Privacy Policy

1. Introduction

This Privacy Policy describes how sgp404 ("we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your") who access and use our online gaming platform at https://sgp404.cam. By registering an account or using any part of the sgp404 platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy.

We are committed to protecting your privacy and ensuring the security of your personal data. This policy is designed to comply with applicable international data protection regulations and to reflect our commitment to transparency in all data processing activities.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is sgp404, the operator of the gaming platform accessible at https://sgp404.cam and all associated sub-domains.

If you have questions, concerns, or requests regarding your personal data, you may contact our Data Protection Officer at the contact details provided in Section 14 of this Privacy Policy.

3. Data We Collect

sgp404 collects several categories of personal information to provide, secure, and improve our gaming services. The data we collect includes:

3.1 Account Registration Data

When you create an account with sgp404, we collect the following information:

• Full legal name as it appears on your Indonesian identity document (KTP, passport, or SIM)
• Date of birth (to verify you are at least 21 years of age)
• Indonesian national identity number (NIK from your KTP or equivalent government-issued ID)
• Email address
• Indonesian mobile phone number
• Residential address (city and province)
• Chosen username and password (password is stored in hashed, encrypted form only)

3.2 Know Your Customer (KYC) Verification Data

To comply with licensing requirements and Anti-Money Laundering (AML) regulations, we collect identity verification documents including:

• Photographs or scanned copies of your government-issued photo ID (KTP, passport, SIM)
• Selfie photograph holding your identification document
• Proof of payment method ownership (bank account statement, e-wallet screenshot showing your name and account details)
• Source of funds documentation for high-value transactions (payslips, business registration documents, bank statements) where required by AML procedures

3.3 Financial Transaction Data

We collect information related to your deposits and withdrawals, including:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or other Indonesian banks you use
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers or phone numbers)
• Transaction amounts, timestamps, and status
• Payment method selection history

Important: sgp404 does not store complete credit or debit card numbers, CVV codes, or card PINs. All card payment processing (where applicable) is handled by certified third-party payment processors compliant with PCI DSS security standards.

3.4 Gaming Activity Data

To operate our gaming services and detect fraud, we collect data about your gameplay including:

• Game selections (slots, live casino, togel, sabung ayam, sports betting including bandar bola and mix parlay)
• Bet amounts, bet types, and bet outcomes
• Session duration and frequency
• Account balance history
• Bonus usage and wagering progress
• Win/loss records

3.5 Technical & Device Data

When you access the sgp404 platform, we automatically collect certain technical information including:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser type
• Screen resolution and device identifier
• Pages visited, links clicked, and navigation paths
• Timestamps and session logs
• Referral source (how you arrived at sgp404.cam)

3.6 Communications Data

We retain records of your communications with sgp404, including:

• Live chat transcripts with Customer Support
• Email correspondence
• Support ticket history and resolutions
• Feedback, complaints, and dispute records

3.7 Responsible Gaming Data

If you utilise responsible gaming tools, we collect:

• Deposit limit preferences
• Self-exclusion or cooling-off period elections
• Reality check interval settings
• Session time limit preferences

4. How We Use Your Data

sgp404 uses your personal information for the following purposes:

5. Legal Basis for Processing

Under applicable data protection law, sgp404 must have a lawful basis for processing your personal data. Our legal bases include:

• Contractual Necessity: Processing your data is necessary to perform our contract with you (the Terms & Conditions) and to provide gaming services you have requested.
• Legal Obligation: We are legally required to collect and retain certain data for KYC, AML, age verification, and licensing compliance purposes.
• Legitimate Interests: We process certain data based on our legitimate business interests in operating a secure platform, preventing fraud, improving services, and resolving disputes, balanced against your privacy rights.
• Consent: For marketing communications and certain optional tracking technologies, we rely on your explicit consent, which you may withdraw at any time.

6. Data Sharing & Third-Party Disclosure

sgp404 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the limited circumstances described below:

6.1 Service Providers

We engage trusted third-party service providers to support our operations, including:

• Payment processors for Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet transactions (OVO, DANA, GoPay, ShopeePay, LinkAja)
• KYC and identity verification service providers
• Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and others)
• Cloud hosting and data storage providers
• Customer support software vendors
• Fraud detection and prevention partners

All service providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than providing services to sgp404.

6.2 Legal Disclosures

We may disclose your personal information if required to do so by law, or in response to valid requests from regulatory authorities, law enforcement agencies, or courts. We may also disclose information to protect the rights, property, or safety of sgp404, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

sgp404 implements industry-leading technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols.
• Secure Data Storage: Personal data at rest is stored on encrypted servers hosted in secure data centres with restricted physical access and 24/7 monitoring.
• Access Controls: Access to personal data is restricted to authorised sgp404 employees and contractors on a strict need-to-know basis.
• Two-Factor Authentication: Optional 2FA is available for all player accounts to prevent unauthorised login.
• Password Hashing: All user passwords are stored in irreversibly hashed form using bcrypt or equivalent algorithms. sgp404 employees cannot view your plaintext password.
• Regular Security Audits: Our systems undergo regular penetration testing and vulnerability assessments by independent third-party security firms.
• Firewall & Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls and intrusion detection systems.
• Employee Training: All sgp404 staff receive mandatory data protection and security awareness training.

8. Data Retention Periods

sgp404 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal obligations:

Following expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer identify you.

9. Your Data Subject Rights

Under applicable data protection law, you have the following rights with respect to your personal information:

9.1 Right of Access

You have the right to request a copy of the personal data sgp404 holds about you. We will provide this information in a structured, commonly used electronic format within 30 days of your request.

9.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most account information directly through your sgp404 account settings.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data. However, this right is subject to legal limitations — we may be required to retain certain data for regulatory compliance (KYC/AML records for 7 years), legal claims defence, or other legitimate reasons. Where retention is required, we will inform you of the reason.

9.4 Right to Restriction of Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we investigate a data accuracy dispute or a contested processing ground.

9.5 Right to Data Portability

You have the right to receive your personal data in a machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.

9.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text — not a clickable link) with the subject line "Data Subject Rights Request". We will respond within 30 days. You may also be required to verify your identity before we process your request.

10. Cookies & Tracking Technologies

sgp404 uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and deliver personalised content. A cookie is a small text file stored on your device that helps us recognise you on return visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality including login authentication, session management, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous data on how you use the platform to help us identify and fix technical issues.
• Functional Cookies: Remember your preferences (language, timezone, game favourites) to personalise your experience.
• Marketing Cookies: Track your navigation to deliver relevant promotional offers (only with your consent).

10.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling essential cookies may prevent you from accessing certain parts of the sgp404 platform. You can manage cookie preferences through your browser settings or through our cookie consent banner displayed on your first visit.

11. Marketing Communications

With your consent, sgp404 may send you promotional emails, SMS messages, or push notifications about new games, bonuses, togel draw results, special events (Indonesian Independence Day, Idul Fitri, Chinese New Year promotions), and exclusive offers tailored to your gaming preferences.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email
• Replying "STOP" to any SMS marketing message
• Adjusting your notification preferences in your sgp404 account settings
• Contacting Customer Support at [email protected] (plain text — not a clickable link)

Please note that even if you opt out of marketing communications, we will still send you essential service-related messages (withdrawal confirmations, KYC requests, terms updates, security alerts) which are necessary for the operation of your account.

12. Children's Privacy (21+ Only)

sgp404 is an adults-only platform. Our services are intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will delete that information immediately and permanently close the associated account.

If you believe that a person under 21 has created an account with sgp404, please contact us immediately at [email protected] (plain text — not a clickable link) so we can take appropriate action.

13. Changes to This Privacy Policy

sgp404 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Where changes are material, we will provide at least 7 days' advance notice via email to the address registered on your account and/or via a prominent notice on the platform.

The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised. Your continued use of the sgp404 platform following any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must cease using the platform and request account closure before the effective date.

14. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or about how sgp404 handles your personal information, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Inquiry" or "Data Subject Rights Request"
• Response Time: We aim to respond to all privacy-related inquiries within 2 business days, and to complete data subject rights requests within 30 days as required by law.

You also have the right to lodge a complaint with your local data protection authority if you believe sgp404 has not adequately addressed your privacy concerns.