Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms have the meanings assigned below:

• "Platform" — the SGA188 website accessible at https://sga188.cam, including all subpages, mobile interfaces, and associated services.
• "SGA188," "We," "Us," "Our" — the operating entity responsible for the SGA188 Platform and the data-controller of your personal information.
• "You," "Player," "User" — any individual who visits, registers on, or uses the SGA188 Platform.
• "Personal Data" — any information that can identify you directly or indirectly, including but not limited to your name, email address, phone number, financial details, device identifiers, and behavioral data generated through your use of the Platform.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, transmission, and deletion.
• "Third Party" — any natural person, legal entity, or organization other than you and SGA188 that processes Personal Data under or in connection with these services.
• "KYC" — Know Your Customer; the identity and age-verification process mandated for account holders prior to processing withdrawals.
• "Cookies" — small text files stored on your device by your browser when you visit the Platform, used to maintain session state, preferences, and analytics.

2. Data Controller

SGA188 acts as the data controller in respect of the Personal Data you provide or that is generated through your use of the Platform. As data controller, SGA188 determines the purposes and means by which your Personal Data is processed. Where SGA188 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to process your data only on SGA188's documented instructions and in accordance with appropriate data-security standards.

If you have any questions, requests, or complaints relating to how your Personal Data is handled, you may contact our Data Protection contact point at [email protected]. Please mark the subject line as "DATA PRIVACY REQUEST" to ensure your message reaches the appropriate team.

3. Personal Data We Collect

SGA188 collects only the Personal Data that is necessary to provide, maintain, and improve our services. The categories of data we collect are set out in the table below:

4. How We Collect Your Data

SGA188 collects Personal Data through the following channels:

4.1 Direct Collection

Data you voluntarily provide when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, participate in promotions, or respond to surveys and questionnaires.

4.2 Automated Collection

Technical and behavioral data collected automatically as you interact with the Platform, including data gathered via cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This collection occurs from the moment you land on the SGA188 website, whether or not you are logged in.

4.3 Third-Party Sources

In certain circumstances, SGA188 may receive data about you from third-party sources, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers) to confirm transaction status and prevent fraud.
• Identity verification service providers engaged to assist with KYC documentation review.
• Anti-fraud and anti-money-laundering (AML) screening databases used to assess account risk.
• Analytics and marketing platform providers, subject to their own privacy terms.

5. Legal Basis for Processing

SGA188 processes your Personal Data under one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — i.e., operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations and record-keeping mandates imposed by our operating licence.
• Legitimate Interests: Processing carried out in pursuit of SGA188's legitimate business interests, including fraud prevention, network and platform security, product improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of promotional communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. How We Use Your Data

SGA188 uses the Personal Data we collect for the following purposes:

6.1 Account Management

To create, maintain, and secure your player account; to authenticate your identity at login; to enforce single-account policies; and to process your account closure request should you choose to terminate your relationship with SGA188.

6.2 Payment Processing

To process deposits made via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja; to verify that payment accounts are registered in your name; and to process withdrawal requests to your designated account following KYC clearance. All transactions are denominated in Indonesian Rupiah (IDR).

6.3 Compliance and Risk Management

To conduct KYC identity and age verification to confirm you are at least 21 years of age; to screen accounts and transactions against AML watchlists; to detect, investigate, and prevent fraudulent activity, collusion, and bonus abuse; and to fulfill our record-keeping obligations under applicable gaming regulations.

6.4 Customer Support

To respond to your inquiries submitted via live chat, email, or WhatsApp; to maintain a record of support interactions for quality assurance and dispute resolution; and to notify you of account activity relevant to your security, such as unrecognized login attempts or withdrawal requests.

6.5 Responsible Gaming

To monitor your gaming behavior for indicators of problem gambling; to enforce deposit limits, session time reminders, and self-exclusion periods you have voluntarily set; and to proactively reach out if our responsible-gaming algorithms identify patterns associated with compulsive play.

6.6 Marketing and Promotions

Where you have given explicit consent, to send you personalized promotional offers, bonus notifications, and event announcements relevant to your gaming preferences and activity. You may opt out of marketing communications at any time by contacting support or updating your account preferences.

6.7 Platform Improvement

To analyze aggregated, anonymized usage data to understand how players interact with the Platform; to identify performance issues; and to develop new features and improve existing ones. Individual identities are not used in product analytics.

7. Data Sharing & Third Parties

SGA188 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share data only in the following circumstances:

7.1 Service Providers

We engage carefully selected third-party processors — including payment gateway operators, KYC verification vendors, cloud hosting providers, and customer support platforms — who process data on our behalf under binding data-processing agreements. These providers are permitted to use your data only for the specific purpose for which they were engaged.

7.2 Game Providers

Where you access games provided by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited session and stake data may be shared with those providers to facilitate game delivery and settle results. Game providers are not permitted to use this data for their own marketing or profiling purposes.

7.3 Legal and Regulatory Disclosure

SGA188 may disclose your Personal Data to law-enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or court order. We will notify you of such disclosures where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving SGA188, your Personal Data may be transferred to the successor entity. We will provide reasonable notice of any such transfer and inform you of your options regarding your data.

8. Cookies & Tracking Technologies

SGA188 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The table below describes the categories of cookies we use:

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and maintain an active session. Disabling analytics and marketing cookies will not affect your ability to use the Platform.

9. Data Retention

SGA188 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data (identity, contact, financial): retained for the lifetime of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC documents (identity scans, selfies, address proof): retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of seven (7) years for financial audit and AML compliance purposes.
• Support communications (chat logs, emails, tickets): retained for a minimum of two (2) years for dispute resolution and quality-assurance purposes.
• Marketing consent records: retained for the duration of your consent and for three (3) years following withdrawal of consent as evidence of compliance.
• Technical / log data (IP addresses, device logs): retained for up to twelve (12) months for security monitoring, then aggregated and anonymized.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

10. Data Security

SGA188 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the SGA188 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), preventing interception of data in transit.
• Encryption at Rest: Sensitive data fields — including identity document scans, bank account numbers, and KYC photographs — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems holding Personal Data is strictly limited to authorized personnel with a demonstrated business need. Access is enforced via role-based permissions, strong authentication, and audit logging.
• Intrusion Detection: Automated systems continuously monitor network traffic and application behavior for indicators of unauthorized access or anomalous activity.
• Vulnerability Management: Regular penetration testing and security audits are conducted by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: SGA188 maintains a documented data breach response plan. In the event of a confirmed breach materially affecting your Personal Data, we will notify affected individuals within the timeframes required by applicable regulations.

11. Your Data Rights

As a data subject, you hold the following rights in respect of your Personal Data held by SGA188. To exercise any of these rights, contact us at [email protected] with the subject line "DATA PRIVACY REQUEST". We will respond within thirty (30) days of receiving a valid request.

Please note that certain rights may be subject to limitations where SGA188 is required by law to retain data or where fulfilling a request would prejudice an ongoing fraud investigation or legal proceeding. We will always explain the reason if a request cannot be fully satisfied.

12. Minors and Age Restriction

The SGA188 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process Personal Data from individuals under 21 years of age. If we become aware that Personal Data belonging to a minor has been submitted — whether through misrepresentation during registration or by other means — we will immediately suspend the associated account, delete the minor's data to the fullest extent possible, and void any winnings generated during the period in question.

Parents and guardians who believe their child may have accessed or registered on the Platform should contact us immediately at [email protected]. We will act promptly to investigate and remediate the situation.

13. International Data Transfers

SGA188's infrastructure and some of its third-party service providers operate servers located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence. Where such transfers occur, SGA188 takes appropriate steps to ensure that your Personal Data receives a comparable level of protection to that afforded within Indonesia, including through the use of standard contractual clauses and binding data-processing agreements with recipient entities.

By using the Platform, you acknowledge and consent to such international transfers of your Personal Data as described in this section.

14. Third-Party Links & Services

The SGA188 Platform may reference or integrate third-party services — such as game providers (Pragmatic Play, Evolution Gaming, Spribe), payment processors, and analytics tools. Each of these third parties operates under its own privacy policy and data practices. SGA188 is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before engaging with their services directly.

In particular, game providers may collect certain session-level data through their own embedded game clients. SGA188 contractually restricts these providers from using player data for purposes beyond game delivery, but cannot guarantee full compliance on the part of independent third parties operating their own regulated platforms.

15. Changes to This Policy

SGA188 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will post the revised policy on this page with an updated "Last Updated" date and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of the Platform and request account closure.

16. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how SGA188 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] — Subject line: "DATA PRIVACY REQUEST" (response within 6 business hours)
• Live Chat: Available 24/7 on the Platform (average response under 2 minutes)
• WhatsApp: +62 812 3456 7890 (available 8 AM – 12 AM WIB)

We are committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you may have the right to escalate your complaint to a relevant data-protection supervisory authority in your jurisdiction.