sans88 Privacy Policy

1. Introduction and Scope

sans88 operates as an online betting platform serving Indonesian players with sports betting, live casino, and slot gaming services. This Privacy Policy applies to all personal data collected through our website, mobile applications, customer service interactions, and any other touchpoints where you engage with sans88 services.

We recognize that privacy regulations vary by jurisdiction and that Indonesian data protection law continues to evolve. sans88 commits to meeting or exceeding international privacy standards, including principles established by the General Data Protection Regulation (GDPR) and other recognized frameworks, adapted appropriately for the Indonesian market context.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of sans88 services. Where terms are not defined in this Privacy Policy, they carry the meanings assigned in the Terms & Conditions.

2. Data Controller and Contact Information

sans88 acts as the data controller for personal information collected through our platform. This means we determine the purposes and means of processing your personal data and bear responsibility for compliance with applicable data protection requirements.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] (Subject: "Privacy Inquiry")
• Live Chat: Available 24/7 through our platform
• Response Time: We aim to respond to all privacy-related inquiries within 72 hours

3. Information We Collect

sans88 collects several categories of personal information necessary to provide our services, comply with legal obligations, and improve user experience. The specific data collected depends on how you interact with our platform.

3.1 Information You Provide Directly

When you register for a sans88 account, you provide personal information including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (KTP number for Indonesian residents)
• Contact Information: Email address, phone number, residential address, and postal code
• Financial Information: Indonesian bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), and transaction history
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and payment method verification documents

3.2 Information Collected Automatically

When you access or use sans88, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Connection Information: IP address, internet service provider, geographic location (country, city), and time zone settings
• Usage Data: Pages visited, features used, games played, bet history, deposit and withdrawal records, session duration, click patterns, and navigation paths through the platform
• Cookie Data: Information stored in cookies and similar tracking technologies (see Section 10 for detailed cookie policy)

3.3 Information From Third-Party Sources

In limited circumstances, we may receive information about you from third-party sources:

• Identity Verification Services: Data from third-party identity verification providers used to confirm your identity and prevent fraud
• Payment Processors: Transaction confirmation and status updates from Indonesian banks and e-wallet providers
• Analytics Providers: Aggregated and anonymized usage statistics from third-party analytics services

4. How We Use Your Information

sans88 processes your personal data for specific, legitimate purposes. We only use your information in ways that are necessary, proportionate, and compliant with applicable data protection principles.

4.1 Service Provision and Account Management

We use your personal information to:

• Create and maintain your sans88 account
• Authenticate your identity when you log in
• Process deposits, withdrawals, and other financial transactions
• Maintain accurate records of your betting activity and account balance
• Provide customer support and respond to your inquiries
• Communicate important account-related information, including security alerts, policy updates, and transaction confirmations

4.2 Legal and Regulatory Compliance

We process your personal data to comply with legal obligations, including:

• Age Verification: Ensuring all users are 21 years of age or older as required by our terms of service
• Know Your Customer (KYC): Verifying user identity in accordance with international anti-money laundering regulations
• Financial Crime Prevention: Detecting and preventing money laundering, terrorist financing, fraud, and other illegal activities
• Regulatory Reporting: Fulfilling reporting obligations to licensing authorities and regulatory bodies
• Legal Requests: Responding to lawful requests from law enforcement, courts, or government agencies

4.3 Security and Fraud Prevention

We analyze user data to protect platform integrity:

• Detecting and preventing fraudulent account creation and activity
• Identifying bonus abuse and terms violations
• Monitoring for collusion, match-fixing, and other prohibited behaviors
• Protecting against unauthorized access and cyberattacks
• Investigating disputes and resolving customer complaints

4.4 Platform Improvement and Analytics

We use aggregated and anonymized data to:

• Analyze platform performance and user behavior patterns
• Identify technical issues and optimize system performance
• Understand game preferences and betting patterns to improve our offerings
• Develop new features and enhance user experience
• Conduct market research and competitive analysis

4.5 Marketing and Promotional Communications

With your consent, we may use your contact information to send promotional communications about new games, special offers, bonuses, and platform updates. You have the right to opt out of marketing communications at any time without affecting your ability to use sans88 services.

5. Legal Basis for Processing

Under international data protection principles, we must have a lawful basis for processing your personal data. sans88 relies on the following legal bases:

• Contractual Necessity: Processing required to fulfill our contract with you (Terms & Conditions), including account creation, transaction processing, and service delivery
• Legal Obligation: Processing required to comply with applicable laws, such as age verification, KYC/AML requirements, and regulatory reporting
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and customer support, provided these interests do not override your privacy rights
• Consent: Processing based on your explicit consent, such as marketing communications, which you may withdraw at any time

6. Data Sharing and Disclosure

sans88 does not sell your personal information to third parties. We only share your data in limited circumstances necessary for service provision, legal compliance, or with your explicit consent.

6.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your financial transactions
• Game Providers: Casino and slot game suppliers (Pragmatic Play, Evolution Gaming, Microgaming, PG Soft, Habanero) may receive limited data necessary to deliver game services
• Identity Verification Services: Third-party KYC providers verify your identity and documents
• Cloud Hosting Providers: Infrastructure providers host our platform and store data securely
• Customer Support Tools: Communication platforms facilitate our 24/7 customer service

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection requirements.

6.2 Legal and Regulatory Authorities

We may disclose personal information to law enforcement, regulatory authorities, courts, or government agencies when:

• Required by applicable law or legal process
• Responding to lawful requests or court orders
• Investigating or preventing fraud, security threats, or illegal activity
• Protecting the rights, property, or safety of sans88, our users, or the public
• Fulfilling reporting obligations under anti-money laundering regulations

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

sans88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption, the same standard used by major financial institutions
• Secure Storage: Personal data is stored on secure servers with encryption at rest. Passwords are hashed using industry-standard cryptographic algorithms
• Firewalls and Intrusion Detection: Multi-layered firewall systems and real-time intrusion detection monitor for suspicious activity
• Regular Security Audits: Independent third-party security firms conduct periodic penetration testing and vulnerability assessments

7.2 Organizational Security Measures

• Access Controls: Personal data access is restricted to authorized personnel on a need-to-know basis
• Employee Training: Staff receive regular training on data protection principles and security best practices
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Incident Response Plan: Documented procedures ensure prompt response to any data security incidents

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with others
• Log out after each session, especially on shared devices
• Enable two-factor authentication if offered
• Report any suspicious activity or unauthorized access immediately
• Keep your contact information up to date for security notifications

8. Data Retention

sans88 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal compliance, dispute resolution
Transaction Records	7 years from transaction date	Financial regulations, audit requirements
Identity Documents	7 years after account closure	KYC/AML compliance
Betting History	7 years from bet settlement	Regulatory requirements, dispute resolution
Marketing Consent Records	Until consent withdrawn + 2 years	Proof of consent, compliance
Customer Support Records	3 years from last interaction	Quality assurance, training

After retention periods expire, we securely delete or anonymize personal data. Anonymized data (data that can no longer identify you) may be retained indefinitely for analytical purposes.

9. Your Privacy Rights

You have several rights regarding your personal data. sans88 commits to facilitating the exercise of these rights promptly and without undue burden.

9.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. You may request access by contacting our support team.

9.2 Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete data. Most account information can be updated directly through your account settings.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes collected or when you withdraw consent. Note that we may be legally required to retain certain data for specified periods.

9.4 Right to Restriction of Processing

You may request that we limit how we use your personal data in certain situations, such as while a dispute about data accuracy is being resolved.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may require identity verification to prevent unauthorized disclosure.

10. Cookies and Tracking Technologies

sans88 uses cookies and similar technologies to enhance user experience, analyze platform usage, and personalize content. Cookies are small text files stored on your device that enable certain platform functionality.

10.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for platform operation, including session management, security, and load balancing. Cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, timezone) and enhance user experience.
• Analytics Cookies: Collect information about platform usage to help us understand user behavior and improve services.
• Marketing Cookies: Track your browsing habits to deliver personalized promotional content (only with consent).

10.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect platform functionality.

11. International Data Transfers

sans88 primarily serves Indonesian users, but we may transfer personal data internationally to service providers and partners located outside Indonesia. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses and ensure recipients maintain adequate data protection standards.

12. Children's Privacy

sans88 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 21, we will take immediate steps to delete that information and close the account.

13. Changes to This Privacy Policy

sans88 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify users of material changes by posting a notice on our website and updating the "Effective Date" at the top of this policy. Continued use of sans88 services after changes constitutes acceptance of the updated policy.

14. Contact and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us at [email protected]. We take all privacy concerns seriously and will investigate and respond promptly.

If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.