ug569 Privacy Policy

This Privacy Policy is published by ug569, the internationally licensed and regulated online gaming platform accessible at https://ug569.cam (the "Platform"). ug569 is deeply committed to safeguarding the privacy and personal data of every individual who visits, registers with, or otherwise interacts with the Platform.

This Privacy Policy describes in full detail how ug569 collects, receives, uses, stores, transfers, discloses, and otherwise processes personal information about you. It also describes the choices and rights you have in relation to your personal information and how you may exercise those rights.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

ug569 collects the following categories of Personal Data in the course of providing the Platform and its related services:

ug569 collects Personal Data through the following channels and mechanisms:

• Direct Submission: You provide Personal Data directly when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, complete a responsible gaming questionnaire, or update your account profile.
• Automated Technical Collection: When you access the Platform via a browser or any other interface, we automatically collect Technical Data including your IP address, device identifiers, session timestamps, and interaction events. This collection is facilitated by server logs, analytics scripts, and session management cookies.
• Payment Service Providers: When you initiate a deposit or withdrawal, our payment partners (including the processing intermediaries that connect to Indonesian bank infrastructure and e-wallet networks) transmit transaction confirmation data to ug569 to reconcile your Account balance.
• KYC and Identity Verification Partners: Where ug569 engages a third-party KYC service provider to verify your identity, that provider may return a verification result, a risk classification, and partial identity data to ug569 for the purpose of completing your account verification.
• Responsible Gaming Interactions: When you set or modify deposit limits, loss limits, time limits, cool-off periods, or self-exclusion preferences within your account settings, ug569 records those choices and the timestamps of any changes to maintain a responsible gaming audit trail.
• Customer Support Channels: All communications submitted via live chat, email, or any other support channel are logged and retained as part of our customer service records, which are used to resolve disputes, improve service quality, and comply with regulatory obligations.

ug569 processes your Personal Data only for legitimate, specified, and explicit purposes. The table below maps each processing purpose to the data categories involved:

ug569 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and ug569 — specifically, to create and manage your account, process transactions, deliver gaming services, and enforce the Terms & Conditions. Without this processing, ug569 cannot provide the Platform to you.
• Legal Obligation: Processing is required for ug569 to comply with applicable laws and the obligations of its international gaming licence, including AML regulations, KYC requirements, responsible gaming mandates, and data retention obligations set by the licensing authority.
• Legitimate Interests: ug569 processes certain Technical Data and Usage Data for its legitimate interests, including fraud prevention, platform security, business analytics, and the prevention of multi-accounting. ug569 has assessed that these legitimate interests are not overridden by your rights and freedoms in the circumstances.
• Consent: Where ug569 sends you marketing communications (email, SMS) about promotions, bonuses, and new product features, we rely on your affirmative consent given at registration or subsequently through your account settings. You may withdraw this consent at any time by updating your Marketing Preferences in your account profile or by emailing our support team.

ug569 does not sell or rent your Personal Data to third parties. We may share your Personal Data only in the circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Processors and Banking Partners: To facilitate deposits and withdrawals, ug569 shares the minimum necessary financial and identity data with the payment intermediaries that connect to Indonesian bank networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than transaction processing.
• KYC and Fraud Prevention Providers: ug569 engages third-party identity verification and AML screening services to fulfil its regulatory compliance obligations. These providers receive the minimum identity data required to perform a verification check and return a result to ug569. All such providers are bound by confidentiality obligations.
• Game Content Providers: Certain game studios and live dealer content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive your Member ID and session token for the purpose of delivering their games. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: ug569 may be required by law, court order, or regulatory direction to disclose Personal Data to government authorities, the licensing body, law enforcement agencies, tax authorities, or financial intelligence units. ug569 will comply with lawful requests and, where legally permitted, will notify the affected Member.
• Responsible Gaming Bodies: Where a Member is self-excluded from ug569, we may share the self-exclusion record with approved multi-operator self-exclusion schemes to prevent the Member from being targeted by marketing from participating operators. This sharing is conducted with the Member's best interests in mind and is consistent with responsible gaming best practices.
• Professional Advisors: ug569's legal counsel, auditors, and accountants may access Personal Data on a strictly need-to-know basis in connection with their professional engagements, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of ug569's business assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer via the email address on record and will be given the opportunity to close their account if they do not consent to the transfer.

ug569 uses cookies and similar browser-based tracking technologies to operate the Platform efficiently, maintain your session, and collect anonymised usage analytics. The following categories of cookies are in use:

You can manage or delete cookies through your browser's settings panel. Note that disabling strictly necessary or security cookies will impair or prevent your use of the Platform. ug569 does not use third-party advertising cookies, retargeting pixels, or social media tracking pixels on the Platform.

ug569 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your membership and for a minimum of five years following account closure, to satisfy AML record-keeping requirements under ug569's international gaming licence.
• KYC Documents: Retained for a minimum of five years from the date of the most recent verification, or longer if required by applicable law or an ongoing regulatory investigation.
• Financial Transaction Records: Retained for a minimum of five years from the transaction date, consistent with standard financial record-keeping obligations.
• Responsible Gaming Records: Self-exclusion and account restriction records are retained indefinitely to prevent a self-excluded Member from inadvertently re-registering and to comply with responsible gaming regulatory requirements.
• Customer Support Correspondence: Retained for three years from the date of the most recent interaction, or longer if the correspondence relates to an unresolved dispute or legal claim.
• Marketing Data: Retained until you withdraw consent for marketing communications. Following withdrawal, your email address is added to a suppression list to prevent future marketing contacts; it is not deleted immediately, as suppression-list management requires retaining a record of the opt-out.
• Technical and Analytics Data: Server logs and anonymised analytics data are retained for up to 13 months and then automatically aggregated or deleted.

When data is no longer required, ug569 will securely delete or anonymise it in a manner that prevents reconstruction of the original Personal Data.

As a Member, you have the following rights with respect to your Personal Data held by ug569. To exercise any of these rights, please contact our support team at the email address provided in Section 15:

• Right of Access: You may request a copy of all Personal Data that ug569 holds about you, along with information about the purposes of processing, the categories of data held, and the recipients to whom data has been disclosed.
• Right to Rectification: If any Personal Data held by ug569 is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay. You may update most account information directly through your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis for processing exists, or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, ug569 cannot delete KYC and financial records within mandatory regulatory retention periods.
• Right to Restriction of Processing: You may request that ug569 suspend active processing of your Personal Data (while still retaining it) in certain circumstances, such as while an accuracy dispute is being resolved.
• Right to Data Portability: You may request a copy of Personal Data you have provided to ug569 in a structured, commonly used, machine-readable format (e.g., CSV) where processing is based on consent or contractual necessity and is carried out by automated means.
• Right to Object: You may object to processing based on ug569's legitimate interests at any time. You also have an unconditional right to object to the processing of your Personal Data for direct marketing purposes, including profiling for marketing. Upon receipt of such an objection, ug569 will cease marketing processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ug569 implements a comprehensive, multi-layered security programme designed to protect Member Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Transport Encryption: All data transmitted between your device and the ug569 Platform is encrypted using 256-bit TLS/SSL protocols. Our SSL certificate is validated and renewed continuously to prevent man-in-the-middle attacks.
• Data-at-Rest Encryption: Personal Data and financial records stored in ug569's databases are encrypted at rest using industry-standard AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Internal access to Member Personal Data is governed by a strict role-based access control (RBAC) policy. Only staff with a documented operational need may access specific categories of Personal Data, and all access events are logged for audit purposes.
• Two-Factor Authentication (2FA): ug569 strongly encourages all Members to enable two-factor authentication on their accounts. Internal staff systems require 2FA for all access without exception.
• Penetration Testing and Vulnerability Assessments: ug569 engages qualified independent security firms to conduct regular penetration tests and vulnerability scans of the Platform infrastructure. Critical vulnerabilities are remediated on an emergency basis; medium-severity findings are addressed within a defined SLA window.
• Incident Response: ug569 maintains a documented data breach response plan. In the event of a confirmed breach affecting Member Personal Data, ug569 will notify affected Members and the relevant regulatory authority within the timeframes required by applicable law.
• Employee Training: All ug569 personnel with access to Personal Data undergo mandatory data protection and information security training upon onboarding and at regular intervals thereafter.

The ug569 Platform does not contain links to external third-party websites for commercial or affiliate purposes. In the unlikely event that any game provider's promotional interface or game lobby links to an external resource, ug569 is not responsible for the privacy practices or content of that external site. This Privacy Policy applies solely to the ug569 Platform at https://ug569.cam.

Game content streamed through the Platform from studio partners (such as Evolution Gaming's live dealer rooms or Pragmatic Play's slot titles) is delivered via an embedded interface. While these studios operate under their own data governance frameworks as part of their licensing obligations, the data ug569 shares with them is limited to the session credentials described in Section 7 and does not include your full identity or financial profile.

The ug569 Platform is strictly for adults. In Indonesia, the minimum age to register and use the Platform is 21 years. ug569 does not knowingly collect, store, or process the Personal Data of any individual under the age of 21.

Age verification is a mandatory step of the KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended, all associated data will be isolated pending deletion (subject to any mandatory retention obligations), and any funds deposited will be returned to the original payment source after the identity of the account holder has been confirmed.

ug569 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the structure of the Platform. The current version of this Privacy Policy is always accessible at https://ug569.cam/privacy-policy, and the effective date at the top of this document indicates when the most recent version came into force.

Where an amendment constitutes a material change to the way in which we process your Personal Data — for example, introducing a new category of data sharing, changing our retention periods, or altering the legal basis for a processing activity — ug569 will notify you by email to the address registered on your account at least 14 days before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Where a change is required urgently to comply with a regulatory direction or to address a security incident, ug569 may implement the change with immediate effect and will notify Members as soon as practicable thereafter.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ug569 processes your Personal Data, please contact our Data Protection team using the details below. All privacy-related enquiries are handled confidentially by dedicated staff.

• Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Username]" for faster routing. We aim to respond to all privacy enquiries within 5 business days and to formal data rights requests within 30 calendar days.
• Live Chat: Available on the Platform 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Idul Adha, Christmas, Nyepi, and others). Live chat is best suited for general privacy questions; formal data rights requests should be submitted in writing via email.
• Support Languages: Our team responds in both English and Indonesian to serve Members across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other regions of Indonesia.
• Operating Hours: 24 hours per day, 7 days per week, across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).