sga889 Privacy Policy

Throughout this Privacy Policy, the following defined terms apply:

sga889 collects the following categories of Personal Data in connection with the provision of its services:

2.1 Registration Data

• Full legal name as it appears on your government-issued ID (KTP for Indonesian residents).
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address (primary communication channel for account notifications, KYC requests, and promotional communications where opted in).
• Mobile telephone number (used for account security verification and, where applicable, two-factor authentication).
• Preferred username and hashed password (passwords are never stored in plain text).
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan — used for localisation and fraud pattern analysis).

2.2 Financial Data

• Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) for deposit and withdrawal processing.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) where used as a payment method.
• Transaction history — including deposit amounts, withdrawal requests, bet stakes, and winnings — maintained for audit and regulatory compliance purposes.
• sga889 does not store full debit or credit card numbers. Any card data is processed exclusively by PCI-DSS-compliant third-party payment processors.

2 .3 KYC Verification Data

• Copies of government-issued identity documents (KTP, national ID, or passport) submitted during the verification process.
• Selfie photographs or live facial-verification images submitted to confirm that the document belongs to the registering Member.
• Proof-of-payment-method screenshots (e.g., mobile banking app screenshots showing your name and account number matching your sga889 registration).
• Source-of-funds documentation where requested under enhanced due diligence procedures.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP (used for fraud detection and access restriction enforcement).
• Browser type, version, and operating system.
• Device type, screen resolution, and device identifiers.
• Session timestamps, login history, and page-navigation logs.
• Referring URL (the page from which you arrived at sga889.asia).

2.5 Behavioural & Gaming Data

• Game-play records: games played, bet amounts, outcomes, session durations, and RTP-related metadata for slot and togel (Indonesia's traditional numbers lottery) products.
• Sportsbook betting history, including markets selected, odds accepted, and settlement outcomes for football (bandar bola, Asian handicap), BRI Liga 1, EPL, La Liga, and other covered leagues.
• Bonus utilisation records: which promotions were claimed, wagering progress, and expiry status.
• Responsible gaming tool usage: deposit limits set, cooling-off activations, and self-exclusion requests.

2.6 Communications Data

• Records of live chat conversations with the sga889 support team.
• Email correspondence initiated by or sent to you via [email protected].
• Survey responses or feedback submissions where voluntarily provided.

sga889 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, use the live chat, or contact support via email.
• Automatically via your device — through server logs, cookies, pixel tags, and similar tracking technologies each time you visit or interact with sga889.asia. See Section 7 for full details of our cookies policy.
• From payment service providers — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other processors confirm transaction status, amounts, and account holder names to sga889 as part of the payment flow.
• From identity verification partners — third-party KYC and age-verification service providers may cross-reference the documents you submit against government or commercial databases to confirm identity and age.
• From fraud-prevention services — sga889 may receive risk-scoring signals from third-party fraud-detection partners that analyse device fingerprints, IP reputation, and behavioural anomalies.
• From analytics providers — aggregated, anonymised usage statistics are collected via analytics tools to help sga889 understand how Members interact with the platform and improve the user experience.

sga889 processes Personal Data only for specified, explicit, and legitimate purposes. The table below maps each data category to its primary processing purpose:

sga889 processes Personal Data on the following legal bases, depending on the processing activity in question:

• Contract Performance: The majority of sga889's processing — including account management, payments, and game-play record-keeping — is necessary to fulfil the contractual relationship established when you register as a Member and accept sga889's Terms & Conditions.
• Legitimate Interests: sga889 processes technical and behavioural data on the basis of its legitimate interest in operating a secure, fraud-resistant platform. This includes IP logging, device fingerprinting, and session monitoring. These interests are balanced against your privacy rights and do not override them.
• Legal Obligation: KYC verification, AML transaction monitoring, and the retention of financial records are processing activities undertaken in compliance with applicable international anti-money-laundering and counter-terrorism-financing standards that sga889's international licence requires it to observe.
• Consent: Marketing communications and the placement of non-essential cookies are carried out solely on the basis of your explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

sga889 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data is shared only in the following circumstances and only to the extent necessary:

6.1 Service Providers

sga889 works with carefully selected third-party service providers who process data strictly on sga889's instructions and under binding confidentiality agreements. These include:

• Payment processors (handling IDR transactions via BCA, BRI, BNI, Mandiri, and e-wallet platforms).
• KYC and identity-verification technology providers.
• Fraud detection and cybersecurity services.
• Cloud infrastructure providers hosting sga889's platform and database systems.
• Customer support platform providers powering the sga889 live chat system.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — receive only the anonymised session tokens necessary to deliver game content; they do not receive your full identity data.

6.2 Legal & Regulatory Disclosure

sga889 may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by valid legal process, court order, or the requirements of sga889's international gaming licence. In such cases, sga889 will disclose only the minimum data required and will notify the relevant Member where legally permitted to do so.

6.3 Business Transfers

In the event that sga889 is subject to a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity. You will be notified via your registered email address prior to any such transfer, and the acquiring entity will be bound by data protection obligations at least as protective as those set out in this policy.

6.4 Aggregated & Anonymised Data

sga889 may share aggregated, anonymised statistical data (such as overall platform usage trends, game popularity metrics, or regional betting patterns) with third parties, including game providers and analytics partners. This data cannot be used to identify any individual Member.

sga889.asia uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

You may manage your non-essential cookie preferences at any time through the cookie settings panel available in your account dashboard. Note that withdrawing consent for functional or analytics cookies will not affect the lawfulness of any processing carried out before withdrawal.

sga889 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention schedules:

Upon expiry of the applicable retention period, sga889 will securely delete or anonymise the relevant data. Data that has been anonymised beyond re-identification may be retained indefinitely for statistical and business-intelligence purposes.

sga889 applies industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and sga889.asia is encrypted in transit using TLS 1.2 or higher. The padlock icon in your browser address bar confirms this connection is secure.
• Encrypted Data at Rest: All sensitive data fields stored in sga889's databases — including passwords, bank account numbers, and KYC document files — are encrypted at rest using AES-256 encryption.
• Password Hashing: Member passwords are never stored in plain text. sga889 uses a strong one-way hashing algorithm with per-account salting to ensure that even in the event of a database breach, passwords cannot be reversed.
• Access Controls: Access to production systems and Member data is restricted on a strict need-to-know basis. All internal access is logged, audited, and subject to multi-factor authentication requirements for sga889 staff.
• Penetration Testing: sga889 conducts regular penetration tests and vulnerability assessments conducted by independent security specialists.
• Incident Response: sga889 maintains a documented data-breach response procedure. In the event of a confirmed breach affecting your Personal Data, sga889 will notify affected Members within 72 hours of becoming aware of the breach where feasible, and will take all reasonable steps to contain and remediate the incident.

As a Member of sga889, you hold the following rights over your Personal Data. To exercise any of these rights, please contact the sga889 support team via live chat or email (see Section 14). sga889 will respond to all valid rights requests within 30 calendar days.

sga889 is strictly an adults-only platform. You must be at least 21 years of age to register for an account, make a deposit, or participate in any betting or gaming activity on sga889.asia. This age restriction reflects both the requirements of sga889's international gaming licence and sga889's commitment to responsible gaming.

• sga889 does not knowingly collect Personal Data from individuals under the age of 21.
• All Members are required to confirm their age at registration and are subject to age verification as part of the KYC process.
• If sga889 discovers or has reasonable grounds to suspect that a registered Member is under 21, the relevant account will be suspended immediately pending age verification. If the Member is confirmed to be under 21, the account will be permanently closed, any deposited funds will be returned to the source payment method, and any winnings will be voided.
• If you are a parent or guardian and believe that a minor in your care has registered on sga889, please contact our support team immediately via live chat. sga889 will investigate and close the account promptly.

sga889 operates globally, and your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia. In particular, sga889's cloud infrastructure providers, KYC partners, and game content providers may operate data centres or processing facilities in jurisdictions outside Indonesia.

sga889 takes the following steps to ensure that all international transfers of Personal Data are protected to a standard at least equivalent to this Privacy Policy:

• All third-party recipients of Personal Data outside Indonesia are required to enter into data processing agreements with sga889 that incorporate appropriate data protection safeguards.
• Where technically and contractually feasible, sga889 applies encryption in transit and at rest to all Personal Data transferred internationally, ensuring that the data remains protected regardless of the processing location.
• sga889 conducts periodic reviews of its third-party service providers to confirm that their data protection standards remain adequate.

By registering for an sga889 account, you acknowledge that your Personal Data may be transferred internationally in the manner described above.

sga889 may update this Privacy Policy periodically to reflect changes in our data processing practices, the services we offer, or applicable regulatory requirements. When we make a material change to this policy — such as adding a new category of data collection or changing the basis on which we share data with third parties — we will notify you by email at your registered address at least 14 calendar days before the change takes effect.

For minor or clarificatory amendments (such as correcting a typographical error or adding a more detailed explanation of an existing practice), sga889 may update the policy without advance notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Your continued use of sga889 after the effective date of any update constitutes your acknowledgement of the revised policy. If you disagree with any change, you may request account closure as described in the Terms & Conditions, available at sga889.asia/terms-conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how sga889 handles your Personal Data, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via sga889.asia. Live chat is the fastest channel for privacy-related queries, with an average first-response time of under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Email responses are typically provided within 4 business hours during WIB (UTC+7) business hours.

When submitting a data rights request, please include your registered username and email address so that sga889 can verify your identity before actioning the request. sga889 will not process data rights requests that cannot be authenticated to a registered Member account, in order to protect all Members from unauthorised access to their data.