UG8 Privacy Policy — Personal Data Protection for Malaysian Members

Ug8 (referred to as "we", "the Company", or "the Platform") operates the website at ug8.bar and is fully responsible for managing the personal data of all registered members. This Privacy Policy is designed to ensure you clearly understand how we handle your information from start to finish.

This document applies to all users who access or use the UG8 platform, including website visitors, registered members, and any individual who interacts with our services via website, mobile app, or customer support channels.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We regard privacy not merely as a legal obligation — it is an ethical responsibility we take seriously.

Ug8 only collects data that is strictly necessary to operate the platform and provide the best service to members. Below are the categories of data we collect and the purposes for collecting them:

We also collect information you provide voluntarily, such as feedback through customer satisfaction surveys or inquiries submitted via our support channels. All data is collected lawfully and with your consent.

The personal data we collect is used solely for legitimate purposes directly related to the operation of the UG8 platform. We do not use your data for any other purpose without first obtaining your consent.

• Account Management: Creating, verifying, and maintaining your member account, including the required KYC and identity verification processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Customer Support: Handling inquiries, complaints, and assistance requests you submit through any of our support channels.
• Platform Security: Detecting and preventing fraud, hacking, money laundering, and any unlawful activities.
• Service Improvement: Analyzing usage patterns to improve platform features, user interface, and overall experience.
• Marketing Communications: Sending information about promotions, bonuses, and special offers — only to members who have consented to receive them.
• Legal Compliance: Meeting reporting and disclosure obligations required by the relevant authorities.

The legal basis for each type of data processing is either your consent, contractual necessity, our legitimate interests as a platform operator, or a binding legal obligation. You may request further information on the legal basis for any specific type of processing by contacting our privacy team.

Ug8 does not sell or rent members' personal data to any party for commercial purposes. However, in operating the platform, we may need to share certain data with trusted business partners in the following limited situations:

• Payment Service Providers: To securely process deposits and withdrawals. These providers are subject to strict PCI-DSS security standards.
• Identity Verification Providers: Third-party companies that conduct KYC checks and document verification on our behalf.
• Analytics Providers: Analytics software that helps us understand how users interact with the platform — only aggregated data is shared, with no personally identifiable information.
• Legal Authorities: When required by court order, law enforcement investigation, or applicable regulatory requirement.

All third parties we work with are bound by strict data confidentiality agreements and are not permitted to use ug8 member data for any purpose beyond what is specified in those agreements.

The ug8 platform uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and ensure your account security. Cookies are small text files stored on your device when you visit our website.

We use several different types of cookies:

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled without affecting website functionality.
• Performance Cookies: Collecting information on how you use our website (e.g., most frequently visited pages) to help us improve our services.
• Functional Cookies: Saving your preferences such as language, region, and display settings to provide a more personalized experience.
• Marketing Cookies: Used to display relevant advertisements. You may opt out of these cookies through your browser settings.

The security of your personal data is ug8's top priority. We continuously invest in the latest technologies and procedures to ensure your information is always protected from unauthorized access, data breaches, or misuse.

• 256-bit SSL encryption for all data transmitted between your device and ug8's servers.
• Encryption at rest for all databases storing members' personal information.
• Two-factor authentication (2FA) available for all member accounts for an added layer of security.
• Round-the-clock security monitoring by our in-house cybersecurity team.
• Regular system vulnerability testing (penetration testing) by independent security auditors.
• Mandatory data security awareness training attended by all ug8 staff on a regular basis.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of any data security incident involving your personal information, we will notify you within the timeframe required by applicable law.

Under Malaysia's Personal Data Protection Act 2010 and UG8's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Ug8 does not retain your personal data longer than necessary for the original purpose of collection, or as required by applicable law. Below are our general data retention guidelines:

• Active Account Data: Retained throughout your active membership and for up to 7 years after account closure to meet financial audit requirements.
• Transaction Records: Retained for 7 years in line with Malaysia's anti-money laundering legal requirements.
• Security Logs: Retained for 2 years for fraud investigation and prevention purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with regulatory requirements.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked to any individual. We follow industry-standard secure deletion procedures to ensure deleted data cannot be recovered.

The ug8 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18. If we discover that an underage individual has registered an account, the account will be terminated immediately and all related data will be deleted.

Ug8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Members will be notified of any material amendments via email or in-platform notification at least 14 days before they take effect.

The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. We encourage you to review this policy periodically. Continued use of the ug8 platform after any amendment's effective date constitutes your acceptance of those changes.

If you do not agree with any amendments made, you have the right to close your account and stop using the platform. Please contact our support team for assistance with the account closure process and withdrawal of any remaining balance.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the UG8 privacy team is ready to assist you.

• Privacy Email: [email protected] (for personal data enquiries)
• General Support: [email protected]
• Live Chat: Available 24/7 directly within the ug8 platform

We are committed to responding to all privacy-related inquiries within 7 business days. For formal data subject rights requests (such as access, correction, or deletion of data), the processing period is up to 30 business days.