Privacy Policy

1. Introduction

Welcome to the sb028 Privacy Policy. This document explains how sb028 ("we", "us", "our") collects, uses, stores, shares, and protects personal information from users ("you", "your") of our online betting platform accessible at sb028.cam and all associated services.

At sb028, we recognize that privacy is a fundamental right. We are committed to protecting your personal data and maintaining transparency about our data practices. This Privacy Policy complies with the European Union General Data Protection Regulation (GDPR), Indonesian data protection regulations, and international best practices for data security.

By creating an account or using sb028 services, you acknowledge that you have read, understood, and consent to the data collection and processing practices described in this Privacy Policy. If you do not agree with these practices, please do not use our services.

2. Data Controller Information

sb028 is the data controller responsible for your personal information collected through our platform. This means we determine the purposes and means of processing your personal data.

2.1 Contact Information

• Platform Name: sb028
• Website: https://sb028.cam
• Email: [email protected]
• Data Protection Officer Email: [email protected]
• Support Hours: 24/7 via live chat and email

For any privacy-related questions, concerns, or to exercise your data rights, please contact our Data Protection Officer at the email address provided above.

3. What Data We Collect

sb028 collects several categories of personal information necessary to provide our betting services, comply with legal obligations, and improve user experience. The data we collect falls into the following categories:

3.1 Account Registration Data

When you create an sb028 account, we collect:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Phone number (for account verification and security)
• Residential address (street address, city, province, postal code)
• Country of residence (Indonesia)
• Username and password (passwords are hashed and never stored in plain text)
• Preferred language and currency

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and prevent underage gambling, we collect:

• Government-issued photo identification (Indonesian KTP, passport, driver's license)
• Proof of address documents (utility bills, bank statements, rental agreements)
• Selfie photographs holding identification documents
• Biometric data (facial recognition for identity matching, not stored long-term)

3.3 Financial & Transaction Data

To process deposits, withdrawals, and maintain transaction records, we collect:

• Bank account details (bank name, account number, account holder name)
• E-wallet information (OVO, DANA, GoPay account details)
• Cryptocurrency wallet addresses (for crypto deposits/withdrawals)
• Payment card details (processed securely via PCI-DSS compliant payment processors; sb028 does not store full card numbers)
• Transaction history (deposits, withdrawals, bet history, wins, losses)
• Bonus claims and wagering progress

3.4 Technical & Usage Data

When you use sb028, we automatically collect:

• IP address and geolocation data (to verify jurisdiction and detect suspicious activity)
• Device information (device type, operating system, browser type, screen resolution)
• Log data (login times, pages visited, features used, errors encountered)
• Cookies and similar tracking technologies (see Section 10 for details)
• Betting patterns and game preferences (to improve recommendations and detect problem gambling)

3.5 Communications Data

We retain records of your interactions with sb028, including:

• Customer support chat logs and email correspondence
• Marketing communications preferences (opt-in/opt-out status)
• Feedback, reviews, and survey responses
• Complaints and dispute resolution records

3.6 Responsible Gaming Data

To promote responsible gambling, we may collect:

• Self-imposed deposit limits, loss limits, and session time limits
• Self-exclusion requests and cooling-off periods
• Gambling behavior indicators (frequency, duration, stake sizes)
• Reality check acknowledgments

4. How We Use Your Data

sb028 uses your personal data for the following purposes:

4.1 Service Provision

• Creating and managing your betting account
• Processing deposits, withdrawals, and bet placements
• Providing access to sports betting, live casino, slots, togel, sabung ayam, and other games
• Delivering customer support and responding to inquiries
• Sending transactional notifications (deposit confirmations, withdrawal updates, bet settlements)

4.2 Legal Compliance

• Verifying your identity, age, and eligibility to gamble
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Preventing fraud, identity theft, and financial crimes
• Cooperating with law enforcement and regulatory investigations when legally required
• Maintaining records for tax reporting and auditing purposes

4.3 Security & Fraud Prevention

• Detecting and preventing unauthorized account access
• Identifying duplicate accounts, collusion, bonus abuse, and cheating
• Monitoring for suspicious betting patterns or money laundering activity
• Enforcing our Terms & Conditions

4.4 Service Improvement

• Analyzing user behavior to improve website functionality and user experience
• Developing new features and games based on player preferences
• Personalizing game recommendations and odds displays
• Conducting internal research and analytics

4.5 Marketing & Communications

• Sending promotional offers, bonuses, and special event announcements (only with your consent)
• Delivering personalized marketing based on your betting interests
• Conducting customer satisfaction surveys
• Informing you of important service updates and policy changes

4.6 Responsible Gaming

• Monitoring for signs of problem gambling behavior
• Enforcing self-imposed limits and self-exclusion requests
• Providing reality checks and responsible gaming tools
• Offering support resources and intervention when necessary

5. Legal Basis for Processing

Under GDPR and applicable Indonesian data protection laws, sb028 processes your personal data based on the following legal grounds:

Processing Purpose	Legal Basis
Account creation and service provision	Contractual necessity (to perform our services under the Terms & Conditions)
KYC verification and age checks	Legal obligation (compliance with anti-money laundering and gambling regulations)
Fraud prevention and security	Legitimate interest (protecting our business and users from fraud)
Marketing communications	Consent (you may opt out at any time)
Service improvement and analytics	Legitimate interest (improving our platform for all users)
Responsible gaming monitoring	Legal obligation and legitimate interest (preventing gambling harm)

You have the right to object to processing based on legitimate interest. Contact our Data Protection Officer to exercise this right.

6. Data Sharing & Third Parties

sb028 does not sell, rent, or trade your personal information. However, we may share your data with trusted third parties in the following circumstances:

6.1 Service Providers

We share data with third-party service providers who perform services on our behalf:

• Payment processors: To process deposits and withdrawals (bank transfers, e-wallets, cryptocurrency payments)
• KYC verification services: To verify identity documents and prevent fraud
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, and others to deliver casino games
• Cloud hosting providers: To store data on secure servers
• Customer support platforms: To manage live chat and email support tickets
• Marketing platforms: To deliver email newsletters (only if you opted in)

All service providers are bound by data protection agreements and may only use your data for the specific purposes we authorize.

6.2 Legal Requirements

We may disclose your data when required by law or to protect legal rights:

• To comply with court orders, subpoenas, or legal processes
• To respond to government or law enforcement requests
• To enforce our Terms & Conditions and pursue legal remedies
• To protect the safety and security of users and the public

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you via email before any such transfer and provide options regarding your data.

6.4 Anonymized Data

We may share aggregated, anonymized data that cannot identify individuals (e.g., "30% of Indonesian users prefer football betting") for research, marketing, or business intelligence purposes.

7. Data Security Measures

sb028 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

7.1 Encryption

• In Transit: All data transmitted between your device and sb028 servers is encrypted using SSL/TLS protocols with 256-bit encryption
• At Rest: Personal data stored on our servers is encrypted using AES-256 encryption
• Passwords: User passwords are hashed using bcrypt with salt, making them irreversible

7.2 Access Controls

• Role-based access controls limit data access to authorized personnel only
• Multi-factor authentication required for administrative access
• Regular access audits and automated monitoring for suspicious activity
• Immediate revocation of access upon employee termination

7.3 Infrastructure Security

• Hosting on secure, ISO 27001 certified data centers with physical security controls
• Regular security penetration testing by independent auditors
• Firewalls, intrusion detection systems, and DDoS protection
• Automated backup systems with encrypted off-site storage

7.4 Employee Training

• All sb028 staff receive data protection training
• Strict confidentiality agreements for all employees and contractors
• Background checks for personnel with data access

8. Data Retention Period

sb028 retains your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

Data Category	Retention Period
Account information (active accounts)	Duration of account + 7 years (for legal/tax compliance)
KYC documents	7 years after account closure (AML regulation requirement)
Transaction records	7 years after transaction date (financial regulation requirement)
Bet history and game logs	5 years after bet placement (dispute resolution requirement)
Support communications	3 years after last interaction
Marketing data (if consent withdrawn)	Deleted within 30 days of opt-out
IP logs and technical data	12 months (security and fraud prevention)
Self-exclusion records	Permanent (to prevent re-registration during exclusion period)

After the retention period expires, we securely delete or anonymize your data so it can no longer identify you. If you close your account, you may request immediate deletion of non-essential data; however, legally required records must be retained for the specified periods.

9. Your Privacy Rights

Under GDPR and Indonesian data protection laws, you have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of all personal data sb028 holds about you. We will provide this information in a structured, commonly used, machine-readable format (typically PDF or CSV) within 30 days of your request.

9.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your sb028 account settings. For KYC data changes, contact customer support with updated documentation.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (for data processed based on consent)
• You object to processing based on legitimate interest and no overriding grounds exist
• The data was unlawfully processed

Note: We cannot delete data required for legal compliance (e.g., financial records must be kept for 7 years). Legally required data will be restricted from further processing but not deleted until retention periods expire.

9.4 Right to Restrict Processing

You may request that we limit how we use your data in certain situations, such as during a dispute about data accuracy or while we assess an objection to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request that we transfer it directly to another service provider where technically feasible.

9.6 Right to Object

You may object to processing based on legitimate interest (e.g., analytics, marketing). You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting support.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

9.8 Right to Lodge a Complaint

If you believe sb028 has violated your privacy rights, you have the right to file a complaint with your national data protection authority or Indonesian data protection regulator.

10. Cookies & Tracking Technologies

sb028 uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, keep you logged in, and track usage patterns.

10.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login sessions, security features). Cannot be disabled.
• Performance Cookies: Collect anonymous usage data to improve site performance (e.g., Google Analytics).
• Functional Cookies: Remember your preferences (language, currency, game settings).
• Marketing Cookies: Track your activity to deliver relevant ads (only with consent).

10.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies (not recommended)
• Delete cookies when closing the browser

11. International Data Transfers

sb028 primarily serves users in Indonesia, and your data is processed on servers located in secure data centers. However, some of our service providers (e.g., cloud hosting, payment processors) may be located outside Indonesia.

When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Ensuring the recipient country has adequate data protection laws
• Obtaining your explicit consent where required

Your personal data will never be transferred to countries without adequate data protection safeguards.

12. Contact & Complaints

12.1 Privacy Inquiries

For questions, concerns, or to exercise your privacy rights, contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Response Time: We aim to respond to privacy requests within 30 days

12.2 Filing a Complaint

If you are unsatisfied with how sb028 handles your personal data, you may file a complaint with:

• Indonesian data protection authority
• Your local data protection supervisory authority (if applicable)
• Our Data Protection Officer for internal review

We encourage you to contact us first so we can attempt to resolve your concerns directly.