Data Protection

Privacy Policy Ulartot – Member Personal Data Protection

We understand that your personal data is a trust that must be safeguarded with the utmost care. This document clearly explains how ulartot collects, uses, stores, and protects your information.

Updated: 1 January 2026
Bahasa Melayu (Malaysia)
PDPA Compliant
Read time: 7 minutes
SSL 256-bit
Data Encryption
PDPA 2010
Legal Compliance
Zero Share
No Data Sales
Secure KYC
Identity Verification
Last updated on 1 January 2026. This policy applies to all members and visitors of ulartot.
Note: By using the ulartot platform, you agree to the collection and use of your information as described in this Privacy Policy. Please read this entire document carefully.
Section 1

Introduction

Ulartot ("we", "the company") is fully committed to protecting the privacy and personal data security of every member and visitor to our platform. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

As an online betting platform serving users in Malaysia, we understand that your trust is our most valuable asset. Every data-related decision we make always puts your interests and safety as a member first.

This policy transparently explains the types of information we collect, why we need it, how we use it, and the rights you hold regarding your personal data. If you have any questions after reading this document, our support team is available via live chat, operating 24 hours a day, seven days a week.

Ulartot does not sell, rent, or trade members' personal data to any third party for marketing purposes. This is a non-negotiable commitment.
Section 2

Information Collected

We collect information from you through several means when you register, use the platform, or interact with our support team. The types of data we collect are as follows:

Data Category Examples of Information Primary Purpose
Identity Data Full name, date of birth, identification card number, passport KYC verification, fraud prevention
Contact Data Email address, phone number, residential address Account communications, security notifications
Financial Data Bank account number, bank name, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, web browser, operating system Account security, detection of unusual activity
Usage Data Games played, session duration, wagering records Responsible gaming, platform improvement
Document Data Copy of identification card, utility bills, bank statements Advanced KYC verification, AML compliance

We only collect information that is strictly necessary for the stated purposes. No data is collected in excess of our operational and legal compliance requirements.

Identity document data, such as ID card images, is only collected during the KYC verification process and stored in a fully encrypted environment with restricted access.
Section 3

How We Use Your Data

The information we collect is used solely for legitimate and necessary purposes in operating the ulartot platform. Below are the primary ways we use your personal data:

  • Account Management: Creating and maintaining your account, processing registration, and verifying identity through the KYC process.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
  • Platform Security: Detecting and preventing fraudulent activity, money laundering, account abuse, and any other security threats.
  • Customer Support: Responding to inquiries, resolving complaints, and providing you with effective technical assistance.
  • Service Improvement: Analyzing usage patterns to improve platform performance, user interface, and overall gameplay experience.
  • Important Communications: Sending account-related notifications, terms updates, security alerts, and relevant promotional information (with your consent).
  • Legal Compliance: Fulfilling our obligations under Malaysian law, including PDPA 2010, AML/CFT, and regulatory body directives.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide the necessary support.

We do not use your data to make automated decisions that materially affect you without appropriate human review. If you do not wish to receive marketing communications, you may withdraw your consent at any time through your account settings.

Section 4

Information Sharing

Ulartot has never sold or traded your personal data. However, there are certain situations where we need to share your information with specific parties to ensure our services function properly and remain legally compliant:

  • Payment Service Providers: Transaction information that must be shared with banks, e-wallet providers, and payment processors to complete your deposits and withdrawals.
  • Identity Verification Providers: KYC information shared with authorized third parties conducting identity checks and AML/CFT database verifications.
  • Platform Technology Providers: Gaming software providers and technical infrastructure partners who require access to certain data for maintenance and audit purposes.
  • Regulatory Bodies & Law Enforcement: We are required to share certain information upon receiving lawful instructions from a court, authority, or relevant regulatory body.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to our own. We conduct regular reviews of all third-party partners to ensure ongoing compliance.

Should there be any significant changes in how we share your data, we will provide advance notice and obtain your consent where required under PDPA 2010.
Section 5

Data Security

The security of your personal data is ulartot's highest technical and operational priority. We continuously invest in the latest security infrastructure to ensure your information is protected at all times.

The security measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the highest industry encryption standards.
  • Secure Password Storage: Member passwords are stored using a non-reversible hashing function — no one within the company can view your original password.
  • Two-Factor Authentication (2FA): An additional layer of security available to all members to protect account access from unauthorized parties.
  • 24/7 Monitoring: A round-the-clock fraud and intrusion detection system that identifies and blocks suspicious activity.
  • Internal Access Controls: Only authorized staff who require access to perform their duties may view member personal data.
  • Periodic Security Audits: Penetration testing and independent security audits are conducted regularly by third-party security experts.
  • Encrypted Backup: All data is backed up regularly and stored in encrypted format at a separate, secure location.
While we implement a wide range of robust security measures, no system can guarantee 100% absolute security. We encourage you to also practise good digital security hygiene on your end.
Section 6

Cookies & Tracking Technologies

The ulartot platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Helping us understand how members use the platform so we can improve the user experience. Data collected is aggregated and anonymized.
  • Functional Cookies: Saving your preferences such as language, theme, and display settings so you don't have to reconfigure them each time.
  • Analytics Cookies: Used to analyze traffic and usage patterns for the purpose of continuous platform improvement.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience on the ulartot platform. Your cookie preferences will be saved for future sessions unless you clear your browser data.

Section 7

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. We fully respect these rights and make it easy for you to exercise them.

Right of Access Request a copy of the personal data we hold about you at any time.
Right to Rectification Correct any data that is inaccurate, outdated, or incomplete.
Right to Erasure Request deletion of your data, subject to specific legal requirements.
Right to Object Object to the processing of your data for direct marketing purposes at any time.
Right to Restriction Request that we restrict the processing of your data in certain situations.
Right to Portability Receive your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 30 business days and may require identity verification before the request can be fulfilled, to protect your account security.

Some data may not be fully deletable due to legal compliance requirements, such as financial records that must be retained for a specified period under Malaysian legislation.
Section 8

Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purpose of collection or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymized.

Data Type Retention Period
Active Account Information Throughout the active account period + 5 years after closure
Financial Transaction Records Minimum 7 years (legal requirement)
KYC Documents 5 years after the business relationship ends
Security & Technical Logs 12 months from the date of creation
Support Communication Records 3 years from the date of last interaction
Cookie & Analytics Data 13 months from the date of collection

Once the defined retention period expires, data will be securely deleted using methods that ensure the information cannot be recovered. For data in physical format, secure document destruction procedures will be applied.

Section 9

Child Data Protection

The ulartot platform is exclusively for users aged 18 years and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

During the registration process, we carry out age verification and identity checks. If we find that a minor's personal data has been collected inadvertently, we will take immediate action to delete that data and close the relevant account.

Parents or guardians who discover that their minor has registered on our platform are asked to contact our support team immediately. We will investigate and take appropriate action within 48 hours.

If you suspect any minor is accessing the ulartot platform, please report it to our support team via live chat without delay.
Section 10

Privacy Policy Amendment

Ulartot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal developments, or improvements in how we protect your data.

When material amendments are made, we will notify you via:

  • In-account notification upon your next login.
  • An email notification sent to your registered email address.
  • Update the "Last Updated" date at the top of this page.

Continued use of the ulartot platform after any amendments take effect constitutes your acceptance of the updated policy. If you disagree with the changes made, you have the right to close your account before the amendment's effective date.

We recommend you review this page regularly, at least once every three months, to ensure you are always informed about how we protect and manage your personal data.

For any enquiries, concerns, or requests regarding your personal data, contact our Data Protection Officer via live chat on the ulartot platform or send an email to [email protected].

How ulartot Protects Your Data

Every aspect of our platform is built with privacy at its core, not as an afterthought.

End-to-End Encryption

All communication between your device and ulartot servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. Your data cannot be read by any party attempting to intercept the connection.

Data Minimisation Principle

We only collect what is strictly necessary. No excess data, no unnecessary monitoring. Every piece of information collected has a clear purpose and a limited retention period, ensuring your data footprint on our platform remains as small as possible.

Strict Access Controls

Only staff who genuinely require access to your personal data to carry out their duties will be granted permission. All internal access is logged, monitored, and periodically audited to prevent any misuse.

PDPA 2010 Compliance

All our data management processes are designed to fully comply with Malaysia's Personal Data Protection Act 2010. We appoint a Data Protection Officer responsible for ensuring ongoing compliance and handling all privacy-related enquiries.

Immediate Breach Notification

In the event of any security incident affecting your data, we will notify you within 72 hours as required by data protection standards. Transparency is our priority, even in difficult situations.

Independent Security Audit

Our security infrastructure and data management practices are periodically audited by accredited independent security firms. Audit findings are used to identify and close any security gaps before they can be exploited.

Trusted Platform

Join Ulartot with Complete Confidence

Your data is protected, your identity is encrypted, and your privacy is respected. Join millions of members enjoying a wagering experience in a safe and responsible environment.

Free Registration
100% Secure Data
Easy Withdrawal
Bahasa Melayu