Your privacy is a commitment, not a formality. This Privacy Policy explains precisely what personal data ug128 collects from Indonesian players, how that data is used and protected, with whom it may be shared, and what rights you hold over your own information. We encourage you to read this document in full before registering or depositing on the Platform.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Platform" | The ug128 online casino and sports betting service accessible at ug128.vip, including all product sections, mobile interfaces, and associated digital touchpoints. |
| "Company" / "We" / "Us" | The legal entity operating the ug128 Platform and acting as the data controller responsible for the processing of personal data described in this Policy. |
| "Member" / "You" | Any natural person who has registered an account on the Platform or who browses the Platform without registration. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, device identifiers, and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, amendment, or deletion. |
| "KYC" | Know Your Customer — the identity and address verification process conducted prior to withdrawal processing and at other compliance-triggered intervals. |
| "Third-Party Provider" | Any external entity engaged by the Company to deliver specific services in connection with the Platform, including game studios, payment processors, fraud-detection vendors, and analytics services. |
ug128 collects only the categories of Personal Data that are necessary to provide the Services, fulfil our legal obligations, and maintain the security and integrity of the Platform. The following table sets out each data category, specific data points within that category, and the context in which they are collected:
| Category | Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, national identity card (KTP) number | Registration & KYC |
| Contact Data | Email address, Indonesian mobile phone number (active SIM), city or province of residence | Registration & Profile Updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet account identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Cashier & KYC |
| Verification Documents | Photograph or scan of KTP, selfie with KTP, bank statement header or e-wallet profile screenshot | KYC Verification |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time-zone setting | Automatic — all Platform sessions |
| Usage Data | Pages visited, products accessed, games played, wager amounts and frequencies, session duration, login timestamps, feature interactions | Automatic — all Platform sessions |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, survey responses | Customer Support Interactions |
| Responsible Gaming Data | Deposit limits set, cooling-off periods activated, self-exclusion status, problem gambling indicators flagged by automated monitoring | Responsible Gaming Tools & Compliance |
Data Minimisation Principle: ug128 does not collect data beyond what is listed above. We do not collect social media profile data, biometric data beyond KTP photograph verification, or any data unrelated to the provision of gaming services and regulatory compliance.
3.1 Direct Collection. The majority of Personal Data we hold is provided directly by you. This occurs when you:
3.2 Automatic Collection. When you access the Platform — whether as a registered Member or a guest visitor — certain technical and usage data is collected automatically by our servers and analytics systems. This includes your IP address, device fingerprint, browser configuration, and your interaction patterns with the site. This automatic collection occurs through server logs, session cookies, and analytics scripts operating within the Platform's infrastructure.
3.3 Third-Party Sources. In limited circumstances, ug128 may receive Personal Data about you from authorised Third-Party Providers. This includes:
Note on Third-Party Collection: ug128 does not purchase marketing lists or acquire Personal Data from data brokers. Any third-party data received is used exclusively for identity verification, fraud prevention, and responsible gaming compliance — never for unsolicited marketing purposes.
ug128 processes your Personal Data exclusively for the following defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or notifying you via an updated version of this Policy:
| Purpose | Description | Data Used |
|---|---|---|
| Account Management | Creating, maintaining, and closing your ug128 account; authenticating your identity on login; processing account settings changes. | Identity, Contact, Technical |
| Service Delivery | Providing access to casino games, sports betting markets, togel products, and all other Platform features you request. | Identity, Usage, Technical |
| Financial Processing | Processing deposits and withdrawals in IDR via Indonesian banks and e-wallets; maintaining accurate transaction records. | Identity, Financial |
| KYC & Compliance | Verifying your identity and age (21+) before processing withdrawals; complying with applicable anti-money-laundering and know-your-customer obligations. | Identity, Verification Documents, Financial |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, multi-accounting, and bonus abuse; protecting the integrity of the Platform. | Technical, Financial, Usage |
| Customer Support | Responding to support requests, resolving disputes, and providing 24/7 Indonesian-speaking assistance via live chat and email. | Identity, Contact, Communications |
| Responsible Gaming | Monitoring gambling behaviour for problem gambling indicators; applying deposit limits, cooling-off periods, and self-exclusion as requested or mandated. | Usage, Financial, Responsible Gaming |
| Platform Improvement | Analysing aggregate usage patterns to improve site navigation, game selection, and the overall Member experience. All analysis is performed on anonymised or pseudonymised data. | Usage, Technical (anonymised) |
| Marketing (Opt-In Only) | Sending promotional offers, bonus notifications, and event announcements to Members who have explicitly opted in to marketing communications. You may opt out at any time. | Contact, Usage (preferences) |
The Company processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
Withdrawal of Consent: To withdraw consent for marketing communications, navigate to your account settings and toggle off the "Promotional Emails & Notifications" option, or contact our support team at [email protected]. Withdrawal of consent will take effect within 48 hours.
6.1 Principle of Minimum Disclosure. ug128 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the limited circumstances described in this Clause.
6.2 Service Providers. We share necessary Personal Data with carefully selected Third-Party Providers who assist us in operating the Platform. These providers are contractually bound to process your data only on our instructions, only for the specific purposes we have engaged them for, and in accordance with security standards equivalent to those we apply internally. Categories of service provider include:
6.3 Legal and Regulatory Disclosure. ug128 may disclose Personal Data to competent government authorities, law enforcement agencies, or financial intelligence units where required by applicable law, court order, or regulatory direction. The Company will notify you of any such disclosure where permitted by law.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the Company's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, at least 30 days before the transfer takes effect.
No Sale of Personal Data: ug128 has never sold Member Personal Data to a third party and commits to never doing so. Any internal or external inquiry requesting the purchase of Member data will be declined without exception.
7.1 Retention Periods. ug128 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC Documents (KTP, selfie) | Duration of account + 5 years post-closure | Legal obligation / KYC regulation |
| Financial Transaction Records | Duration of account + 7 years post-closure | Financial record-keeping obligation |
| Technical & Usage Data | 13 months from collection date (rolling) | Legitimate interests (fraud, analytics) |
| Live Chat & Support Transcripts | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Responsible Gaming Records | Duration of account + 5 years post-closure | Legal obligation / responsible gaming compliance |
| Marketing Opt-In Records | Until opt-out + 2 years | Consent record-keeping |
7.2 Secure Deletion. At the expiry of the applicable retention period, Personal Data is either permanently deleted from all active systems or anonymised such that it can no longer be associated with any individual Member. Backup systems are purged on a rolling 90-day cycle.
7.3 Retention Extension. If a legal dispute, regulatory investigation, or law enforcement inquiry is in progress at the time a retention period would ordinarily expire, the relevant data will be retained until the matter is fully resolved, after which normal deletion procedures will apply.
8.1 Technical Safeguards. ug128 implements a multi-layered technical security programme to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical safeguards include:
8.2 Organisational Safeguards. Access to Member Personal Data within the Company is restricted on a strict need-to-know basis. Staff members who handle Personal Data are subject to confidentiality obligations and receive regular training on data protection best practices. Access permissions are reviewed quarterly.
8.3 Incident Response. In the event of a Personal Data breach that poses a risk to your rights and freedoms, ug128 will notify affected Members within 72 hours of becoming aware of the incident, detailing the nature of the breach, the data categories affected, and the remediation steps being taken.
Your Role in Security: Platform security is a shared responsibility. We strongly recommend enabling SMS 2FA on your account, using a unique strong password for ug128, and never sharing your login credentials with any third party. If you suspect unauthorised access to your account, contact our live support team immediately.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website server when you visit a page. They allow the Platform to recognise your device, maintain session state, and gather usage information. ug128 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).
9.2 Cookie Categories. The cookies deployed on the ug128 Platform fall into the following categories:
| Category | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, store your language and product preferences, enable cashier functionality. Cannot be disabled without breaking core Platform features. | Session |
| Functional | Remember your preferred game lobby view, responsible gaming settings, and notification preferences across sessions. | 12 months |
| Analytics | Collect anonymised data on pages visited, session duration, and feature usage to help us improve the Platform. No individual Member is identified in analytics reports. | 13 months |
| Fraud Detection | Device fingerprinting and IP risk scoring to detect suspicious login attempts and fraudulent transaction patterns in real time. | Session + 30 days |
9.3 Managing Cookies. You may control or disable cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform or using the cashier. Instructions for managing cookies in major browsers are available from the respective browser's help documentation. Disabling analytics or functional cookies will not affect your ability to use core Platform features.
9.4 No Third-Party Advertising Cookies. ug128 does not deploy third-party advertising, retargeting, or cross-site tracking cookies. We do not participate in any advertising network that would allow your browsing of ug128.vip to be tracked by external advertisers.
As a Member whose Personal Data is processed by ug128, you hold the following rights with respect to your information. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days (WIB) and respond in full within 30 calendar days.
You may request a copy of all Personal Data we hold about you, along with information about how it is being used and with whom it has been shared.
You may request correction of any inaccurate or incomplete Personal Data held in your account, including contact details and identity information.
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
You may request that we limit the processing of your data to storage only while a rectification or erasure request is under review.
You may request your Personal Data in a structured, machine-readable format (CSV or JSON) to transfer to another service provider.
You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you have grounds relating to your particular situation.
Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.
If you believe your data rights have been violated, you may lodge a complaint with the relevant data protection authority in your jurisdiction.
Identity Verification for Rights Requests: To protect your privacy, all data rights requests must be submitted from the email address registered on your ug128 account. We may ask for additional identity confirmation before processing sensitive requests such as data export or erasure.
11.1 Age Policy. The ug128 Platform is strictly restricted to adults aged 21 years and over. We do not knowingly collect Personal Data from any individual under the age of 21. Registration on the Platform constitutes a representation by the Member that they are at least 21 years of age and that this representation is accurate.
11.2 Age Verification Process. All Members are subject to KYC age verification before their first withdrawal is processed. The KYC process requires submission of a valid Indonesian National Identity Card (KTP), which displays the Member's date of birth. Accounts where the Member is found to be under 21 years of age will be immediately and permanently closed, and any balance held will be forfeited in accordance with the Terms & Conditions.
11.3 Accidental Collection. If the Company becomes aware that it has inadvertently collected Personal Data from an individual under the age of 21, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report".
⚠ 21+ Only: This Platform is intended for adult entertainment. If you are under 21 years of age, you must not attempt to register, deposit, or wager on ug128. Parental controls and internet filtering tools are available to help prevent underage access to gambling websites.
12.1 Game Providers. The Platform integrates games developed and operated by third-party studios, including Evolution Gaming, Pragmatic Play, Microgaming, Spribe, and Pocket Games Soft. When you play a game developed by these studios, a pseudonymous session token is passed to the studio's game server to authenticate your session. No directly identifiable Personal Data — including your name, KTP number, bank account details, or email address — is transmitted to game studios.
12.2 Payment Partners. Payment processing requires the disclosure of your account name and nominated account number to the relevant Indonesian bank or e-wallet provider to facilitate the transaction. This disclosure is limited to the minimum data required to execute the specific payment instruction and is governed by the data processing agreement in place between ug128 and the relevant financial institution.
12.3 No Third-Party Links. The ug128 Platform does not contain links to third-party websites or services outside of those explicitly listed in the site navigation. ug128 is not responsible for the privacy practices of any external website that you may access independently.
12.4 Data Processing Agreements. All Third-Party Providers who process Personal Data on behalf of ug128 are subject to a formal data processing agreement requiring them to: process data only on documented instructions from ug128; implement appropriate technical and organisational security measures; not engage sub-processors without prior written authorisation from ug128; and delete or return all Personal Data upon termination of the service engagement.
13.1 Right to Update. ug128 reserves the right to update or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the introduction of new Platform features. The current version of this Policy, together with its version number and effective date, is always accessible at ug128.vip/privacy-policy.
13.2 Notification of Changes. Material changes to this Privacy Policy — specifically, changes that expand the categories of data collected, introduce new purposes for processing, or alter data sharing arrangements — will be communicated to all registered Members via in-platform notification and email to the address on file, at least 14 days before the changes take effect. For non-material clarifications or corrections, the Policy will be updated with a revised version number and date without individual notice.
13.3 Continued Use. Your continued use of the Platform following the effective date of any Policy update constitutes your acknowledgement of the revised terms. If you do not accept the revised Privacy Policy, you should cease using the Platform and request account closure through the support team.
For all questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact the ug128 Data Protection team through the following channels:
Email: [email protected]
Subject Line for Data Rights Requests: "Data Rights Request — [Your Registered Email]"
Subject Line for Underage Account Reports: "Underage Account Report"
Subject Line for Data Breach Reports: "Security Concern — Account [Your Username]"
Live Chat: Available 24/7 via the in-platform live chat widget. For complex data rights requests, our live chat team will escalate to the Data Protection team and ensure a written response is issued within the applicable timeframe.
Response Times: Acknowledgement within 5 business days (WIB); full substantive response within 30 calendar days of receipt of a valid, identity-verified request.
For inquiries related to account security, please also review our Terms & Conditions. For responsible gaming support, please visit our dedicated Responsible Gaming page.
Six core promises ug128 makes to every Indonesian player regarding the handling of personal information on our Platform.
Every piece of Personal Data stored on our servers — from your KTP documents to your IDR transaction history — is encrypted using AES-256, the same standard used by global financial institutions. Unencrypted data at rest is not permitted in any part of our infrastructure.
ug128 has never sold Member Personal Data to any third party and never will. Your name, contact details, bank account information, and usage behaviour are yours. We use this data solely to operate and improve the Platform for your benefit.
You hold eight distinct data rights — access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint. Every request submitted to [email protected] is acknowledged within 5 business days and resolved within 30 calendar days.
We collect only the data we genuinely need. There are no hidden data collection activities, no social media scraping, and no purchase of marketing lists. Every data point collected has a documented purpose and a defined retention period after which it is securely deleted.
Promotional communications are sent exclusively to Members who have actively opted in. There are no pre-ticked boxes or implied consent. You can opt out of all marketing at any time from your account settings or by contacting our support team — your gaming access is completely unaffected.
In the unlikely event of a data breach affecting your Personal Data, ug128 commits to notifying you within 72 hours of detection — including what data was affected, what steps we have taken, and what you can do to protect yourself. We do not suppress breach disclosures.
Legal Disclaimer: This Privacy Policy is provided for informational purposes and constitutes the complete statement of ug128's data processing practices as of the effective date shown at the top of this document. In the event of any conflict between this Privacy Policy and any other communication or document, the most recently published version of this Privacy Policy shall prevail. ug128 does not provide legal advice; if you have questions about your rights under applicable data protection law in Indonesia or another jurisdiction, you should consult a qualified legal professional.
Now that you understand exactly how ug128 protects your personal data, explore our full range of games and sports betting markets — all secured with enterprise-grade encryption and backed by 24/7 Indonesian-speaking support.