At ug212, the security and privacy of your personal data are treated with the same seriousness as the security of your account balance. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to you as a ug212 member. Please read it carefully before registering or using any feature of our platform.
Throughout this Privacy Policy the following defined terms are used consistently:
| Term | Meaning |
|---|---|
| "ug212" / "we" / "us" / "our" | The operator of the ug212 platform at ug212.one and all affiliated entities responsible for the processing of member personal data. |
| "Platform" | The ug212 website (ug212.one), its mobile-optimised interface, and all associated gaming products including the sportsbook, live casino, slots lobby, Bandar Q, and poker tournaments. |
| "Member" / "you" / "your" | Any natural person who has created or is in the process of creating a registered account on the Platform. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, as further described in Section 3 of this policy. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction. |
| "KYC" | Know Your Customer — the identity and age-verification process required to unlock full account functionality, in particular the ability to make withdrawals. |
| "Third Party" | Any natural or legal person other than ug212 and the Member, including payment processors, game studios, fraud-prevention providers, and analytics services. |
ug212 acts as the data controller in respect of all Personal Data collected from members and prospective members via the Platform. As data controller, ug212 determines the purposes and means by which your Personal Data is processed.
For all data protection enquiries, rights requests, and complaints, you may contact our dedicated Privacy Team using the details set out in Section 15 of this policy. We aim to acknowledge all privacy-related communications within two (2) business days and to provide a substantive response within thirty (30) calendar days of receipt.
ug212 collects only the Personal Data that is necessary to deliver the services you request and to meet our legal and regulatory obligations. The categories of data we collect are:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (KTP / Passport / SIM) | Registration & KYC |
| Contact Data | Email address, Indonesian mobile number (WhatsApp-compatible), city of residence (e.g. Jakarta, Surabaya, Bandung, Bali) | Registration |
| Financial Data | Bank account name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), bank account number, e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Deposits & withdrawals |
| KYC Documents | Scanned or photographed copy of national ID card (KTP), passport, or driver's licence; selfie photograph for facial-match verification | KYC verification |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, device fingerprint identifier, time zone (WIB / WITA / WIT) | Automatically on login & session activity |
| Usage Data | Pages visited, games played (slots, live casino, sportsbook, Bandar Q, poker), bets placed, session duration, navigation path, search queries within the Platform | Automatically during active sessions |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp messages sent to our support number, support ticket content | When you contact support |
| Marketing Preferences | Promotional opt-in status, preferred communication channel, bonus offer history | Account settings & promotional interactions |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily disclosed by a member in connection with a responsible gaming self-exclusion request — in which case it is processed solely for the purpose of fulfilling that request.
ug212 collects Personal Data through the following channels:
ug212 processes your Personal Data for the following specific, clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Identity, Contact, Technical |
| Age verification (21+ compliance) and KYC | Identity, KYC Documents |
| Processing deposits and withdrawals | Identity, Financial |
| Fraud detection, money-laundering prevention, and security monitoring | Identity, Financial, Technical, Usage |
| Responsible gaming monitoring (deposit limit compliance, self-exclusion enforcement) | Identity, Financial, Usage |
| Customer support and dispute resolution | Identity, Contact, Communications, Financial |
| Promotional communications and bonus delivery (where opted in) | Contact, Marketing Preferences, Usage |
| Platform analytics, product improvement, and personalisation | Technical, Usage |
| Regulatory reporting and legal compliance | Identity, Financial, KYC Documents |
ug212 does not use your Personal Data for any purpose beyond those listed above without first providing notice and, where required, obtaining your renewed consent.
Each processing activity described in Section 5 rests on one of the following legal bases:
ug212 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share data only in the following limited circumstances, and only to the extent strictly necessary:
ug212 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years post-closure | Anti-money-laundering record-keeping, dispute resolution |
| KYC Documents | 5 years post account closure or last transaction | Regulatory compliance, re-verification prevention |
| Financial & Transaction Records | 5 years post transaction date | Financial audit trail, legal obligation |
| Communications Data | 2 years from last interaction | Support quality, dispute evidence |
| Technical & Usage Data (logs) | 13 months on a rolling basis | Security monitoring, fraud investigation |
| Marketing Preferences | Until opt-out or account closure | Consent record |
| Self-Exclusion Records | Indefinite | Responsible gaming — to prevent re-registration by excluded members |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and product-improvement purposes.
ug212 implements a layered, defence-in-depth approach to data security. The key technical and organisational measures in place include:
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to the rights and freedoms of affected members, ug212 will notify affected members without undue delay and provide clear guidance on protective steps you can take.
ug212 uses cookies and similar client-side storage technologies to operate the Platform and improve your experience. The cookie categories in use are:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, store your account authentication token, enforce CSRF protection, and remember your responsible gaming settings | Session / up to 30 days |
| Functional / Preference | Remember your preferred game lobby view, language display settings, and notification preferences | Up to 12 months |
| Analytics | Count unique visitors, measure page load performance, identify navigation drop-off points, and generate aggregated usage reports to improve Platform layout and game discovery | Up to 13 months |
| Security / Fraud Prevention | Store a device-fingerprint identifier to detect unusual login behaviour, multi-account attempts, and automated bot activity | Up to 24 months |
ug212 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with advertising networks outside of the Platform.
You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling analytics or functional cookies will not affect your ability to play but may reduce personalisation quality.
As a ug212 member, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact our Privacy Team at [email protected] with the subject line "Privacy Rights Request — [Your Username]":
We will respond to rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly. Identity verification will be required before any rights request is fulfilled to protect against fraudulent data disclosure.
The ug212 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is performed as part of the KYC process for all members requesting their first withdrawal, and ug212 reserves the right to request proof-of-age documentation from any member at any stage of their relationship with the Platform.
If ug212 discovers or has reasonable grounds to believe that a member is under 21 years of age, the Account will be immediately suspended, all pending transactions will be voided, and any deposited funds will be returned to the original payment source following identity confirmation. The member's registration data will be retained solely for the purpose of preventing re-registration.
ug212 primarily stores and processes member data on servers located in jurisdictions with robust data-protection frameworks. In certain operational contexts — specifically, where third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) or KYC-verification providers operate infrastructure outside of Indonesia — anonymised session data or identity-verification requests may be processed in those jurisdictions.
When Personal Data is transferred internationally, ug212 ensures that appropriate safeguards are in place, including:
You may request details of the specific jurisdictions to which your data may be transferred by contacting our Privacy Team. We will provide this information within the standard 30-day response window.
ug212 reviews this Privacy Policy at least annually and whenever a material change in data-processing practices, regulatory requirements, or Platform functionality necessitates an update. When we make a material change, we will:
Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change, you may request Account closure and the withdrawal of any remaining balance before the effective date.
Previous versions of this Privacy Policy are archived and available upon written request to our Privacy Team. We will provide any prior version within 14 calendar days of a verified request.
For any question, concern, or formal request relating to this Privacy Policy or the processing of your Personal Data by ug212, please reach our Privacy Team through any of the following channels:
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to an independent dispute-resolution body or the supervisory authority in your jurisdiction. We commit to cooperating fully with any such investigation.
Privacy at ug212 is not a checkbox — it is a foundational commitment built into every layer of the Platform.
Every byte of data transmitted between your device and ug212 servers travels over an encrypted TLS connection. Your login credentials, bank account details, and KYC documents are never exposed in transit.
ug212 verifies every member's identity before processing withdrawals. Our 21+ age-check policy protects minors and ensures the Platform is used only by verified adults. KYC documents are processed by accredited partners and never shared with advertisers.
ug212 will never sell, rent, or trade your email address, mobile number, financial data, or any other Personal Data to third parties for commercial or advertising purposes. Your data serves one purpose: delivering the service you signed up for.
Access, correct, export, or erase your Personal Data at any time. Withdraw marketing consent in a single step from your Account settings. ug212 responds to all privacy rights requests within 30 calendar days — no bureaucratic delay.
The Platform undergoes annual penetration testing by an independent third-party security firm. Critical vulnerabilities are patched within 72 hours of identification. Our security posture is continuously monitored, not reviewed once a year and forgotten.
ug212 retains your data only as long as legally required or operationally necessary. When a retention period expires, data is securely deleted or irreversibly anonymised — not kept indefinitely on the off chance it may one day be useful.
Now that you understand how ug212 protects your privacy, explore our full range of games and sports markets — all delivered in a secure, internationally licensed environment built for Indonesia's most discerning players.