At sga123, we take your privacy seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold as a member of our platform.
Six foundational principles that govern how we handle every piece of personal data entrusted to us by our Indonesian members.
All data transmitted between your device and the sga123 platform is protected by industry-standard TLS 1.3 encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption on our secured servers.
We collect only the data that is strictly necessary to operate the sga123 platform, fulfil our legal obligations, and deliver the services you have signed up for. We do not collect data speculatively or for purposes beyond those stated in this policy.
sga123 does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or any unaffiliated commercial entities. Your data is shared only with verified partners who are contractually bound to our data protection standards.
Personal data is retained only for as long as it is required for its original collection purpose or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised using procedures that prevent reconstruction.
We recognise and respect your rights to access, correct, restrict, and — where applicable — erase your personal data. Requests are processed promptly by our dedicated data team, and we will never obstruct your ability to exercise these rights.
sga123's data handling practices align with internationally recognised data protection frameworks and the requirements of our licensing authority. We conduct regular internal privacy audits and update our practices as standards evolve.
The following definitions apply throughout this Privacy Policy and should be read in conjunction with the definitions contained in sga123's Terms & Conditions.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this case, sga123, operated at https://sga123.cam. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller under a written data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data, provided through a clear affirmative action. |
| "KYC Data" | Identity verification documents and associated information collected during the Know Your Customer process, including government-issued identity documents and proof of address. |
The Data Controller responsible for Personal Data collected through the sga123 platform is sga123, the operator of the online gaming and betting platform accessible at https://sga123.cam. All questions, requests, and complaints relating to the processing of your Personal Data should be directed to our Data Protection team using the contact details provided in Clause 15 of this policy.
sga123 operates as an internationally licensed gaming platform serving members primarily based in Indonesia. Our operations involve the processing of data in connection with sports betting markets — including bandar bola (local football bookmaking market context), togel (Indonesia's traditional numbers lottery), and casino gaming — and we apply the data protection standards required by our licensing authority to all such processing activities.
sga123 collects the following categories of Personal Data from members and platform visitors:
| Category | Specific Data Points |
|---|---|
| Registration Data | Full legal name, date of birth, Indonesian residential address, mobile number, email address, username, and password (stored in hashed form). |
| Identity & KYC Data | Copies or photographs of government-issued identity documents (KTP, Passport, SIM), date of birth confirmation, and proof of address documentation. |
| Financial Data | Bank account details (account name, account number, bank name — e.g. BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history, and account balance records. |
| Wagering Activity Data | Bet placement records, game session logs, wager amounts, event selections, outcomes, bonus redemptions, and responsible gaming tool usage. |
| Technical & Device Data | IP address, device type and operating system, browser type and version, screen resolution, time zone, session duration, and platform access timestamps. |
| Communications Data | Records of live chat conversations, email correspondence, and any other communications with sga123's support team, including content and metadata. |
| Marketing Preferences | Your opt-in or opt-out status for promotional communications, preferred notification channels, and response behaviour to communications sga123 has sent. |
sga123 collects Personal Data through the following channels and mechanisms:
sga123 processes your Personal Data for the following specific, documented purposes:
sga123 relies on the following legal bases to process your Personal Data, depending on the specific purpose of each processing activity:
sga123 does not sell your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
sga123 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or our licensing conditions. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Registration & Account Data | For the duration of your account plus 5 years following permanent account closure. |
| KYC & Identity Documents | For the duration of your account plus 5 years following closure, or longer if required by applicable AML regulations. |
| Financial Transaction Records | Minimum 5 years from the date of each transaction, in accordance with standard financial record-keeping requirements. |
| Wagering Activity Logs | 3 years from the date of each wagering session, or 5 years where the session is linked to a dispute or investigation. |
| Customer Support Records | 2 years from the date of each support interaction, unless the interaction relates to a formal complaint or legal matter. |
| Marketing Preference Records | For the duration of your account plus 1 year following closure, to demonstrate compliance with consent requirements. |
| Technical & Device Logs | Up to 12 months from collection, unless retained longer for active fraud or security investigations. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using processes that ensure it cannot be reconstructed or re-identified. Where anonymisation is not technically feasible, data is deleted by overwrite methods meeting recognised data destruction standards.
sga123 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
The sga123 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device by your browser when you visit the platform. We use the following categories of cookies:
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the sga123 platform. Instructions for managing cookies in common browsers are available via your browser's help documentation.
sga123 does not use third-party advertising cookies or behavioural tracking cookies that profile your activity across other websites.
As a member of the sga123 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team using the details in Clause 15. We will respond to all verified requests within 30 calendar days of receipt.
Request a copy of the Personal Data we hold about you and information about how it is being processed.
Request correction of inaccurate or incomplete Personal Data held in your sga123 profile.
Request deletion of your Personal Data where it is no longer needed for its original purpose, subject to legal retention obligations.
Request that we temporarily suspend processing of your data while a rectification or objection request is being assessed.
Request a machine-readable copy of Personal Data you have provided to us, for transfer to another service provider.
Object to processing of your Personal Data where sga123 relies on legitimate interests as the legal basis, including direct marketing.
Withdraw consent to marketing communications or any other consent-based processing at any time, without penalty.
Submit a formal complaint to our Data Protection team or to the relevant supervisory authority if you believe your rights have been infringed.
Please note that certain rights are subject to limitations — for example, the right to erasure does not apply where retention is required by law (such as AML record-keeping obligations). We will explain any applicable limitations clearly when responding to your request.
The sga123 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires all applicants to confirm their date of birth, and age verification is conducted as part of the KYC process.
If sga123 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will take the following steps immediately:
If you are a parent or guardian and believe that your child has registered an account on the sga123 platform without your knowledge, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours WIB of receiving your report.
As an internationally operated platform, sga123 may process or store your Personal Data on servers located outside of Indonesia. In all cases where Personal Data is transferred to a jurisdiction outside Indonesia, sga123 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Indonesia.
These safeguards may include:
If you would like further information about the safeguards applied to any specific international data transfer, please contact our Data Protection team at [email protected].
sga123 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, applicable law, or the requirements of our licensing authority. The "Last Updated" date at the top of this document will be revised whenever a substantive change is made.
Where changes are material — meaning they significantly affect your rights or the way we process your Personal Data — we will notify you by:
We encourage you to review this Privacy Policy periodically so that you remain informed about how sga123 is protecting your data. Your continued use of the platform following notification of any update constitutes your acknowledgement of the revised policy. If you object to any change, you should cease using the platform and contact our support team to close your account and arrange withdrawal of any remaining balance.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to submit a formal data protection complaint, please contact sga123's Data Protection team through any of the following channels:
We will acknowledge all data rights requests within 3 business days WIB and will provide a substantive response within 30 calendar days. Where a request is particularly complex or where we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
If you are dissatisfied with our response to a data protection complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. sga123 will cooperate fully with any such supervisory authority investigation.
We believe informed members are empowered members. Explore the rest of sga123's platform documentation, or head back to the homepage to experience our full range of betting and gaming products.
SSL Encrypted | AES-256 Data Storage | No Data Selling | 21+ Only