Privacy Policy

This Privacy Policy applies to all personal data processed by ug808 in connection with the operation of the ug808 online gaming platform, accessible at ug808.bio (the "Platform"). It covers data collected from registered players, prospective players who browse the Platform without registering, and individuals who contact ug808's customer support team.

ug808 acts as the data controller in respect of all personal data collected and processed under this Policy. "Data controller" means that ug808 determines the purposes for which, and the means by which, personal data is processed. Where ug808 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification services, or game studio providers — those parties act as data processors and are bound by contractual obligations that require them to handle data only in accordance with ug808's documented instructions.

By registering for an ug808 account, accessing the Platform, or interacting with ug808's customer support channels, you acknowledge that you have read, understood, and accepted this Privacy Policy. If you do not accept the terms of this Policy, you should not register for an account or use the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

ug808 collects personal data across several categories depending on your level of interaction with the Platform. The table below summarises the main categories of data we hold and representative examples of each.

ug808 does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes beyond standard KYC document checks, or health data — except where voluntarily provided by a player in the context of a responsible gaming request (e.g., a player disclosing a gambling addiction when requesting self-exclusion), in which case such data is handled with the highest level of confidentiality and used solely for the purpose stated.

4.1 Data You Provide Directly

The majority of personal data ug808 holds is provided directly by you during your interactions with the Platform:

• Account Registration: Name, email address, mobile number, date of birth, and chosen username provided when creating your ug808 account.
• KYC Verification: Identity documents (KTP, passport, driver's licence), proof of address, and payment method documentation submitted in response to a KYC request.
• Deposits and Withdrawals: Bank account or e-wallet details provided when initiating a financial transaction.
• Customer Support: Any information you share voluntarily when contacting the ug808 support team via live chat or email.
• Responsible Gaming Requests: Information provided when requesting deposit limits, self-exclusion, or other responsible gaming tools.

4.2 Data Collected Automatically

When you access or use the Platform, certain technical data is collected automatically by our systems:

• IP address and approximate geographic location derived from IP data.
• Device and browser characteristics used to deliver a compatible page rendering experience.
• Session activity logs including pages visited, games launched, bet placements, and time stamps — used for fraud prevention, security monitoring, and platform performance optimisation.
• Cookie and similar tracking technology data as described in Clause 11 of this Policy.

4.3 Data From Third Parties

In limited circumstances, ug808 may receive personal data about you from third-party sources, including:

• KYC and identity verification service providers, who confirm the authenticity of identity documents and cross-reference data against sanctions and politically exposed persons (PEP) lists.
• Payment processors and Indonesian bank partners, who confirm the status of deposit and withdrawal transactions.
• Fraud prevention and anti-money laundering (AML) screening services.

ug808 processes personal data for the following clearly defined purposes. We do not process your data for any purpose incompatible with those listed below without first obtaining your explicit consent or as otherwise required by applicable law.

ug808 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to enter into or perform the contract between ug808 and a registered player — for example, processing a withdrawal request or operating a player's account.
• Legitimate interests: Processing necessary for ug808's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, and internal analytics.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and the KYC verification process.
• Consent: Where ug808 relies on your consent as the legal basis for processing — for example, sending you promotional communications or bonus offers — you may withdraw that consent at any time by contacting support or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

ug808 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances:

7.1 Service Providers (Data Processors)

ug808 engages carefully selected third-party service providers to assist in operating the Platform. These providers act as data processors and are contractually prohibited from using your data for any purpose other than the specific service they are engaged to deliver. Categories of service providers include:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) — for processing IDR deposits and withdrawals.
• KYC and identity verification providers — for validating identity documents and running AML/sanctions screening.
• Game studio providers (including Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, NetEnt, and Microgaming) — who receive session tokens and minimum necessary technical data to deliver game content.
• Hosting and infrastructure providers — who store Platform data on secure servers.
• Customer support platform providers — who power ug808's live chat infrastructure.

7.2 Legal and Regulatory Disclosure

ug808 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised governmental authorities where required to do so by applicable law, a court order, or a lawful regulatory request. ug808 will, where legally permissible, inform the affected player of any such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ug808's business assets, personal data held by ug808 may be transferred to the acquiring entity as part of that transaction. ug808 will ensure that any such transfer is subject to contractual data protection commitments, and registered players will be notified of any material change in data controller identity.

As an internationally operating gaming platform, ug808 may transfer personal data to, and process it in, countries outside Indonesia. In particular, some of our third-party service providers — including game studio providers and infrastructure partners — operate servers in jurisdictions outside Indonesia.

Where personal data is transferred internationally, ug808 takes appropriate steps to ensure that the receiving party provides a level of protection for your data that is equivalent to the protections described in this Policy. These steps may include: entering into standard contractual clauses with the receiving party; verifying that the destination country has a recognised adequate level of data protection; or obtaining specific contractual commitments from the receiving party regarding data security and handling standards.

ug808 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out ug808's standard retention periods by data category.

Where a legal obligation requires ug808 to retain data beyond the periods stated above, the applicable statutory retention period will take precedence. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ug808's internal data disposal procedures.

ug808 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Key measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ug808 Platform is encrypted using 256-bit SSL/TLS protocols. The padlock indicator in your browser confirms an active encrypted connection.
• Password Hashing: Account passwords are never stored in plain text. ug808 applies a strong cryptographic hashing algorithm to all passwords before storage, meaning that even internal staff cannot view your password.
• Access Controls: Access to personal data within ug808's internal systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging in place for all privileged access events.
• Infrastructure Security: ug808's Platform is hosted on enterprise-grade infrastructure with firewall protection, intrusion detection systems, and regular vulnerability scanning.
• Fraud Monitoring: Automated and manual monitoring processes are in place to detect and respond to suspicious account activity, unusual transaction patterns, and potential data security incidents in real time.
• Third-Party Security Standards: All third-party data processors engaged by ug808 are required to demonstrate compliance with recognised information security standards as a condition of their engagement.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely without risk. If you have reason to believe that your ug808 account has been compromised or that your personal data has been accessed without authorisation, please contact ug808 support immediately via live chat.

The ug808 Platform uses cookies and similar technologies to operate core platform features, maintain your logged-in session, and gather aggregated analytics data that helps ug808 improve the user experience. The following categories of cookies may be present on the Platform:

You can manage cookie preferences through your browser settings. Most browsers allow you to view, block, or delete cookies stored on your device. Please note that blocking strictly necessary cookies will prevent you from logging in to or using the Platform.

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your personal data held by ug808. To exercise any of these rights, contact ug808 support via live chat or by email at [email protected].

ug808 will respond to all valid privacy rights requests within 30 days of receipt. In complex cases where an extension is required, ug808 will notify you within the initial 30-day period and provide an anticipated completion date. ug808 does not charge a fee for handling privacy rights requests unless the request is manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.

The ug808 Platform is strictly restricted to individuals who are 21 years of age or older. ug808 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is applied as part of the account registration and KYC process to enforce this restriction.

If ug808 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the associated account will be closed immediately. If you believe that a minor has registered for an ug808 account, please contact support immediately at [email protected] so that the matter can be investigated and resolved without delay.

ug808 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the services we offer. When material changes are made, ug808 will notify registered players via the email address on record and/or via a prominent on-platform notice displayed at next login.

The effective date at the top of this page reflects when the current version of the Policy came into force. Continued use of the Platform following the effective date of an amendment constitutes your acceptance of the revised Policy. We recommend that you review this page periodically to stay informed of any updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or ug808's data processing practices, please contact us through one of the following channels:

• Live Chat: Available 24/7 via the ug808 Platform dashboard. This is the fastest route for account-specific privacy queries.
• Email: [email protected] (displayed as plain text — not a clickable link). Responses are typically provided within 24 hours on business days.

All privacy-related requests are handled with full confidentiality by designated members of the ug808 support team. We are committed to addressing all enquiries in a thorough and timely manner.