Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by Udintogel ("Company", "we", "us", "our"), the operator of the online gambling platform located at https://udintogel.lat. This Policy describes how we collect, use, process, disclose, store, and protect the personal data of individuals ("Players", "Users", "you") who register for an account, access, or otherwise interact with our platform, including via desktop browsers and mobile devices.

Udintogel takes the privacy of its Malaysian players and all other users seriously. We are committed to handling personal data in a manner that is transparent, proportionate, and respectful of your rights under applicable data protection law, including the Personal Data Protection Act 2010 of Malaysia ("PDPA 2010") and any international data protection frameworks that may apply to our operations.

By creating an account on the Udintogel platform, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use our platform.

2 Definitions

The following terms have the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact information, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated or manual means, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, Udintogel.
• "Data Processor" means a third party that processes Personal Data on behalf of and under the instruction of the Data Controller.
• "Sensitive Data" means Personal Data of a particularly sensitive nature, including financial account details, government-issued identification numbers, and health-related data.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the data subject to the Processing of their Personal Data for one or more specified purposes.
• "Cookie" means a small text file placed on a user's device by a website, used to store information about the user's preferences or interactions with the site.

3 Data Controller Identity

For the purposes of this Policy and applicable data protection legislation, the Data Controller responsible for the Personal Data collected through the Udintogel platform is:

All data subject requests, privacy complaints, and enquiries regarding this Policy should be directed to the Data Privacy Contact email address above. We acknowledge all requests within 48 hours of receipt.

4 Personal Data We Collect

Udintogel collects Personal Data from you in the following circumstances and categories:

4.1 Data Provided Directly by You

• Full legal name and date of birth;
• Residential address (including city — Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, or elsewhere in Malaysia);
• Email address and mobile phone number;
• Username and password (password stored in hashed, non-recoverable format);
• KYC documents: government-issued identity documents (MyKad, Passport, Driver's Licence), proof of address documents (utility bills from TNB, Syabas, Indah Water; bank statements from Maybank, CIMB, Public Bank, Hong Leong Bank), and selfie photographs where required;
• Payment method information: e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, and direct bank transfers; cryptocurrency wallet addresses for BTC, USDT, ETH transactions;
• Communications you send to our support team via live chat or email.

4.2 Data Collected Automatically

• Internet Protocol (IP) address and approximate geolocation;
• Device type, operating system, browser type and version;
• Session logs including login timestamps, pages visited, and duration of visits;
• Betting and gaming history, including wager amounts, game selections, and transaction records;
• Cookie identifiers and similar tracking technologies as described in Section 10.

4.3 Data Received from Third Parties

• Identity verification results from KYC service providers;
• Fraud risk scores from anti-fraud and AML screening services;
• Payment confirmation data from payment processors and financial institutions;
• Responsible gambling self-exclusion status from relevant databases where applicable.

5 Data Processing & Purposes

We process your Personal Data for the following defined purposes. Processing beyond these purposes will not occur without providing a further notice and, where required, obtaining your consent:

6 Legal Basis for Processing

Udintogel processes Personal Data only where we have a valid legal basis to do so. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and Udintogel (i.e., the Terms & Conditions you accepted at registration). This includes account creation, payment processing, and the provision of gambling services.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements under responsible gambling regulations, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for purposes of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and platform improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent for marketing communications, contact us at the data privacy email address in Section 3.

7 Data Sharing & International Transfers

Udintogel does not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents and age. These providers act as Data Processors bound by written data processing agreements.
• Payment Processors: Financial institutions and payment service providers including e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX network operators, card scheme processors (Visa/Mastercard), and cryptocurrency exchange infrastructure providers. These parties receive only the transaction data necessary to process your payment.
• Anti-Fraud and AML Service Providers: Third-party services that assist in detecting and preventing fraudulent transactions and money laundering. Data shared with these providers is limited to what is strictly necessary for risk assessment purposes.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and database providers that store and process data on our behalf. These providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing their services to Udintogel.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory requirement, we may disclose Personal Data to relevant governmental or law enforcement bodies. Where legally permissible, we will notify you of such disclosures.

Where Personal Data is transferred outside of Malaysia or the jurisdiction in which it was collected, Udintogel implements appropriate safeguards, including standard contractual clauses or equivalent mechanisms approved under applicable law, to ensure an equivalent level of data protection in the destination country.

8 Data Retention

Udintogel retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data and KYC documents: Retained for the duration of the active account relationship, plus a minimum of five (5) years after account closure, in compliance with AML record-keeping obligations under applicable financial regulation.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Marketing consent records: Retained from the date of consent until the date of withdrawal, plus three (3) years for compliance documentation purposes.
• Session and access logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where deletion is not immediately possible (for example, where data is held in backup systems), the data will be isolated from active processing and deleted at the next scheduled backup purge cycle.

9 Your Data Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by Udintogel. To exercise any of these rights, please contact us using the details in Section 14:

We will respond to all rights requests within thirty (30) calendar days. In exceptional circumstances, this may be extended by a further thirty (30) days, in which case we will notify you in writing with the reasons for the extension. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10 Cookies & Tracking Technologies

The Udintogel platform uses cookies and similar technologies (including local storage, session storage, and pixel tags) to provide and improve our services. We categorise our cookie use as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing you from using core platform features.
• Functional Cookies: Used to remember your preferences (such as preferred language, odds format, and interface layout) to personalise your experience without identifying you personally.
• Analytical Cookies: Used to collect anonymised information about how visitors use the platform, including page visit frequencies and navigation paths. This data is used solely for platform improvement and is not linked to individual user identities.
• Fraud Prevention Cookies: Used to identify and block suspicious access patterns, bot activity, and other security threats. These cookies store device fingerprint information and are essential for platform security.

Udintogel does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies. Your browsing behaviour on our platform is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use the platform. Disabling functional or analytical cookies will not prevent access to core services.

11 Security Measures

Udintogel implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, and disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Encrypted Data Storage: Personal Data and financial records stored in our systems are protected by encryption at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within the Udintogel organisation is restricted on a strict need-to-know basis using role-based access controls. All access is logged and audited.
• Password Security: Account passwords are stored using one-way hashing algorithms (bcrypt or equivalent). Udintogel employees cannot view or recover plain-text passwords.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts for an additional layer of login security.
• Penetration Testing: Our platform undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable law.

12 Data of Minors

The Udintogel platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21. Registration requires confirmation of age, and all accounts are subject to KYC verification which verifies date of birth against government-issued identity documents.

If we discover that Personal Data has been collected from a minor — whether due to circumvention of our verification processes or any other reason — we will immediately suspend the associated account, forfeit all balances in accordance with our Terms & Conditions, and securely delete all Personal Data collected from that individual as promptly as technically possible, subject to any applicable legal retention obligations.

If you are a parent or guardian and believe that a person under 21 has created an account on Udintogel using your or their details, please contact our support team immediately at [email protected] (plain text — not a clickable link) so we can take prompt action.

13 Amendments to This Policy

Udintogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or our data practices — we will provide notice via email to the address registered on your account at least seven (7) days before the changes take effect. Non-material changes (such as typographic corrections or clarifications that do not alter substantive rights) may take effect immediately upon publication.

Continued use of the Udintogel platform following the effective date of any updated Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

14 Contact Us — Privacy Enquiries

For all privacy-related enquiries, data subject rights requests, complaints, or questions regarding this Policy, please contact our Data Privacy team through the following channels:

Please mark all privacy-related email enquiries with the subject line "PRIVACY REQUEST — [Your Username]" to ensure your message is routed directly to our Data Privacy team. All requests are acknowledged within 48 hours and substantively addressed within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Malaysia, the supervising authority for matters under the Personal Data Protection Act 2010 is the Department of Personal Data Protection (JPDP), Ministry of Digital.