Privacy Policy

1. Introduction

This Privacy Policy explains how sbowin ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal information of users ("you", "your") who access or use our online sports betting and casino services. By creating an account on sbowin or using any of our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

sbowin is committed to safeguarding your privacy and ensuring the security of your personal data. We recognize that trust is essential in the online gambling industry, and we take our data protection responsibilities seriously. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Platform following any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account on sbowin, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identification documents (KTP, SIM, or passport).
• Contact Information: Residential address (street address, city, province, postal code), email address, and mobile phone number.
• Account Credentials: Username, password, and security questions/answers used to access your sbowin account.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history related to deposits and withdrawals.
• Verification Documents: Copies of government-issued photo ID (KTP, SIM, passport), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification (KYC - Know Your Customer) purposes.

2.2 Information Collected Automatically

When you access or use the sbowin Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers (IMEI, MAC address, device ID).
• Connection Data: IP address, internet service provider (ISP), geographic location (country, city), time zone, and connection timestamps.
• Usage Data: Pages visited, features accessed, games played, bets placed, bet outcomes, time spent on the Platform, click patterns, navigation paths, and referral sources.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior, preferences, and interactions with the Platform. For more details, see Section 8 (Cookies Policy).

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Providers: Transaction data, payment verification status, and fraud screening results from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party KYC service providers.
• Marketing Partners: Referral information, campaign tracking data, and affiliate attribution from authorized marketing partners who refer users to sbowin.
• Game Providers: Gameplay data, session logs, and game outcome records from our licensed game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft).

3. How We Use Your Information

sbowin collects and uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• To create, maintain, and manage your sbowin account.
• To process deposits, withdrawals, and internal account transfers.
• To provide access to sports betting markets, casino games, and live dealer tables.
• To track your betting history, game sessions, and account balance.
• To process bonus claims, apply wagering requirements, and manage promotional offers.
• To provide customer support and respond to your inquiries via live chat, email, or phone.

3.2 Legal and Regulatory Compliance

• To verify your age (21+ requirement) and confirm your eligibility to use the Platform.
• To conduct Know Your Customer (KYC) and identity verification checks as required by anti-money laundering (AML) regulations.
• To detect and prevent fraud, money laundering, terrorist financing, bonus abuse, and other illegal activities.
• To comply with legal obligations, court orders, law enforcement requests, and regulatory audits.
• To maintain records of transactions and communications as required by gambling licensing authorities.

3.3 Platform Improvement and Analytics

• To analyze usage patterns, user behavior, and Platform performance to improve our services.
• To conduct A/B testing, user research, and product development.
• To monitor Platform uptime, detect technical issues, and optimize server performance.
• To generate aggregated, anonymized statistics and reports for internal business analysis.

3.4 Marketing and Communications

• To send you promotional offers, bonus notifications, and personalized marketing communications via email, SMS, push notifications, or in-Platform messaging (only if you have opted in to receive such communications).
• To inform you about new games, features, tournaments, and special events on the Platform.
• To conduct customer satisfaction surveys and request feedback on our services.

3.5 Security and Risk Management

• To monitor account activity for suspicious behavior, unauthorized access, or terms violations.
• To enforce our Terms & Conditions and Responsible Gaming policies.
• To investigate disputes, complaints, and potential policy violations.
• To protect sbowin's legal rights, property, and user safety.

4. Legal Basis for Processing (GDPR Compliance)

Although sbowin primarily serves users in Indonesia, we recognize international data protection standards. Our legal bases for processing your personal data include:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms & Conditions (e.g., processing deposits, providing betting services, paying out winnings).
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including age verification, KYC/AML checks, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, Platform improvement, and customer analytics, provided that these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing certain types of data, particularly for marketing communications. You may withdraw consent at any time by contacting us or using opt-out mechanisms in marketing emails.

5. How We Share Your Information

sbowin does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other authorized payment gateways to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft to provide access to their games and track gameplay sessions.
• Identity Verification Services: Third-party KYC and AML compliance providers to verify your identity and screen for fraud.
• Customer Support Tools: Live chat software providers, email service platforms, and helpdesk ticketing systems to manage customer inquiries.
• Cloud Hosting and Infrastructure: Cloudflare, Amazon Web Services (AWS), or other cloud service providers that host our Platform infrastructure and data storage.
• Marketing and Analytics Partners: Email marketing platforms, SMS gateways, analytics tools (Google Analytics, Mixpanel), and affiliate tracking systems (only aggregated or anonymized data where possible).

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulators, courts, or other governmental bodies if required by law, court order, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations or respond to lawful requests from public authorities.
• Protect and defend sbowin's rights, property, or safety, or the rights, property, or safety of our users or the public.
• Investigate or prevent fraud, money laundering, terrorist financing, or other illegal activities.
• Enforce our Terms & Conditions or other policies.

5.3 Corporate Transactions

In the event that sbowin undergoes a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or a prominent notice on the Platform before your information is transferred and becomes subject to a different Privacy Policy.

6. Data Security

sbowin employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Payment card data is never stored on our servers; all card transactions are processed through PCI-DSS compliant payment gateways.
• Access Controls: Access to personal data is restricted to authorized sbowin employees, contractors, and service providers on a need-to-know basis, and is protected by role-based access controls, multi-factor authentication, and strong password policies.
• Data Minimization: We collect only the personal information necessary to provide our services and comply with legal obligations, and we retain data only as long as required for the purposes described in this Privacy Policy.
• Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
• Incident Response: In the event of a data breach, we have incident response procedures in place to contain the breach, assess the impact, notify affected users, and report to relevant authorities as required by law.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you suspect unauthorized access to your account, you must notify us immediately at [email protected].

7. Data Retention

sbowin retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal information for active accounts is retained for the duration of your relationship with sbowin.
• Closed Accounts: After account closure, we retain your personal information for a minimum of five (5) years to comply with legal, regulatory, and tax obligations, and to defend against potential legal claims. Financial transaction records and KYC documents are typically retained for seven (7) years or longer as required by anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, we will retain your email address or phone number on a suppression list to ensure we do not contact you again, but we will delete other marketing-related data.
• Technical Logs: Server logs, IP addresses, and usage data are typically retained for 90 to 180 days unless longer retention is required for security investigations or legal compliance.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

8. Cookies Policy

sbowin uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content and advertising. A cookie is a small text file that is stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionality such as account login, session management, and secure transactions. You cannot opt out of essential cookies.
• Performance Cookies: Collect information about how you use the Platform, such as which pages you visit most often and whether you encounter error messages. These cookies help us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences (e.g., language, time zone, favorite games) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity across websites to deliver relevant advertisements and measure the effectiveness of marketing campaigns. These cookies may be set by sbowin or by third-party advertising networks.

8.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, accept only certain cookies, or notify you when a cookie is set. However, if you block or delete cookies, some features of the Platform may not function properly, and you may not be able to use certain services.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal information, subject to legal and regulatory retention requirements.
• Right to Restriction of Processing: You have the right to request that we limit how we use your personal information in certain circumstances.
• Right to Data Portability: You have the right to receive your personal information in a structured, machine-readable format and to transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected] with your account details and a description of your request. We will respond to your request within 30 days, or sooner if required by applicable law. Please note that some rights may be subject to legal or operational limitations (e.g., we cannot delete data required for regulatory compliance).

10. International Data Transfers

sbowin operates globally and may transfer your personal information to servers located outside of Indonesia for processing and storage. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

11. Children's Privacy

sbowin's services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete that information from our systems. If you believe that a minor has provided personal information to sbowin, please contact us at [email protected].

12. Third-Party Links

The sbowin Platform may contain links to third-party websites, applications, or services that are not operated or controlled by sbowin. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. sbowin is not responsible for the privacy practices or content of third-party websites.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Privacy Policy on this page and updating the "Last Updated" date at the top of the document. In some cases, we may also send you a notification via email or in-Platform message. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard
• Support Hours: 24 hours a day, 7 days a week (WIB)

Our customer support team is available around the clock to assist you with any privacy-related inquiries. We aim to respond to all privacy requests within 30 days or sooner as required by law.

Your Consent: By using the sbowin Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.