Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How Data Is Collected
- 5. Purposes of Processing
- 6. Legal Basis
- 7. Data Sharing
- 8. International Transfers
- 9. Data Retention
- 10. Security Measures
- 11. Your Rights
- 12. Cookies & Tracking
- 13. Minors
- 14. Third-Party Services
- 15. Policy Changes
- 16. Contact & Complaints
Please Read Carefully: This Privacy Policy ("Policy") describes how sgobet ("Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to registered users ("User", "you", "your") and visitors to https://sgobet.cam. By accessing this Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform immediately.
1 Introduction
sgobet takes the privacy and security of your personal data extremely seriously. This Policy is designed to give you a clear and complete picture of our data handling practices — not as a legal formality, but as a genuine commitment to transparency. We believe that informed players make better decisions, and that trust is built through honest disclosure rather than opaque policies buried in fine print.
This Policy applies to all personal data processed by sgobet in connection with the Platform's services, including sports betting markets covering BRI Liga 1, EPL, La Liga, Champions League, and other competitions; casino and slot games from providers such as Pragmatic Play, Evolution Gaming, and Microgaming; togel (Indonesia's traditional numbers lottery) markets; and all associated account management, payment processing, and customer support activities.
This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform. Where this Policy refers to obligations or rights described in the Terms & Conditions, that document's provisions apply in full.
2 Definitions
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a natural person, including name, email address, phone number, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, deletion, or destruction. |
| "Data Controller" | sgobet — the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on sgobet's behalf under written instruction and data processing agreements. |
| "KYC Data" | Identity verification documents including government-issued ID (e.g., Indonesian KTP), proof of address, selfie images, and payment method confirmation collected during the Know Your Customer process. |
| "Cookies" | Small text files stored on your device by your browser when you access the Platform, used to maintain session state, track usage patterns, and deliver personalised content. |
| "Special Category Data" | Sensitive personal information including health data (collected only for responsible gaming purposes), biometric data (used solely for identity verification), and financial data beyond standard payment details. |
3 Data We Collect
3.1 Registration and Account Data
When you create an account on sgobet, we collect the following information that you provide directly:
- Full legal name as it appears on your government-issued identification document
- Date of birth (used to verify that you meet the 21+ age requirement)
- Residential address in Indonesia (city, province, postal code)
- Valid email address (primary communication channel)
- Indonesian mobile phone number (used for OTP verification and account security)
- Username and encrypted password (password is never stored in plain text)
- Preferred language and communication preferences
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering obligations and to verify player identity, we collect:
- Scans or photographs of government-issued identification (Indonesian National ID / KTP, passport, or driver's licence)
- Proof of address documents (utility bills, bank statements, or government correspondence dated within 3 months)
- Selfie photographs taken alongside a physical ID document
- Bank account or e-wallet screenshots confirming payment method ownership
3.3 Financial and Transaction Data
We record all financial activity on your account, including:
- Deposit and withdrawal amounts, timestamps, and transaction reference numbers
- Payment method details — bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
- Account Balance history and bonus credit/debit records
- Currency denomination (Indonesian Rupiah / IDR / Rp) and any conversion records
3.4 Betting and Gaming Activity Data
We collect a complete record of your gambling activity, including:
- All bets placed, including market type, stake amount, odds, and settlement outcome
- Games accessed, session duration, and game-specific performance statistics
- Bonus offers accepted, wagering progress, and promotion participation history
- Responsible gaming tool settings (deposit limits, session timers, self-exclusion history)
3.5 Technical and Device Data
When you access the Platform, we automatically collect:
- IP address and approximate geographic location derived from IP data
- Device type, operating system, and browser version
- Unique device identifiers and mobile advertising IDs (where applicable)
- Session timestamps, page views, click-through patterns, and navigation paths
- Internet service provider and connection type
3.6 Communications Data
When you interact with our customer support team, we retain:
- Live chat transcripts and support ticket correspondence
- Email exchanges between you and sgobet
- Records of any formal complaint submissions and their resolution outcomes
4 How Data Is Collected
4.1 Directly From You
The majority of your Personal Data is collected directly when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or update your account profile. You are always aware when you are providing data directly to sgobet.
4.2 Automatically Through Platform Use
Technical and device data is collected automatically through server logs, cookies, and similar tracking technologies each time you access the Platform. This collection is inherent to the operation of any web-based service and is necessary for security, performance monitoring, and fraud prevention.
4.3 From Third-Party Sources
In certain circumstances, sgobet may receive data about you from third parties, including:
- Identity verification providers: Third-party KYC services that cross-reference your submitted documents against public and proprietary identity databases.
- Payment processors: Banks and e-wallet providers such as BCA, BRI, OVO, DANA, and GoPay may share transaction confirmation data with sgobet to facilitate deposit and withdrawal processing.
- Fraud detection services: Specialist third-party providers that flag suspicious account patterns or known fraudulent identities from their aggregated databases.
- Analytics partners: Aggregated, de-identified behavioural analytics from platform performance tools that help us improve user experience.
5 Purposes of Processing
sgobet processes your Personal Data for the following specific, legitimate purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your player account, including password resets, profile updates, and session management. |
| Service Delivery | Processing bets, settling wagers, crediting winnings, and providing access to sports betting, casino, slot, and togel game markets. |
| Payment Processing | Facilitating deposits and withdrawals through Indonesian banking and e-wallet channels, and maintaining accurate transaction records. |
| Identity Verification | Confirming that users are at least 21 years of age, are who they claim to be, and are not on self-exclusion registers. |
| Fraud and AML Prevention | Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct. |
| Responsible Gaming | Monitoring betting patterns to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and fulfilling duty-of-care obligations. |
| Customer Support | Responding to enquiries, resolving disputes, and improving support quality through interaction records. |
| Marketing Communications | Sending promotional offers, bonus notifications, and product updates where you have given explicit consent — with an easy opt-out mechanism at all times. |
| Platform Improvement | Analysing aggregated usage data to improve navigation, game selection, payment flows, and overall user experience. |
| Legal Compliance | Fulfilling obligations under applicable international licensing conditions, financial crime regulations, and data protection laws. |
6 Legal Basis for Processing
sgobet processes your Personal Data on one or more of the following legal grounds:
- Contractual Necessity: Processing required to deliver the services you have contracted for by accepting our Terms & Conditions — including account management, bet settlement, and payment processing.
- Legal Obligation: Processing required to comply with applicable laws and our international gaming licence conditions, including KYC verification, AML monitoring, and age verification.
- Legitimate Interests: Processing carried out in sgobet's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, and internal analytics.
- Consent: Processing based on your explicit, freely given, and withdrawable consent — primarily applicable to direct marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.
Note on Withdrawal of Consent: Withdrawing consent for marketing communications will not affect the lawfulness of any processing carried out prior to withdrawal. It will also not affect processing conducted under other legal bases (e.g., processing required for contract performance or legal compliance will continue regardless of marketing consent withdrawal).
7 Data Sharing & Disclosure
7.1 We Do Not Sell Your Data
sgobet does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Any disclosure of your data to third parties is strictly limited to what is necessary to operate the Platform and fulfill our legal obligations.
7.2 Authorised Third-Party Recipients
Your Personal Data may be shared with the following categories of third parties under strict contractual data protection obligations:
- Payment service providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your transactions.
- KYC and identity verification services: Specialist providers that verify identity documents and screen against sanctions and politically exposed persons (PEP) lists.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft receive session and game activity data required to deliver their games.
- IT infrastructure and cloud hosting providers: Secure server and data centre operators that host Platform infrastructure under enterprise-grade security agreements.
- Fraud prevention and cybersecurity services: Providers that monitor for account compromise, bot activity, and suspicious financial patterns.
- Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.
7.3 Disclosure Required by Law
sgobet may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or our international gaming licence conditions. We will notify you of such disclosures where legally permitted to do so.
7.4 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of sgobet's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms of the acquiring entity prior to the transfer taking effect.
8 International Data Transfers
sgobet operates from an internationally licensed jurisdiction and uses third-party service providers whose infrastructure may be located in multiple countries. Your Personal Data may therefore be transferred to and stored in countries outside Indonesia. Where such transfers occur, sgobet ensures that appropriate safeguards are in place, including:
- Standard contractual clauses approved by recognised data protection authorities
- Data processing agreements requiring recipients to implement technical and organisational security measures equivalent to those applied by sgobet
- Transfers only to providers who have demonstrated compliance with internationally recognised data protection standards such as ISO 27001 or SOC 2 Type II
By using the Platform, you acknowledge and consent to these international transfers as necessary for the delivery of the services you have requested.
9 Data Retention
sgobet retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our international licensing obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC verification documents | Duration of account plus 5 years after closure |
| Transaction and payment records | 7 years from transaction date (financial record obligations) |
| Betting and gaming activity logs | 5 years from the date of each recorded activity |
| Customer support communications | 3 years from the date of last interaction |
| Technical and device logs | 13 months from collection date |
| Marketing consent records | Until consent is withdrawn, plus 3 years as an audit record |
| Self-exclusion records | Permanently retained to prevent re-registration during exclusion periods |
Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Where deletion is technically impractical in the short term (e.g., in encrypted backup archives), data is quarantined from active use until scheduled deletion occurs.
10 Security Measures
sgobet implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- Transport Layer Security (TLS 1.3): All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
- Data encryption at rest: Sensitive Personal Data stored in our databases is encrypted using AES-256 encryption, ensuring that raw data is unreadable even in the event of a storage breach.
- Password hashing: User passwords are never stored in plain text. We use bcrypt hashing with individual salts, making password recovery from stored hashes computationally infeasible.
- Two-factor authentication (2FA): Available for all accounts; strongly recommended for Users accessing the Platform from shared or public devices.
- Access controls: Personal Data is accessible to sgobet staff only on a strict need-to-know basis, governed by role-based access controls and comprehensive audit logging.
- Penetration testing: The Platform undergoes regular independent security audits and penetration testing by certified cybersecurity professionals.
- Incident response: sgobet maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, you will be notified without undue delay where required by applicable law.
Your Responsibility: While sgobet takes extensive measures to secure the Platform, the security of your account also depends on your own practices. You must keep your login credentials confidential, use a strong unique password, enable 2FA where available, and immediately notify sgobet if you suspect unauthorised access to your account.
11 Your Rights
As a data subject, you have the following rights with respect to your Personal Data held by sgobet. To exercise any of these rights, please contact us at the details provided in Section 16 of this Policy.
Right of Access
Request a copy of all Personal Data we hold about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held on your account without undue delay.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is resolved.
Right to Portability
Receive your Personal Data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes, with effect from the date of your objection.
Rights Re: Automated Decisions
Request human review of any significant decision made about you solely by automated means, including risk-scoring or account restriction decisions.
Right to Withdraw Consent
Withdraw consent for marketing communications or other consent-based processing at any time without penalty, effective from the date of withdrawal.
sgobet will respond to all verified rights requests within 30 calendar days of receipt. In complex cases this period may be extended by a further 60 days; you will be notified of any extension and the reason for it. Requests may be declined where fulfillment would conflict with our legal obligations or the rights of third parties — in such cases, we will provide a written explanation.
12 Cookies & Tracking Technologies
12.1 What We Use
sgobet uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively. These technologies serve the following functions:
- Essential cookies: Required for the Platform to function — including session authentication tokens, CSRF protection tokens, and load balancing identifiers. These cannot be disabled without breaking core functionality.
- Functional cookies: Remember your preferences such as language settings, preferred payment method display, and odds format selections.
- Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform to identify areas for improvement.
- Security cookies: Detect and prevent fraudulent activity, bot traffic, and credential stuffing attacks.
12.2 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Note that disabling functional cookies may impair your experience on the Platform, and disabling security-related cookies may affect our ability to protect your account. Your browser's help documentation will guide you on how to manage cookie settings for your specific browser and device.
Third-Party Cookies: Some cookies on the Platform are set by our game content providers and analytics partners rather than directly by sgobet. These third-party cookies are governed by those providers' own privacy policies. sgobet does not have direct control over third-party cookie behaviour beyond requiring our partners to comply with applicable data protection standards.
13 Minors & Age Restriction
The Platform is strictly intended for adults aged 21 years and over. sgobet does not knowingly collect Personal Data from individuals under the age of 21. Our age verification process is designed to prevent underage access before any real-money activity is permitted.
If sgobet becomes aware that it has inadvertently collected Personal Data from a person under 21, that data will be deleted promptly, the associated account will be permanently closed, and any deposited funds will be returned to their source payment method following verification. If you believe a minor has registered an account on the Platform, please notify us immediately at the contact details in Section 16.
14 Third-Party Services & External Links
The Platform may reference or integrate services from third-party providers including game studios, payment gateways, and analytics tools. Where third-party services involve the processing of your Personal Data, sgobet enters into data processing agreements with those providers requiring them to maintain appropriate security and confidentiality standards.
sgobet is not responsible for the privacy practices of any third-party websites or services that exist outside the Platform. This Policy applies exclusively to data processed by sgobet in connection with https://sgobet.cam. We encourage you to review the privacy policies of any third-party service you interact with independently of our Platform.
15 Changes to This Policy
sgobet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes — those that significantly affect how we collect or use your Personal Data — will be communicated to registered Users via email or prominent in-platform notification at least 14 calendar days before they take effect.
The "Last Updated" date at the top of this Policy reflects the date on which the current version took effect. We recommend reviewing this Policy periodically to stay informed of our current data practices. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.
16 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your Personal Data has been handled, please contact the sgobet Privacy Team using the details below:
Email: [email protected]
Subject Line: Please include "Privacy Request" or "Data Rights" in your subject line to ensure your message is routed to the correct team.
Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours (WIB business hours) and to resolve them within 30 calendar days of receipt of a complete request.
Identity Verification for Rights Requests: To protect your data, we may require you to verify your identity before processing a data rights request. This typically involves confirming account details and may require submission of a KYC document.
Complaints: If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. sgobet is committed to working constructively with regulatory bodies on any matter relating to user data protection.