Data Protection
Your privacy matters to ug138. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding your information. We are committed to transparency and compliance with international data protection standards.
Privacy at a Glance
ug138 implements industry-leading security measures to safeguard your personal information. Here's what you need to know about our privacy practices.
All data transmitted between your device and ug138 servers is encrypted using 256-bit SSL technology — the same standard used by major Indonesian banks like BCA, BRI, and Mandiri.
ug138 never sells your personal information to third parties. Your data is used solely to provide and improve our services, process transactions, and comply with legal obligations.
Identity verification protects both you and the platform. KYC procedures prevent underage gambling, fraud, and money laundering while ensuring that withdrawals go to the rightful account owner.
We collect only the personal data necessary to operate your account, process payments, and meet regulatory requirements. No unnecessary information is requested or stored.
You have the right to request deletion of your personal data after account closure, subject to legal retention requirements. Contact our support team to exercise this right.
Personal data is retained only as long as necessary for operational, legal, or regulatory purposes. Retention periods are clearly defined and strictly enforced.
ug138 ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy will inform you about how we collect, use, store, and protect your personal information when you visit our website or use our services.
This policy applies to all users of ug138, including visitors who do not register an account. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.
We are transparent about our data practices. If you have any questions about how we handle your personal data, please contact us at [email protected] (plain text — not a clickable link).
ug138 is the data controller responsible for your personal data collected through the platform. We determine the purposes for which and the manner in which your personal data is processed.
For data protection inquiries, you may contact our support team at [email protected]. We will respond to all privacy-related requests within 30 days of receipt.
ug138 collects the following categories of personal data:
When you create an account, we collect:
To comply with regulatory requirements and prevent fraud, we collect:
To process deposits and withdrawals, we collect:
ug138 does not store full credit or debit card numbers. Payment card transactions are processed through secure third-party payment gateways that are PCI-DSS compliant.
When you access ug138, we automatically collect:
If you contact our support team, we collect:
To improve our services and detect problem gambling patterns, we collect:
ug138 uses your personal data for the following purposes:
Under data protection law, we process your personal data on the following legal grounds:
ug138 does not sell your personal data to third parties. We share your data only in the following limited circumstances:
We share necessary financial data with payment service providers to process deposits and withdrawals via Indonesian bank channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers are contractually bound to use your data solely for transaction processing and to maintain equivalent data protection standards.
We use third-party KYC verification services to authenticate identity documents and perform age verification. These providers process your identification data in accordance with international data protection standards and do not retain copies of your documents beyond the verification period.
When you play games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, limited session data (username, bet amounts, and game outcomes) may be shared with those providers to operate the games and settle wagers. These studios are contractually prohibited from using your data for purposes other than game operation.
We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, including in response to a valid subpoena, court order, or government request. We will notify you of such disclosures where legally permitted to do so.
In the event that ug138 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified via email and on-platform notice of any such change in ownership or control of your personal data.
ug138 uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information.
You can control cookie settings through your browser preferences. Note that disabling essential cookies may impair platform functionality. Most browsers allow you to delete cookies or block third-party cookies while allowing first-party cookies.
ug138 currently does not respond to Do Not Track (DNT) browser signals. We honor opt-out preferences managed through your account settings and browser cookie controls.
ug138 implements robust technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:
In the unlikely event of a data breach affecting your personal information, ug138 will notify affected users within 72 hours of discovering the breach and provide guidance on protective measures you should take. We will also notify relevant data protection authorities where required by law.
ug138 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations:
While your account is active, we retain all personal data necessary to operate your account, process transactions, and provide customer support.
After account closure, we retain the following data for the specified periods:
After the applicable retention period expires, your personal data is securely deleted or anonymized such that it can no longer be associated with you. You may request early deletion of certain data categories by contacting [email protected], subject to overriding legal retention obligations.
Under applicable data protection laws, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
You may request deletion of your personal data after account closure, subject to legal retention requirements. Note that we cannot delete data that we are legally required to retain for AML, financial auditing, or self-exclusion enforcement purposes.
You may request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a portable format and to transmit that data to another service provider where technically feasible.
You may object to processing of your personal data where we rely on legitimate interests as the legal basis. This includes objecting to marketing communications (you can opt out via your account settings or by clicking "unsubscribe" in any promotional email).
Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact our support team at [email protected] (plain text email address). We will respond to all requests within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
ug138 is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.
If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will immediately delete that data and close the associated account. Any funds deposited will be returned to the source account (or to a parent/guardian where the source account is also associated with a minor).
Parents or guardians who believe that a minor has registered an account on ug138 should contact us immediately at [email protected]. We take underage gambling prevention seriously and will cooperate fully with any investigation.
ug138 primarily serves players in Indonesia. However, some of our service providers (payment processors, KYC verification services, game studios) may be located outside Indonesia.
Where personal data is transferred internationally, we ensure that:
You have the right to request information about the safeguards applied to any international transfers of your personal data by contacting [email protected].
ug138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.
Where changes are material, we will notify you via email to your registered address and display a prominent notice on the platform at least 30 days before the changes take effect. The current version of this Privacy Policy will always be accessible at https://ug138.cam/privacy-policy, with the effective date clearly indicated at the top.
Your continued use of ug138 after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must cease using the platform and request account closure in accordance with our Terms & Conditions.
For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the ug138 support team:
When contacting us about privacy matters, please include "Privacy Request" in the subject line and provide sufficient information to verify your identity (username, registered email address, and date of birth). This helps us ensure that personal data is disclosed only to the rightful account holder.
Transparency & Trust
Our FAQ covers common privacy and security questions, including how to update your personal information, request data deletion, and manage your marketing preferences. You can also review our Terms & Conditions to understand your rights and obligations as an ug138 player.
256-bit SSL Encrypted · No Data Selling · Your Privacy Matters