Effective Date: 1 January 2026  ·  Version 2.4

Privacy Policy

This Privacy Policy explains how ug889 collects, uses, stores, and protects your personal data. It applies to all users of the ug889 platform, including residents of Indonesia and all other eligible jurisdictions. By registering an account or using our services, you confirm that you have read and accepted this Policy.

Data Protection at a Glance

256-Bit SSL Encryption

All data transmitted between your device and the ug889 platform is encrypted using industry-standard 256-bit SSL/TLS. This applies to every page, every transaction, and every support interaction.

No Third-Party Data Sales

ug889 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Data sharing is limited strictly to what is required for operations and regulatory compliance.

Your Rights, Respected

As a ug889 member, you have the right to access, correct, port, and — in certain circumstances — request deletion of your personal data. All rights requests are handled within 30 calendar days.

Defined Retention Periods

ug889 retains personal data only for as long as necessary for the original collection purpose or as required by applicable law. Retention periods for each data category are documented and enforced.

Breach Notification

In the event of a data breach that poses a material risk to affected users, ug889 will notify impacted members within 72 hours of becoming aware of the incident, consistent with international best practice.

Consent-Based Marketing

ug889 sends promotional communications only to members who have explicitly opted in. You may withdraw marketing consent at any time through your account settings or by contacting our support team.

Section 01

1. Definitions

The following terms have specific meanings throughout this Privacy Policy:

  • "Platform" — The ug889 website at https://ug889.cam and all associated services, applications, and features.
  • "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
  • "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
  • "Data Controller" — ug889 and its operating entity, which determines the purposes and means of processing Personal Data.
  • "Data Processor" — A third party that processes Personal Data on behalf of ug889 under a written data-processing agreement.
  • "User" / "You" — Any individual who accesses, registers on, or uses the ug889 Platform.
  • "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
  • "Sensitive Data" — A subset of Personal Data that warrants heightened protection, including national identity numbers (KTP), financial account details, and biometric verification data.
Section 02

2. Data Controller

ug889, operating at https://ug889.cam, is the Data Controller responsible for your Personal Data collected through the Platform. All data protection enquiries, rights requests, and complaints should be directed to ug889 using the contact details set out in Section 15 of this Policy.

ug889 is committed to maintaining the highest standards of data stewardship. We conduct periodic internal reviews of our data-handling practices and update this Policy whenever our practices change materially. The current version is always accessible at https://ug889.cam/privacy-policy.

Section 03

3. Personal Data We Collect

ug889 collects the following categories of Personal Data in connection with your use of the Platform:

Category Examples Sensitivity
Identity Data Full legal name, date of birth, KTP number, passport number, selfie photograph High
Contact Data Residential address (Indonesia), email address, mobile phone number Medium
Financial Data Bank account details (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), transaction history, deposit and withdrawal records High
Account Data Username, hashed password, account tier, login history, account preferences Medium
Behavioral Data Wagering history, game session logs, sports markets accessed, responsible gaming tool usage Medium
Technical Data IP address, browser type and version, device identifiers, operating system, time zone (WIB/WITA/WIT), referring URL Low
Communication Data Live chat transcripts, support ticket content, email correspondence with ug889 Medium
Marketing Preferences Opt-in/opt-out status for promotional emails, SMS, and in-platform notifications Low

ug889 does not collect special-category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless you voluntarily provide such information in the context of a responsible gaming support interaction, in which case it is processed solely for your welfare and protection.

Section 04

4. How We Collect Your Data

ug889 collects Personal Data through the following means:

  • Direct provision: Data you supply when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to a survey or promotion.
  • Automated collection: Technical and behavioral data collected automatically as you interact with the Platform, including via cookies, web beacons, and server logs (see Section 12).
  • Third-party sources: Identity verification providers engaged for KYC processing; payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) for transaction data; fraud-detection and anti-money-laundering screening services; and publicly available sources where relevant to compliance obligations.

ug889 takes reasonable steps to verify the accuracy of data received from third-party sources and to ensure that such collection is lawful.

Section 05

5. Purposes of Processing

ug889 processes your Personal Data only for lawful, specified, and documented purposes. The primary purposes are:

  • Account management: Creating, maintaining, and administering your ug889 account, including processing login credentials and managing account tiers (Silver, Gold, Platinum).
  • Identity and age verification (KYC): Verifying that you are at least 21 years of age and a legitimate user of the Platform, as required by our responsible gaming obligations and international licensing conditions.
  • Transaction processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR) through local bank transfers and e-wallets, and maintaining accurate financial records.
  • Service delivery: Providing access to sports betting markets (BRI Liga 1, EPL, La Liga, Champions League), live casino products, togel (traditional Indonesian numbers lottery) draws, and slot titles supplied by certified studios including Pragmatic Play, Evolution Gaming, and NetEnt.
  • Fraud prevention and security: Detecting and preventing unauthorized account access, money laundering, bonus abuse, and other forms of platform misuse.
  • Responsible gaming monitoring: Identifying behavioral patterns that may indicate problem gambling and applying appropriate safeguards in accordance with our Responsible Gaming policy.
  • Legal and regulatory compliance: Fulfilling obligations under applicable anti-money-laundering laws, licensing requirements, and court or regulatory orders.
  • Marketing communications (consent-only): Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.
  • Platform improvement: Analyzing aggregate and anonymized usage data to improve the performance, reliability, and user experience of the ug889 Platform.
  • Customer support: Responding to enquiries, resolving disputes, and maintaining support records for quality assurance.
Section 07

7. Data Sharing & Third-Party Disclosures

ug889 shares Personal Data only in the circumstances described below. We do not sell or rent your data to third parties for their independent commercial purposes.

  • Payment processors: Your financial data is shared with banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal instructions. These partners act as independent data controllers for transactions processed through their own systems.
  • Identity verification providers: KYC and age-verification services receive identity documents and selfie data to confirm your eligibility to use the Platform. These processors operate under strict data-processing agreements with ug889.
  • Game content providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt receive session and wagering data necessary to deliver their games and calculate outcomes. No personally identifying data beyond a pseudonymous player identifier is shared with these providers.
  • Fraud and AML screening services: Relevant transaction and identity data may be shared with licensed screening providers to identify suspicious activity and comply with anti-money-laundering obligations.
  • Regulatory and law-enforcement authorities: ug889 will disclose Personal Data to a competent authority where required by law, court order, or regulatory directive. We will notify you of such a disclosure where legally permitted to do so.
  • Professional advisors: Legal counsel, auditors, and compliance consultants acting under confidentiality obligations may access Personal Data where necessary to perform their professional services.
  • Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ug889's assets, Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to close your account before the transfer takes effect, if you choose.
Section 08

8. International Data Transfers

As an international online platform serving Indonesian users, ug889 may transfer your Personal Data to servers and service providers located outside of Indonesia. Where such transfers occur, ug889 ensures that appropriate safeguards are in place, including:

  • Data-processing agreements incorporating internationally recognized standard contractual clauses.
  • Transfers only to countries or entities that provide an adequate level of data protection as assessed by ug889's compliance function.
  • Technical security measures (encryption in transit and at rest) applied consistently regardless of where data is stored.

You may request information about the specific safeguards applied to any international transfer of your data by contacting [email protected].

Section 09

9. Data Retention

ug889 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law. Key retention periods are:

Data Category Retention Period Basis
Account and identity records Duration of account + 5 years post-closure Legal / AML obligation
Transaction and financial records 7 years from transaction date Regulatory requirement
KYC verification documents 5 years post account closure AML obligation
Wagering and game session history 3 years from the date of the session Dispute resolution; regulatory audit
Support communications 3 years from date of last interaction Legitimate interest (quality, disputes)
Marketing preferences (opted-in) Until consent is withdrawn Consent
Technical and log data 12 months from collection Security; fraud prevention

When Personal Data is no longer required, ug889 deletes it securely or anonymizes it such that it can no longer be attributed to an identified or identifiable individual.

Section 10

10. Security Measures

ug889 applies technical and organizational measures proportionate to the risk posed by the Personal Data we hold. These include:

  • Encryption: 256-bit SSL/TLS encryption for all data in transit. Data at rest is encrypted using AES-256 on all production databases.
  • Access controls: Role-based access control (RBAC) limits internal access to Personal Data to personnel with a documented need. All access is logged and periodically audited.
  • Authentication: Multi-factor authentication (MFA) is enforced for all staff with access to production systems containing Personal Data.
  • Penetration testing: Independent security assessments are conducted at least annually. Critical findings are remediated within defined SLA windows.
  • Incident response: A documented data-breach response procedure is maintained and tested regularly. In the event of a confirmed breach, ug889 will notify affected users within 72 hours of confirmation.
  • Vendor security: All third-party processors are assessed against ug889's vendor security standards before engagement and reviewed annually thereafter.

Your responsibility: You play an important role in keeping your account secure. Use a strong, unique password, enable two-factor authentication in your account settings, and never share your login credentials with anyone. Contact ug889 support immediately if you suspect unauthorized access to your account.

Section 11

11. Your Data Protection Rights

As a ug889 member, you have the following rights in relation to your Personal Data. To exercise any right, contact us using the details in Section 15. We will respond within 30 calendar days. Requests are free of charge unless manifestly unfounded or excessive.

Right of Access

You may request a copy of the Personal Data ug889 holds about you, along with information about how and why it is being processed.

Right to Rectification

If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. You may update basic contact and preference data directly in your account settings.

Right to Erasure

In certain circumstances, you may request that ug889 delete your Personal Data. This right is subject to overriding legal retention obligations (particularly AML and regulatory requirements) and cannot be applied where data is needed to resolve an active dispute.

Right to Restrict Processing

You may request that ug889 restrict the processing of your Personal Data in specified circumstances — for example, while you contest the accuracy of the data or object to a legitimate-interest processing activity.

Right to Data Portability

Where processing is based on your consent or on a contract, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format (JSON or CSV) for transfer to another service provider.

Right to Object

You may object to processing based on legitimate interests or for direct-marketing purposes. Objections to direct marketing will be honored immediately. Objections to other legitimate-interest processing will be assessed on a case-by-case basis.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of marketing consent takes effect within 48 hours of confirmed receipt.

Section 12

12. Cookies & Tracking Technologies

ug889 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other data on your device.

The categories of cookies used on the ug889 Platform are:

  • Strictly Necessary Cookies: Essential for the Platform to function. They enable core services such as session management, authentication, and security. These cookies cannot be disabled as they are required for the Platform to operate correctly.
  • Functional Cookies: Remember your preferences (language settings, display preferences, responsible gaming configuration) to personalize your experience. Disabling these may reduce Platform functionality.
  • Analytics Cookies: Collect anonymized and aggregated data about how users interact with the Platform — pages visited, session duration, error events — to help ug889 improve performance. No personally identifiable data is included in analytics reports.
  • Security Cookies: Assist in fraud detection and the identification of suspicious access patterns. These are strictly necessary for platform security.

ug889 does not use third-party advertising cookies or cross-site tracking technologies that share your behavior with advertising networks. You may manage cookie preferences through your browser settings at any time. Note that disabling Strictly Necessary Cookies will prevent the Platform from functioning correctly.

Section 13

13. Protection of Minors

21+ Only — Zero Tolerance. ug889 has a strict zero-tolerance policy regarding the use of the Platform by anyone under 21 years of age. The Platform is designed, operated, and marketed exclusively for adults aged 21 and over. ug889 does not knowingly collect or process the Personal Data of anyone under 21.

If ug889 becomes aware that an Account has been opened by or on behalf of a person under 21, the Account will be immediately suspended, all balances frozen, and the matter reviewed in accordance with our minor-protection protocol. Any funds deposited by a minor will be returned to the originating payment method following investigation, minus any amounts already wagered.

If you are a parent or guardian and believe your child has registered an account on ug889, please contact us immediately at [email protected] (plain text — not a clickable link). We will take prompt action.

Section 14

14. Policy Amendments

ug889 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform functionality. When we make material changes — particularly any change that reduces your rights or introduces new data-sharing relationships — we will:

  • Post the revised Policy on this page with an updated effective date.
  • Send an email notification to the address registered on your Account at least 14 days before the changes take effect.
  • Display a prominent notice in the Platform for a period of 30 days following the update.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you disagree with a material change, you should close your Account before the effective date. Funds in your Account at the time of closure will be returned following standard withdrawal processing.

Section 15

15. Contact & Complaints

For any questions, rights requests, or concerns about this Privacy Policy or ug889's data-processing practices, please use the following channel:

Data Protection Contact

Email (plain text — not a clickable link):

[email protected]

Subject line: Privacy Request – [Your Account Username]

We aim to respond to all privacy-related requests within 30 calendar days of receipt. Complex requests may require an extension, in which case we will notify you within the initial 30-day window. Live chat support is available 24/7 for general enquiries.

If you are not satisfied with ug889's response to a complaint, you have the right to lodge a complaint with the relevant data-protection supervisory authority in the jurisdiction applicable to you. Contact details for applicable authorities are available on request.

Questions or Related Reading?

Our Terms & Conditions cover your account agreement in full. Our FAQ answers the most common questions about deposits, KYC, and security. Our Responsible Gaming page details all player-protection tools.

21+ Only. ug889 is committed to responsible gambling and the protection of your personal data. This Privacy Policy is effective as of 1 January 2026. · SSL Encrypted · Provably Fair · Licensed & Regulated Internationally.