At ugalot, your privacy is a foundational commitment — not a formality. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a ugalot member based in Indonesia.
A plain-English summary of the key protections ugalot provides. Full legal details follow below.
Every connection to ugalot is encrypted end-to-end using industry-standard 256-bit SSL technology. Your data is never transmitted in plain text.
ugalot does not sell, rent, or trade your personal information to third-party marketers or data brokers — under any circumstances.
We collect only the personal data that is strictly necessary to operate your account, process payments, and meet our legal obligations.
As a ugalot member, you have the right to access, correct, export, and request deletion of your personal data at any time by contacting our support team.
We retain your data only for as long as required by law and our operational needs. When data is no longer needed, it is securely deleted or anonymized.
In the unlikely event of a data breach affecting your personal information, ugalot will notify affected members promptly and take immediate remedial action.
Scope of This Policy: This Privacy Policy applies to all personal data collected by ugalot ("the Platform", "we", "us", "our") in connection with your use of the ugalot website and associated services. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of ugalot immediately.
The following definitions apply throughout this Privacy Policy:
ugalot is the Data Controller responsible for your Personal Data collected through the Platform. ugalot operates as an international online gaming platform serving members in Indonesia and other eligible jurisdictions. Our data practices comply with applicable international data protection standards, including principles consistent with the General Data Protection Regulation (GDPR) framework, which we adopt as a global best-practice baseline even where not strictly mandated by Indonesian law.
For all data protection inquiries, requests, and complaints, Members may contact ugalot's designated data protection contact via the details provided in Section 15 of this Policy.
ugalot collects the following categories of Personal Data in connection with your use of the Platform:
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP number, nationality | Account registration, KYC verification |
| Contact Data | Email address, residential address, phone number | Account registration, support interactions |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit and withdrawal processing |
| KYC Documents | KTP scan, passport copy, proof of address, selfie photograph | Identity and age verification |
| Technical Data | IP address, device type, browser version, operating system, session timestamps | Automatic collection during platform use |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Automatic collection during platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel | Account settings, promotional sign-up forms |
ugalot does not intentionally collect Sensitive Data (as defined in Section 1) beyond what is strictly required for KYC compliance. We do not collect biometric data beyond the selfie photograph submitted as part of the KYC process, and that photograph is used solely for identity verification purposes.
ugalot collects Personal Data through the following methods:
ugalot processes your Personal Data for the following specific purposes, each supported by a recognized legal basis:
ugalot shares your Personal Data only in the following limited, controlled circumstances:
Absolute Prohibition: ugalot does not sell, rent, license, or trade your Personal Data to any third-party advertiser, data broker, or marketing network. This prohibition is absolute and applies regardless of the commercial value of the data.
ugalot uses cookies and similar technologies to operate core platform functionality and to improve your experience. The following types of cookies are used:
Most web browsers allow you to control cookies through their settings. To learn how to manage cookies in your specific browser, please consult your browser's help documentation. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.
ugalot retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation (AML / KYC regulations) |
| Financial Transaction Records | 7 years from date of transaction | Legal obligation (financial record-keeping) |
| KYC Documents | 5 years after account closure | Legal obligation (AML compliance) |
| Communications Data | 3 years from date of communication | Legitimate interest (dispute resolution) |
| Technical & Usage Data | 13 months on a rolling basis | Legitimate interest (security, analytics) |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent |
Upon expiry of the applicable retention period, Personal Data is either securely and permanently deleted from ugalot's systems, or anonymized such that it can no longer be linked to any identifiable individual. Anonymized data may be retained indefinitely for statistical analysis and platform improvement purposes.
ugalot implements a comprehensive suite of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
Your Responsibility: While ugalot takes every reasonable precaution to protect your data on our end, you are responsible for keeping your account password confidential and for ensuring that you log out of your account when using shared or public devices. If you suspect that your account has been compromised, contact ugalot support immediately via live chat.
As a ugalot member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team using the details in Section 15. We will respond to all valid rights requests within 30 calendar days.
You have the right to request a copy of all Personal Data that ugalot holds about you, along with information about how it is being processed and the legal basis for that processing.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as a misspelled email address) can be made directly via your account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to legal retention obligations — we cannot delete data that we are legally required to retain.
You have the right to object to processing of your Personal Data where ugalot relies on legitimate interest as its legal basis, and where your particular circumstances give you grounds to object. You may also object to direct marketing at any time, without needing to provide a reason.
Where processing is based on your consent or on contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You may request that ugalot temporarily suspend processing of your Personal Data while the accuracy of that data is being contested, while an objection is being assessed, or where processing is unlawful but you prefer restriction over erasure.
ugalot will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or the request may be declined, with written reasons provided.
The ugalot Platform is strictly for adults aged 21 and over. ugalot does not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes an age declaration, and our KYC verification process is designed to detect and reject registrations from individuals who do not meet the 21+ age requirement.
If ugalot becomes aware that Personal Data has been collected from an individual under 21 years of age — whether through the registration process, a third-party report, or an internal audit — we will immediately suspend the relevant account, delete the associated Personal Data to the extent permitted by law, and retain only the minimum information necessary to prevent re-registration by the same individual.
Parents and guardians who believe that their child may have accessed or registered on the ugalot Platform are encouraged to contact our support team immediately so that we can take prompt corrective action.
ugalot operates as an international platform, and your Personal Data may be processed or stored on servers located outside Indonesia. Where Personal Data is transferred outside of Indonesia, ugalot ensures that appropriate safeguards are in place to maintain the same level of data protection that applies within Indonesia, including:
All Data Processors engaged by ugalot — regardless of their geographic location — are contractually required to maintain security and data protection standards consistent with this Privacy Policy.
The ugalot Platform may reference third-party services, game providers, or payment networks. This Privacy Policy applies solely to data collected and processed by ugalot directly. Third-party services — including payment gateways, game studios, and analytics providers operating independently of ugalot — maintain their own privacy policies, and ugalot accepts no liability for the data practices of those third parties.
We encourage Members to review the privacy policies of any third-party service they interact with in connection with their ugalot account, particularly their nominated bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or OCBC NISP) and e-wallet provider (OVO, DANA, GoPay, ShopeePay, or LinkAja).
ugalot reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes — meaning changes that significantly affect your rights or the way we use your Personal Data — will be communicated to registered Members via email and/or a prominent in-platform notification at least 14 days before the change takes effect.
Non-material changes, such as typographical corrections, clarifications of existing practices, or updates to contact details, may take effect immediately upon publication. The "Effective Date" shown at the top of this Policy will always reflect the date of the most recent revision.
Your continued use of the ugalot Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should contact us to close your account before the amendment takes effect.
If you have any questions, concerns, or complaints regarding this Privacy Policy or ugalot's data practices, or if you wish to exercise any of your data rights as described in Section 10, please contact us through one of the following channels:
ugalot aims to acknowledge all privacy-related requests within 48 hours of receipt and to provide a substantive response or resolution within 30 calendar days. For complex requests involving large volumes of data or multiple rights, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
If you are not satisfied with ugalot's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.
Our support team is available around the clock to help with any privacy request or data inquiry. You can also review our Terms & Conditions or visit our FAQ for further information about how ugalot operates.