ug188 Privacy Policy

Unless the context otherwise requires, the following terms have the meanings assigned to them below throughout this Privacy Policy:

• "Account" — the personal account registered by a Player on the ug188 Platform.
• "Company" / "ug188" — the operator of ug188.vip, licensed and regulated under its international gaming licence.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; in the context of this Policy, ug188 acts as the Data Controller for all personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of ug188, strictly under ug188's documented instructions and data processing agreements.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, including name, national identity number, email address, phone number, IP address, device identifiers, financial account details, and behavioural data linked to an identified individual.
• "Platform" — the ug188 website at ug188.vip, including all pages, subdomains, mobile-optimised interfaces, and APIs accessible thereunder.
• "Player" — any individual who has registered an Account on the ug188 Platform.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including government-issued identification numbers, financial account credentials, and any data that could be used to facilitate identity theft or fraud.

2.1 This Privacy Policy applies to all Personal Data collected by ug188 in connection with the operation of the Platform, including data collected during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and general browsing of ug188.vip.

2.2 ug188 acts as the Data Controller in respect of all Personal Data processed under this Policy. As Data Controller, ug188 is responsible for ensuring that Personal Data is collected, used, and stored lawfully and in a manner consistent with this Policy and applicable data protection law.

2.3 This Policy applies specifically to Players who are residents of, or are located in, Indonesia. ug188 is aware that Indonesia's Personal Data Protection Law (UU PDP) establishes rights and obligations in respect of personal data, and ug188 is committed to processing the data of Indonesian players in a manner consistent with those principles, to the extent applicable given the international nature of ug188's licensing and operations.

2.4 This Policy does not apply to any third-party websites or services linked to or from the Platform. ug188 has no control over and accepts no responsibility for the privacy practices of third-party sites. Players who navigate to external links do so at their own risk and should review the relevant third party's privacy policy.

ug188 collects only the Personal Data that is necessary for the purposes described in Section 5. The categories of data we collect are set out in the table below:

3.1 ug188 does not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data for identification purposes, health data, or data concerning sexual orientation, beyond what may be incidentally contained within identity documents submitted for KYC. Where such information is inadvertently received, it will not be processed and will be deleted promptly.

ug188 collects Personal Data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to ug188 when you register an Account, complete KYC verification, make a deposit or withdrawal, contact the support team via live chat, WhatsApp, or email, or submit any form on the Platform. The accuracy of directly provided data is your responsibility; ug188 relies on the information you supply and is not liable for consequences arising from inaccurate or outdated information.

4.2 Automated Collection

When you access ug188.vip, our servers automatically record Technical Data including your IP address, browser type, device identifiers, and session information. This data is collected through server logs and first-party cookies. See Section 7 for full details on our cookie practices.

4.3 Third-Party Sources

ug188 may receive Personal Data from regulated third-party service providers, including KYC verification agencies, fraud prevention databases, and payment processors. Data received from these sources is used solely for the purpose for which it was obtained (primarily identity verification and fraud prevention) and is handled in accordance with this Policy.

4.4 Game Providers

Third-party game providers integrated into the ug188 Platform (including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Microgaming) may collect limited Technical Data and Usage Data as part of their game delivery infrastructure. This data is governed by the respective provider's privacy terms and is used only for game performance and integrity purposes.

ug188 processes Personal Data only where it has a lawful basis for doing so. The table below sets out the purposes for which ug188 processes Personal Data and the corresponding legal basis in each case:

5.1 Where ug188 relies on consent as the legal basis for processing (for example, for sending promotional emails or SMS messages about bonuses and seasonal offers), you may withdraw that consent at any time by contacting support or by updating your communication preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6.1 ug188 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own commercial or marketing purposes.

6.2 ug188 may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and only to the extent required to fulfil the relevant purpose:

• Payment Processors: Indonesian bank transfer facilitators and e-wallet gateways (including partners supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) receive transactional Financial Data necessary to process deposits and withdrawals.
• KYC Verification Providers: Regulated third-party identity verification agencies receive Identity Data and KYC Document Data for the purpose of confirming player eligibility and complying with AML obligations.
• Fraud Prevention Services: Industry fraud databases may receive limited Technical Data and Identity Data to detect and prevent fraudulent account activity.
• Game Providers: Third-party studios integrated into the Platform receive a pseudonymous player identifier and session tokens for the purpose of delivering game content. Full Identity Data is not shared with game providers.
• IT Infrastructure Providers: Cloud hosting and CDN providers that store or transmit Platform data on ug188's behalf under binding data processing agreements.
• Regulatory Authorities and Law Enforcement: ug188 will disclose Personal Data to competent authorities where required to do so by applicable law, court order, or regulatory demand, without prior notice to the affected Player where legally prohibited.

6.3 All third-party Data Processors engaged by ug188 are bound by written data processing agreements that require them to process Personal Data only on ug188's documented instructions, implement appropriate technical and organisational security measures, and not sub-process data without ug188's prior written authorisation.

7.1 ug188 uses first-party cookies and similar tracking technologies to deliver and improve the Platform. The following cookie categories are in use:

7.2 ug188 does not use third-party advertising cookies, social media tracking pixels, or behavioural profiling technologies that report your activity to external advertising networks. This means that browsing ug188.vip does not contribute to any external advertising profile.

7.3 You may control cookie behaviour through your browser settings. Note that disabling Strictly Necessary cookies will prevent you from logging into your Account or using core Platform features. Disabling Functional or Analytical cookies will not prevent Platform access but may degrade certain features.

8.1 ug188 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following retention schedules apply:

• Identity and KYC Data: retained for a minimum of five (5) years from the date of Account closure or the last transaction, whichever is later, in compliance with AML record-keeping requirements under ug188's international gaming licence.
• Financial Transaction Records: retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Customer Support Communications: retained for three (3) years from the date of the last interaction, to allow ug188 to respond to any delayed disputes or regulatory enquiries.
• Technical and Usage Data (non-KYC): retained for up to thirteen (13) months for analytical purposes, after which it is aggregated and anonymised or deleted.
• Promotional Consent Records: retained for the duration of your Account and for three (3) years following Account closure, to evidence the legal basis for any marketing communications sent during that period.

8.2 Upon expiry of the applicable retention period, ug188 will securely delete or irreversibly anonymise the relevant Personal Data. Where deletion is technically impractical within a normal operational cycle (for example, data held in encrypted backup archives), the data will be isolated and purged at the next scheduled archive rotation.

9.1 ug188 implements a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ug188.vip;
• AES-256 encryption for sensitive data at rest, including financial account details and KYC document data;
• Role-based access controls ensuring that ug188 staff can access Personal Data only on a strict need-to-know basis;
• Multi-factor authentication requirements for all internal systems that process Personal Data;
• Regular penetration testing and vulnerability assessments conducted by qualified independent security firms;
• 24/7 automated monitoring for anomalous access patterns, with alerts to the security operations team;
• Formal incident response procedures ensuring that any confirmed data breach is investigated promptly and, where legally required, reported to the relevant authority within the prescribed timeframe.

9.2 While ug188 takes data security seriously and implements the measures described above, no system connected to the internet can guarantee absolute security. You are responsible for maintaining the security of your Account credentials. If you believe your Account has been compromised, contact ug188 support immediately via live chat.

10.1 Subject to applicable law and ug188's legal obligations, you have the following rights in respect of your Personal Data:

• Right of Access: you may request a copy of the Personal Data ug188 holds about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right of Rectification: you may request correction of any inaccurate or incomplete Personal Data. For basic contact data, you may update this directly within your Account settings.
• Right of Erasure: you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to ug188's legal retention obligations (see Section 8). Erasure requests will not be fulfilled where retention is required by AML or KYC regulations.
• Right to Restrict Processing: you may request that ug188 temporarily restrict the processing of your data while an accuracy or legitimacy dispute is under review.
• Right to Data Portability: where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: you may object to processing based on legitimate interests at any time. ug188 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

10.2 To exercise any of the rights listed above, please contact the ug188 support team via live chat or by emailing [email protected] with the subject line "Data Rights Request". ug188 will respond to all verified requests within 30 calendar days. We may require identity verification before processing a data rights request to prevent unauthorised access to another person's data.

11.1 ug188 operates as an internationally licensed platform. As a result, Personal Data collected from Indonesian Players may be transferred to, stored, and processed in jurisdictions outside Indonesia, including the jurisdiction in which ug188 holds its gaming licence and the data centres of ug188's cloud infrastructure partners.

11.2 Where Personal Data is transferred outside Indonesia, ug188 takes steps to ensure that an adequate level of data protection is maintained. This is achieved through:

• Binding contractual clauses (data processing agreements) with all third-party recipients that impose data protection obligations equivalent to those described in this Policy;
• Transfer to jurisdictions recognised as providing adequate data protection under applicable international frameworks;
• Technical measures such as end-to-end encryption that protect data integrity regardless of the jurisdiction in which data is processed.

11.3 By registering an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia as described in this Section.

12.1 The ug188 Platform is strictly intended for adults aged 21 years or older. ug188 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

12.2 If ug188 becomes aware that Personal Data has been collected from a person under the age of 21, the associated Account will be immediately suspended, any balance forfeited in line with the Terms & Conditions, and the Personal Data deleted promptly from ug188's active systems, subject to any mandatory legal retention obligations.

12.3 If you have reason to believe that a minor has registered on the ug188 Platform, please contact support immediately via live chat or at [email protected].

13.1 The ug188 Platform may contain references to third-party services such as payment providers and game studios. Where the Platform links to any external website, ug188 has no control over the content, privacy practices, or security measures of that external site.

13.2 This Privacy Policy applies solely to data collected and processed by ug188 through the Platform. ug188 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external site you may visit in connection with using the Platform. We encourage you to review the privacy policies of any third-party service you engage with.

14.1 ug188 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, technology, or our data processing practices. The "Effective Date" at the top of this page will be updated with each revision.

14.2 Where an amendment is material — meaning it significantly affects how ug188 processes your Personal Data or reduces your rights — ug188 will notify registered Players by email to their registered address at least seven (7) days before the amendment takes effect, and will display a prominent notice on the Platform during that period.

14.3 Continued use of the Platform after the effective date of an amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and contact support to arrange Account closure and withdrawal of any available balance prior to the effective date.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way ug188 handles your Personal Data, please contact the ug188 support team through any of the following channels:

• Live Chat: available 24/7 directly on ug188.vip — the fastest channel for urgent data security concerns.
• WhatsApp: +62 811 0000 0188 — Indonesian-speaking agents available 19:00–01:00 WIB.
• Email: [email protected] — for formal data rights requests, use the subject line "Data Rights Request". Response within 30 calendar days.

15.2 All contact details are displayed as plain text and are not clickable links. Please copy the email address into your mail client if needed.