 Your Data Rights

Subject to applicable law and ufc888's regulatory obligations, Members have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data ufc888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For account details, corrections may also be made directly via the account settings interface.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ufc888's legal retention obligations.
• Right to restrict processing: You may request that ufc888 limits the processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of ufc888's legitimate interests, including for direct marketing purposes.

To exercise any of these rights, contact ufc888 at [email protected]. Requests will be acknowledged within 5 business days and responded to within 30 days. In complex cases, this period may be extended by a further 30 days with notice to you.

09 Data Security

ufc888 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your browser and the ufc888 platform is encrypted using TLS 1.2 or higher (256-bit SSL). Login and payment pages are served exclusively over HTTPS.
• Passwords are stored using industry-standard one-way hashing algorithms. ufc888 does not store passwords in plaintext form and cannot retrieve your password — only reset it.
• Access to personal data within ufc888's systems is restricted to authorised personnel on a need-to-know basis, governed by role-based access controls and audit logging.
• Database systems containing personal data are hosted in secure, access-controlled environments with encryption at rest.
• ufc888 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform.
• In the event of a personal data breach that is likely to result in risk to Members' rights and freedoms, ufc888 will notify affected Members without undue delay in accordance with applicable data protection law.

10 Minors

The ufc888 Platform is strictly intended for persons aged 21 years and above. ufc888 does not knowingly collect personal data from any person under the age of 21. Age is verified during the account registration process, and ufc888 reserves the right to require documentary proof of age at any time.

If ufc888 becomes aware that it has inadvertently collected personal data from a person under 21, the relevant account will be immediately closed, all data deleted in accordance with applicable law, and any deposited funds returned to the originating payment method. If you believe that a minor has registered on ufc888, please contact [email protected] immediately.

11 International Data Transfers

ufc888 may transfer personal data to servers or processors located outside Malaysia in connection with the operation of the Platform, including cloud hosting, game content delivery, and fraud prevention services. Where such transfers occur, ufc888 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to ensure that your personal data receives a level of protection consistent with applicable data protection standards.

12 Amendments to This Policy

ufc888 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform functionality. Material changes will be notified to Members via the registered email address and by a notice posted on the Platform for a minimum of 14 days before the updated policy takes effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the ufc888 Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

13 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or ufc888's handling of your personal data, please contact us: