Privacy Policy

1.1 Data Controller. sgp49 ("we", "us", "our") is the operator of the online gaming and sports betting platform accessible at https://sgp49.pro. For the purposes of this Privacy Policy, sgp49 acts as the data controller — meaning we determine the purposes for which and the manner in which personal data about our players is processed.

1.2 Platform Scope. This Privacy Policy applies to all services offered through the sgp49 platform, including but not limited to slot games, live casino products, sportsbook betting markets, togel (Indonesia's traditional numbers lottery) draw games, fish shooting games, and all customer support interactions conducted via email or live chat.

1.3 Acceptance. By registering an Account on sgp49, depositing funds, or otherwise using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you must not use the Platform.

2.1 Overview. sgp49 collects only the personal data that is necessary for the legitimate operation of a licensed online gaming platform, including identity verification, fraud prevention, regulatory compliance, and the delivery of a personalized, secure gaming experience. The categories of data we collect are set out in the table below.

2.2 Sensitive Data. sgp49 does not intentionally collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in standard ID document verification). If you voluntarily disclose such information in a support communication, it will be used solely to resolve the matter at hand and will not be stored as a permanent profile attribute.

3.1 Direct Collection. The majority of your personal data is collected directly from you at the time you interact with the sgp49 Platform:

• Account Registration: Name, date of birth, email address, phone number, and residential address are collected when you create your Account.
• KYC Verification: Identity document scans, selfie verification images, and payment method ownership evidence are collected during the mandatory verification process prior to your first withdrawal.
• Deposits & Withdrawals: Bank account numbers, e-wallet identifiers, and transaction reference data are collected when you add or manage payment methods.
• Customer Support: Any personal information you include in live chat messages, emails to [email protected], or support ticket submissions is collected and stored as part of your interaction history.
• Promotional Participation: If you opt into a specific promotion or loyalty program, additional preference or eligibility data may be collected at that time.

3.2 Automated Collection. When you access the sgp49 Platform, certain technical data is collected automatically by our servers and analytics infrastructure:

• Server access logs recording your IP address, the pages visited, timestamps, and HTTP status codes.
• Browser and device fingerprint data used for fraud detection and session security.
• Cookie and similar tracking technology data as described in Clause 7 of this policy.
• Geolocation data derived from your IP address, used to verify you are accessing the Platform from Indonesia and not from a prohibited territory.

3.3 Third-Party Sources. In limited circumstances, sgp49 may receive personal data about you from third-party sources:

• Identity verification providers: Third-party KYC and AML screening services may return data points (such as document authenticity scores or politically exposed person (PEP) flags) as part of the verification process.
• Payment processors: Banks and e-wallet providers may return transaction confirmation data, including masked account details, as part of payment processing.
• Fraud prevention networks: Industry-shared fraud intelligence databases may flag devices or IP addresses previously associated with fraudulent gaming activity.

4.1 Primary Purposes. sgp49 uses the personal data it collects for the following core operational purposes:

• Account creation and management: Creating and maintaining your player account, verifying your identity, and enabling you to log in securely.
• Service delivery: Providing access to all gaming products on the Platform — slots, live casino, sportsbook, togel draws, and fish shooting games — and recording your gaming activity accurately.
• Financial transactions: Processing deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and others).
• KYC and AML compliance: Verifying your identity and the source of your funds in accordance with anti-money-laundering obligations.
• Fraud detection and prevention: Identifying and investigating suspicious activity, unauthorized access attempts, and prohibited conduct as defined in our Terms & Conditions.
• Customer support: Responding to your enquiries, resolving complaints, and providing technical assistance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and proactively offering access to self-exclusion and deposit limit tools.

4.2 Secondary Purposes. With your consent (or where sgp49 has a legitimate interest), your data may also be used for:

• Personalized promotions: Sending you bonus offers, reload promotions, and special event notifications (such as those tied to Idul Fitri, Chinese New Year / Imlek, or major sporting events like BRI Liga 1 and the AFF Cup) tailored to your gaming preferences and activity.
• Platform improvement: Analyzing aggregated, anonymized gaming activity data to improve the user experience, optimize game selection, and enhance payment processing speed.
• Security research: Using technical data to identify and patch platform vulnerabilities before they can be exploited.

5.1 Contractual Necessity. The majority of the personal data we process is necessary to perform the contract between you and sgp49 — specifically, to provide the gaming services you have registered to use, to process your deposits and withdrawals, and to manage your account in accordance with our Terms & Conditions.

5.2 Legal Obligation. Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and the retention of financial records — are required by applicable law and by the conditions of sgp49's operating license. We cannot waive these obligations even at your request.

5.3 Legitimate Interests. Where processing is not strictly required by contract or law, sgp49 relies on its legitimate business interests as the legal basis, provided those interests are not overridden by your privacy rights. Legitimate interest processing includes fraud prevention, platform security monitoring, and general analytics for service improvement.

5.4 Consent. Where we rely on your consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Consent withdrawal does not affect the operation of your account or your access to gaming services.

6.1 No Sale of Data. sgp49 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing or business purposes. This is an unconditional commitment.

6.2 Operational Service Providers. sgp49 engages third-party service providers who process personal data on our behalf, strictly under contractual data processing agreements that bind them to the same privacy and security standards we uphold. These providers include:

• KYC and identity verification providers: To verify the authenticity of identity documents and screen against PEP and sanctions lists.
• Payment processing partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals in IDR.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft receive only the minimum session data necessary to operate their game clients (typically a tokenized session ID — not your full identity).
• Cloud infrastructure and hosting providers: Secure server infrastructure providers who host sgp49's platform and data storage.
• Customer support platform providers: The live chat and ticketing system providers who operate the support tools visible within your account dashboard.
• Fraud prevention services: Industry fraud intelligence networks used to screen for device-level or behavioral fraud signals.

6.3 Legal Disclosure. sgp49 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by law, by a valid court order, or in connection with a legal investigation into suspected money laundering, fraud, or other criminal activity. We will notify you of such disclosures where we are legally permitted to do so.

6.4 Business Transfers. In the event that sgp49's business or assets are acquired by or merged with another entity, your personal data may be transferred to the acquiring organization as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new operator.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, maintain your login session, and collect analytical data about how you use the site. sgp49 uses cookies and similar technologies (such as web beacons and local storage) on the Platform.

7.2 Types of Cookies We Use.

7.3 Managing Cookies. You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies selectively. Please note that disabling strictly necessary or security cookies will prevent you from logging into your account and using the Platform. Disabling functional or analytical cookies will not affect your ability to play but may reduce the personalization of your experience.

8.1 Retention Principle. sgp49 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. We do not retain data indefinitely or for purposes beyond those described herein.

8.2 Retention Periods. The following retention periods apply as standard unless a longer period is required by law:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following permanent account closure, to meet AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping regulations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Gaming activity logs: Retained for three (3) years from the date of each session, or longer if required in connection with a dispute or investigation.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer if the matter involves an unresolved dispute.
• Marketing preference data: Retained until you withdraw consent or close your account, plus six (6) months for audit purposes.

8.3 Post-Retention Disposal. When personal data is no longer required and the applicable retention period has expired, sgp49 will securely delete or anonymize it so that it can no longer be linked back to you.

9.1 Technical Safeguards. sgp49 implements a comprehensive set of technical security controls to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• TLS 1.3 encryption on all data transmissions between your browser and our servers.
• AES-256 encryption for all sensitive data stored at rest, including identity documents and financial records.
• Bcrypt password hashing — your account password is never stored in plain text.
• Two-factor authentication (2FA) available on all accounts for an additional login security layer.
• Web Application Firewall (WAF) and DDoS protection to defend against external attacks.
• Intrusion detection systems (IDS) monitoring for anomalous access patterns in real time.
• Regular penetration testing by independent security professionals.

9.2 Organizational Safeguards. Access to player personal data within sgp49 is governed by strict internal access controls:

• Role-based access control (RBAC) ensures staff can only access the data necessary for their specific job function.
• All data access events are logged and subject to regular internal audit review.
• Staff with access to personal data are required to complete annual privacy and data security training.
• Third-party service providers are required to demonstrate equivalent security standards before being granted any access to sgp49 player data.

9.3 Data Breach Response. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, sgp49 will notify affected players via email within 72 hours of becoming aware of the breach, providing details of the nature of the incident, the data categories involved, and the remediation steps being taken.

10.1 Summary of Rights. As a player on sgp49, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of Access: Request a copy of all personal data sgp49 holds about you. We will provide this within 14 calendar days of receiving a verified request.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data held in your account. You can update most contact details directly in your account settings; for identity data corrections, contact support.
• Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations. Erasure requests are fulfilled within 30 calendar days where legally permissible.
• Right to Restrict Processing: Request that we pause processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Request your personal data in a structured, machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: Object to the processing of your personal data on the basis of legitimate interests, including profiling for personalized marketing. Where you object to marketing processing, we will cease it promptly.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.

10.2 Identity Verification. To protect your privacy, all data rights requests require identity verification before they are processed. We may ask you to confirm your registered email address, provide your account username, and — for erasure or portability requests — complete a brief re-verification step.

10.3 Response Timeframes. sgp49 will acknowledge all data rights requests within 5 business days and provide a full response within 14 calendar days. For complex requests that require additional time, we will notify you within the initial 14-day window and provide an expected completion date, which will not exceed 30 calendar days from receipt of the request.

11.1 Age Restriction. sgp49 is strictly an adults-only platform. You must be at least 21 years of age to register an Account or use any of our gaming services. This minimum age applies without exception, in line with responsible gaming standards appropriate for the Indonesian market.

11.2 No Intentional Data Collection from Minors. sgp49 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data, close the associated account, and — where applicable — return any deposited funds to the originating payment method.

11.3 Parental Responsibility. If you are a parent or guardian and believe that a minor in your care has registered an account on sgp49, please contact us immediately at [email protected] with the account details and we will investigate and act without delay.

12.1 Game Provider Iframes. Some games on the sgp49 Platform are delivered through iframes or redirect flows operated by third-party game studios (such as Pragmatic Play, Evolution Gaming, and Spribe). When you access these games, limited technical session data may be processed by the game provider's own systems. sgp49 does not control the data practices of these third-party studios within their own game environments. We encourage you to review the privacy policies of individual game providers if you have specific concerns about data processed during gameplay.

12.2 Payment Provider Redirects. When you initiate a deposit or withdrawal via an Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or an e-wallet platform (OVO, DANA, GoPay, ShopeePay, LinkAja), you may be briefly redirected to that provider's own interface to authorize the transaction. Any data you enter directly on a bank or e-wallet provider's page is governed by that provider's own privacy policy, not this one. sgp49 only receives the transaction confirmation and masked account details returned by the provider's API.

12.3 No Third-Party Advertising Networks. sgp49 does not embed third-party advertising pixels, tracking scripts, or retargeting tags from social media platforms or advertising networks on any page of the Platform. The only tracking technologies in use on sgp49 are those operated directly by sgp49 or by our contracted analytics and fraud prevention service providers, as described in Clause 7.

13.1 Right to Update. sgp49 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. All updates will be published on this page with a revised Effective Date displayed at the top of the document.

13.2 Notification of Material Changes. Where a proposed change materially affects how we process your personal data — for example, a new category of data being collected, a new purpose for which existing data is used, or a new third-party data processor being engaged — we will notify registered players via email at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a material change constitutes acceptance of the updated Privacy Policy.

13.3 Version History. We recommend bookmarking this page and checking it periodically. The Effective Date shown at the top of this page always reflects the date of the most recent revision. If you have questions about any change, contact our support team before the effective date and we will be happy to clarify.

14.1 Privacy Enquiries. If you have any questions, concerns, or requests relating to this Privacy Policy or the way sgp49 handles your personal data, please reach out to our dedicated support team using the contact details below.

14.2 Contact Details.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via your Account dashboard once logged in.
• Indonesian-Speaking Agents: Available 08:00–22:00 WIB (UTC+7) daily.

14.3 Data Rights Requests. To exercise any of the rights described in Clause 10, send an email to [email protected] with the subject line "Data Rights Request", your registered account username, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a full response within 14 calendar days.

14.4 Responsible Gaming. If you are concerned that your gaming habits may be causing you or someone close to you harm, please visit our Responsible Gaming page for guidance on self-exclusion, deposit limits, time-out tools, and contact details for independent support organizations. Our support agents are trained to assist you with complete sensitivity and confidentiality.