sga55 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

sga55 collects Personal Data across several categories depending on the nature of your interaction with the platform. The following table sets out the primary data categories and examples of the specific data points within each:

sga55 collects Personal Data through the following channels:

• Direct submission: Information you provide when creating an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support.
• Automated platform interaction: Technical data collected automatically when you visit and interact with sga55, including IP addresses, session logs, device fingerprints, and Cookies.
• Payment processors: Transaction confirmation data received from local Indonesian payment partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Game providers: Session and outcome data generated when you play games supplied by third-party providers including Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, and Microgaming.
• Identity verification services: Confirmation responses from third-party KYC and document verification tools used to validate the identity documents you submit.
• Fraud prevention systems: Risk signals generated by automated fraud screening tools that analyse login behaviour, deposit patterns, and device identifiers to detect suspicious activity.

sga55 processes Personal Data for the following clearly defined purposes:

• Account management: Creating, maintaining, and managing your sga55 account, including authentication, password resets, and account settings updates.
• Age and identity verification (KYC): Verifying that all players are at least 21 years of age and that the identity presented matches the account holder, in compliance with sga55's responsible gaming and licensing obligations.
• Payment processing: Facilitating deposits and withdrawals in Indonesian Rupiah via local bank transfers and e-wallets, and maintaining accurate financial transaction records.
• Platform provision and game delivery: Enabling you to access and play all sga55 products including the sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery), and keno.
• Responsible gaming monitoring: Analysing gaming activity patterns to identify potential indicators of problem gambling, and enabling the effective operation of deposit limits, session caps, and self-exclusion tools.
• Customer support: Responding to your enquiries, complaints, and requests, and maintaining records of support interactions for quality assurance purposes.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other security threats to the platform.
• Marketing and promotions: Sending you information about sga55 promotions, bonuses, and offers where you have given consent or where sga55 has a legitimate interest in communicating with you as an active account holder. You may opt out of marketing communications at any time.
• Legal and regulatory compliance: Meeting sga55's obligations under applicable licensing requirements, anti-money laundering (AML) regulations, and data protection laws.
• Platform analytics and improvement: Understanding how players use the sga55 platform to improve user experience, product offerings, and technical performance — particularly mobile performance for Indonesian Android users.

sga55 processes Personal Data on the following legal bases, which vary by processing activity:

• Contractual necessity: Processing required to fulfil the sga55 Terms & Conditions contract with you — including account operation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with licensing conditions, anti-money laundering obligations, age verification requirements, and applicable data protection regulations.
• Legitimate interests: Processing conducted in pursuit of sga55's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your fundamental rights.
• Consent: Processing conducted on the basis of your explicit consent — primarily for direct marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

6.1 No Sale of Personal Data. sga55 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own marketing or commercial purposes. Your data is shared only in the circumstances described in this clause.

6.2 Authorised Third-Party Processors. sga55 shares Personal Data with selected third-party processors who provide services essential to platform operation. These processors are contractually bound to handle your data in accordance with sga55's instructions and applicable data protection standards. Categories of processors include:

• Indonesian payment processors and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) — for transaction processing only.
• Game suppliers (Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming) — for game session management and outcome verification.
• KYC and identity verification service providers — for document validation and age confirmation.
• Customer support platform providers — for managing support ticket systems and live chat infrastructure.
• Fraud detection and AML screening service providers — for risk assessment and compliance screening.
• Website analytics and performance monitoring tools — for technical platform improvement, operating under strict data minimisation principles.

6.3 Regulatory and Legal Disclosure. sga55 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, valid legal process, or its licensing obligations. sga55 will notify affected players of such disclosure requests where it is legally permitted to do so.

7.1 Active Accounts. While your sga55 account remains active, sga55 retains all account registration data, transaction records, and gaming activity data necessary to operate your account and fulfil its contractual and regulatory obligations.

7.2 Closed Accounts. Following the closure of a sga55 account — whether initiated by the player or by sga55 — Personal Data is retained for a period of five (5) years from the date of closure. This retention period is applied to satisfy sga55's anti-money laundering record-keeping obligations, licensing requirements, and potential dispute resolution needs.

7.3 KYC Data. Identity verification documents submitted as part of the KYC process are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with applicable AML regulations.

7.4 Technical and Anonymised Data. Aggregated and fully anonymised analytics data — from which no individual player can be identified — may be retained indefinitely for the purpose of platform improvement and statistical analysis.

7.5 Deletion After Retention Period. Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

sga55 applies a multi-layered technical and organisational security framework to protect the Personal Data it holds against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between players' devices and sga55 servers, including login sessions, deposit requests, and KYC document uploads.
• Encrypted storage for all sensitive Personal Data held at rest on sga55 infrastructure, including financial data and KYC documents.
• Role-based access controls ensuring that sga55 staff can only access Personal Data relevant to their specific operational function, with all access activity logged and auditable.
• Two-factor authentication (2FA) available to players for account login, and mandatory for all sga55 staff accessing production systems containing Personal Data.
• Automated fraud and anomaly detection monitoring login behaviour, transaction patterns, and device signals in real time to identify and respond to potential security threats.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists on the sga55 platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to affected players, sga55 will notify the relevant regulatory authority and affected players in accordance with applicable notification obligations and within the timeframes required by law.

9.1 What Cookies sga55 Uses. sga55 uses the following categories of Cookies on its platform:

9.2 Managing Cookies. You may configure your browser to refuse non-essential Cookies or to alert you when Cookies are being set. Disabling strictly necessary Cookies will prevent you from logging in to your sga55 account and accessing platform features. Disabling functional or analytics Cookies will not affect your ability to place bets or conduct financial transactions.

As a player whose Personal Data is processed by sga55, you hold the following rights with respect to your information. To exercise any of these rights, contact sga55's data protection contact (see Clause 15):

• Right of Access: You may request a copy of the Personal Data sga55 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held on your sga55 account. Basic profile updates (email address, mobile number) can be made directly within account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to sga55's legal retention obligations (see Clause 7).
• Right to Restrict Processing: You may request that sga55 limit its processing of your Personal Data in certain circumstances, such as during an investigation of a data accuracy dispute.
• Right to Data Portability: You may request that sga55 provide your Personal Data in a structured, commonly used, and machine-readable format for transfer to another service, where technically feasible.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
• Right Not to be Subject to Automated Decision-Making: Where a significant decision affecting you is made solely by automated means (such as an automated account suspension), you may request human review of that decision.

The sga55 platform is strictly for individuals aged 21 years and above. sga55 does not knowingly collect Personal Data from any person under the age of 21. If sga55 becomes aware that Personal Data has been collected from an individual under 21 — whether through registration error, false information submitted at sign-up, or any other means — that account will be suspended immediately, all associated Personal Data will be retained only for the minimum period required to discharge any legal obligations, and will then be permanently deleted.

If you believe that a person under 21 has registered an account on sga55, please contact customer support at [email protected] immediately. sga55 treats every such report as high-priority and will investigate within 24 hours.

The sga55 platform integrates third-party services — including game providers, payment gateways, and analytics tools — that may independently collect limited Technical Data (such as IP address and device type) through their own technologies when you interact with their components within the sga55 interface.

sga55 vets all third-party integrations against data security standards before authorising deployment within the platform. However, sga55 is not responsible for the independent data processing practices of third-party game providers, payment networks, or other external services operating under their own terms and privacy policies. The relevant providers include Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming, and Spribe, each of whom publishes their own data handling documentation.

The sga55 platform does not embed advertising networks, social media tracking pixels, or affiliate tracking pixels that would enable third-party data collection beyond what is described in this policy.

sga55's platform infrastructure and its third-party processors may be located in jurisdictions outside Indonesia. Where Personal Data is transferred to a country that does not maintain data protection standards equivalent to those applicable in Indonesia, sga55 implements appropriate safeguards to ensure that your data continues to be protected to a standard consistent with this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, and transfer impact assessments conducted on a per-processor basis.

By using the sga55 platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia as a necessary consequence of operating an internationally integrated gaming platform. sga55 does not transfer Personal Data to processors in jurisdictions that present unacceptable data security risks, and conducts periodic reviews of its processor ecosystem to ensure continued adequacy.

sga55 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. Material changes — meaning changes that significantly affect how your Personal Data is collected, used, or shared — will be communicated to active players via a notification in the sga55 platform interface or by email to the registered address on file, with a minimum of 14 days' notice before the revised policy takes effect.

Minor or clarificatory amendments may be made without advance notice, and the updated policy will be published at sga55.bio/privacy-policy with the revised effective date clearly indicated at the top of the page. Continued use of the sga55 platform following the effective date of any amendment constitutes acknowledgement of the updated policy. You are encouraged to review this page periodically.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by sga55, please contact the sga55 data protection team through the following channel:

sga55 is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with the outcome of a privacy complaint handled by the sga55 support team, you retain the right to escalate your concern to the competent data protection supervisory authority in the relevant jurisdiction.