Privacy Policy

1. Introduction

Welcome to the sga55 Privacy Policy. This document explains how sga55 ("we," "us," "our," "Company," "Platform") collects, uses, stores, protects, and shares your personal information when you access or use our online gaming platform, services, and related features. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and best practices.

By creating an account on sga55, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you should not use our Platform or provide us with any personal information.

2. Information We Collect

To provide you with a secure and personalized gaming experience, sga55 collects various types of information during your interaction with our Platform. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for an account or use sga55 services, you voluntarily provide us with personal information, including:

• Account Registration Data: Full legal name (as it appears on your government-issued ID), date of birth, gender, email address, phone number, residential address, and country of residence.
• Identity Verification Documents (KYC): Copies of your government-issued identification (Indonesian National ID/KTP, passport, or driver's license), selfie photographs holding your ID, and proof of address documents (utility bills, bank statements).
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account details), transaction history, deposit and withdrawal records.
• Communication Data: Contents of your communications with our customer support team via live chat, WhatsApp, email, or other support channels, including transcripts, attachments, and correspondence history.
• Preference Settings: Language preferences, communication preferences (email, SMS, push notifications), responsible gaming limits (deposit limits, loss limits, time-out periods), and marketing consent settings.

2.2 Information Collected Automatically

When you access sga55, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID).
• Usage Data: Pages visited, features accessed, time spent on Platform, clickstream data, referral sources, search queries within the Platform, game sessions played, bets placed, and gaming preferences.
• Location Information: General geographic location based on your IP address (country, city) to comply with jurisdictional restrictions and provide localized services. We do not track precise GPS location unless you explicitly enable this feature.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies to remember your preferences, authenticate your session, prevent fraud, and analyze Platform performance.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Providers: Transaction verification data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Identity Verification Services: Age verification, identity authentication, and fraud detection data from third-party verification providers to comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations.
• Game Providers: Gaming activity data from third-party game suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming) to credit winnings, track progressive jackpots, and resolve disputes.
• Affiliate Partners: Referral source information if you joined sga55 through an affiliate link or marketing campaign.

3. How We Use Your Information

sga55 processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your sga55 account.
• Verifying your identity, age (21+ requirement), and compliance with eligibility criteria.
• Processing deposits, withdrawals, and other financial transactions.
• Providing access to sports betting, live casino, slot games, and other gaming products.
• Tracking your gaming activity, bet history, transaction records, and account balance.
• Applying bonuses, promotions, and VIP loyalty rewards to your account.
• Implementing responsible gaming measures, including deposit limits, self-exclusion, and time-out periods.

3.2 Legal and Regulatory Compliance

• Complying with international gaming regulations, licensing requirements, and legal obligations.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by law.
• Preventing, detecting, and investigating fraud, collusion, money laundering, bonus abuse, and other prohibited activities.
• Responding to legal requests, court orders, subpoenas, or regulatory inquiries from government authorities.
• Enforcing our Terms and Conditions and protecting the rights, property, and safety of sga55, our users, and third parties.

3.3 Communication and Customer Support

• Responding to your inquiries, complaints, and support requests via live chat, WhatsApp, email, or phone.
• Sending transactional notifications related to your account, including deposit confirmations, withdrawal updates, bonus credits, and security alerts.
• Providing customer service in Indonesian by native-speaking support agents familiar with local banking systems and payment methods.
• Conducting customer satisfaction surveys to improve our services.

3.4 Marketing and Promotional Communications (with Consent)

• Sending promotional offers, bonus announcements, VIP program updates, and personalized gaming recommendations based on your preferences and activity.
• Delivering targeted advertising and marketing campaigns via email, SMS, push notifications, or in-Platform messages.
• Informing you about new game releases, upcoming tournaments, and special events.

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails. However, you cannot opt out of essential service-related communications (e.g., security alerts, transaction confirmations).

3.5 Platform Improvement and Analytics

• Analyzing user behavior, gaming patterns, and Platform usage to improve our services, optimize performance, and enhance user experience.
• Conducting A/B testing, feature development, and product research.
• Monitoring Platform security, detecting technical issues, and troubleshooting bugs.
• Generating aggregated, anonymized statistical reports and analytics for business intelligence purposes.

4. How We Share Your Information

sga55 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to facilitate deposits and withdrawals.
• Game Suppliers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and other game developers to deliver casino games, slots, and live dealer experiences.
• Identity Verification Providers: Third-party KYC and AML verification services to authenticate your identity, verify age, and detect fraud.
• Cloud Hosting and IT Infrastructure: Secure server hosting, data storage, and cybersecurity providers.
• Customer Support Tools: Live chat software, CRM systems, and communication platforms used by our Indonesian-speaking support team.
• Marketing and Analytics Partners: Email marketing platforms, SMS providers, and analytics tools (with your consent for marketing purposes).

All third-party service providers are contractually obligated to protect your personal information, use it only for specified purposes, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or courts when:

• Required by law, legal process, court order, subpoena, or regulatory investigation.
• Necessary to comply with gaming licensing requirements, AML regulations, or tax reporting obligations.
• Needed to protect the rights, property, safety, or security of sga55, our users, or the public.
• Essential to prevent, detect, or investigate fraud, illegal activity, or Terms violations.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent Platform notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties if you have provided explicit consent for such disclosure, including participation in affiliate programs, marketing campaigns, or promotional partnerships.

5. Data Security Measures

sga55 implements robust technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Encryption and Secure Communication

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols—the same encryption standard used by major banks.
• Encrypted Data Storage: Personal information stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Secure Payment Processing: Financial transactions are processed through PCI DSS (Payment Card Industry Data Security Standard) compliant payment gateways.

5.2 Access Controls and Authentication

• Role-Based Access Control: Only authorized personnel with legitimate business needs can access your personal information, and access is logged and monitored.
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator app adds an extra layer of security to your account login.
• Password Security: We require strong passwords and employ secure hashing algorithms to store password credentials (we never store passwords in plain text).

5.3 Network and Infrastructure Security

• Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection/prevention systems (IDS/IPS) protect our network infrastructure from cyberattacks.
• Regular Security Audits: Independent third-party security audits, vulnerability assessments, and penetration testing are conducted quarterly.
• DDoS Protection: Distributed Denial of Service (DDoS) mitigation measures ensure Platform availability and protect against malicious attacks.

5.4 Employee Training and Confidentiality

• All sga55 employees, contractors, and service providers are bound by strict confidentiality agreements.
• Regular data protection and cybersecurity training ensures staff members understand their obligations to protect user data.

6. Data Retention

sga55 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods by Data Category:

Data Category	Retention Period	Reason
Account Information	Duration of account activity + 7 years after closure	Legal compliance, AML regulations, dispute resolution
Transaction Records	7 years from transaction date	Financial reporting, tax compliance, fraud prevention
KYC Documents	7 years after account closure	Regulatory requirements, identity verification records
Gaming Activity Logs	5 years	Dispute resolution, responsible gaming monitoring
Marketing Consent Records	Until consent is withdrawn + 2 years	Compliance with marketing regulations
Support Communications	3 years	Quality assurance, complaint resolution
Security Logs	1-3 years	Fraud prevention, security investigations

After retention periods expire, we securely delete or anonymize your personal information so it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Privacy Rights

Subject to applicable laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

7.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections. You can update most information directly through your account settings or by contacting customer support.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent for processing (where consent was the legal basis).
• You object to processing and there are no overriding legitimate grounds.

Note: We may retain certain information if required by law (e.g., transaction records for AML compliance, KYC documents for 7 years post-closure).

7.4 Right to Restrict Processing

You can request that we temporarily restrict processing of your personal information in specific situations, such as while we verify the accuracy of disputed data.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. You can opt out via account settings, unsubscribe links, or by contacting support.

7.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to your request within 30 days and may require identity verification to protect your privacy.

8. Cookies and Tracking Technologies

sga55 uses cookies, web beacons, and similar tracking technologies to enhance your Platform experience, analyze usage patterns, and deliver personalized content.

Types of Cookies We Use:

• Essential Cookies: Required for basic Platform functionality, including session management, authentication, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to analyze how users interact with the Platform, helping us identify bugs and optimize performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior to deliver targeted advertising and promotional offers (with your consent).

Managing Cookies

You can control cookie preferences through your browser settings. However, disabling essential cookies may limit Platform functionality. Most browsers allow you to:

• View and delete existing cookies.
• Block third-party cookies.
• Block cookies from specific websites.
• Delete all cookies when closing your browser.

9. International Data Transfers

sga55 primarily serves Indonesian players, and your personal information is processed within secure data centers. However, some of our service providers (e.g., cloud hosting, game suppliers) may be located outside Indonesia. When we transfer data internationally, we ensure:

• Adequate data protection safeguards are in place, such as Standard Contractual Clauses (SCCs).
• Recipients comply with international data protection standards equivalent to those described in this Privacy Policy.
• Data transfers are necessary to provide our services (e.g., processing transactions, delivering games).

10. Children's Privacy

sga55 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. Our KYC verification process ensures all users meet the minimum age requirement. If we discover that we have inadvertently collected data from a minor, we will immediately delete it and close the associated account.

Parents or guardians who believe their child has provided personal information to sga55 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

sga55 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated via:

• Email notification to your registered email address.
• Prominent notice on the sga55 website.
• In-Platform alerts upon login.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent changes were made. Your continued use of sga55 after changes are posted constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform with Indonesian-speaking agents
• WhatsApp: Indonesian customer support

Our Data Protection team operates in Western Indonesia Time (WIB) and is committed to responding to all privacy inquiries within 30 days.