unyuPrivacy Policy

This page describes what data we collect when you use unyu, how we store and protect that information, and what rights you have over your personal data. We at unyu take data protection seriously and implement standard security practices to keep your information confidential.

When you open an account on unyu, we collect identifying information to verify your identity and comply with anti-money-laundering regulations. We also collect transaction data, game activity logs, and payment method details to operate our platform, process deposits and withdrawals, and investigate disputes. We do not sell your personal data to third parties, though we may share information with payment processors, banks, and regulatory authorities as required by law.

Our privacy commitments apply globally, though our servers may be located outside Indonesia. If you have questions about how we handle your data, contact our support team via the help section in your account.

What data we collect

We at unyu collect several categories of information when you use our platform. Your identity data includes your full name, date of birth, and a valid Indonesian identity document number (KTP, SIM, or Paspor). We also collect your contact information: email address and phone number. This data is required to open an account and verify your identity before we process your first deposit.

We collect payment information related to deposits and withdrawals. If you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank virtual account from mobile banking, local payment, online payment, or e-wallet, we store a record of your transaction—including the payment method, amount, date, and reference number. We do not store your full payment credentials (e.g., we do not retain your mobile banking password or credit card number); we only store references generated by the payment processor that allow us to reconcile transactions and process refunds if needed.

We collect activity logs tracking every bet you place, every game you play, every deposit and withdrawal request, and every account login. We also collect technical data such as your IP address, device type, browser type, and timestamps of your sessions. This data helps us detect fraudulent activity, resolve disputes, and improve our platform's performance.

How we use your data

We at unyu use your identity and contact information to verify your account, process your deposits and withdrawals, and contact you regarding account security or regulatory compliance. If we detect suspicious activity—such as multiple failed login attempts or unusual betting patterns—we may contact you via email or SMS to confirm that the activity is authorized.

We use transaction and activity logs to settle bets, determine payouts, investigate disputes, and comply with anti-money-laundering requirements. If you contest a bet settlement or claim that a deposit did not credit, we review your activity logs and transaction records to investigate. We also use logs to detect fraud: if we notice deposits followed immediately by large withdrawals, or activity from multiple IP addresses in geographically distant locations, we flag these patterns for review.

We use technical data (IP address, device type, session timestamps) to operate our platform, detect unauthorized access, and track usage patterns. We may also use this data to improve our services—for example, if we notice that many users from Jakarta or Surabaya experience slow load times at certain hours, we can optimize our infrastructure accordingly.

Identity data

Name, date of birth, ID number; used for account verification and KYC compliance.

Payment data

Transaction records (e-wallet or bank VA); used to process deposits and withdrawals.

Activity logs

Bets, games, deposits, withdrawals, logins; used for settlement and fraud detection.

Technical data

IP address, device type, browser, session timestamps; used to operate and secure the platform.

Third-party processors and data sharing

We at unyu work with several third-party processors to operate our platform. Our payment processors—the companies that handle local payment, online payment, e-wallet, mobile banking, local payment, online payment, and bank virtual account transactions—receive your transaction information to verify and settle payments. These processors operate under their own privacy policies and are bound by payment industry regulations.

We share identity verification data with government agencies and financial institutions as required by anti-money-laundering and know-your-customer (KYC) regulations. We do not proactively disclose this information, but if we receive a lawful request from a regulatory authority or law enforcement, we will comply. We may also share data with our legal counsel, auditors, or other service providers who assist us in operating unyu.

We do not sell your personal data to marketing companies or data brokers. We do not share your information with unaffiliated third parties for their own marketing purposes. The only exceptions are situations required by law—for example, if a court orders us to disclose your information, or if we are required by law to report suspicious activity to financial regulatory authorities.

How we protect your data

We at unyu use industry-standard encryption to protect data in transit. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Your personal information is also encrypted at rest on our servers, accessible only to our authorized staff via password-protected systems.

We implement access controls to ensure that only staff members who need your information to perform their roles can access it. Our compliance and fraud teams have access to identity verification data and transaction logs. Our finance team has access to payment records. Our customer support team has limited access to your account information needed to resolve disputes.

We do not store your account password in plain text. When you create a password, we hash it using a strong algorithm, storing only the hash. This means even our staff cannot see your password. If you forget your password, we send you a reset link via email; you create a new password, which is hashed and stored. If you suspect your account has been compromised, contact our support team immediately and we will force a password reset and review your account activity.

Our servers may be located outside Indonesia. By using unyu, you consent to the transfer of your data outside your jurisdiction.

Your rights regarding your data

We at unyu recognize your rights to access, update, and delete your personal information. You can view your account information by logging into your unyu account. You can update your email address, phone number, or other profile details within your account settings. If you need to update your identity information (name, date of birth, or ID number), contact our support team.

You have the right to request a copy of all personal data we hold about you. Contact our support team with this request, and we will compile your data and provide it in a readable format within two business days. You also have the right to request deletion of your account and associated data, subject to legal retention requirements. If we are required by law to retain your data for anti-money-laundering compliance, we cannot delete it, but we will limit how we use it to only what the law requires.

If you believe we have processed your personal data in violation of applicable privacy law, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can attempt to resolve the issue directly.

Cookies and tracking

We at unyu use cookies and similar tracking technologies on our platform. We use essential cookies to keep you logged in and to maintain your session. We use analytics cookies to understand how users navigate our platform—for example, which games are most popular or which payment methods are most commonly used. These analytics help us improve our services.

We do not use cookies for behavioral advertising or third-party tracking. You can disable non-essential cookies in your browser settings, though this may affect the functionality of unyu. We do not track you across other websites or serve you targeted advertisements based on your unyu activity.

How long we keep your data

We at unyu retain your personal data for as long as your account is active plus an additional period as required by law. For identity verification data (name, date of birth, ID number), we retain this for at least two years after account closure or as required by anti-money-laundering regulations. For transaction records, we retain detailed logs for at least two years to support dispute resolution and regulatory compliance. For technical logs (IP addresses, device types, session data), we retain these for up to 90 days.

If you request account deletion and we are not required by law to retain your data, we will delete it within 30 days. However, we may retain anonymized or aggregated data (data that does not identify you personally) for analytical purposes indefinitely.

Changes to this privacy policy

We at unyu may update this privacy policy from time to time. We will notify you of material changes via email or by posting an updated version on our website. We encourage you to review this policy regularly to understand how we protect your data. Your continued use of unyu after changes constitutes your acceptance of the updated policy.

Contact us regarding privacy

If you have questions about this privacy policy or concerns about how we handle your data, contact our support team via the help section in your account. We respond to privacy inquiries in English and Indonesian within two business days. We take all privacy concerns seriously and will investigate any issues you raise.

Our privacy practices comply with applicable data protection laws in jurisdictions where we operate. We are committed to protecting your personal information and maintaining your trust when you use unyu.