PRIVACY POLICY

1. Introduction and Policy Scope

This Privacy Policy ("Policy") describes how sga404 ("we", "us", "our", "Platform") collects, uses, processes, stores, shares, and protects personal information and data obtained from users ("you", "Player", "User") of our online betting platform, website (https://sga404.cam), mobile applications, and related services (collectively, "Services").

sga404 is committed to protecting your privacy and maintaining the confidentiality of your personal information in accordance with international data protection standards and best practices. This Policy applies to all personal data collected through our Services, whether through account registration, financial transactions, customer support interactions, website browsing, or any other engagement with sga404.

By creating an sga404 account, accessing our website, or using any of our Services, you expressly acknowledge that you have read, understood, and consent to the data collection, processing, and usage practices described in this Privacy Policy. If you do not agree with this Policy, you must immediately discontinue use of sga404 Services and refrain from providing any personal information to us.

2. Information We Collect

2.1 Personal Information You Provide

When you create an sga404 account or use our Services, we collect personal information that you voluntarily provide, including but not limited to:

• Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address, and account login credentials (username and password).
• Identity Verification (KYC) Documents: Government-issued identification documents including Indonesian KTP (National Identity Card), passport, or driver's license; proof of address documents such as utility bills or bank statements; selfie photographs for facial recognition verification; and any additional documentation required for enhanced due diligence or regulatory compliance.
• Financial Information: Indonesian bank account details (bank name, account number, account holder name) for deposits and withdrawals; e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja); payment card details if applicable; transaction history including deposits, withdrawals, wagers, and winnings; and source-of-funds documentation for large transactions.
• Communication Records: Content of messages, emails, live chat conversations, and phone calls with our customer support team; feedback, complaints, and dispute-related communications; survey responses and promotional communications preferences.
• Responsible Gaming Information: Self-imposed deposit limits, loss limits, session time limits; self-exclusion requests and cooling-off period preferences; responsible gaming assessment responses and support resource interactions.

2.2 Information Automatically Collected

When you access sga404 Services, we automatically collect certain technical and behavioral information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type, model, and manufacturer; operating system and version; screen resolution and display settings; installed fonts and plugins; device language and timezone settings; mobile network carrier; unique device identifiers.
• Usage Data: IP address and approximate geolocation; browser type and version; pages visited, features used, and content viewed; date, time, and duration of sessions; clickstream data and navigation patterns; search queries entered within our platform; bet history, game activity, and gaming preferences; referral sources and exit pages.
• Technical Performance Data: Connection speed and quality; error messages and technical issues encountered; platform performance metrics; crash reports and debugging information.

2.3 Information from Third-Party Sources

sga404 may receive information about you from external sources including:

• Payment Processors: Transaction confirmation data, fraud detection alerts, and payment verification results from banks, e-wallet providers, and payment gateway partners.
• Identity Verification Services: Document authentication results, watchlist screening outcomes, and fraud prevention data from third-party KYC verification providers.
• Regulatory and Compliance Sources: Information from regulatory databases, sanctions lists, politically exposed persons (PEP) registries, and adverse media screening services.
• Marketing and Analytics Partners: Aggregated demographic data, marketing campaign performance metrics, and website analytics from advertising networks and analytics platforms (provided in anonymized or pseudonymized form).

3. How We Use Your Information

sga404 processes your personal information for the following legitimate business purposes, each necessary for operating our online betting platform and complying with legal obligations:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your betting account
• Authenticating your identity and preventing unauthorized account access
• Processing deposits, withdrawals, and financial transactions
• Recording bets, calculating odds, settling wagers, and crediting winnings
• Providing customer support and responding to inquiries
• Implementing responsible gaming tools and self-exclusion requests
• Maintaining accurate transaction records and account history

3.2 Legal and Regulatory Compliance

• Verifying age eligibility (21+ requirement for Indonesian players)
• Conducting Know Your Customer (KYC) and enhanced due diligence procedures
• Complying with anti-money laundering (AML) regulations and suspicious activity reporting
• Preventing fraud, identity theft, and financial crime
• Enforcing our Terms and Conditions and investigating violations
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining records required by gambling regulations and licensing authorities

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, bonus abuse, and collusion
• Identifying multiple account creation and Terms violations
• Monitoring for suspicious betting patterns and match-fixing indicators
• Protecting against unauthorized access, cyberattacks, and security breaches
• Investigating disputes, chargebacks, and payment discrepancies
• Implementing risk management protocols and security measures

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Optimizing website performance, load times, and mobile responsiveness
• Developing new features, games, and betting products based on user preferences
• Conducting market research and understanding Indonesian player demographics
• Testing new technologies and improving technical infrastructure
• Generating statistical reports and business intelligence insights (in aggregated, anonymized form)

3.5 Marketing and Communications

• Sending transactional emails (deposit confirmations, withdrawal notifications, account updates)
• Providing promotional offers, bonuses, and VIP program benefits (with your consent)
• Delivering personalized gaming recommendations based on your preferences
• Announcing new features, games, and platform updates
• Conducting customer satisfaction surveys and gathering feedback
• Sending responsible gaming reminders and educational resources

You may opt out of promotional marketing communications at any time by adjusting your account preferences or clicking "unsubscribe" links in emails. Note that opting out of marketing does not affect essential transactional communications required for account operation and security.

4. Data Sharing and Third-Party Disclosures

4.1 When We Share Your Information

sga404 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following limited circumstances:

Recipient Category	Purpose of Sharing	Data Shared
Payment Processors	Processing deposits and withdrawals through Indonesian banks and e-wallets	Name, bank account details, transaction amounts, payment instructions
Identity Verification Services	Conducting KYC verification and fraud prevention screening	ID documents, selfie photos, name, date of birth, address
Game Providers	Delivering slots, live casino, and gaming content	Username, betting activity, game preferences (no financial details)
Customer Support Tools	Managing support tickets and live chat communications	Name, email, account details, communication history
Analytics Providers	Understanding platform usage and improving services	Anonymized behavioral data, aggregated statistics (no personal identifiers)
Legal and Regulatory Authorities	Complying with legal obligations, court orders, and regulatory requests	Any information required by applicable law or legal process

4.2 Third-Party Service Provider Safeguards

All third-party service providers with whom we share your data are contractually obligated to: (a) process data only for the specific purposes we authorize; (b) implement appropriate security measures to protect your information; (c) comply with applicable data protection laws; (d) not use your data for their own purposes or sell it to others; and (e) delete or return your data when our business relationship terminates.

4.3 Business Transfers

If sga404 undergoes a merger, acquisition, corporate reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. In such events, we will notify affected users via email and website announcement, and the acquiring entity will be required to honor the privacy commitments made in this Policy.

5. Data Security Measures

5.1 Technical Security Controls

sga404 employs industry-standard security technologies and procedures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission between your device and our servers uses SSL/TLS encryption (minimum 256-bit encryption). Sensitive data stored in our databases is encrypted at rest using advanced encryption algorithms.
• Secure Authentication: Multi-factor authentication options, secure password hashing using bcrypt or similar algorithms, session management with automatic timeout, and login attempt monitoring with automatic account lockout after suspicious activity.
• Infrastructure Security: Firewall protection, intrusion detection and prevention systems, DDoS mitigation, regular security patching and updates, and segregated network architecture isolating sensitive data.
• Access Controls: Role-based access permissions limiting employee data access to job-essential functions only, audit logs tracking all data access and modifications, and mandatory background checks for employees handling personal data.

5.2 Organizational Security Practices

• Regular security audits and vulnerability assessments by independent third-party experts
• Employee training on data protection, privacy regulations, and security best practices
• Incident response procedures for rapid containment and remediation of security breaches
• Business continuity and disaster recovery plans ensuring data availability
• Secure data disposal procedures for outdated or unnecessary information

5.3 Your Security Responsibilities

While sga404 implements robust security measures, you also play a critical role in protecting your account:

• Create strong, unique passwords containing uppercase, lowercase, numbers, and symbols
• Never share your login credentials with anyone or store them in unprotected locations
• Log out of your account after each session, especially on shared or public devices
• Keep your email account secure, as it is used for password resets and security notifications
• Immediately notify Customer Support if you suspect unauthorized account access
• Ensure your devices have updated antivirus software and operating systems
• Avoid accessing your account over public or unsecured Wi-Fi networks

6. Data Retention and Deletion

6.1 Retention Periods

sga404 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Maintained while your account remains active and for 7 years following account closure to comply with anti-money laundering regulations and financial record-keeping requirements.
• Transaction Records: Retained for minimum 7 years as required by financial regulations and tax laws in relevant jurisdictions.
• Identity Verification Documents: Maintained for 7 years following account closure for regulatory compliance and fraud prevention purposes.
• Marketing Communications Data: Retained until you withdraw consent or for 3 years from last interaction, whichever is earlier.
• Technical Log Files: Retained for 90 days to 2 years depending on data type and business necessity for security monitoring and system optimization.

6.2 Deletion Procedures

Upon expiration of applicable retention periods, sga404 securely deletes personal information using methods ensuring data cannot be recovered or reconstructed. Deletion methods include secure overwriting algorithms for digital storage and physical destruction for paper records.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information held by sga404:

7.1 Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of your information in our possession. Most account-related information is accessible directly through your sga404 account dashboard. For comprehensive data access requests, contact our Privacy Team at [email protected].

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most account details directly through your account settings. For assistance updating information, contact Customer Support.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, subject to legal retention obligations. Note that we may be required to retain certain data for regulatory compliance (e.g., 7-year financial record retention requirements). Requests for data deletion should be submitted to [email protected].

7.4 Right to Restrict Processing

You may request that we restrict processing of your personal information in specific situations, such as while we verify accuracy of contested data or assess the legitimacy of a deletion request.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider, where technically feasible.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time by adjusting account preferences or contacting Customer Support. You may also object to processing based on legitimate interests by providing specific grounds relating to your situation.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Exercising Your Rights

To exercise any privacy rights, please submit a request to [email protected] or contact Customer Support. We will respond to verified requests within 30 days. Identity verification may be required to prevent unauthorized disclosure of personal information to third parties.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They store information about your browsing activity and preferences, enabling websites to recognize you on return visits and provide personalized experiences.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, session management, security features, and transaction processing. These cookies cannot be disabled without impairing core Services functionality.
• Functional Cookies: Remember your preferences such as language selection, display settings, and customization choices to enhance user experience.
• Analytics Cookies: Collect anonymized data about how users interact with our platform, helping us understand traffic patterns, popular features, and areas for improvement.
• Advertising Cookies: Track your browsing across websites to deliver personalized advertisements and measure marketing campaign effectiveness (used with your consent where required by law).

8.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may impair platform functionality and prevent you from accessing certain features. You can manage cookie preferences through your browser settings or our cookie consent banner displayed on first visit.

9. International Data Transfers

sga404 operates internationally and may transfer personal information to countries outside Indonesia for processing by our service providers. When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by relevant data protection authorities
• Ensuring recipient countries provide adequate data protection standards
• Binding corporate rules for transfers within our corporate group
• Obtaining your explicit consent for transfers where required by law

10. Children's Privacy

sga404 Services are strictly intended for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and permanently close the associated account. If you believe we have collected information from a person under 21, please contact us immediately at [email protected].

11. Policy Updates and Changes

sga404 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email notification, website banner announcement, or in-account messaging at least 30 days before taking effect. Your continued use of sga404 Services following notification of changes constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we protect your privacy.

12. Contact Information and Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact sga404's Privacy Team: