Privacy Policy

ug100 ("we", "us", "our") is an internationally licensed online betting and gaming platform serving English-preference users in the Indonesian market. We take the privacy of our Members seriously and are committed to handling personal data responsibly, transparently, and in compliance with our international licensing jurisdiction's data protection standards.

This Privacy Policy sets out the complete framework governing how ug100 collects, uses, stores, shares, and protects personal data relating to you — whether you are a registered Member, a prospective user exploring the Platform, or a visitor to https://ug100.cam. It should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and ug100.

We review and update this Policy periodically. Where changes are material, we will notify active Members by email and publish a notice on the Platform. The "Last Updated" date at the top of this page reflects the most recent revision.

The following definitions apply throughout this Privacy Policy:

ug100 collects Personal Data across several categories, depending on the nature of your interaction with the Platform:

3.1 Identity & Contact Data

• Full legal name (as on your Indonesian National ID Card / KTP, Passport, or SIM).
• Date of birth (required to verify the 21+ age restriction).
• Residential address in Indonesia (province, city, postal code).
• Email address and, where provided, mobile phone number.

3.2 Account & Verification Data

• Username chosen during registration.
• Hashed password (we never store plain-text passwords).
• KYC documents: scans or photographs of your KTP, Passport, or SIM; proof of address; and proof of payment method ownership (e.g., screenshot showing the registered name on your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account).
• Selfie or liveness check image, where required by our KYC provider to complete identity verification.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references (account number suffixes for bank transfers; wallet IDs for OVO, DANA, GoPay, ShopeePay, LinkAja). Full bank account numbers are not stored by ug100; they are tokenized by the relevant payment processor.
• Account Balance at any given time, denominated in Indonesian Rupiah (IDR / Rp).
• Bonus allocations and wagering requirement progress.

3.4 Wagering & Gameplay Data

• Bet history, including amounts staked, markets selected, odds accepted, and outcomes — across all product categories (sportsbook, live casino, togel (Indonesia's traditional numbers lottery), and slots).
• Session duration, frequency of play, and responsible gaming tool usage (deposit limits set, self-exclusion periods active).

3.5 Technical & Device Data

• IP address, browser type and version, operating system, and device type.
• Referring URL and on-site navigation paths (pages visited, time on page).
• Session tokens and authentication logs.

3.6 Communications Data

• Records of communications between you and ug100 support — including live chat transcripts and email correspondence — retained for quality assurance and dispute resolution purposes.

ug100 collects Personal Data through the following channels:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a responsible gaming check.
• Automatically: Through cookies, session tracking, and server logs when you visit or use the Platform. See Section 8 for full details on cookies and tracking technologies.
• From third-party providers: Our licensed KYC and identity-verification partner may provide verification status data (confirmed / declined) after you submit identity documents. Our payment processing partners confirm transaction status (successful / failed / pending) in real time. We do not receive raw financial data beyond what is necessary to credit or debit your Account Balance.
• From fraud-prevention systems: We receive risk-scoring signals from our fraud-prevention and anti-money-laundering (AML) system, which analyses transaction patterns and device fingerprints to flag anomalous activity.

ug100 processes Personal Data on one or more of the following legal bases, depending on the category of data and the specific processing activity:

Personal Data collected by ug100 is used for the following specific purposes:

6.1 Account Management & Service Delivery

To create and maintain your Account; to process your deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to settle your bets and record your wagering history; and to provide you with account statements and transaction confirmations.

6.2 Identity Verification & Compliance

To verify that you are at least 21 years of age and a resident of Indonesia; to complete KYC verification in accordance with our licensing obligations; and to fulfil AML monitoring requirements, including the detection of unusual transaction patterns.

6.3 Responsible Gaming

To monitor your wagering activity against responsible gaming indicators; to enforce deposit limits, loss limits, and self-exclusion periods you have voluntarily set; and to contact you proactively if our responsible gaming system identifies patterns that suggest potential problem gambling behavior.

6.4 Security & Fraud Prevention

To detect, investigate, and prevent unauthorized account access, multi-accounting, bonus abuse, collusion, and other forms of fraud; to share fraud signals with our licensed KYC and payment partners where necessary to protect Members and the platform.

6.5 Customer Support

To handle your enquiries, complaints, and dispute escalations; to maintain records of communications for quality assurance and dispute resolution; and to respond to regulatory enquiries from our licensing authority.

6.6 Marketing Communications (Consent-Based Only)

Where you have opted in, to send you promotional offers, bonus notifications, and platform updates by email or in-app notification. We do not send unsolicited marketing SMS messages. You may opt out at any time.

6.7 Platform Improvement

To analyse aggregated, anonymized usage data in order to improve the Platform's performance, user experience, and product offerings. Aggregated analytics do not identify individual Members.

ug100 does not sell, rent, or trade your Personal Data. We share data with third parties only in the following limited circumstances:

• Licensed KYC Partners: To verify your identity and address documents, ug100 works with a licensed identity-verification provider. This provider processes your submitted documents under a strict data-processing agreement with ug100 and is prohibited from using your data for any purpose other than verification.
• Payment Processors: Indonesian bank transfer gateways and e-wallet operators (including those facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the transaction data necessary to process your payment. Payment processors have their own privacy policies governing how they handle this data.
• Fraud & AML Systems: Anonymized risk signals may be shared with our licensed fraud-prevention provider to enable cross-platform detection of synthetic identity fraud and money laundering activity.
• Game Software Providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe) receive your session token and game-specific identifiers to deliver their products within the ug100 Platform. These providers do not receive your full identity data.
• Regulatory & Legal Authorities: ug100 will disclose Personal Data to our licensing authority, law enforcement agencies, or courts of competent jurisdiction where required to do so by a valid legal order, warrant, or our licensing obligations.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale involving ug100, Personal Data may be transferred to the acquiring entity, subject to that entity assuming obligations equivalent to those in this Policy.

ug100 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following categories of cookies are in use:

You can manage cookie preferences via your browser settings. Note that disabling functional or analytics cookies will not affect your core access to the Platform, but may degrade certain personalized features.

ug100 retains Personal Data for as long as necessary to fulfill the purpose it was collected for, subject to the following minimum retention periods required by our licensing jurisdiction:

• Active Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or five years from Account closure, whichever is later.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years, in compliance with our AML and licensing requirements.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or until the resolution of any related dispute, whichever is later.
• Marketing Consent Records: Retained for the duration of your active opt-in consent, plus two (2) years following any withdrawal of consent, to demonstrate compliance.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymized in accordance with our data destruction policy.

As a Member of ug100, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all Personal Data we hold about you. We will respond within 30 days of a verified request.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Minor corrections (such as email address updates) can be made directly in Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose collected, where you withdraw consent, or where we have no overriding legitimate interest or legal obligation to retain it. Note that AML and licensing obligations may require us to retain certain data for up to five years even after Account closure.
• Right to Restriction: You may request that we restrict Processing of your data — for example, while a rectification request is pending.
• Right to Data Portability: You may request a structured, machine-readable export of the Personal Data you provided to ug100, where Processing is based on your consent or contract performance.
• Right to Object: You may object to Processing based on legitimate interests — including our use of your data for marketing analytics. We will honor this unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Withdraw Consent: Where Processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of Processing carried out before the withdrawal.

ug100 maintains a comprehensive information security program designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Key measures include:

• Transport Encryption: All data transmitted between your device and ug100 infrastructure uses TLS 1.2 or higher (256-bit SSL). HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Personal Data stored on ug100 servers — including KYC documents, financial records, and Account data — is encrypted using AES-256.
• Access Controls: Access to Personal Data within ug100 is strictly role-based. Staff members access only the data necessary for their specific job function. All internal access is logged and subject to periodic review.
• Password Security: Passwords are hashed using a cryptographically strong algorithm (bcrypt or equivalent). ug100 never stores plain-text passwords.
• Penetration Testing: ug100 engages independent security specialists to conduct penetration tests on the Platform at least annually, with findings remediated according to a risk-prioritized schedule.
• Incident Response: In the event of a data breach that is reasonably likely to result in harm to Members, ug100 will notify affected individuals and the relevant regulatory authority within the timeframe required by our licensing jurisdiction, and no later than 72 hours after becoming aware of the breach.

ug100 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process includes age verification, and KYC procedures are in place to enforce this requirement.

If you have reason to believe that a person under 21 has registered an Account with ug100, or that we have inadvertently collected Personal Data from a minor, please contact us immediately at [email protected]. We will investigate promptly, close the Account, and securely delete all associated Personal Data.

ug100 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice within the Platform for a minimum of 14 days following the update.
• Send an email notification to the registered address on your Account where the changes materially affect your rights or our use of your data.

Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you disagree with material changes, you are entitled to request Account closure by contacting our support team, in which case we will retain your data only to the extent required by our legal and licensing obligations.

For all privacy-related enquiries, data rights requests, or complaints, please contact ug100's Data Protection team using the details below. We aim to acknowledge all enquiries within 24 hours and provide a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or supervisory body in our licensing jurisdiction, or to seek judicial remedy. We will always provide contact details for the relevant supervisory authority upon request.