sgtotoPrivacy Policy

This page describes what we collect when you use sgtoto and how we keep that data protected. We collect personal information to verify your identity, process deposits and withdrawals, manage your account, and provide customer support. Your data is encrypted, stored securely, and never sold to third parties without your explicit consent.

Our privacy commitments apply to all users on sgtoto across supported jurisdictions—Jakarta, Surabaya, Bandung, Medan, Semarang, and others where we operate. We comply with applicable data protection laws and maintain transparency about how your information flows through our systems, our payment processors, and our support teams.

If you have questions about how sgtoto handles your data, contact our privacy team via the support channels listed at the end of this policy.

What Data We Collect and How sgtoto Uses It

We collect your email address, phone number, and full name when you open a sgtoto account. We also request government-issued identification, proof of address, and details of your payment method during Know Your Customer (KYC) verification. This information is necessary to confirm your identity, comply with legal requirements, and protect against fraud.

When you use sgtoto, we log your gameplay activity—wagers placed, games played, amounts deposited and withdrawn. We track your account tier, promotion claims, and bonus playthrough progress. We also collect your IP address, browser type, device identifier, and access timestamps to prevent unauthorized access and detect suspicious behaviour patterns.

We use your email to send account confirmations, promotion announcements, withdrawal status updates, and support responses. We use your phone number for two-factor authentication and account recovery. If you consent to marketing communications, we send periodic offers aligned with your account tier and activity level on sgtoto.

Third-Party Processors and International Data Transfers

Our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive deposit and withdrawal information necessary to complete transactions. These partners maintain their own privacy policies; we recommend reviewing them. Our customer support platform may process your name, email, and ticket history when you contact sgtoto support. Our hosting servers may sit outside your jurisdiction; data transferred internationally is encrypted in transit and at rest.

We do not sell or rent your data to marketing companies or advertisers. We may share aggregated, anonymized statistics (e.g., "X thousand active accounts in Jakarta") with analytics partners, but these cannot identify you personally. If we are required by law to disclose your data—such as a court order or regulatory request—we will comply and notify you unless legally prohibited from doing so.

We at sgtoto encrypt your data, store it securely, and share it only with payment processors and support providers who need it to serve you.

sgtoto privacy commitment

Cookies, Tracking, and Account Recovery on sgtoto

We use cookies to remember your login status, track your navigation on sgtoto, and prevent fraud. Session cookies expire when you close your browser; persistent cookies remain active for up to 12 months. You can disable cookies through your browser settings, but doing so may limit sgtoto platform functionality—you may need to re-enter login credentials more frequently, and some features may not work as intended.

We also use pixel tags and similar tracking technologies to measure how you interact with sgtoto pages and promotions. This data helps us improve our interface, identify technical issues, and tailor your experience. If you wish to opt out of tracking (where legally permitted), you can adjust your browser's Do Not Track settings; we honor this request on sgtoto.

Key privacy principles on sgtoto

  • We collect only information necessary for account verification, transactions, and fraud prevention.
  • Your data is encrypted and stored on secure servers; unauthorized access triggers automatic alerts.
  • We share data only with payment processors and support providers who agree to maintain confidentiality.
  • We do not sell your data to third parties or use it for marketing without your consent.
  • You can request a copy of your data or ask for deletion; we comply within standard response times.

Your Rights, Data Retention, and Contact on sgtoto

Your Data Rights on sgtoto

You have the right to access your personal data held on sgtoto. Submit a request via our support team, and we will provide a copy of your information within 14 business days. You can also request correction of inaccurate data—for example, if your name or address is misspelled in our system, we will update it upon verification.

You may request deletion of your sgtoto account and associated data, subject to legal and operational constraints. If your account contains an active balance, we will not delete it until you withdraw or forfeit the funds. If we suspect fraud or ongoing investigations, we may retain data longer than usual. Once a legitimate deletion request is processed, your personal information is removed from active systems within 30 days.

Data Retention on sgtoto

We retain your KYC documents and identity verification records for as long as your sgtoto account is active, plus seven years after account closure (to comply with financial recordkeeping laws). Your transaction history is retained indefinitely to support dispute resolution and account audits. Your promotional history and tier data are retained for 12 months after account closure to prevent re-registration abuse.

Cookies and tracking data are retained for up to 12 months; most expire automatically. Support ticket conversations remain accessible for 24 months; older tickets are archived and may require manual retrieval. If you request data deletion before a retention period ends, we will comply except where law requires retention.

Security Practices and Breach Notification

We encrypt all data in transit (HTTPS/TLS) and at rest (AES-256). Our servers are protected by firewalls, intrusion detection systems, and regular security audits. Access to your sgtoto account is protected by password and two-factor authentication; staff access is restricted and logged. We conduct annual penetration tests and vulnerability assessments to identify and remediate security gaps.

In the unlikely event of a data breach, we will notify affected users within 72 hours via email and SMS. Our notification will describe what data was exposed, what steps we took to contain the breach, and what you should do to protect yourself. We will also notify relevant regulators as required by law.

Contact sgtoto Privacy Team

If you have questions about how sgtoto handles your data, wish to exercise your privacy rights, or suspect a data breach, contact our privacy team. You can reach us via email at [email protected], or via live chat support on sgtoto. We respond in English within standard business hours. Include your account email and a clear description of your request so we can process it efficiently.

For data access requests, include your username and a copy of a government-issued ID to verify your identity. For deletion requests, confirm that you understand the implications—deleted data cannot be recovered. For breach or security concerns, provide as much detail as possible so our security team can investigate promptly.

Policy Updates and Legal Compliance

We may update this privacy policy at any time. Changes are effective immediately upon publication on sgtoto. Your continued use of our platform after an update constitutes acceptance of the new policy. We recommend reviewing this page periodically, especially before sharing sensitive information or during major platform changes.

Our privacy practices comply with applicable data protection laws in supported jurisdictions where sgtoto operates. If you believe our practices violate your privacy rights, you may file a complaint with your local data protection authority. We respect such complaints and will work with regulators to resolve concerns.

sgtoto protects your data by
  • Encrypting all personal information in transit and at rest
  • Restricting staff access to data and logging all access attempts
  • Conducting regular security audits and penetration tests
  • Requiring two-factor authentication and strong passwords
sgtoto does not
  • Sell or rent your personal data to third parties
  • Use your data for marketing without explicit consent
  • Share your identity with unrelated partners or competitors
  • Retain data longer than legally required or operationally necessary

Our sgtoto privacy policy is designed to balance your right to privacy with our operational and legal obligations. We are committed to handling your data responsibly, transparently, and securely. Every member of our team—from support staff to engineers—undergoes privacy training and agrees to maintain strict confidentiality.