ulala Privacy Policy

This page describes what we collect when you use ulala and how we keep that data protected. We at ulala collect personal information to verify your identity, process payments, and prevent fraud. Your data is encrypted in transit and at rest, and we do not share it with third parties except where required by law or to process your transactions.

Our ulala platform operates across multiple jurisdictions where online gaming is legally permitted. Your personal information may be stored on servers located outside your country. We comply with data protection standards applicable to our operating regions and handle your information according to the practices outlined in this policy.

If you have questions about how we handle your data, contact our support team in English. We respond to data requests and privacy inquiries within 7 business days.

What data we collect on ulala

We at ulala collect information in three categories: identity data, transaction data, and activity data. Identity data includes your full name, date of birth, address, and government ID number. We collect this during account registration and use it for KYC (Know Your Customer) verification before your first withdrawal. Transaction data includes payment method details, deposit and withdrawal amounts, and settlement records. We collect this to process your payments through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet.

Activity data includes your login history, games played, bets placed, and account balance changes. We collect this to detect fraud, resolve disputes, and improve our ulala platform. We do not collect your password in plain text; we store only a hashed version. We do not collect your payment card numbers directly; payment processors handle card data separately under their own security standards.

Identity data: Full name, date of birth, address, ID number. Used for account verification and fraud prevention.
Transaction data: Payment method, deposit/withdrawal amounts, settlement records. Used to process payments and maintain account history.
Activity data: Login history, games played, bets placed, balance changes. Used to detect fraud and resolve disputes.

How we use your data on ulala

We at ulala use your data for five primary purposes. First, we verify your identity to comply with anti-money-laundering regulations and prevent underage access. Second, we process your deposits and withdrawals through your chosen payment method—mobile banking, local payment, online payment, or bank transfer. Third, we detect and prevent fraud by monitoring for suspicious account activity, multiple accounts, and payment abuse. Fourth, we resolve disputes by reviewing transaction logs and game records when you contact our support team. Fifth, we improve our ulala platform by analyzing aggregate usage patterns and game performance.

We do not use your data for marketing purposes without your consent. We do not sell your personal information to third parties. We may contact you via email or SMS about account security, service updates, or promotional offers—you can opt out of promotional messages in your account settings, but we will continue to send essential account notifications.

Data retention: We retain your identity and transaction data for as long as your account is active, plus a minimum of 5 years after closure for regulatory compliance. Activity logs are retained for 2 years.

Third-party processors and data sharing

We at ulala share your data with third-party processors only when necessary to provide our service. Payment processors for e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and bank transfers receive your payment details to process deposits and withdrawals. These processors operate under their own privacy policies and security standards. We do not control how they handle your data beyond requiring them to maintain confidentiality.

We may share your data with law enforcement or regulatory authorities if required by law or court order. We may also share data with fraud-prevention services to detect and prevent abuse across our ulala platform. We do not share your data with marketing partners, data brokers, or analytics companies without your explicit consent.

Our ulala servers may be located in jurisdictions outside your country. By using our platform, you consent to your data being transferred to and stored in these locations. We apply the same security standards regardless of server location.

Your rights and data access on ulala

We at ulala provide you with access to your personal data through your account settings. You can view your identity information, transaction history, and activity logs at any time. You can request a copy of all data we hold about you by contacting our support team. We provide this data in a portable format within 14 business days.

You can request corrections to your identity data if you believe it is inaccurate. You can request deletion of your account and associated data, subject to regulatory retention requirements. We cannot delete transaction records required for anti-money-laundering compliance, but we can anonymize your identity data after the retention period expires. Contact our support team to exercise any of these rights.

Cookies and tracking on ulala

We at ulala use cookies to maintain your login session and remember your preferences. Session cookies expire when you close your browser. Preference cookies persist for up to 12 months and store settings like language and theme. We do not use tracking cookies to follow your activity across other websites.

Our ulala platform may use analytics tools to measure page performance and user behavior. These tools do not identify you personally; they collect aggregate statistics about traffic patterns and feature usage. You can disable cookies in your browser settings, but this may affect your ability to use our platform.

How we protect your data

Encryption in transit (HTTPS) and at rest
Password hashing and salting
Two-factor authentication available
Regular security audits and penetration testing

What you should do

Never share your password with anyone
Log out after sessions on shared devices
Report suspicious activity to our support team immediately

Data breach notification and contact

If we at ulala discover a data breach affecting your personal information, we notify you via email within 72 hours of discovery. We provide details about the breach, the data affected, and steps you should take to protect yourself. We also notify relevant regulatory authorities as required by law.

If you believe your ulala account has been compromised, change your password immediately and contact our support team. We can review your account activity, reset your credentials, and help you secure your account. We respond to security incidents within 24 hours on business days.

Policy updates and jurisdiction notice

We at ulala may update this privacy policy at any time. We notify users of material changes via email or in-app notification at least 14 days before the change takes effect. Continued use of our platform after changes constitutes acceptance of the updated policy. If you do not agree with changes, you may close your account and request a data deletion subject to regulatory retention requirements.

Our ulala platform operates in jurisdictions where online gaming is legally permitted. Data protection laws vary by region. We comply with applicable regulations in each jurisdiction where we operate. If you are in the European Union or another region with specific data protection requirements, contact our support team to discuss how those requirements apply to your account.

Contact us about privacy

If you have questions about this privacy policy or how we handle your data on ulala, contact our support team. We provide English support via email and in-app messaging. We respond to privacy inquiries within 7 business days. Include your account number and a clear description of your question so we can assist you efficiently.

For data access requests, deletion requests, or complaints about our data practices, contact our support team with the subject line "Privacy Request". We process these requests according to applicable data protection laws and provide a response within 14 business days.