sumsel Platform Privacy Notice

This page describes what we collect when you use sumsel and how we keep that data protected. We at sumsel take your privacy seriously. Every piece of information you provide—from your account credentials to your payment details—is handled according to applicable data protection law and our own internal safeguards.

Our platform operates across slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), sportsbook markets (Liga 1, Piala AFF, Champions League, Premier League), and esports betting (Mobile Legends, Free Fire, PUBG Mobile). To deliver these services securely, we collect certain data. This notice explains what, why, and how.

We store your information in secure data centres, some of which may sit outside your physical jurisdiction. We use industry-standard encryption, regular security audits, and strict access controls. Our support team in Jakarta, Surabaya, Bandung, Medan, and Semarang handles data requests during business hours in English and local languages.

What Data We Collect and Why

Account and identity information

When you create a sumsel account, we collect your email address, phone number, full name, date of birth, and residential address. We use this information to verify your identity (KYC process), prevent fraud, and comply with applicable law. Your date of birth confirms you meet the age threshold for our platform in your jurisdiction. Your address allows us to route support and process withdrawals to the correct location.

Payment and transaction data

We collect details of every deposit and withdrawal you make on sumsel. This includes the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amount, the date and time, and the final balance. We also retain records of every game you play—bet amounts, outcomes, timestamps, and final account balance. This is necessary for settlement, dispute resolution, and fraud prevention. Our payment processors (third-party payment gateways) also hold copies of transaction data to complete their own compliance obligations.

Technical and device information

When you access sumsel, we log your IP address, device type (mobile or desktop), operating system, browser, and approximate location (derived from IP). We use this to detect unauthorised access, prevent account takeover, and optimise our platform's performance. If you use sumsel during Idul Fitri, Idul Adha, Imlek, Nyepi, or other holidays, your activity is logged identically to regular days.

Communication records

We keep records of every message you send via our in-app chat or email to support. These records help our team assist you faster and provide evidence if a dispute arises. Chat logs are stored on sumsel's secure servers and archived after a defined period (typically 12 months) unless you request deletion earlier.

Your data on sumsel is encrypted in transit and at rest. We do not sell or lease your personal information to third parties for marketing purposes.

Your Rights and Our Commitments

Data retention and deletion

We retain your account data for as long as your sumsel account is active, plus a statutory retention period (typically 5–7 years) for financial records and compliance. If you request account closure, we anonymise your personal details but keep transaction records for regulatory purposes. You may request deletion of certain non-essential data (such as communication logs) at any time by contacting our support team. We will honour deletion requests within standard business days, except where law requires retention.

Third-party processors and international transfer

We engage third-party processors for specific functions: payment gateways handle card and bank-transfer data, email providers host our support system, and cloud hosting providers store our databases. All processors sign data-processing agreements committing them to the same privacy standards we uphold. Some of these processors' servers are located outside your country. We only transfer data across borders when necessary to deliver sumsel services and only to jurisdictions with equivalent or adequate data protection.

Cookies and tracking

We use cookies to keep you logged in, remember your game preferences, and analyse how you use sumsel. Session cookies expire when you close your browser. Persistent cookies remain for up to 12 months. We do not use cookies to track you across other websites. You can disable cookies in your browser settings, though doing so may limit sumsel's functionality.

Security measures

We employ encryption (TLS 1.2 or higher) for all data in transit. Your password is hashed and never stored in plain text. We conduct regular penetration testing and security audits. Our data centres have physical access controls and continuous monitoring. We implement two-factor authentication (2FA) for account security—we recommend you enable it.

Contact us about privacy

If you have a question about how we handle your data, request access to your information, or want to report a privacy concern, contact our support team. You can reach us via in-app live chat during business hours, email through our FAQ page, or by filling out the contact form on our About us page. We aim to respond to privacy inquiries within five to ten business days.

We at sumsel review this privacy notice periodically and update it as our practices or applicable law change. We will notify you of material changes via email or in-app notice. Your continued use of sumsel after we post changes constitutes your acceptance of the updated notice.

Our services are available only where local law permits. Users are responsible for verifying that their access and use of sumsel comply with their jurisdiction's applicable law. If you are unsure whether sumsel is available where you are located, contact our support team before creating an account.