Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by ufc888 ("Company", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "Users", "you") who access or use the ufc888 platform, accessible at ufc888.cam and all associated pages, mobile interfaces, and gaming services (collectively, the "Platform").

ufc888 operates as Malaysia's premier online casino and sports betting platform, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We are committed to handling all personal information entrusted to us with the highest standards of care, transparency, and security.

By registering an account on ufc888, accessing the Platform, or making a deposit, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy. This Policy is incorporated by reference into the ufc888 Terms & Conditions, which govern your use of the Platform.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, including name, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is ufc888.
• "Data Processor" — A third party that processes personal data on behalf of ufc888, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "Consent" — A freely given, specific, informed, and unambiguous indication by which a User agrees to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer — the identity and age verification process required before withdrawals are processed on the ufc888 Platform.
• "Cookies" — Small text files placed on a User's device by the Platform for the purposes of session management, authentication, and analytics.
• "Third Party" — Any natural or legal person other than the User and ufc888.

3Data Controller

ufc888 is the Data Controller responsible for your personal data as collected and processed through the Platform. All requests relating to data access, correction, deletion, or objection should be directed to ufc888 through the contact channels specified in Section 16 of this Policy.

Where ufc888 engages third-party Data Processors (including payment gateways supporting Malaysian methods such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and Public Bank), we ensure that appropriate data processing agreements are in place requiring those processors to handle your data only on our documented instructions and in accordance with applicable data protection obligations.

4Data We Collect

ufc888 collects personal data across the following categories, depending on your level of interaction with the Platform:

4.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are 21 years of age or above);
• Email address and Malaysian mobile phone number;
• Username and encrypted account password;
• Residential address (required for KYC purposes).

4.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your MyKad, passport, or other government-issued identity document;
• Selfie photograph taken at the time of KYC submission;
• Proof of payment method (e.g., screenshot of registered e-wallet or bank account details).

4.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method type (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, bank transfer, cryptocurrency wallet address);
• Transaction reference numbers and processing outcomes;
• MYR balance history and gaming activity records.

4.4 Technical & Device Data

• IP address and approximate geographic location;
• Browser type, version, and language settings;
• Device type (mobile/desktop), operating system, and screen resolution;
• Session duration, login timestamps, and navigation path on the Platform.

4.5 Communications Data

• Content of live chat, WhatsApp, and email communications with our support team;
• Support ticket history and resolution records;
• Responses to surveys or feedback requests (where provided voluntarily).

5How We Use Your Data

ufc888 processes your personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your registered account on the Platform;
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+), and eligibility to use the Platform;
• Payment Processing: Facilitating MYR deposits and withdrawals via approved Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank;
• Regulatory Compliance: Meeting anti-money laundering (AML), counter-financing of terrorism (CFT), and responsible gambling obligations;
• Customer Support: Responding to inquiries, resolving disputes, and providing assistance via Live Chat, WhatsApp, and Email;
• Platform Security: Detecting and preventing fraud, multi-accounting, bonus abuse, and other prohibited conduct;
• Service Improvement: Analysing aggregate usage patterns to improve Platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional offers and account notifications where you have given explicit consent, or where permitted under applicable law.

6Legal Basis for Processing

ufc888 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accept upon registration — including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws including KYC verification, AML/CFT reporting obligations, and responsible gambling requirements.
• Legitimate Interests: Processing conducted on the basis of ufc888's legitimate interests, including fraud prevention, platform security, and service improvement — where such interests are not overridden by your rights.
• Consent: Processing conducted on the basis of your explicit consent, including the sending of marketing communications and the placement of non-essential cookies. You may withdraw consent at any time.

7Data Sharing & Disclosure

ufc888 does not sell, rent, or otherwise trade your personal data to third parties for commercial or marketing purposes. We may share your data in the following limited circumstances:

7.1 Service Providers

We engage carefully selected third-party Data Processors to support Platform operations, including payment gateway providers (supporting Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank), KYC verification services, cloud hosting providers, and fraud detection systems. These processors are contractually bound to process your data only on ufc888's documented instructions.

7.2 Legal & Regulatory Authorities

We may disclose personal data to competent authorities where required to do so by law, court order, or regulatory requirement. This includes cooperation with anti-money laundering investigations, enforcement proceedings, and age verification audits.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of ufc888, personal data held on the Platform may be transferred as part of that transaction. You will be notified of any such change via the Platform or by email to your registered address.

8International Data Transfers

Some of the third-party service providers engaged by ufc888 may process personal data in jurisdictions outside Malaysia. Where such transfers occur, ufc888 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and assessments of the destination jurisdiction's data protection standards — to maintain an equivalent level of protection for your personal data.

By using the Platform, you acknowledge that your personal data may be processed in international jurisdictions as part of ufc888's operational infrastructure, subject always to the safeguards described in this Policy.

9Data Retention

ufc888 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law and regulatory obligation, whichever is the longer period. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with ufc888 plus a minimum of 5 years following account closure, to meet AML/CFT obligations.
• Transaction Records: Financial transaction data is retained for a minimum of 7 years in accordance with standard financial compliance requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the last transaction, whichever is later.
• Support Communications: Customer support records are retained for a minimum of 3 years to support dispute resolution and quality assurance.
• Technical Logs: Server and access logs are retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10Cookies & Tracking Technologies

ufc888 uses cookies and similar tracking technologies to operate the Platform securely and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect malicious activity. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language selection and display settings across sessions. Disabling these may affect your experience.
• Analytics Cookies: Used to understand aggregate patterns in how Players navigate the Platform, enabling us to improve page layout, load times, and game discovery features. Data collected is anonymised.

ufc888 does not use third-party advertising cookies or cross-site behavioural tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.

11Your Rights

As a user of ufc888, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 16. We will respond to all verified requests within a reasonable timeframe and no later than 30 days of receipt.

12Children & Minors

ufc888 is strictly for players aged 21 years and above. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Registration by persons under 21 is prohibited under our Terms & Conditions.

If ufc888 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account. All collected winnings and balances associated with an underage Account will be forfeited.

13Security Measures

ufc888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for personal data stored at rest in our database systems;
• Role-based access controls ensuring that only authorised employees with a verified operational need can access player data;
• Multi-factor authentication required for all administrative access to production systems;
• Regular independent security audits and penetration testing of Platform infrastructure;
• Automated anomaly detection systems that flag unusual login patterns, suspicious transactions, and potential data breaches for immediate investigation;
• Incident response procedures with defined escalation paths and regulatory notification timelines.

While we take every reasonable precaution, no internet-based system can guarantee absolute security. You are also responsible for maintaining the security of your own Account credentials. See Section 4 of our Terms & Conditions for your account security obligations.

14Third-Party Services

The ufc888 Platform may reference or link to third-party services strictly within our navigation and footer structure. ufc888 is not responsible for the privacy practices or content of any third-party websites or services. This Privacy Policy applies solely to personal data processed by ufc888 through the Platform.

Our payment service providers — including those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank — process payment data under their own privacy policies and terms of service. ufc888 shares only the minimum data necessary to process a transaction with each payment provider.

15Policy Amendments

ufc888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform operations. When material changes are made, we will notify registered Players by posting a notice on the Platform and, where appropriate, sending a notification to your registered email address.

The effective date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact our support team to close your Account.

The current version of this Privacy Policy is always accessible at ufc888.cam/privacy-policy.

16Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ufc888, please contact our Data Protection team through the following channels:

• Email: [email protected] — plain text only, not a clickable link. Please copy and paste this address into your email client. For privacy-related requests, please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on ufc888.cam. Select "Account / Privacy" as your inquiry category for direct routing to the appropriate team.
• WhatsApp: Available 24/7 in English, Bahasa Melayu, and Mandarin Chinese. Average response time under 5 minutes.

We will acknowledge all privacy-related requests within 48 hours and aim to resolve them fully within 30 calendar days. For complex requests requiring additional verification, we will inform you of the anticipated extended timeframe.