sugar308 Casino & Sportsbook Data Care

This page describes what we collect when you use sugar308 and how we keep that data protected. We take your privacy seriously: we collect only what we need to operate our platform, verify your account, process your deposits and withdrawals, and comply with applicable law. We do not sell your personal information to third parties, and we use encryption and industry-standard security to protect your account details, payment methods, and transaction history.

Our platform serves users in supported jurisdictions through live-dealer tables, slot games, football and esports betting, and a full suite of payment methods: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet. To operate these services, we must collect certain information—your email, identity documents, payment details, and game activity. This privacy policy explains what we collect, how we use it, who has access to it, and your rights regarding your data.

Our policy is written in plain language so you understand exactly how we handle your information. We do not use jargon or hidden terms. If you have questions after reading this page, our support team can clarify any section or explain our practices in more detail.

What We Collect and Why

We collect information in three categories: account creation, account verification, and transaction processing. When you open a sugar308 account, we ask for your email address and a password. We use your email to send account notifications (login alerts, deposit confirmations, withdrawal status), password-reset links, and promotional messages if you opt in. Your password is encrypted and stored separately from your account; we cannot see your password, and we reset it only when you request it.

Before your first withdrawal, we require identity verification. We ask for a government-issued ID (KTP, passport, or driver's license), proof of address (utility bill, bank statement, or rental agreement dated within three months), and sometimes a photo of you holding your ID alongside a handwritten note. We collect this information to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations, which protect against fraud and illegal activity.

We also collect game activity data: which games you play, bet amounts, results, and times. This information is stored to settle your bets, calculate your balance, detect fraud, and understand our platform's usage patterns. None of this data is shared with game providers or third parties for marketing; it remains within sugar308's systems for operational and compliance purposes.

Account credentials

Email and encrypted password; used for login and account recovery only.

Identity documents

Government ID and proof of address; required for withdrawal and AML/KYC compliance.

Payment information

Deposit and withdrawal methods, transaction amounts, and references; used to process payments and maintain balance records.

Game activity

Games played, bets, results, timestamps; used for settlement, fraud detection, and platform analytics.

How We Store and Protect Your Data

We store your data on encrypted servers located in multiple regions. Our primary infrastructure sits in data centers outside your local jurisdiction, which means your data may be processed and stored outside Indonesia. By using sugar308, you consent to this cross-border data handling, which is necessary to operate a reliable global platform. All data in transit (when you log in, deposit, or withdraw) is encrypted using TLS (Transport Layer Security), the same encryption used by banks.

We do not retain your data longer than necessary. Account data is kept for as long as your account is active. Transaction records are kept for a minimum of five years to comply with financial regulations and tax reporting. Identity documents are encrypted and stored separately from your account; access is restricted to compliance and support staff who need them. Once your account is closed, we delete game activity and non-essential records within thirty days, but we retain transaction history and identity records as required by law.

Our security practices include encryption at rest (data stored on disk), access controls (only authorized staff can view sensitive information), and regular security audits. We maintain a responsible disclosure policy: if we discover a security vulnerability, we disclose it responsibly to affected users and relevant authorities. We do not promise perfect security—no system is unhackable—but we commit to industry-standard protections and prompt response to any breach.

Third-Party Processors and Sharing

We work with third-party service providers to operate sugar308. Payment processors (for mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment transactions) receive your payment method and transaction amount to process deposits and withdrawals. These processors are bound by their own privacy policies and data-protection agreements with us. We do not control their practices, but we select processors that meet security and compliance standards.

We also use identity-verification services (third-party KYC providers) to validate your ID and address documents. These providers receive your documents and personal information to perform verification checks; they then confirm to us whether verification passed or failed. We do not retain your documents with the verification provider—they delete your information after the verification process completes (typically within twenty-four hours).

We may disclose your information if required by law: for example, if a government agency or law-enforcement body requests information related to a criminal investigation or financial crime. We will notify you of such requests whenever legally permitted. We do not sell your data to advertisers, brokers, or any other third party for any reason. Your account information is shared only with processors and service providers essential to operate sugar308.

We at sugar308 collect only what we need, protect it with encryption, and share it only with processors bound by confidentiality and security agreements.

Your Rights and Data Subject Requests

Depending on your jurisdiction (Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or other supported regions), you may have rights to access, correct, or delete your personal data. You can request a copy of all data we hold about you by contacting our support team with your account email. We will provide your information in a portable format within thirty days. You can request corrections if your stored personal information is inaccurate—for example, if your address or ID number is wrong.

You may also request deletion of your account and associated personal data. We will close your account immediately and delete non-essential records within thirty days. However, we retain transaction records and identity documents as required by financial and tax regulations—typically for five years. We cannot delete legally required records, but we will anonymize them when possible so they cannot be linked to you.

To exercise any of these rights, contact our support team with your request, your account email, and a description of what you are requesting. We will confirm receipt and respond within thirty days. If you believe we are mishandling your data or violating your privacy rights, you may lodge a complaint with your local data-protection authority.

Cookies and Tracking

We use cookies—small files stored on your device—to remember your login status and preferences. These are session cookies (deleted when you close your browser) and persistent cookies (remaining for up to one year). We use cookies only to keep you logged in and personalize your interface; we do not use them for tracking or advertising purposes.

We also use analytics services (such as Google Analytics) to understand how users navigate sugar308. These services track page views and user behavior to help us improve our platform. Analytics data is anonymized—it does not identify you personally. You can disable analytics tracking by adjusting your browser privacy settings or opting out through your browser's do-not-track feature.

Payment processors and identity-verification providers may use their own cookies. Their cookie practices are governed by their privacy policies, which we recommend you review.

Changes to This Privacy Policy

We may update this privacy policy as our practices evolve or regulations change. Any significant changes will be announced on our website, and we will ask for your re-consent if required by law. Your continued use of sugar308 after a policy update constitutes acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of our current practices.

Contact sugar308

If you have questions about this privacy policy, concerns about how we handle your data, or requests to access or delete your information, contact our support team through live chat or email. Provide your account email and a clear description of your request. We will respond within one to two business days and work with you to resolve your concern.

Our services are available only where local law permits. Users remain responsible for verifying their access rights and compliance with their own jurisdiction's regulations. This privacy policy applies to all users of sugar308 regardless of location, but your specific privacy rights may vary depending on where you live. If you are subject to data-protection laws such as GDPR or local privacy regulations, those laws may grant you additional rights beyond what is described here.

We are committed to protecting your privacy and operating sugar308 transparently. We collect data responsibly, store it securely, and share it only when necessary. Your trust is essential to our platform, and we take that responsibility seriously.