Privacy Policy — ujang303

This Privacy Policy (hereinafter "the Policy") describes how ujang303 (hereinafter "the Company", "we", "us", or "our") collects, processes, stores, uses, and discloses personal data in connection with the operation of the online gaming platform accessible at https://ujang303.cam (hereinafter "the Platform").

ujang303 is committed to protecting the privacy and personal data of all players, visitors, and users of the Platform. This Policy is designed to inform you clearly and transparently about our data practices so that you can make informed decisions about your use of our services.

This Policy applies to all personal data collected through the Platform, our customer support channels, email communications, live chat, and any other interactions you have with ujang303. It should be read alongside our Terms & Conditions, which together govern your relationship with us.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, IP address, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• "Processing" — any operation performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is ujang303.
• "Data Processor" — a natural or legal person that processes personal data on behalf of the Data Controller.
• "Consent" — freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer; the regulatory process by which ujang303 verifies the identity and address of players.
• "Cookies" — small text files stored on your device by your web browser at the request of the Platform, used to remember preferences and facilitate analytics.

ujang303 collects personal data across several categories, dependent on the nature of your interaction with the Platform:

We collect personal data through the following means:

You provide data directly when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or update your account profile. All such data is submitted voluntarily and is necessary to use the relevant features of the Platform.

When you visit the Platform, our servers and analytics tools automatically collect technical data including your IP address, browser fingerprint, device information, and session activity. This collection is necessary for platform security, fraud detection, and service improvement. We use cookies and similar tracking technologies as described in Section 10 of this Policy.

We may receive data about you from third-party payment processors (e.g., FPX clearing house data, Touch 'n Go eWallet transaction verification), identity verification service providers, fraud detection partners, and analytics providers. Such third-party data is collected and shared in accordance with the relevant third party's own privacy policies and our contractual agreements with them.

In specific circumstances required by our AML obligations, we may cross-reference information against publicly available sanctions lists, politically exposed person (PEP) registries, and adverse media databases.

ujang303 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and ujang303 — specifically, to operate your Account, process deposits and withdrawals, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and licensing conditions imposed by our international gaming regulator.
• Legitimate Interests: Processing is carried out pursuant to our legitimate interests in preventing fraud, ensuring platform security, improving our services, and conducting responsible gambling monitoring — provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We process your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your ujang303 Account, including authentication and password management.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement), and confirming your address, as required by our licensing obligations.
• Financial Transactions: Processing MYR deposits via Touch 'n Go eWallet, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, FPX, Boost, GrabPay, and USDT TRC20, and processing withdrawal requests to verified payment methods.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of platform abuse.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance through live chat, email, and other support channels.
• Responsible Gambling: Monitoring betting behaviour to identify potential problem gambling patterns and enabling the operation of deposit limits, self-exclusion, and cool-off tools.
• Platform Improvement: Analysing usage patterns and technical performance data to improve Platform features, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates — subject to your marketing preferences and consent where required.
• Legal & Regulatory Compliance: Maintaining records required by our international licensing obligations, AML regulations, and any applicable laws.

ujang303 does not sell, rent, or commercially transfer your personal data to third parties. We share data only in the following limited circumstances:

We engage trusted third-party service providers who process data on our behalf as Data Processors, bound by strict contractual data processing agreements. These include payment processors (FPX, DuitNow), KYC and identity verification providers, cloud hosting and infrastructure providers, fraud detection and cybersecurity partners, and customer support platform providers.

We may disclose personal data where required by law, court order, regulatory requirement, or the lawful request of a competent authority. This includes disclosure to our gaming regulator, financial intelligence units, and law enforcement agencies in connection with AML investigations.

In the event of a merger, acquisition, restructuring, or sale of all or part of ujang303's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and the privacy implications via a notice on the Platform.

We retain personal data only for as long as is necessary for the purposes set out in this Policy, and in accordance with applicable legal and regulatory retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

ujang303 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in Transit: All data exchanged between your browser and our servers is protected by TLS 1.3 / 256-bit SSL encryption, visible as HTTPS in your browser's address bar.
• Encryption at Rest: Stored personal data, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorised Company personnel who require it for their specific job functions. All staff access is logged and subject to periodic audit.
• Two-Factor Authentication: System access for Company personnel is protected by mandatory multi-factor authentication.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Data Breach Response: We maintain an incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.

ujang303 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language, time zone display, and UI settings. Enabling these provides a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — pages visited, features used, session duration — to help us improve the Platform. No personally identifiable information is included in analytics reports.
• Fraud Detection & Security Cookies: Assist in identifying suspicious behaviour, detecting bot traffic, and maintaining account security.

By continuing to use the Platform after the cookie notice is displayed, you consent to the use of non-essential cookies. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair or prevent your use of the Platform.

Subject to applicable law and our legal retention obligations, you have the following rights with respect to your personal data held by ujang303:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (e.g., email address updates) can be made via Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to our retention obligations for financial and KYC records.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, if you contest the accuracy of the data held.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time via Account Settings or by contacting our support team.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will acknowledge your request promptly and respond within the legally required timeframe. We may need to verify your identity before processing your request.

ujang303 operates internationally and may transfer your personal data to jurisdictions outside of Malaysia in connection with our platform hosting, payment processing, KYC verification, and support operations. When data is transferred internationally, we ensure that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating internationally recognised data protection standards;
• Transfer to jurisdictions that provide an adequate level of data protection;
• Technical and organisational security measures as described in Section 9 of this Policy.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. If you have questions about the safeguards applied to international transfers, please contact us at [email protected].

The Platform is strictly intended for individuals aged 21 years and above. ujang303 does not knowingly collect personal data from individuals under the age of 21. We conduct mandatory age verification as part of the KYC process and will suspend any Account where there are reasonable grounds to suspect the Account holder is below the minimum age.

If you believe that a minor has registered an Account on the Platform, please notify us immediately at [email protected]. Upon confirmation, we will close the Account, return any deposited funds, void any winnings, and permanently delete the personal data associated with the underage Account.

ujang303 may update this Privacy Policy periodically to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. The effective date at the top of this Policy will be updated whenever a new version is published.

Where changes are material — for example, if we introduce a new purpose for processing your personal data or change the categories of third parties to whom we disclose data — we will provide advance notice via a prominent notice on the Platform and/or by email to your registered address, where appropriate.

Your continued use of the Platform following the publication of any amendment to this Policy constitutes your acceptance of the updated Policy. We recommend bookmarking this page and reviewing it periodically. If you do not agree with the updated Policy, you should close your Account and cease using the Platform.

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about our data handling practices, please contact our team through the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week — typical response time 3–5 minutes
• Email: [email protected] — responses within 24 hours for privacy-related requests
• Languages: English, Bahasa Melayu, Mandarin Chinese

We take privacy complaints seriously and will investigate all legitimate concerns. We aim to resolve complaints within 30 calendar days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority, depending on your jurisdiction.

For information on our general terms of service, please refer to our Terms & Conditions. For information on responsible gambling tools and resources, please visit our Responsible Gambling page.