Udintogel Privacy Policy — How We Protect the Personal Data of Malaysian Users

Udintogel is the data controller for personal information collected through our platform. This means we determine the purpose and manner in which your personal data is processed, and we are responsible for ensuring that processing complies with applicable Malaysian privacy laws.

We understand that personal data is a highly sensitive asset, particularly when it involves financial transactions and online activity. That is why Udintogel continually invests in technical security infrastructure and staff training to ensure your privacy is protected at every stage — from account registration right through to your final withdrawal.

Udintogel collects various types of personal information depending on how you interact with our platform. Below is a comprehensive overview of the data categories we collect and the purposes behind each.

• We do not collect sensitive personal data such as health information, religious beliefs, or political party membership without your explicit consent.
• Credit or debit card numbers are not stored on Udintogel's servers — FPX transactions are processed directly through the bank's secure payment gateway without that information passing through our systems.
• We only collect data that is necessary for the stated purposes — we do not collect more than is needed (data minimisation principle).

Udintogel uses the personal information collected for legitimate and transparent purposes only. We do not use your data for any purpose beyond what is stated here without first obtaining your explicit consent.

• Account Management: To create, maintain, and manage your Udintogel account, including identity verification, password recovery, and profile updates.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or e-wallet.
• Legal Compliance: To comply with AML (Anti-Money Laundering), KYC (Know Your Customer) and reporting requirements to the relevant authorities under applicable Malaysian law.
• Platform Security: To detect and prevent fraud, multi-account usage, in-game collusion and other security threats to the Udintogel platform and its members.
• Customer Support: To respond to your enquiries and complaints, resolve technical issues, and provide assistance related to your account or gameplay.
• Personalisation: To personalise your gaming experience on Udintogel, including game recommendations based on your activity history and management of your VIP Rewards programme.
• Promotional Communications: To send you information about Udintogel promotions, bonuses, and exclusive offers — subject to the communication preferences set in your account profile.
• Responsible Gaming: To monitor gameplay patterns and provide appropriate alerts or interventions as part of Udintogel's Responsible Gaming programme.

Udintogel not sell or rent your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to operate our services properly.

• Payment Providers: Required transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, Boost, and Malaysia's FPX banks solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Required game data is shared with the Live Casino, slots, and Sports Betting platform providers that operate games within the Udintogel platform, strictly for technical and security purposes.
• KYC & Verification Services: Identity information is shared with authorised identity verification service providers to meet KYC requirements and prevent fraud.
• Malaysian Authorities: Udintogel will disclose required information to the relevant Malaysian authorities when compelled to do so by law, court order, or a lawful directive from a regulatory body.
• Technical Service Providers: Cloud infrastructure, analytics, and security service providers we use may have limited access to your data for strictly technical purposes — all such providers are bound by robust data processing agreements.

Udintogel takes the security of your personal data extremely seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, alteration, accidental disclosure, or destruction.

• Transit Encryption: All data transmitted between your device and Udintogel's servers is protected with TLS 1.3 and 256-bit SSL encryption — the same level of security used by Maybank2u and CIMB Clicks online banking.
• Storage Encryption: Sensitive data stored in Udintogel's databases is encrypted using AES-256 encryption — it remains unreadable even to staff who do not hold the correct encryption keys.
• 24/7 Security Monitoring: Our Security Information and Event Management (SIEM) system monitors all activity in real time to detect suspicious access patterns or potential cyber threats.
• Layered Access Controls: Access to members' personal data at Udintogel is restricted according to the principle of least privilege — each staff member can only access the data required to carry out their specific duties.
• Regular Security Audits: Penetration testing and independent security audits are carried out regularly by certified third parties to identify and address vulnerabilities before they can be exploited.
• Secure Data Backup: Udintogel data is regularly backed up to geographically separate locations to ensure service continuity and data recovery in the event of an unexpected system failure.

The Udintogel platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how Malaysian users interact with our platform. This section outlines the types of cookies we use.

You can manage your cookie preferences through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the Udintogel platform. Cookie retention periods vary by type — session cookies are deleted when you close your browser, while persistent cookies have a set expiry period (typically between 30 and 365 days).

As an Udintogel user whose personal data we process, you have certain rights guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to facilitating the exercise of these rights promptly and without unnecessary burden.

As an online platform, Udintogel uses server infrastructure and cloud services that may involve the storage or processing of data outside Malaysia. We take the necessary steps to ensure your data remains well protected even when it crosses borders.

• Personal data transferred outside Malaysia occurs only when necessary to deliver Udintogel's services to you, and is subject to adequate contractual safeguards.
• All cross-border data transfers are conducted in accordance with Section 129 of Malaysia's Personal Data Protection Act 2010, which governs the transfer of personal data outside the country.
• The cloud service providers we use comply with internationally recognised security standards and hold certifications such as ISO 27001 and SOC 2 Type II.
• Sensitive financial data is prioritised for storage within Malaysia or at data centres that meet equivalent protection standards.

Udintogel is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

• All Udintogel account registrations require age verification. Any account found to belong to an individual under 18 will be closed immediately and all associated data permanently deleted.
• If you believe your child or someone under the age of 18 has registered an Udintogel account, please contact us immediately at support@udintogel.my. We will investigate and take prompt action.
• Parents and guardians are responsible for monitoring their children's online activity and ensuring they cannot access online gambling platforms such as Udintogel.

Udintogel reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or changes to the services we offer.

• Material amendments — meaning significant changes to how we collect or use your data — will be communicated via registered email or in-platform notification at least 14 days before they take effect.
• The "Updated" date at the top of this document always reflects the date the most recent amendment was made. You are encouraged to review this page periodically.
• Your continued use of the Udintogel platform after any amendments take effect will be considered acceptance of the updated privacy terms.
• If you disagree with any amendments, you have the right to close your Udintogel account and request deletion of your personal data by following the procedure outlined in Section 7.

If you have any questions, concerns, or complaints about how Udintogel handles your personal data, or wish to exercise any of your privacy rights under Malaysia's PDPA, please contact our Data Protection Officer.

If you are dissatisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the regulatory body responsible for overseeing PDPA compliance in this country.