Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by sga999 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "Member", "User") who access or use the sga999 online gaming platform at https://sga999.cam, including all associated services, mobile interfaces, customer support channels, and promotional communications.

sga999 primarily serves Members based in Indonesia. This Policy is drafted to reflect our commitment to responsible data handling practices consistent with international data protection standards. By registering an account on sga999 or by using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside sga999's Terms & Conditions, which govern the overall legal relationship between you and sga999. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

2. Definitions

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, including name, email address, date of birth, national identity number, bank account details, IP address, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" — sga999, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" — Third-party service providers engaged by sga999 to Process Personal Data on our behalf and under our documented instructions.
• "Sensitive Data" — A subset of Personal Data that warrants heightened protection, including financial account details, government-issued identity documents, and data relating to health or responsible gaming activity.
• "Cookies" — Small text files stored on your device by the sga999 platform to maintain session state, detect fraud, and collect anonymized analytics data.

3. Data We Collect

sga999 collects the following categories of Personal Data from Members and prospective Members:

3.1 Registration Data

When you create a sga999 account, we collect your full legal name, date of birth, residential address in Indonesia (city, province, postal code), email address, mobile telephone number, and the username and hashed password you select.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and responsible gaming obligations, we collect government-issued identity documents (such as your Kartu Tanda Penduduk / KTP or passport), selfie photographs used for facial liveness checks, and bank account statements confirming ownership of the payment method you register with sga999.

3.3 Financial Transaction Data

We collect records of all deposits, withdrawals, bonus awards, and bet transactions conducted on your sga999 account, including amounts (denominated in Indonesian Rupiah / IDR), timestamps, payment method references (e.g., BCA account suffix, OVO mobile number), and transaction status logs.

3.4 Gameplay & Betting Data

We maintain records of all bets placed, games played, session durations, responsible gaming limit settings, and self-exclusion elections made through your sga999 account. This data is used to operate the platform, resolve disputes, and monitor for compliance with responsible gaming policy.

3.5 Technical & Device Data

When you access sga999, our servers automatically collect your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited within the platform, and session timestamps. This data is used for fraud detection, security monitoring, and aggregate analytics.

3.6 Communications Data

If you contact sga999 customer support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, support ticket identifiers, and resolution notes. These records are retained to improve service quality and to resolve any follow-up disputes.

4. How We Use Your Data

sga999 processes your Personal Data for the following purposes:

5. Legal Basis for Processing

sga999 processes your Personal Data under one or more of the following legal bases:

• Contract Performance: Processing is necessary to enter into and fulfil the contract represented by sga999's Terms & Conditions, including account creation, bet settlement, and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC verification, anti-money laundering record-keeping, and responsible gaming requirements mandated by our international operating license.
• Legitimate Interests: Processing serves sga999's legitimate business interests in detecting and preventing fraud, securing the platform, and improving service quality, provided these interests are not overridden by your fundamental privacy rights.
• Consent: For optional processing activities such as sending promotional emails or SMS notifications, we rely on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6. Data Sharing & Disclosure

sga 999 does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited circumstances:

• Service Providers (Data Processors): We engage trusted third-party vendors to support platform operations, including payment gateway processors (facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja), identity verification providers, cloud hosting partners, and customer support software providers. All Data Processors are bound by written data processing agreements that restrict their use of your data to the specific services they provide to sga999.
• Game Content Providers: Certain gameplay data (such as bet amounts, game session identifiers, and RNG outcomes) is necessarily shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe — to facilitate game delivery and dispute resolution. These providers act as independent Data Controllers for their own platform logs.
• Legal and Regulatory Authorities: sga999 will disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, a valid court order, or a legitimate regulatory investigation. We will endeavor to notify you of such disclosure where legally permissible to do so.
• Anti-Fraud and Security Networks: We may share anonymized or pseudonymized fraud signals with industry-recognized anti-fraud networks to protect the broader online gaming ecosystem. No directly identifiable Personal Data is shared in this context.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of sga999's business, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

7. International Data Transfers

sga999 operates an internationally hosted platform. As a result, your Personal Data may be transferred to and processed in countries outside of Indonesia, including the jurisdiction in which sga999 holds its operating license and the locations of our cloud hosting infrastructure.

Where such international transfers occur, sga999 implements appropriate safeguards to ensure that your Personal Data receives a level of protection equivalent to that afforded within Indonesia. These safeguards include:

• Contractual clauses requiring recipient entities to maintain data protection standards consistent with this Policy.
• Transfer only to jurisdictions or recipients that maintain recognized data protection frameworks.
• Technical controls including data encryption both in transit and at rest for all cross-border data flows.

By using sga999's platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia as described in this section.

8. Data Retention

sga999 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, sga999 will securely delete or anonymize your Personal Data in a manner that prevents reconstruction or re-identification. Where anonymization is applied, the resulting data may be retained indefinitely for aggregate statistical analysis.

9. Cookies & Tracking Technologies

sga999 uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate core platform functionality and to improve your experience. We do not use third-party advertising cookies or cross-site tracking networks.

The cookies used on sga999 fall into the following categories:

• Essential Cookies: Required for the platform to function. These maintain your logged-in session, store your language preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing core platform functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns, flagging anomalous betting behavior, and enforcing responsible gaming session limits.
• Analytics Cookies: Collect anonymized data about how Members navigate sga999 — including which pages are visited most frequently, average session duration, and common drop-off points — to help us improve platform design and performance. No individually identifiable data is captured via analytics cookies.
• Preference Cookies: Store your optional platform preferences such as display settings, notification choices, and default currency display format (IDR / Rp).

10. Your Rights

As a Member of sga999, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of all Personal Data that sga999 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For certain data fields (e.g., registered email address), you can update these directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, we are required to retain KYC and transaction records for a minimum of 5 years.
• Right to Restriction of Processing: You may request that sga999 restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: You may request a machine-readable export of the Personal Data you have provided to sga999, where the processing is based on consent or contract performance.
• Right to Object: You may object to processing of your Personal Data where that processing is based on sga999's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Security Measures

sga999 implements a comprehensive suite of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and sga999's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Password Security: Member passwords are never stored in plain text. sga999 applies a cryptographically strong hashing algorithm with unique salting to all stored passwords.
• Access Controls: Access to Member Personal Data within sga999's internal systems is restricted on a strict need-to-know basis. All internal data access events are logged and subject to periodic audit review.
• Two-Factor Authentication (2FA): sga999 supports optional two-factor authentication for Member accounts. We strongly recommend enabling 2FA to add an additional layer of protection to your account.
• Penetration Testing: sga999's platform undergoes regular third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a confirmed Personal Data breach that poses a risk to Members' rights and freedoms, sga999 will notify affected Members promptly and report the incident to the relevant regulatory authority within the timeframe required by applicable law.

12. Children's Privacy

sga999's platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store Personal Data from individuals under the age of 21. All registration applications are subject to age verification checks as part of our KYC process.

If sga999 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, delete the relevant data from our records, and, where legally required, report the matter to the appropriate authorities. If you believe that a minor has accessed sga999's platform, please report this immediately to [email protected].

13. Third-Party Links

The sga999 platform may, on occasion, contain references to third-party services — such as links to the official websites of game studios, payment providers, or responsible gaming support organizations. sga999 is not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policy of any third-party website you visit, as their data collection and use practices may differ significantly from those of sga999. The inclusion of any third-party reference on sga999 does not constitute an endorsement of that third party's privacy practices.

14. Policy Amendments

sga999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When material changes are made, we will notify registered Members via the email address on file and/or through a prominent notice on the sga999 platform, no less than 7 days before the updated Policy takes effect.

The "Last Updated" date displayed at the top of this page reflects the date on which the current version of the Policy was published. We encourage you to review this page periodically. Your continued use of sga999's platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way sga999 handles your Personal Data, please contact us using the details below. We take all privacy concerns seriously and commit to responding to every verified inquiry within 30 days.

• Email: [email protected] — Please use the subject line "Privacy Inquiry" or "Data Rights Request" to ensure your message is directed to the appropriate team.
• Live Chat: Available 24 hours a day, 7 days a week, via the sga999 platform interface. Average first response time under 3 minutes.
• Support Hours: 00:00–24:00 WIB (UTC+7), including all Indonesian public holidays.

If you are not satisfied with sga999's response to your privacy concern, you may have the right to lodge a complaint with the data protection authority in the jurisdiction governing sga999's operating license. sga999 will cooperate fully with any such authority in the resolution of a complaint.