Privacy Policy

1. Information We Collect

ug900 collects several categories of personal information necessary to provide our gaming services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The types of information we collect include:

1.1 Information You Provide Directly

When you register for a ug900 account, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, nationality, government-issued identification number (KTP number for Indonesian ID or passport number).
• Contact Information: Email address, mobile phone number, residential address in Indonesia (including street, city, province, and postal code).
• Account Credentials: Chosen username, password, and security questions/answers.
• Financial Information: Indonesian bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers).
• KYC Documentation: Scanned copies or photographs of your Indonesian KTP (Kartu Tanda Penduduk), passport, utility bills, bank statements, or other documents submitted for identity verification purposes.

1.2 Information Collected Automatically

When you access and use ug900 services, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, MAC address).
• Connection Data: IP address, internet service provider (ISP), geographic location (city and region derived from IP address), connection timestamps.
• Usage Data: Pages visited, features used, games played, bet history, deposit and withdrawal history, session duration, click patterns, navigation paths.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your session, analyze site traffic, and prevent fraud. You can control cookie settings through your browser preferences.

1.3 Information from Third Parties

We may receive information about you from third-party service providers:

• Payment Processors: Transaction confirmations, payment method verification, and fraud detection data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: KYC verification results and risk assessment reports from third-party identity verification providers.
• Marketing Partners: If you arrive at ug900 through an affiliate link or promotional campaign, we may receive referral information from our marketing partners.

2. How We Use Your Information

ug900 uses the personal information we collect for the following legitimate business purposes:

2.1 Service Provision and Account Management

• Create, maintain, and authenticate your ug900 account.
• Process deposits, withdrawals, and internal fund transfers.
• Enable you to place bets on sports events, play casino games, slots, and other gaming products.
• Track your gaming activity, transaction history, and account balance.
• Provide customer support and respond to your inquiries via live chat, email, or WhatsApp.

2.2 Identity Verification and Fraud Prevention

• Verify your age (21+ requirement) and identity through KYC procedures.
• Detect and prevent fraudulent activity, money laundering, underage gambling, and account abuse.
• Monitor for multiple accounts, collusion, bonus abuse, and other violations of our Terms and Conditions.
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations applicable in Indonesia.

2.3 Legal and Regulatory Compliance

• Comply with Indonesian laws, regulations, and legal obligations related to online gaming, financial transactions, and data protection.
• Respond to legal requests, court orders, subpoenas, or government inquiries.
• Report suspicious transactions to relevant authorities as required by AML regulations.
• Maintain records for regulatory audits and compliance verification.

2.4 Platform Improvement and Analytics

• Analyze user behavior and preferences to improve our website design, game offerings, and user experience.
• Conduct statistical analysis, research, and data analytics to optimize platform performance.
• Test new features, products, and services before public release.
• Identify and fix technical issues, bugs, and security vulnerabilities.

2.5 Marketing and Communications

• Send you promotional emails, SMS messages, or push notifications about bonuses, tournaments, new games, and special offers (you may opt out at any time).
• Provide personalized game recommendations based on your playing history.
• Inform you of important account updates, policy changes, and service announcements.
• Conduct customer satisfaction surveys and collect feedback to improve our services.

3. How We Share Your Information

ug900 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

3.1 Service Providers and Business Partners

• Payment Processors: We share necessary transaction information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Services: KYC documents and identity information are shared with third-party verification providers to confirm your age, identity, and address.
• Game Providers: Your gaming activity data may be shared with third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, Spribe) to deliver game content and track gameplay.
• Cloud Hosting Providers: Personal data is stored on secure servers operated by trusted cloud infrastructure providers with strict data protection agreements.
• Customer Support Tools: Support interactions may be processed through third-party customer service platforms and live chat software.

3.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory bodies, courts, or government authorities when:

• Required by Indonesian law, regulation, legal process, or court order.
• Necessary to investigate suspected illegal activity, fraud, money laundering, or violation of our Terms and Conditions.
• Requested by tax authorities or financial regulators for compliance verification.
• Required to protect the rights, property, or safety of ug900, our users, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and account notification of any such change in ownership or control of your personal data.

3.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot be used to identify you personally for research, marketing, analytics, or business purposes. This includes statistical reports on user demographics, popular games, betting patterns, and platform usage trends.

4. Data Retention

ug900 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal and regulatory compliance, fraud prevention
Transaction History	7 years after transaction date	Financial record-keeping, AML compliance, tax reporting
KYC Documents	7 years after account closure	Identity verification, regulatory audit requirements
Betting and Gaming Data	5 years after bet settlement	Dispute resolution, responsible gaming monitoring
Marketing Communications	Until opt-out or account closure	Consent-based processing, user preferences
Support Conversations	3 years after conversation date	Quality assurance, dispute resolution

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. You may request earlier deletion of certain data categories by contacting our support team, subject to our legal retention obligations.

5. Your Privacy Rights

Under applicable Indonesian data protection regulations, you have the following rights regarding your personal information:

5.1 Right to Access

You may request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request. You can access most account information directly through your ug900 account dashboard.

5.2 Right to Correction

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly in your account settings. For changes to your name or date of birth, please contact customer support with supporting documentation.

5.3 Right to Deletion

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent for processing. However, we may retain certain information to comply with legal obligations, resolve disputes, prevent fraud, or enforce our Terms and Conditions. Account closure does not automatically delete all personal data due to regulatory retention requirements.

5.4 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. Click the "Unsubscribe" link in promotional emails or adjust your communication preferences in your account settings. You may also object to processing based on legitimate interests by contacting our support team.

5.5 Right to Restrict Processing

You may request restriction of processing in certain situations, such as when you contest the accuracy of data, when processing is unlawful but you do not want the data deleted, or when you need the data for legal claims even though we no longer need it for our purposes.

5.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format and to transmit this data to another service provider where technically feasible. This applies to information you provided to us and that we process based on consent or contract.

Exercising Your Rights: To exercise any of these rights, please contact our Data Protection Team at [email protected] (text only — type this address into your email client) with "DATA REQUEST" in the subject line. Include your full name, registered email address, and specific details of your request. We will verify your identity before processing any data request and respond within 30 days.

6. Data Security Measures

ug900 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security

• Encryption: All data transmissions between your device and ug900 servers are protected by 256-bit SSL/TLS encryption, the same technology used by international banks.
• Secure Storage: Personal data is stored on encrypted servers located in secure data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Firewall Protection: Advanced firewall systems and intrusion detection software monitor and block unauthorized access attempts.
• Two-Factor Authentication: Optional 2FA (SMS or authenticator app) adds an extra layer of security to your account login.
• Secure Payment Processing: All financial transactions are processed through PCI-DSS compliant payment gateways with tokenization to protect your bank account and card details.

6.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized ug900 employees who require the information to perform their job functions. Access is logged and monitored.
• Employee Training: All staff undergo regular data protection and security awareness training.
• Third-Party Audits: We engage independent security firms to conduct regular penetration testing and security audits.
• Incident Response: We maintain a comprehensive data breach response plan. In the event of a confirmed breach affecting your personal data, we commit to notifying you within 72 hours.

6.3 Your Security Responsibilities

While ug900 implements robust security measures, you also play a critical role in protecting your account:

• Create a strong, unique password combining letters, numbers, and special characters.
• Never share your ug900 password with anyone, including ug900 staff (we will never ask for your password).
• Enable two-factor authentication for enhanced account security.
• Log out of your account when using shared or public devices.
• Keep your registered email address and phone number secure and up to date.
• Report any suspicious account activity or unauthorized access immediately to our support team.

7. Cookies and Tracking Technologies

ug900 uses cookies, web beacons, pixel tags, and similar technologies to enhance your user experience, analyze site traffic, prevent fraud, and deliver personalized content.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session cookies that authenticate your login and shopping cart cookies. These cannot be disabled without impacting site functionality.
• Performance Cookies: Collect anonymous information about how visitors use our site, which pages are most popular, and where errors occur. This helps us improve website performance.
• Functionality Cookies: Remember your preferences such as language, time zone, and layout preferences to provide a personalized experience.
• Targeting/Advertising Cookies: Track your browsing habits to deliver relevant advertisements and promotions based on your interests. These cookies may be set by third-party advertising partners.

7.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may affect your ability to use certain features of the ug900 platform. To manage cookies in your browser, consult your browser's help documentation (Chrome, Firefox, Safari, Edge all provide cookie control options). You can also opt out of targeted advertising cookies through industry opt-out tools.

8. International Data Transfers

ug900 primarily serves Indonesian residents and stores personal data within Indonesia. However, some of our service providers (cloud hosting, payment processors, game providers) may be located outside Indonesia. When we transfer personal data internationally, we ensure adequate safeguards are in place:

• Standard contractual clauses approved by data protection authorities.
• Verification that the receiving country provides adequate data protection standards.
• Binding corporate rules for transfers within our corporate group.
• Explicit consent from you for specific transfers where required by law.

All international data transfers comply with Indonesian data protection regulations and international privacy standards.

9. Children's Privacy

ug900 services are strictly intended for adults aged 21 years or older. We do not knowingly collect, use, or store personal information from individuals under 21. Our Terms and Conditions explicitly prohibit underage gambling. If we become aware that a user is under 21, we will immediately close the account, restrict access, and delete all associated personal information (after deducting any deposits from winnings to comply with underage gambling prevention requirements).

Parents or guardians who believe their child has provided personal information to ug900 should contact us immediately at [email protected] (text only). We will investigate and take appropriate action to remove the information and close the account.

10. Changes to This Privacy Policy

ug900 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that affect how we collect, use, or share your personal information, we will notify you by:

• Sending an email notification to your registered email address.
• Displaying a prominent notice on the ug900 website and in your account dashboard.
• Updating the "Last Updated" date at the top of this Privacy Policy.

Your continued use of ug900 services following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you may close your account and discontinue use of the Service. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise your privacy rights, please contact us:

Data Protection Officer: ug900 Privacy Team

Email: [email protected] (displayed as text only for security — please type this address into your email client)

Subject Line for Privacy Requests: "PRIVACY REQUEST" or "DATA PROTECTION"

Response Time: We commit to responding to all privacy inquiries within 30 days of receipt.

Customer Support: Our 24/7 live chat and WhatsApp support can also assist with general privacy questions, though formal data requests must be submitted via email for verification purposes.

For legal or regulatory privacy matters, you may also contact the relevant Indonesian data protection authority if you believe your privacy rights have been violated.