uno89 Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including name, email address, date of birth, Indonesian national identity number (NIK), bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means uno89, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of uno89, such as payment gateway providers, cloud hosting services, and identity verification partners.
• "Platform" means the uno89 website at https://uno89.vu, including all sub-pages, account dashboards, game interfaces, and cashier functions.
• "Player" or "You" means any natural person who accesses, browses, or holds a registered account on the Platform.
• "KYC" means Know Your Customer — the identity and age verification process required under the Company's anti-money-laundering and responsible gaming obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, remember preferences, and collect analytical data as further described in Section 7.

Data We Collect

uno89 collects the minimum Personal Data necessary to operate a secure, compliant, and high-quality online gaming platform. The categories of data we collect include:

2.1 Identity and Account Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify that you are 21 years of age or older)
• Indonesian National Identity Card number (NIK) where required for KYC
• Username and encrypted password
• Profile photograph submitted as part of the KYC process

2.2 Contact Data

• Email address registered at the time of account creation
• Indonesian mobile phone number
• Residential address in Indonesia (city, province, and postal code at minimum)

2.3 Financial Data

• Bank account name, account number, and bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) for withdrawal processing
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja where used for deposits or withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Wagering history, game session logs, and balance movements

2.4 Technical and Device Data

• IP address and geolocation data derived from IP
• Browser type, version, and operating system
• Device type and device identifiers
• Session timestamps, login history, and access logs
• Referral URL and navigation path within the Platform

2.5 Communications Data

• Content of customer support interactions via live chat or email
• Responses to surveys or feedback requests (where you choose to participate)
• Records of your stated marketing preferences and communication opt-in or opt-out choices

How Data Is Collected

We collect your Personal Data through the following channels:

• Direct collection: You provide data directly when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automated collection: Technical and device data is collected automatically as you use the Platform via server logs, cookies, pixel tags, and similar tracking technologies. See Section 7 for full details.
• Third-party sources: We may receive data from identity verification providers, fraud-detection services, and payment processors to supplement the information you have provided and to verify its accuracy. We may also receive limited data from analytics partners that aggregate behavioral signals to help us improve the Platform.

Legal Basis for Processing

uno89 processes your Personal Data on the following legal grounds:

How We Use Your Data

Your Personal Data is used for the following specific purposes:

• To create, verify, and maintain your uno89 account, including age verification to ensure compliance with our 21+ access restriction.
• To process deposits from and withdrawals to your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR).
• To provide access to the full range of Platform services, including the sportsbook, live casino, slot games, and all other gaming products.
• To administer bonuses, promotions, and loyalty rewards — including seasonal offers tied to Indonesian cultural events such as Ramadhan, Idul Fitri, and Imlek — ensuring that bonus terms are applied correctly to your account.
• To detect, investigate, and prevent fraud, money laundering, unauthorized account access, collusion, and other prohibited activities as defined in our Terms & Conditions.
• To fulfill our responsible gaming obligations, including monitoring for signs of problem gambling behavior and applying any voluntary limits or self-exclusion requests you have set on your account.
• To communicate with you about your account, including transaction confirmations, security alerts, verification requests, and updates to our Terms & Conditions or this Privacy Policy.
• To send promotional communications, bonus offers, and personalized game recommendations — but only where you have explicitly opted in to receive such messages. You may withdraw consent at any time via your account settings or by contacting support.
• To analyze aggregate, anonymized usage data to improve Platform performance, user experience, game selection, and customer support quality.
• To comply with applicable legal obligations, including record-keeping requirements under anti-money-laundering regulations.

Sharing Your Data

uno89 does not sell your Personal Data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Bank account and transaction data is shared with payment gateways and Indonesian banking partners (including processors for BCA, BRI, BNI, Mandiri, and e-wallet platforms) solely to execute deposit and withdrawal transactions you have initiated.
• Identity Verification Providers: KYC documents and identity data are shared with third-party verification partners who process this data on our behalf under strict data processing agreements that prohibit any independent use of your information.
• Game Content Providers: Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum technical data (such as a player session token) necessary to deliver their games through the Platform. These providers do not receive your full identity or financial data.
• Fraud Prevention and Security Services: Technical data including IP addresses, device fingerprints, and behavioral signals may be shared with fraud-detection service providers to protect the Platform from abuse.
• Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement bodies, regulatory authorities, or courts when required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where legally permissible.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your Personal Data may be transferred to the successor entity. We will notify you prior to any such transfer and ensure that the successor is bound by privacy obligations no less protective than those in this Policy.

Cookies and Tracking Technologies

uno89 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how players interact with the site. The following categories of cookies are in use:

You can manage or disable non-essential cookies through your browser's settings at any time. Please note that disabling functional cookies may affect your experience on the Platform — for example, your preferred display settings may not be remembered between sessions. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and is not recommended.

uno89 does not use third-party advertising network cookies for behavioral retargeting on external websites. Any analytical tracking used on the Platform is configured to anonymize IP addresses and is used exclusively for internal Platform improvement purposes.

Data Retention

We retain your Personal Data for as long as is necessary to fulfill the purpose for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction and wagering records: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for up to three years from the date of the interaction, unless the communication is relevant to an ongoing investigation or dispute, in which case it is retained until the matter is resolved.
• Marketing preferences and consent records: Retained for the duration of your account and for two years following account closure, to demonstrate compliance with consent obligations.
• Analytical and log data: Anonymized or aggregated within 12 months of collection; individual-level log data is deleted after 24 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted from our systems or irreversibly anonymized such that it can no longer be linked to any individual. Where complete deletion is not immediately technically feasible (for example, in encrypted backup archives), data is isolated from active processing and deleted at the next scheduled maintenance cycle.

Security Measures

uno89 implements a layered, defense-in-depth security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational measures include:

• Transport Layer Security: All data in transit between your browser or device and our servers is encrypted using TLS 1.3. Our domains enforce HTTPS with HSTS headers to prevent protocol downgrade attacks.
• Encryption at Rest: Sensitive data fields — including identity document scans, bank account details, and password hashes — are encrypted at rest using AES-256. Password hashes use an adaptive hashing algorithm (bcrypt) with a per-user salt.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis using role-based access controls. All internal access to sensitive data is logged, monitored, and subject to periodic review.
• Infrastructure Security: The Platform is hosted on enterprise-grade cloud infrastructure with physical security controls, network firewalls, DDoS mitigation, intrusion detection systems, and regular penetration testing by independent security professionals.
• Fraud and Anomaly Detection: Automated systems monitor login activity, transaction patterns, and behavioral signals in real time to detect and respond to suspicious activity, including credential-stuffing attacks and unauthorized access attempts.
• Employee Training: All staff with access to Personal Data receive mandatory data-protection and security-awareness training upon onboarding and at regular intervals thereafter.

Your Rights

As a Player, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact the uno89 Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a verified request.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For basic account details, you may update these directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no overriding legal obligation requires us to retain it. Note that certain data must be retained for legal compliance reasons (e.g., AML record-keeping) and cannot be deleted on request.
• Right to Restriction: You have the right to request that we restrict processing of your data while a complaint or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes. You may opt out of marketing communications at any time through your account settings.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

Minors

The uno89 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not use the Platform, create an account, or provide any Personal Data to uno89.

If we become aware that Personal Data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data from our systems and permanently close the associated account. If you believe that we may have inadvertently collected data from a minor, please contact us immediately at [email protected].

We apply automated and manual age-verification controls at the point of registration. Players who cannot satisfactorily demonstrate that they are 21 or older will be prevented from making deposits, accessing real-money games, or processing withdrawals until age verification is complete.

International Data Transfers

uno89 operates globally and may store or process your Personal Data on servers located outside of Indonesia. When your data is transferred to, or accessed from, a jurisdiction outside Indonesia, we ensure that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers include:

• Data Processing Agreements with all third-party Processors that include internationally recognized standard contractual clauses (SCCs) or equivalent transfer mechanisms.
• Selection of cloud hosting and service providers that maintain internationally recognized security certifications (such as ISO 27001) and that commit contractually to data protection obligations consistent with this Policy.
• Preference for Processors that store data within the Asia-Pacific region where available, to minimize transfer distances and latency while maintaining data protection standards.

For more information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

Changes to This Privacy Policy

uno89 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes — meaning changes that substantively affect your rights or how your data is used — we will notify you by email to the address registered on your account and/or by a prominent notice on the Platform, at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

Archived versions of previous Privacy Policy versions are available upon request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way uno89 handles your Personal Data, please contact our Data Protection team. In accordance with our communication policy, the contact email below is provided as plain text only and is not a clickable link:

For the fastest response regarding account-specific issues — such as a suspected unauthorized access event or a data breach notification — please contact us via the live chat function within the Platform.