At ug388 we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, how we use and protect that data, who we may share it with, and what rights you have over your information. We encourage you to read this document carefully before registering or depositing.
All personal data and KYC documents held by ug388 are stored with 256-bit SSL (TLS 1.3) encryption in geographically redundant data centres. We apply the same rigorous security standards to every byte of your information.
ug388 never sells, rents, or commercially exchanges your personal data with third parties. Your information is used solely to operate your ug388 account, process transactions, and comply with applicable legal obligations.
You have the right to access, correct, and request deletion of personal data held by ug388, subject to our legal retention obligations. Submit any data request to our support team and we will respond within 30 days.
ug388 uses cookies strictly for session management, security, and platform analytics. We do not use third-party advertising trackers or cross-site profiling cookies. You can manage cookie preferences through your browser settings.
Where data is shared with third parties — such as payment processors handling BCA, BRI, BNI, Mandiri, OVO, or DANA transactions — it is limited strictly to what is necessary to complete that service, and those parties are bound by confidentiality obligations.
Information relating to your responsible gaming settings — including deposit limits, cooling-off periods, and self-exclusion status — is handled with the highest level of confidentiality and is never shared with marketing partners under any circumstances.
ug388 is committed to protecting the privacy and security of every Player who uses our online gaming platform at ug388.bio. We understand that personal data is sensitive, particularly in the context of financial transactions and identity verification, and we treat it accordingly.
This Privacy Policy describes our practices with respect to personal data collected from Players who access the ug388 Platform from Indonesia and internationally. It covers what data we collect, the purposes for which we process it, how long we retain it, and the rights available to you as a data subject.
We do not sell your personal data. We do not use your data for purposes beyond those described in this policy without first obtaining your explicit consent. If you have any questions about how ug388 handles your data, you are welcome to contact our support team at any time via the channels listed in Section 15.
The following definitions apply throughout this Privacy Policy:
ug388 collects the following categories of Personal Data in connection with your use of the Platform:
3.1 Registration Data. When you create a ug388 account, we collect your full legal name, date of birth, Indonesian mobile number (+62 format), preferred username, and account password (stored as a one-way cryptographic hash — never in plain text).
3.2 Identity Verification (KYC) Data. To verify your identity and age in compliance with our responsible gaming obligations, we collect copies of government-issued identification documents (such as your KTP — Kartu Tanda Penduduk — or valid passport), selfie photographs taken with your identity document, and proof of your registered Indonesian bank account.
3.3 Financial Data. We collect details of the payment methods you use to deposit and withdraw funds, including Indonesian bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full card numbers or card verification values (CVV).
3.4 Transaction Data. We maintain records of all deposits, withdrawals, bets placed, game outcomes, bonus activations, and account balance changes. These records are required for account integrity, dispute resolution, and regulatory compliance.
3.5 Technical Data. When you access the Platform, we automatically collect your IP address, browser type and version, device type and operating system, referring URL, session timestamps, and pages visited. This data is used for security monitoring, fraud detection, and platform optimisation.
3.6 Communications Data. We retain records of communications between you and ug388, including live chat transcripts, WhatsApp messages sent to our support number (+62 811 0388 388), and emails sent to [email protected]. These records are used for quality assurance, dispute resolution, and training purposes.
3.7 Responsible Gaming Data. If you activate any responsible gaming tool — such as a deposit limit, cooling-off period, or self-exclusion — we record the details of that election and the dates on which it was applied. This data is handled with the highest level of confidentiality.
| Data Category | Examples | Required? |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, username | Mandatory |
| KYC / Identity Data | KTP / passport copy, selfie, bank statement header | Required before first withdrawal |
| Financial Data | Bank account number, e-wallet ID | Mandatory for transactions |
| Transaction Data | Deposit / withdrawal history, bet records | Automatically recorded |
| Technical Data | IP address, device type, session data | Automatically recorded |
| Communications Data | Live chat logs, support emails | When you contact support |
| Responsible Gaming Data | Deposit limits, self-exclusion records | When tools are activated |
ug388 collects Personal Data through the following means:
ug388 processes your Personal Data for the following specific purposes:
ug388 processes your Personal Data on one or more of the following legal bases depending on the specific processing activity:
7.1 General Principle. ug388 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. Data is shared only where necessary to deliver the services you have requested, to fulfil a legal obligation, or where you have provided explicit consent.
7.2 Service Providers. ug388 may share Personal Data with carefully selected third-party service providers who assist in operating the Platform, including:
7.3 Legal Disclosures. ug388 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to prevent serious harm or illegal activity.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of ug388's assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified via your registered mobile number or account notification of any such transfer and of any material change to your privacy rights that results from it.
8.1 Retention Periods. ug388 retains your Personal Data for as long as your account remains active and for a defined period after account closure, as required by our legal and regulatory obligations.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| KYC documents | Duration of account + 5 years after closure | Legal obligation (AML compliance) |
| Transaction records | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| Support communications | 3 years from date of communication | Legitimate interest (quality & disputes) |
| Technical / session logs | 90 days from generation | Legitimate interest (security) |
| Responsible gaming records | Duration of account + 5 years after closure | Legal obligation / player protection |
| Marketing consent records | Until consent is withdrawn + 2 years | Legal obligation (consent proof) |
8.2 Post-Retention Deletion. Once the applicable retention period has elapsed, ug388 will securely delete or anonymise your Personal Data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
9.1 Technical Safeguards. ug388 implements the following technical security measures to protect your Personal Data:
9.2 Organisational Safeguards. Access to Personal Data within ug388 is restricted to staff members who require it to perform their job functions. All staff with access to Personal Data are trained on data protection obligations and are bound by confidentiality obligations in their employment agreements.
9.3 Data Breach Response. In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, ug388 will notify affected Players via their registered mobile number within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.
9.4 Your Responsibility. While ug388 takes all reasonable steps to protect your data on our systems, you are responsible for maintaining the security of your own account credentials. Do not share your ug388 password with anyone, and enable SMS-based two-factor authentication on your account for an additional layer of protection. Contact support immediately if you suspect that your account has been accessed without your authorisation.
10.1 What Are Cookies? Cookies are small text files stored on your device by your web browser when you visit the ug388 Platform. They allow the Platform to recognise your device across page loads and sessions, enabling features such as persistent login, personalised settings, and secure session management.
10.2 Cookies Used by ug388. ug388 uses the following categories of cookies:
10.3 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your ug388 account. Information on how to manage cookies is available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or mobile browsers on Android and iOS devices).
10.4 No Cross-Site Tracking. ug388 does not deploy third-party advertising pixels, retargeting scripts, or social media tracking tags on the Platform. Your browsing activity on ug388 is not shared with social media platforms or advertising networks.
You have the following rights with respect to the Personal Data ug388 holds about you. To exercise any of these rights, contact our support team using the details in Section 15. We will respond within 30 calendar days of receiving your request.
12.1 Strict 21+ Policy. The ug388 Platform is intended exclusively for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under 21 years of age. By registering an account, you represent and warrant that you are at least 21 years old.
12.2 Discovery of Minor's Data. If ug388 discovers or has reason to believe that an account has been registered by a person under 21 years of age, we will immediately suspend the account, securely delete all associated Personal Data to the extent permitted by law, and forfeit any funds in the account pending investigation. If any winnings were generated, they will not be paid out.
12.3 Parental Controls. If you are a parent or guardian and believe that your child has registered an account on ug388, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action within 24 hours of notification.
13.1 Cross-Border Processing. ug388 operates data centres in multiple geographic locations to ensure platform resilience and performance. As a result, your Personal Data may be stored and processed outside of Indonesia. Where such transfers occur, ug388 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.
13.2 Safeguards. International transfers are conducted under contractual safeguards including data processing agreements with receiving parties that impose data protection obligations equivalent to those applied by ug388. Where data is transferred to game studio partners (e.g., Evolution Gaming, Pragmatic Play, Microgaming), only pseudonymous player identifiers are transmitted — no directly identifiable information.
13.3 Indonesian Player Data. ug388 takes particular care with the personal data of Indonesian Players. Copies of KYC documents containing Indonesian national identity card numbers are stored in encrypted form and access is restricted to authorised compliance staff only. We do not transfer KTP data to any third party outside of KYC verification requirements.
14.1 Right to Update. ug388 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this policy will always be available at ug388.bio/privacy-policy, with the "Last updated" date revised accordingly.
14.2 Notification of Material Changes. Where ug388 makes material changes to the way we collect, use, or share your Personal Data, we will notify you via SMS to your registered Indonesian mobile number or via an on-screen notification upon your next login, at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of an amended policy constitutes acceptance of the updated terms.
14.3 Policy Archive. ug388 maintains an archive of prior versions of this Privacy Policy, which are available upon written request to our support team. Requests will be fulfilled within 10 business days.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ug388 processes your Personal Data, please contact our support team through any of the following channels. All support hours default to WIB (UTC+7); Indonesian-speaking agents are available at all times.
For data rights requests (access, rectification, erasure, portability), please include "Data Rights Request" in the subject line of your message and provide your registered account username and mobile number so that we can verify your identity before processing the request.
For urgent security concerns — such as suspected unauthorised access to your account — please contact us via live chat for the fastest response. Our security team operates around the clock and will prioritise urgent account security matters.
Now that you understand how ug388 safeguards your data, explore our full range of games — live casino tables, sportsbook markets, 500+ slots, and more — all secured with industry-leading encryption.