Privacy Policy — sga898 Data Protection

sga898 is committed to protecting the privacy and personal data of all players who use our platform. This Policy applies to all personal data collected through the sga898 website (https://sga898.cam), our customer support channels, and any associated services or tools offered by sga898.

This Policy is designed to comply with internationally recognized data protection principles and reflects our commitment to transparency, security, and respect for player privacy. While sga898 primarily serves players in Indonesia, our data protection practices are aligned with global best-practice standards applicable to online gaming platforms.

This Policy does not apply to third-party websites, game providers, or payment processors that you may interact with through links or integrations on the sga898 platform. Those parties operate under their own privacy policies, and we encourage you to review those documents independently.

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" — sga898, which determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of sga898, under our instruction and subject to contractual data protection obligations.
• "KYC" — Know Your Customer; the identity and address verification process required for regulatory compliance and fraud prevention.
• "Cookies" — small text files stored on your device by the sga898 platform to enable functionality, remember preferences, and support analytics.
• "IDR / Rp" — Indonesian Rupiah, the currency used for all financial transactions on the sga898 platform.
• "WIB" — Western Indonesia Time (UTC+7), the primary time zone reference for all sga898 operational matters.

sga898 collects personal data across the following categories. We collect only what is necessary for the specified purposes.

sga898 collects personal data through the following means:

• Directly from You: When you register an account, complete the KYC verification process, submit a deposit or withdrawal request, contact our customer support team via live chat, email, or WhatsApp, or participate in a promotion.
• Automatically: When you browse or interact with the sga898 platform, we automatically collect techni cal data such as your IP address, device identifiers, browser type, and session activity through cookies and server logs.
• From Third Parties: We may receive data about you from licensed KYC verification providers, fraud prevention agencies, payment processors (such as banks and e-wallet operators including OVO, DANA, GoPay, ShopeePay, and LinkAja), and publicly available data sources where permitted by law.
• From Game Providers: Our integrated game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may share aggregated session and performance data with sga898 for platform optimization purposes.

sga898 processes your personal data only where we have a valid legal basis to do so. The primary purposes and their corresponding legal bases are set out below:

• Contract Performance: Processing your identity, contact, and financial data is necessary to create and manage your account, process deposits and withdrawals in IDR, and deliver the gaming services you have requested. Without this processing, sga898 cannot provide its services to you.
• Legal Obligation: We are required to verify your identity (KYC), monitor transactions for anti-money-laundering (AML) compliance, and retain certain records for the periods mandated by our international gaming license and applicable financial regulations. This applies particularly to players transacting through BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and other regulated Indonesian payment channels.
• Legitimate Interests: We process technical and behavioral data to maintain platform security, detect and prevent fraud, improve the player experience, and operate responsible gaming monitoring tools. These interests are balanced against your privacy rights and do not override them.
• Consent: Where you have opted in to receive marketing communications — including promotional offers, seasonal campaigns (such as Idul Fitri or Ramadhan specials), and new game announcements — we process your contact data on the basis of your consent. You may withdraw this consent at any time.

sga898 does not sell your personal data. We share data only in the following circumstances and only to the minimum extent necessary:

• KYC & Identity Verification Providers: Licensed third-party identity verification services that assist us in confirming player identities and age (21+) in compliance with our gaming license obligations.
• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data necessary to process your deposit and withdrawal requests.
• Fraud Prevention & AML Partners: Specialist agencies that help sga898 detect and prevent fraudulent activity, money laundering, and account abuse. These partners act as data processors under contractual obligations that restrict their use of your data to the agreed purpose.
• Game Technology Providers: Game studios such as Evolution Gaming, Pragmatic Play, and Spribe receive session data necessary to operate their games on our platform. These providers are bound by their own data protection commitments and do not use your data for independent marketing.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or the directives of our licensing authority, sga898 will disclose personal data to the relevant governmental or regulatory body. We will notify you of such disclosure where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or transfer of business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer in advance.

All third-party data processors engaged by sga898 are required to execute data processing agreements that mandate compliance with applicable data protection standards, restrict further sub-processing, and require prompt notification of any data security incident.

sga898 operates internationally, and some of your personal data may be transferred to, stored, or processed in countries outside Indonesia. This may occur when our servers, KYC verification partners, or game technology providers are located in other jurisdictions.

Where personal data is transferred internationally, sga898 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards applied within Indonesia. These safeguards may include:

• Standard contractual clauses that impose binding data protection obligations on the recipient party.
• Transfers to countries or organizations that have been determined to provide an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group subject to approved internal policies.

If you would like further information about the specific safeguards applicable to any international transfer of your personal data, please contact us at [email protected].

sga898 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:

Once the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized or aggregated data may be retained indefinitely for statistical and platform improvement purposes.

sga898 uses cookies and similar tracking technologies to operate the platform effectively, improve performance, and personalize your experience. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and secure page navigation. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as display settings and notification choices — to provide a more personalized experience across sessions.
• Analytics Cookies: These cookies collect aggregated, anonymized data about how players interact with the sga898 platform, including pages visited, session duration, and features used. This data helps us improve platform design and performance.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, unauthorized access attempts, and bot activity on the sga898 platform.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the sga898 platform. For detailed browser cookie management instructions, consult your browser's help documentation.

sga898 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

As a player on sga898, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data sga898 holds about you. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Note that changes to identity data may require re-verification through our KYC process.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming or personalization purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

sga898 will never discriminate against you for exercising any of the rights described above. Your account access, service quality, and withdrawal rights are not affected by any data rights request you submit.

sga898 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our platform is not directed at, designed for, or intended to attract persons under 21 years of age.

All new accounts are subject to mandatory age verification as part of our KYC process. If sga898 discovers or has reason to believe that personal data has been provided by or collected from an individual under the age of 21, we will:

• Immediately suspend the account pending investigation.
• Permanently close the account if underage use is confirmed.
• Return any deposited funds to the original payment source.
• Securely delete all personal data collected from the underage individual as promptly as regulatory obligations permit.

If you are a parent or guardian and believe your child has accessed sga898 without authorization, please contact us immediately at [email protected] so that we can take appropriate action without delay.

sga898 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the sga898 platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Personal and financial data stored in our systems is encrypted at rest. Access is restricted to authorized personnel on a strict need-to-know basis.
• Multi-Factor Authentication (MFA): Administrative access to systems containing player data requires multi-factor authentication to prevent unauthorized access even if credentials are compromised.
• Regular Security Audits: sga898 commissions periodic third-party penetration tests and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a data security incident, sga898 maintains a documented incident response procedure. Affected players will be notified promptly where required by applicable law, and relevant authorities will be informed as mandated.
• Employee Training: All sga898 staff who handle personal data receive regular data protection and security awareness training as part of our internal compliance program.

While we take all reasonable steps to protect your data, no security system is entirely impenetrable. We encourage you to use a strong, unique password for your sga898 account and to never share your login credentials with any third party.

With your explicit consent, sga898 may send you promotional communications about new games, bonuses, seasonal offers (including Idul Fitri promotions, Ramadhan specials, Indonesian Independence Day campaigns, and Imlek events), and platform updates via email or WhatsApp.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Updating your notification preferences within your sga898 account settings.
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Please allow up to 5 business days (WIB) for your opt-out request to take full effect across all communication channels. Opting out of marketing communications will not affect transactional messages, account security alerts, or communications required for regulatory compliance — these will continue regardless of your marketing preference settings.

sga898 does not share your contact information with unaffiliated third parties for their own marketing purposes under any circumstances.

The sga898 platform may contain integrations with or references to third-party services, including game providers, payment gateways, and customer support tools. sga898 is not responsible for the privacy practices of these third parties, and this Policy does not extend to any data collected by them independently.

We recommend that you review the privacy policies of any third-party services you interact with through the sga898 platform, including:

• Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft.
• Payment processors including your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).

sga898 carries out due diligence on all third-party integrations and requires contractual data protection commitments from all partners. However, once data passes to a third party under their own processing activities, it is subject to that party's privacy framework.

sga898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform functionality. When we make material changes — those that significantly affect how we collect or use your personal data — we will notify you by:

• Sending a notice to your registered email address at least 14 days before the changes take effect.
• Displaying a prominent notice on the sga898 platform upon your next login.

For non-material amendments — such as typographical corrections, clarifications that do not change substantive meaning, or updates to contact details — changes may take effect immediately upon publication at sga898.cam/privacy-policy.

The "Effective Date" shown at the top of this page reflects when the current version of the Policy was last updated. We recommend reviewing this page periodically to stay informed of how sga898 manages your personal data. Your continued use of the platform after an amendment's effective date constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data sga898 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request — [Your Account Username]" for all data-related inquiries.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the sga898 platform. Our Indonesian-speaking support agents can assist with general privacy queries and escalate formal data requests to the appropriate team.
• Response Time: We aim to acknowledge all privacy-related requests within 2 business days (WIB) and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the expected timeline.

All formal data rights requests — including requests for access, erasure, rectification, or portability — must be submitted in writing to [email protected]. We may ask you to verify your identity before processing such requests to protect the security of your account data.

sga898 is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.