Ulertoto Privacy Policy – Player Personal Data Protection

Ulertoto collects the personal information necessary to provide a secure, transparent platform service that complies with legal requirements. Below are the categories of data we may collect from you:

Identity Information:

• Full name as stated on your official identification document.
• Identity card number (MyKad) or passport number.
• Date of birth for age verification (18 years and above).
• Full current residential address.
• A selfie or copy of an identity document for the KYC process.

Contact & Account Information:

• Active email address used for platform communications.
• Mobile phone number for two-factor authentication (2FA).
• Username and password (stored in heavily hashed form).

Financial Information:

• Bank name and bank account number for deposit and withdrawal purposes.
• Deposit and withdrawal transaction history within the platform.
• E-wallet or registered electronic payment method details.

Technical & Usage Information:

• IP address, device type, operating system and web browser version.
• Account login and logout activity logs with timestamps.
• Game history, wagering activity, and platform usage.
• Cookie and session tracking data to enhance the user experience.

Ulertoto collects personal data through several different methods throughout your use of our platform. Understanding these data collection sources is important so you know exactly what information we hold about you.

• Account Registration: When you register a new account, you provide us directly with basic information such as your name, email, phone number, and date of birth.
• KYC Process: During identity verification, you upload an identity document and proof of address, which we process to confirm your account eligibility.
• Financial Transactions: Bank details and payment information are collected automatically when you make a deposit or withdrawal request.
• Platform Usage: Technical data such as IP address, device type and activity logs are collected automatically when you browse and play on our platform.
• Support Communications: When you contact our customer support team via live chat or email, the contents of those conversations are stored for quality and reference purposes.
• Cookies & Similar Technologies: Our platform uses session cookies and preference cookies to enhance your browsing experience. Further details are available in Section 8.

Every piece of data we collect has a clear and legitimate purpose. ulertoto does not use your data for any purpose other than those stated below:

If you have given consent to receive marketing communications but later change your mind, you can withdraw that consent at any time by updating your email preference settings in your account profile.

Ulertoto does not sell or disclose your personal data to third parties for their own commercial purposes. However, there are certain situations where we need to share your data with trusted parties to enable smooth platform operations:

• Payment Processors: Transaction information is shared with licensed payment processors such as banks and DuitNow service providers to enable deposits and withdrawals to be processed securely.
• KYC Service Provider: Identity verification documents are shared with licensed and registered third-party identity verification service providers to process KYC checks.
• Game Software Providers: Minimum game data required is shared with game software providers to enable game sessions to function properly.
• Regulatory Authority: ulertoto is required to disclose information to licensed authorities, regulatory bodies, or law enforcement when mandated by applicable law.
• Cloud Services & Infrastructure: Data is stored using internationally certified cloud infrastructure providers with ISO 27001 and SOC 2 security certifications.

All third parties we work with are required to adhere to the same data protection standards as ulertoto's internal practices, and they are not permitted to use your data for any purpose other than what is specified in our service agreements.

Ulertoto continuously invests in the latest security infrastructure to ensure your personal data is always protected. Below are the key security measures we have implemented:

• 256-bit SSL/TLS Encryption: All communications between your device and ulertoto servers are encrypted using the latest TLS protocols, making transmitted data unreadable to unauthorized parties.
• Two-Factor Authentication (2FA): Players can and are encouraged to enable 2FA, which requires an additional verification code on top of your password each time you log in from a new device.
• 24/7 Monitoring: Our security system continuously monitors account activity around the clock to automatically detect and block any suspicious access.
• Secure Password Storage: Passwords are stored using a one-way hashing algorithm (bcrypt) — even our staff cannot read your actual password.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.
• Internal Access Controls: Access to players' personal data within our organisation is strictly limited to staff who require it to carry out their duties only.

Ulertoto retains your personal data only for as long as necessary to fulfill the purposes stated in this privacy policy, or for as long as required by applicable law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus the period required for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and taxation legal requirements.
• KYC Documents: Retained for 5 years after account termination in accordance with anti-money laundering (AML) legal requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical Data & Activity Logs: Retained for 12 months for security and platform analytics purposes.
• Marketing Data (with consent): Retained until you withdraw consent or close your account.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymized so that it can no longer be personally attributed to you.

As a registered ulertoto player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact our customer support team via live chat or email. We will process your request within 30 days of receiving a complete request.

The ulertoto platform uses cookies and similar tracking technologies to improve user experience, maintain session security, and help us understand how the platform is used so that relevant improvements can be made.

Types of cookies we use:

• Session Cookies (Required): Required to keep you logged in during game sessions and to maintain account security. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies (Functional): Saves your preferences such as language, display theme, and game settings so you do not have to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand overall platform usage patterns — this data is processed in aggregate form and cannot be linked to any specific individual.
• Security Cookies: Used to detect suspicious login activity, verify recognised devices and protect your account from unauthorised access.

You can manage cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of some sections of the ulertoto platform.

The ulertoto platform is for users aged 18 and above only. We do not intentionally collect or process personal data of any individual under the age of 18.

• The account registration process requires verification of date of birth and a valid identity document to confirm the applicant is at least 18 years of age.
• If we find that a child's personal data has been collected without valid consent, we will immediately delete that data and close the associated account.
• Parents or guardians who believe their underage child has registered an account on our platform should contact our support team immediately for prompt action.

Ulertoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. We are committed to notifying you of any material changes.

• Material changes to this Privacy Policy will be communicated to registered players via email at least 14 days before taking effect.
• The "Updated" date at the top of this document will always reflect the date of the latest version of this Privacy Policy.
• Continued use of the ulertoto platform after the effective date of any amendments is considered your acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account before the effective date of those changes.

For any questions or concerns regarding this Privacy Policy, you may contact our Data Protection Officer via live chat within the platform or by visiting FAQ page ours for more information.