ulti88 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by ulti88 through our website at https://ulti88.cam, mobile applications, customer support channels, and any related services (collectively, the "Platform"). ulti88 operates as an international gaming platform serving players in Indonesia and other jurisdictions where our services are legally accessible.

We act as the data controller for all personal information collected through the Platform. This means ulti88 determines the purposes and means of processing your personal data and is responsible for its protection in accordance with applicable data protection laws and international best practices.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of ulti88 services. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of the Platform immediately.

2. Information We Collect

ulti88 collects various categories of personal information necessary to provide our services, comply with legal obligations, and enhance your gaming experience. The information we collect falls into three primary categories:

Information You Provide Directly

When you register for a ulti88 account, we collect the following mandatory information:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, gender, nationality, and Indonesian National Identity Card (KTP) number or passport number.
• Contact Information: Email address, mobile phone number, residential address including street name, city, province, and postal code.
• Financial Information: Bank account details for BCA, BRI, BNI, Mandiri, or other Indonesian banks; e-wallet account information for OVO, DANA, GoPay, ShopeePay, or LinkAja; payment card details (tokenized and not stored on our servers); transaction history including deposits, withdrawals, and bet records.
• Verification Documents: Copies of government-issued identification (KTP, passport), proof of address documents (utility bills, bank statements), selfie photographs holding identification for KYC verification purposes.
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, and two-factor authentication settings.
• Communication Records: Content of messages exchanged with our customer support team via email, live chat, or WhatsApp, including complaint details, dispute information, and service inquiries.

Information Collected Automatically

When you access the ulti88 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, device identifiers (IMEI, Android ID, IDFA).
• Connection Data: IP address, geolocation data (country, city, approximate latitude/longitude based on IP), internet service provider, connection type (WiFi, mobile data).
• Usage Data: Pages visited, features used, games played, bet amounts and types, login/logout times, session duration, click patterns, navigation paths through the Platform.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance functionality, remember preferences, and analyze Platform usage. See our Cookie Policy section below for detailed information.

Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from our payment service providers.
• Identity Verification Services: Third-party KYC verification providers may supply identity validation, age verification, and anti-fraud checks.
• Publicly Available Sources: Information from public databases, social media profiles (only if you choose to link your social media account), and sanction lists for compliance purposes.
• Affiliate and Marketing Partners: If you accessed ulti88 through an affiliate or marketing campaign, we may receive referral data including the source of your registration.

3. How We Use Your Information

ulti88 processes your personal data for specific, legitimate purposes. We use the information we collect for the following reasons:

Service Provision and Account Management

• Creating and maintaining your ulti88 account
• Processing deposits, withdrawals, and payment transactions
• Enabling sports betting, casino gaming, and related services
• Managing your gaming balance, bonus funds, and loyalty program status
• Providing customer support and responding to inquiries
• Communicating important account updates, service changes, and system maintenance notices

Legal and Regulatory Compliance

• Verifying your identity and age to ensure compliance with 21+ age restriction requirements
• Conducting KYC (Know Your Customer) and AML (Anti-Money Laundering) checks as required by international gaming regulations
• Detecting and preventing fraud, money laundering, terrorist financing, and other illegal activities
• Maintaining records for audit and regulatory reporting purposes
• Cooperating with law enforcement agencies and regulatory authorities when legally required
• Enforcing our Terms & Conditions and protecting our legal rights

Responsible Gaming and Player Protection

• Monitoring betting patterns and gaming behavior to identify potential problem gambling
• Implementing deposit limits, loss limits, and session time limits as per your preferences
• Processing self-exclusion requests and maintaining exclusion databases
• Providing responsible gaming resources and support as detailed in our Responsible Gaming Policy
• Detecting underage gambling attempts and preventing minor access to the Platform

Platform Improvement and Analytics

• Analyzing usage patterns to improve Platform functionality, user experience, and game offerings
• Testing new features, conducting A/B tests, and optimizing platform performance
• Understanding player preferences to enhance content recommendations and game selection
• Monitoring platform stability, identifying technical issues, and debugging software errors

Marketing and Communication (With Your Consent)

• Sending promotional emails about bonuses, tournaments, and special offers (only if you opted in)
• Delivering personalized recommendations based on your gaming preferences
• Notifying you about relevant updates, new game releases, and platform enhancements
• You may withdraw marketing consent at any time by adjusting your account preferences or contacting support

4. Legal Basis for Processing

Under applicable data protection laws, ulti88 must have a lawful basis to process your personal information. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services) and to fulfill our obligations under the Terms & Conditions.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements including KYC verification, AML checks, age verification, tax reporting, and responses to lawful government requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, platform security, service improvement, and protection of our legal rights, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

ulti88 does not sell your personal data to third parties for marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateway operators process transactions on our behalf.
• Game Providers: Third-party gaming software providers including Pragmatic Play, PG Soft, Evolution Gaming, Habanero, and others deliver casino games and sports betting content through our Platform.
• Identity Verification Services: Specialized KYC and AML screening providers verify your identity, age, and address documents.
• Cloud Service Providers: Data hosting and cloud infrastructure providers store and secure your information on our behalf.
• Customer Support Tools: Live chat software, email service providers, and customer relationship management (CRM) platforms facilitate communication between you and our support team.
• Analytics and Marketing Services: Platform analytics tools, email marketing platforms (with your consent), and advertising partners help us improve services and communicate effectively.

All third-party service providers are contractually obligated to protect your data in accordance with our Privacy Policy and applicable data protection laws. They are permitted to use your information only for the specific purposes we authorize and may not use it for their own independent purposes.

Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory authorities, courts, and government bodies when required by law or when necessary to protect our legal rights, including in the following circumstances:

• In response to valid legal processes such as subpoenas, court orders, or search warrants
• To comply with gaming license requirements and regulatory reporting obligations
• To prevent, detect, or investigate suspected fraud, money laundering, or other illegal activities
• To enforce our Terms & Conditions or protect the rights, property, or safety of ulti88, our users, or the public

Business Transfers

In the event that ulti88 undergoes a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. You will be notified via email and/or prominent notice on the Platform of any such change in ownership or control of your personal data.

6. Data Security Measures

ulti88 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

Technical Safeguards

• Encryption: All data transmissions between your device and ulti88 servers are protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including passwords and payment information, is encrypted using industry-standard algorithms.
• Tokenization: Payment card details are tokenized by our payment processors and never stored directly on ulti88 servers.
• Firewalls and Intrusion Detection: Multi-layered firewall systems and real-time intrusion detection software monitor and block suspicious network activity.
• Secure Data Centers: Your information is stored in certified, geographically distributed data centers with physical security controls including 24/7 surveillance, access control systems, and environmental safeguards.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans performed by independent third-party cybersecurity firms.

Organizational Safeguards

• Access Controls: Employee and contractor access to personal data is strictly limited on a need-to-know basis. All personnel with data access undergo background checks and sign confidentiality agreements.
• Employee Training: Regular data protection and cybersecurity training ensures our team understands privacy obligations and security best practices.
• Incident Response Plan: We maintain a documented data breach response plan to ensure swift action in the event of a security incident, including notification procedures as required by law.

While we implement robust security measures, no system is completely secure. You play a critical role in protecting your account by maintaining strong, unique passwords, enabling two-factor authentication, never sharing your login credentials, and immediately reporting any suspicious account activity to our support team.

7. Data Retention

ulti88 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data:

Data Category	Retention Period	Reason
Account Information	Duration of active account + 7 years	Legal compliance, tax reporting, dispute resolution
Transaction Records	7 years from transaction date	AML regulations, financial audits, tax obligations
KYC Documents	7 years after account closure	Regulatory requirements, identity verification records
Marketing Consents	Until consent withdrawn + 1 year	Proof of consent, marketing compliance
Self-Exclusion Records	Permanent (minimum 5 years)	Responsible gaming obligations, player protection
Usage Logs	12-24 months	Security monitoring, technical support

After the applicable retention period expires, your personal information is securely deleted or anonymized. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical analysis and platform improvement purposes.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information. Indonesian residents and residents of jurisdictions with GDPR-equivalent protections may exercise these rights by contacting our Data Protection Officer:

Right of Access

You have the right to request confirmation of whether ulti88 processes your personal data and to obtain a copy of that data. We will provide the information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You may update most information directly through your account settings or by contacting customer support.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where processing is based on consent), or you object to processing. Note that we may be required to retain certain information to comply with legal obligations.

Right to Restriction of Processing

You may request that we limit how we use your personal data in certain situations, such as while we verify the accuracy of data you have contested or assess whether you have legitimate grounds to object to processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. Include your account username, registered email address, and specify which right you wish to exercise. We will respond within 30 days and may request additional verification to confirm your identity before processing the request.

9. Cookies and Tracking Technologies

ulti88 uses cookies, web beacons, pixels, and similar tracking technologies to enhance Platform functionality, remember your preferences, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core features like secure login, account authentication, transaction processing, and session management. You cannot opt out of essential cookies without disabling Platform functionality.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, including which pages are visited most often and whether users receive error messages. This data helps us optimize Platform performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, region, display settings, and theme choices, providing a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing habits across websites to deliver relevant advertisements and measure advertising campaign effectiveness. These cookies require your consent.

Managing Cookie Preferences

You can control cookie settings through your browser configuration. Most browsers allow you to block or delete cookies, though doing so may impact Platform functionality. To adjust cookie preferences, consult your browser's help documentation. Note that blocking essential cookies will prevent you from using certain features of the ulti88 Platform.

10. International Data Transfers

ulti88 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives an adequate level of protection, including:

• Transferring data only to countries recognized as providing adequate data protection
• Using standard contractual clauses approved by relevant data protection authorities
• Ensuring third-party service providers implement appropriate technical and organizational security measures

By using ulti88 services, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

11. Children's Privacy

ulti88 strictly prohibits use of our Platform by individuals under 21 years of age, in compliance with Indonesian gambling regulations. We do not knowingly collect personal information from minors. Our KYC verification process is designed to detect and prevent underage account registrations.

If we become aware that a person under 21 has provided us with personal information, we will immediately delete that information, close the associated account, and forfeit any balances. If you believe a minor has accessed the Platform, please contact us immediately at [email protected] with details so we can investigate and take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and use device-level parental controls to prevent access to gambling websites.

12. Changes to This Privacy Policy

ulti88 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending email notification to your registered email address
• Displaying a prominent notice on the Platform homepage

Your continued use of ulti88 services after the effective date of changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

13. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Complaint"
• Response Time: We aim to respond to all privacy inquiries within 48 hours during business days

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with your local data protection authority or supervisory body. We will cooperate fully with data protection authorities in investigating and resolving complaints.