At sga168, protecting your personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and safeguard it, and what rights you hold over your own data as a player on our platform.
Last Updated: 1 January 2026All personal data stored on the sga168 platform is protected by 256-bit SSL encryption. Our servers meet enterprise-grade security standards, and player records are accessible only to authorised personnel operating under strict confidentiality obligations.
sga168 will never sell, rent, or trade your personal data to external marketing companies or data brokers. Data is shared only with partners strictly necessary to operate the platform — such as payment processors, KYC verification providers, and licensed game studios.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. Submit a Data Subject Request to our support team and we will respond within 30 days in accordance with applicable data protection standards.
sga168 uses cookies and similar technologies solely to maintain session security, personalise your experience, and understand how players navigate the platform. We do not use cookies to build advertising profiles or share browsing data with ad networks.
Identity documents submitted for KYC verification are processed securely, stored with restricted access, and retained only for as long as required by our licensing and anti-money-laundering obligations. KYC data is never used for purposes beyond regulatory compliance.
sga168 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered on the platform, the account will be closed immediately and all associated data will be deleted in accordance with our data retention policy.
Summary: This Privacy Policy describes how sga168 ("we", "us", "our") collects and processes personal data when you use the platform at https://sga168.cam. By registering an account, you confirm that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree, please do not register an account or use our services.
1.1 sga168 is committed to respecting and protecting the privacy of every player who interacts with our platform. We understand that your personal information is sensitive, and we take every reasonable step to ensure it is collected, stored, and used responsibly, proportionately, and securely.
1.2 This Privacy Policy applies to all personal data collected through the sga168 website (https://sga168.cam), mobile interfaces, live chat, email correspondence, and any other channel through which you interact with us. It applies to all players, including those located in Jakarta, Surabaya, Medan, Bandung, Bali, and across the Indonesian archipelago.
1.3 This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform as a whole. References to "personal data" in this Policy mean any information that identifies or can be used to identify you as a natural person.
1.4 sga168 acts as the data controller in respect of personal data collected directly from players through the platform. Where data is processed by third-party service providers on our behalf, those providers act as data processors under binding data processing agreements.
2.1 For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, sga168. |
| "Data Processor" | A third party that processes personal data on behalf of sga168 under a contractual obligation. |
| "Data Subject" | The individual whose personal data is being processed — in this context, the registered player. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. |
| "KYC Data" | Identity and address verification documents submitted as part of the Know Your Customer process (e.g., Indonesian KTP, passport, utility bill). |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. |
3.1 sga168 collects only the personal data that is necessary and proportionate to delivering a secure, compliant, and high-quality gaming experience. The categories of personal data we collect include:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian National Identity Card (KTP) number or passport number. |
| Contact Data | Residential address (including city — e.g., Jakarta, Bandung, Surabaya), email address, mobile telephone number. |
| Account Data | Username, encrypted password, account registration date, account status, player tier, communication preferences. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records denominated in IDR. |
| KYC Documents | Scanned or photographed copies of government-issued identity documents, proof-of-address documents, and selfie verification images. |
| Gaming & Betting Data | Game history, bet amounts, wagering patterns across sports markets (BRI Liga 1, EPL, Champions League), slot sessions, togel (Indonesia's traditional numbers lottery) selections, and live casino participation records. |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session timestamps, and geolocation data (city-level). |
| Communications Data | Records of live chat conversations, email correspondence, WhatsApp messages, and in-app support tickets submitted to the sga168 team. |
| Behavioural Data | Pages visited, features used, time spent on the platform, promotional offers viewed or claimed, and navigation paths through the website. |
3.2 sga168 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by our responsible gaming programme (e.g., where a player voluntarily discloses a gambling-related health concern when requesting self-exclusion).
4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact our support team, or respond to a promotional survey.
4.2 Automatically — through cookies, server logs, and similar tracking technologies when you browse or interact with the platform. This includes technical data such as your IP address, device identifiers, and session activity.
4.3 From third parties — from payment processors (e.g., bank transfer confirmation data from BCA, BRI, BNI, or Mandiri), KYC verification service providers, fraud detection platforms, and analytics tools. All such third parties are contractually required to handle data in a manner consistent with this Privacy Policy.
4.4 From public sources — in exceptional fraud or AML investigation scenarios, sga168 may cross-reference publicly available information (such as public records or sanctions lists) to verify a player's identity or assess risk.
5.1 sga168 processes your personal data for the following specific purposes:
Marketing Opt-Out: If you no longer wish to receive promotional communications from sga168, you may opt out at any time by updating your communication preferences in your account settings or by contacting our support team. Opting out of marketing does not affect transactional or account-related communications.
6.1 sga168 processes your personal data under one or more of the following legal bases:
| Legal Basis | When Applied |
|---|---|
| Contractual Necessity | Processing required to perform our obligations under the Terms & Conditions — e.g., account creation, payment processing, and delivering gaming services. |
| Legal Obligation | Processing required to comply with KYC/AML regulations, licensing conditions, and lawful requests from regulatory or law enforcement bodies. |
| Legitimate Interests | Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where our interests do not override your rights. |
| Consent | Marketing communications and optional data enrichment activities, where you have provided freely given, specific, and informed consent. |
7.1 sga168 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared only in the following circumstances and only to the minimum extent necessary:
7.2 All third-party data processors engaged by sga168 are vetted for data security standards and are contractually prohibited from using player data for any purpose beyond the specific service they are engaged to perform.
8.1 sga168 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law or licensing conditions. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of the active account, plus 5 years after account closure — to comply with AML and licensing obligations. |
| KYC Documents | 5 years from the date of verification or account closure, whichever is later — as required by international AML standards. |
| Financial Transaction Records | 7 years from the date of each transaction — in line with standard financial record-keeping requirements. |
| Gaming & Betting History | 5 years from the date of each session or wager — to support dispute resolution and regulatory audits. |
| Support & Communications Data | 3 years from the date of the most recent interaction — to support ongoing service quality and complaint resolution. |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years thereafter — as evidence of consent at the time marketing was sent. |
| Technical & Log Data | 12 months from collection — for security monitoring and fraud investigation purposes. |
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.
9.1 sga168 employs a layered approach to data security. Technical and organisational measures in place include:
Your Role in Security: While sga168 maintains robust technical safeguards, the security of your account also depends on you. Always use a strong, unique password for your sga168 account, do not share your credentials with anyone, and log out of shared devices after each session. Contact our support team immediately if you suspect unauthorised access.
10.1 sga168 uses cookies and similar technologies (including local storage and session storage) to operate the platform effectively and to understand how players use our services. We use the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the platform to function — including maintaining your login session, remembering your Wallet state, and enabling secure page transitions. | No |
| Functional | Remember your language preferences, display settings, and platform layout choices to deliver a personalised experience. | Yes |
| Analytics | Collect anonymised data on page visits, feature usage, and navigation paths to help us improve platform performance and usability. | Yes |
| Security | Detect and prevent fraudulent activity, identify suspicious login patterns, and protect against cross-site request forgery (CSRF) attacks. | No |
10.2 sga168 does not use advertising or tracking cookies that share your browsing behaviour with external ad networks or social media platforms.
10.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the platform. Instructions for managing cookies are available in the help documentation of all major browsers.
11.1 As a player on the sga168 platform, you hold the following rights in respect of your personal data. You may exercise any of these rights by submitting a Data Subject Request to our support team at [email protected] or via live chat. We will respond within 30 days.
You have the right to request a copy of all personal data we hold about you, including the categories of data, the purposes of processing, and the parties with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly. Some changes (e.g., name corrections) may require supporting KYC documentation.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — data required for AML or regulatory compliance cannot be deleted before its mandatory retention period expires.
You may request that we limit how we use your data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing based on legitimate interests.
Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
You may object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, although this right may be overridden where we can demonstrate compelling grounds.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
11.2 sga168 will not charge a fee for processing a Data Subject Request unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply, or we may decline the request with written reasons.
12.1 The sga168 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process.
12.2 If sga168 becomes aware — through KYC review, a parental complaint, or any other means — that a player is under 21 years of age, the account will be closed immediately. Any deposits made will be refunded to the original payment source, all gaming activity will be voided, and all personal data associated with the account will be deleted as soon as our legal obligations permit.
12.3 Parents and legal guardians are strongly encouraged to use parental control software to prevent minors from accessing online gambling websites. If you believe a minor in your household has registered on sga168, contact our support team immediately.
13.1 sga168 may transfer personal data to third-party processors located outside Indonesia in order to deliver specific services — for example, KYC verification platforms or game studio infrastructure. Where such transfers occur, sga168 ensures that appropriate safeguards are in place, including:
13.2 If you would like further information about the specific safeguards applicable to any international transfer, please contact our support team.
14.1 sga168 reserves the right to update or revise this Privacy Policy at any time. Changes will be published on this page with a revised "Last Updated" date. Where changes are material — for example, a significant new purpose of processing or a new category of data recipient — we will notify registered players by email or via a prominent in-platform notification at least 14 days before the change takes effect.
14.2 Your continued use of the platform after the revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you must cease using the platform and may request the closure of your account.
14.3 It is your responsibility to review this Policy periodically. sga168 recommends checking this page regularly to stay informed about how your data is protected and used.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the sga168 Data Protection team through any of the following channels:
15.2 Formal Data Subject Requests must be submitted in writing (via email or live chat) and will receive a substantive response within 30 days, as required by applicable data protection standards.
15.3 If you are unsatisfied with the resolution of a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction in which you are located.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions of the sga168 Privacy Policy. By using the platform on or after this date, you agree to the terms set out in this document.
We are committed to keeping your personal data secure and transparent. If you have any questions about how sga168 handles your information, our support team is always ready to help.
sga168 is strictly an Adults Only (21+) platform. Please play responsibly.