At ug338, we treat your personal data with the same care and security that we apply to your funds. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a player registered on our platform. We are committed to transparency and to handling your data responsibly at every stage of your relationship with ug338.
Our six core privacy commitments — each described in full detail in the clauses below.
Every byte of data exchanged between your device and ug338 is encrypted using TLS 1.3 with 256-bit AES ciphers. Your credentials, payment details, and identity documents are never transmitted in plain text.
ug338 does not sell, rent, or trade your personal data to any third party for marketing or commercial profiling purposes. Your data is used solely for operating your account and complying with our legal obligations.
Personal data and identity documents are stored on access-controlled servers with role-based permissions. Storage systems undergo regular security audits and penetration testing to maintain their integrity.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request via email to our support team and we will respond within 14 business days.
We retain your data only for as long as necessary to fulfil the purposes outlined in this policy and to satisfy applicable anti-money laundering record-keeping obligations. Retention schedules are detailed in Clause 9.
ug338 uses strictly necessary, performance, and functional cookies to deliver a reliable platform experience. We do not deploy third-party advertising cookies or behavioural tracking pixels. Full details are in Clause 10.
This Privacy Policy applies to all personal data collected, processed, and stored by ug338 in connection with the operation of the ug338 Platform accessible at ug338.club and any associated subdomains, mobile-optimised pages, and support communication channels. It governs data collected from all registered players, prospective players who have begun but not completed the registration process, and visitors who browse the Platform without an account.
For the purposes of this Policy, the data controller responsible for your personal data is ug338, the operator of the Platform. All data-related queries, access requests, and complaints should be directed to our dedicated privacy contact at [email protected]. ug338 is committed to processing your personal data in a lawful, fair, and transparent manner consistent with internationally recognised data-protection principles.
By registering an account, making a deposit, or otherwise using the ug338 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform and contact support to close your account.
ug338 collects personal data across several categories. The specific data points we collect depend on your level of engagement with the Platform — a visitor who browses without registering will have a significantly smaller data footprint than a fully verified account holder.
When you create a Player Account on ug338, we collect the following information:
To comply with our anti-money laundering obligations and to confirm your age and identity, we may request and retain:
ug338 collects personal data through the following channels:
ug338 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification | Performance of contract — necessary to create and maintain your Player Account. |
| Age verification (21+ check) | Legal obligation — ug338 is required to verify that players meet the minimum age threshold before permitting gambling activity. |
| Processing deposits and withdrawals | Performance of contract — necessary to execute the financial transactions you request. |
| Anti-money laundering (AML) monitoring | Legal obligation — ug338 is required to conduct transaction monitoring and retain financial records under applicable AML regulations. |
| Fraud detection and account security | Legitimate interest — ug338 has a legitimate interest in protecting the integrity of the Platform and the financial safety of its players. |
| Responsible gaming monitoring and intervention | Legal obligation and legitimate interest — identifying at-risk gambling behaviour and applying self-exclusion tools. |
| Sending promotional emails and bonus offers | Consent — only sent where you have opted in to receive marketing communications during or after registration. |
| Platform analytics and performance measurement | Legitimate interest — measuring and improving Platform reliability and user experience. |
| Customer support communications | Performance of contract and legitimate interest — resolving your queries and maintaining service quality records. |
ug338 uses the personal data we hold about you for the following purposes:
To create, maintain, and manage your Player Account — including processing your registration, verifying your identity, maintaining your balance, applying bonus credits, and managing account settings such as deposit limits and self-exclusion status.
To initiate, verify, and reconcile deposits and withdrawal transactions conducted via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. Financial transaction records are retained for the period required under applicable AML regulations.
To meet our obligations under applicable anti-money laundering regulations, including conducting ongoing transaction monitoring, filing suspicious activity reports where required, and maintaining audit-ready records of all financial activity on your account.
To detect and investigate suspicious login activity, multi-account registration attempts, bonus abuse, collusion between players, and any other patterns consistent with fraudulent or prohibited conduct as defined in our Terms & Conditions. This includes automated risk-scoring systems that assess deposit, withdrawal, and wagering patterns.
To monitor your gaming activity for indicators of problem gambling — such as rapid escalation of deposit frequency, extended session durations, or repeated use of the maximum deposit limit — and to trigger responsible gaming interventions, including automated alerts, support outreach, or temporary account suspension where warranted.
To respond to and resolve your support queries, including verifying your identity when handling sensitive account requests, and to maintain quality assurance records of support interactions.
Where you have given explicit consent, to send you promotional emails, bonus offers, and relevant Platform announcements. You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the processing of data for other purposes.
To analyse aggregate and anonymised usage data in order to improve the functionality, performance, and user experience of the ug338 Platform — including identifying high-latency pages, optimising game loading times, and refining the mobile browsing experience for players in Jakarta, Surabaya, Bandung, and other Indonesian cities.
ug338 does not sell, rent, or trade your personal data. We share your data with third parties only in the circumstances described below:
To process deposits and withdrawals, we share relevant transaction data (your name, account number, amount, and reference) with the applicable payment provider — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. These providers act as independent data controllers in respect of their own payment infrastructure and are governed by their own privacy policies.
Where automated KYC tools are used to assist with identity verification, we share the documents and personal data you submit for verification with our appointed third-party KYC provider. The provider is contractually bound to process this data solely for the purpose of identity verification and to maintain equivalent data-security standards to those described in this Policy.
ug338 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where required to do so by applicable law, court order, or regulatory mandate — including for the purpose of investigating and reporting suspected money laundering, terrorist financing, or other financial crime.
In the event of a merger, acquisition, restructuring, or sale of ug338's business or assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the data-controller identity via the email address on file on your account, with at least 30 days' notice before the transfer takes effect.
ug338's primary data processing infrastructure is hosted on secured servers. In some circumstances, personal data may be processed by our service providers (such as KYC verification platforms or cloud infrastructure providers) in jurisdictions outside Indonesia. Where such transfers occur, ug338 takes the following measures to ensure your data remains protected:
If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].
ug338 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:
ug338 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedules apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML record-keeping obligations |
| KYC identity documents | Duration of account + 5 years after closure | AML and age-verification compliance |
| Financial transaction records | 7 years from transaction date | AML and audit requirements |
| Bet and wager records | 5 years from settlement date | Dispute resolution and regulatory audit |
| Support correspondence | 3 years from last interaction | Quality assurance and dispute evidence |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical / session logs | 13 months from collection | Security monitoring and platform analytics |
| Self-exclusion records | Minimum 7 years from self-exclusion date | Responsible gaming compliance — prevents re-registration |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identified or identifiable individual.
ug338 uses cookies and similar browser-storage technologies to operate and improve the Platform. The following categories of cookies are used:
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintains your authenticated session, stores your language preference, and enables core Platform functionality such as the deposit flow and bet slip. | No — required for the Platform to function. |
| Performance / Analytics | Collects anonymised data on page load times, error rates, and navigation paths to help ug338 identify and fix performance bottlenecks. | Yes — opt out via your browser settings. |
| Functional | Remembers your display preferences (e.g., odds format, preferred sport) so you do not need to reconfigure them on each visit. | Yes — clearing cookies will reset preferences. |
ug338 does not use advertising cookies, retargeting pixels, or any third-party tracking technologies that profile your behaviour for commercial advertising purposes. You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair the functionality of the Platform.
As a player on the ug338 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will verify your identity before processing the request and will respond within 14 business days.
The ug338 Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process: all players are required to provide a government-issued photo ID confirming their date of birth before being permitted to make deposits or place wagers.
If ug338 discovers or has reasonable grounds to believe that an account is held by a person under 21 years of age, the account will be suspended immediately, all pending wagers will be voided, and any remaining real-money balance (excluding bonus funds) will be returned to the originating payment method following a mandatory identity review. The personal data associated with the underage account will be retained only for the period necessary to complete the investigation and fulfil any regulatory reporting obligations, after which it will be securely deleted.
If you are a parent or guardian and believe that a minor in your care has registered an account on ug338, please contact us immediately at [email protected] and we will prioritise the investigation and closure of the account.
ug338 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform functionality. When a material change is made, we will:
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed of how ug338 protects your data. The version history of this Policy is available upon written request to our support team.
For any questions, data-access requests, or complaints relating to this Privacy Policy or ug338's data-processing practices, please contact us using the details below:
Privacy & Data Requests: [email protected]
Response Time: Within 14 business days of receipt of a verifiable request
Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
Website: ug338.club
All formal data-rights requests must be submitted in writing via email and must include sufficient information to verify your identity (your registered username and the email address associated with your account). ug338 will acknowledge receipt within two (2) business days and will provide a full response within 14 business days. In complex cases, this period may be extended by a further 14 business days, in which case we will inform you of the extension and the reasons for it before the initial deadline expires.
Now that you understand how we protect your data, explore our full range of sports betting, live casino, slots, and more — all secured by industry-leading encryption and trusted by players across Indonesia.