Why ug8 Offers Two-Factor Authentication
Account security is a shared responsibility. We encrypt your password and store it securely, but we cannot prevent someone from guessing or stealing your password through phishing or malware. Two-factor authentication closes that gap. Even if a third party learns your password, they cannot log into your ug8 account without the second code—which only you can generate or receive.
This matters especially during high-activity periods like Liga 1 football season or Idul Fitri holidays, when phishing attempts and account takeover scams spike. Players in Jakarta, Surabaya, Bandung, Medan, and Semarang report that 2FA gives them peace of mind when they hold balances or plan large withdrawals. We do not force 2FA on anyone, but we strongly encourage it as a best practice.
Two-factor authentication is the single most effective way to prevent unauthorized account access. We make it optional because some users prefer speed over extra security, but we recommend enabling it before your first deposit.
SMS vs. Authenticator App: Which Should You Choose?
ug8 supports two types of 2FA: SMS codes and authenticator apps. SMS is simpler—you receive a six-digit code via text message each time you log in. No app installation needed. However, SMS can be intercepted in rare cases, and if you lose your phone, you cannot receive codes until you update your phone number with us.
An authenticator app (like Google Authenticator, Microsoft Authenticator, or Authy) generates codes on your phone without relying on SMS. The codes change every 30 seconds and work offline. If you lose your phone, you can reinstall the app on a new device using a backup code we provide during setup. Authenticator apps are slightly more secure than SMS, but both methods are far better than no 2FA at all.
We recommend authenticator apps for users who plan to hold larger balances or make frequent withdrawals via DANA, e-wallet, mobile banking, or bank transfer. For casual players, SMS 2FA is sufficient and faster to set up.
How to Enable Two-Factor Authentication on ug8
-
Log into your ug8 account
Open the ug8 app or website and enter your email and password.
-
Navigate to Account Settings or Security
Look for a menu option labeled "Settings," "Security," or "Account Protection."
-
Select "Enable Two-Factor Authentication"
Choose SMS or authenticator app, then follow the on-screen prompts.
-
Verify your phone number or scan the QR code
For SMS, confirm your phone number. For an app, scan the QR code with your authenticator app.
-
Save your backup codes
ug8 provides backup codes. Store them in a safe place (not on your phone) in case you lose access to your 2FA method.
Once 2FA is enabled, every time you log into ug8—whether on the mobile app, web browser, or desktop—you will be asked to enter a code. If you chose SMS, a text arrives within seconds. If you chose an authenticator app, open the app and read the six-digit code displayed on screen. Enter the code into the ug8 login prompt, and you are in.
Two-Factor Authentication and Your Deposits
2FA does not change how you deposit. You still navigate to Cashier, select your payment method (local payment, online payment, e-wallet, mobile banking, local payment, online payment, or bank transfer), and enter the amount. The payment gateway processes your deposit the same way. However, if someone tries to log into your account and change your payment method or request a withdrawal, 2FA blocks them—they cannot proceed without your second code.
This protection is especially valuable during high-volume periods like Idul Adha or Imlek, when phishing emails and fake login pages circulate widely. Even if you accidentally click a malicious link and enter your password, the attacker still cannot access your account or your balance without the 2FA code.
What Happens If You Lose Your Phone?
If your phone is lost, stolen, or damaged, you can still access your ug8 account using your backup codes. During 2FA setup, we provide you with a set of one-time backup codes. Each code works once and bypasses the need for an SMS or authenticator app code. Store these codes somewhere safe—a password manager, a locked drawer, or a trusted family member's secure location.
If you lose both your phone and your backup codes, contact our support team. We can verify your identity (using your account details, email, and phone number on file) and temporarily disable 2FA so you can regain access. This process takes a few hours and is designed to prevent unauthorized account takeover while still allowing legitimate account owners to recover access.
Two-Factor Authentication and Withdrawals
When you request a withdrawal on ug8, we may ask for additional verification depending on the amount and your account history. 2FA is one layer of that verification. If your withdrawal is large or your account is new, we may also ask you to confirm your identity via email or provide a screenshot of your payment method. These steps protect both you and our platform from fraud.
Once your withdrawal is approved, funds transfer to your chosen payment rail—e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking. The withdrawal process itself does not require you to enter a 2FA code; the code is only needed to log in and initiate the request. However, if someone tries to log into your account and change your withdrawal payment method, 2FA stops them cold.
Disabling or Changing Your Two-Factor Authentication
You can disable 2FA at any time by logging into your ug8 account, navigating to Security settings, and selecting "Disable Two-Factor Authentication." You will be asked to confirm your password and, if you have 2FA enabled, to enter your current 2FA code. Once disabled, you can log in with just your password—but we recommend keeping 2FA on for ongoing protection.
If you want to switch from SMS to an authenticator app (or vice versa), disable your current 2FA method and then enable the new one. The process takes a few minutes and does not affect your account balance or deposit history.