Privacy Policy

1. Introduction

sar888 is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you visit our website at https://sar888.cam, create an account, and use our gaming services including sports betting, live casino, slots, and lottery games such as togel (traditional Indonesian numbers lottery).

We recognize that privacy is important, and we are dedicated to maintaining the highest standards of data protection in compliance with international privacy regulations and best practices applicable to online gaming platforms serving Indonesian players. By using sar888 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

If you do not agree with the practices described in this Privacy Policy, you should not use our services. This policy applies to all users of sar888, including residents of Indonesia who access our platform via desktop, mobile, or any other device.

2. Data Controller

sar888 is the data controller responsible for your personal information collected through our platform. We determine the purposes and means of processing your personal data. For all privacy-related inquiries, data access requests, or concerns, you may contact us at [email protected].

As the data controller, sar888 is committed to processing your personal information lawfully, fairly, and transparently. We ensure that personal data is collected only for specified, explicit, and legitimate purposes and is not processed in a manner incompatible with those purposes.

3. Information We Collect

sar888 collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register for a sar888 account, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name as it appears on your Indonesian identity card (KTP), date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province
• Account Credentials: Username and encrypted password chosen by you during registration
• Financial Information: Bank account details for deposits and withdrawals, including bank name (BCA, BRI, BNI, Mandiri, etc.), account number, and account holder name; e-wallet information for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts
• Verification Documents: Copies of your Indonesian identity card (KTP), proof of address (utility bill or bank statement), and potentially additional documents requested during enhanced due diligence procedures
• Communication Records: Messages, emails, and chat transcripts when you contact customer support

3.2 Information Collected Automatically

When you access and use sar888, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers
• Connection Information: IP address, Internet Service Provider (ISP), connection speed, and general geographic location derived from IP address
• Usage Data: Pages visited, features used, time spent on each page, clickstream data, games played, bets placed, deposits made, withdrawals requested, and other platform interactions
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 9 for details)
• Gaming Activity: Betting history, win/loss records, gaming preferences, favorite games, session duration, and patterns of play

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, and fraud detection signals from banks and e-wallet providers
• Identity Verification Services: Results of identity checks, document authentication, and age verification performed by specialized third-party services
• Fraud Prevention Providers: Risk scores, device fingerprints, and behavioral analytics to detect and prevent fraudulent activity
• Marketing Partners: Information about how you arrived at sar888 if you clicked on a referral link or advertisement (subject to applicable privacy laws)

4. How We Use Your Data

sar888 processes your personal information for various purposes related to providing, improving, and securing our gaming services. We use your data in the following ways:

4.1 Service Provision and Account Management

• Creating and maintaining your player account
• Verifying your identity and age to comply with legal requirements (21+ age restriction for Indonesian players)
• Processing deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR)
• Providing access to our gaming products including sports betting on BRI Liga 1, EPL, live casino, slots, and lottery games
• Managing your gaming activity, tracking wins and losses, and calculating payouts
• Administering bonuses, promotions, loyalty programs, and VIP rewards
• Maintaining transaction records and account history

4.2 Customer Support and Communication

• Responding to your inquiries, questions, and support requests via email and live chat
• Sending transactional emails regarding deposits, withdrawals, account verification, password resets, and important account updates
• Providing updates on platform maintenance, service interruptions, or security alerts
• Conducting customer satisfaction surveys to improve service quality

4.3 Security, Fraud Prevention, and Compliance

• Detecting, preventing, and investigating fraudulent transactions, money laundering, identity theft, and other illegal activities
• Monitoring for multiple accounts, collusion, bonus abuse, and violations of our Terms and Conditions
• Complying with legal obligations including Know Your Customer (KYC) requirements, anti-money laundering (AML) regulations, and reporting obligations
• Enforcing our terms of service, resolving disputes, and protecting the rights and safety of sar888, our users, and third parties
• Conducting internal audits and maintaining regulatory compliance records

4.4 Platform Improvement and Analytics

• Analyzing usage patterns to understand how players interact with our platform
• Improving website performance, fixing bugs, and optimizing user experience
• Developing new features, games, and services based on player preferences
• Conducting A/B testing to determine the most effective platform designs
• Generating aggregate statistical reports (anonymized data without personally identifiable information)

4.5 Marketing and Promotional Communications (With Your Consent)

• Sending promotional offers, bonus opportunities, and special events relevant to Indonesian players (e.g., Independence Day promotions, Idul Fitri bonuses)
• Providing personalized game recommendations based on your playing history
• Notifying you of new games, features, and platform updates
• Inviting you to participate in tournaments, leaderboards, and competitions

You can opt out of marketing communications at any time by adjusting your preferences in your account settings or by clicking the unsubscribe link in promotional emails. Please note that even if you opt out of marketing emails, you will still receive essential transactional and account-related communications.

5. When We Share Your Data

sar888 does not sell your personal information to third parties. We share your data only in the following limited circumstances necessary for business operations and legal compliance:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that process deposits and withdrawals
• Identity Verification Services: Third-party providers that verify your identity, authenticate documents, and conduct age checks
• Game Providers: Gaming software developers and platform providers that power our slots, live casino, and other gaming content
• Customer Support Tools: Live chat platforms and helpdesk software used to provide customer service
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host our platform and databases
• Analytics Providers: Services that help us analyze platform usage and improve user experience
• Fraud Prevention Services: Specialized providers that help detect and prevent fraudulent activity, money laundering, and security threats

All third-party service providers are bound by strict confidentiality agreements and are only permitted to process your personal data for specified purposes. They are not authorized to use your information for their own purposes or share it with others without our consent.

5.2 Legal and Regulatory Requirements

We may disclose your personal information when required or permitted by law, including:

• In response to valid legal requests from government authorities, law enforcement agencies, or courts
• To comply with applicable gaming regulations, licensing requirements, and regulatory audits
• To investigate suspected criminal activity, fraud, money laundering, or violations of our Terms and Conditions
• To protect the rights, property, or safety of sar888, our users, or the public
• In connection with legal proceedings, dispute resolution, or enforcement of our terms

5.3 Business Transfers

If sar888 is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.4 Aggregate and Anonymized Data

We may share aggregate, anonymized, or de-identified data that cannot be used to identify you individually. This includes statistical reports on player demographics, popular games, betting trends, and platform usage patterns. Such data does not constitute personal information and may be shared without restriction.

6. Data Security Measures

sar888 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

6.1 Encryption and Secure Transmission

• All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols (minimum 256-bit encryption)
• Sensitive data such as passwords are hashed using strong cryptographic algorithms and never stored in plain text
• Financial information is tokenized and processed through PCI-DSS compliant payment gateways

6.2 Access Controls and Authentication

• Strict access controls ensure that only authorized personnel can access personal data on a need-to-know basis
• Multi-factor authentication (MFA) is required for administrative access to sensitive systems
• Regular access reviews and the principle of least privilege minimize unnecessary data exposure
• Employee background checks and confidentiality agreements protect against internal threats

6.3 Infrastructure and Network Security

• Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our network perimeter
• Regular security patches and updates keep systems protected against known vulnerabilities
• Secure data centers with physical security controls, surveillance, and restricted access
• Regular backups ensure data availability and recovery in case of system failures

6.4 Monitoring and Incident Response

• 24/7 security monitoring detects and responds to potential threats in real-time
• Automated fraud detection systems identify suspicious account activity and transactions
• Incident response procedures ensure rapid containment and mitigation of security breaches
• Regular security audits and penetration testing identify and address vulnerabilities

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously improve our security practices to protect your data to the best of our ability. If you become aware of any security vulnerability or unauthorized access to your account, please contact us immediately at [email protected].

7. Data Retention

sar888 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention practices are as follows:

Data Category	Retention Period	Reason
Account Information	Active account + 7 years after closure	Regulatory compliance, dispute resolution
Transaction Records	7 years from transaction date	Financial reporting, tax compliance, AML requirements
Identity Documents (KTP)	7 years after account closure	KYC compliance, fraud prevention
Gaming Activity Logs	5 years from activity date	Regulatory audits, dispute resolution
Customer Support Records	3 years from last communication	Quality assurance, dispute resolution
Marketing Preferences	Until withdrawn or account closure	Consent management
Session Logs	90 days from session end	Security monitoring, fraud detection

After the applicable retention period expires, we securely delete or anonymize personal information so that it can no longer be associated with you. Some information may be retained in anonymized or aggregated form for statistical and analytical purposes.

If you close your sar888 account, we will retain your information as described above to comply with legal obligations. You may request deletion of your data after the mandatory retention period expires by contacting our support team.

8. Your Privacy Rights

As a sar888 user, you have certain rights regarding your personal information. Depending on your jurisdiction, these rights may include:

8.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view most of your account information by logging into your sar888 account dashboard. For a comprehensive report of all data we hold, contact [email protected] with your request.

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your contact details, address, and phone number directly in your account settings. For changes to your name or identity documents, contact customer support with appropriate verification.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information under certain circumstances. Please note that we may be required to retain certain data for legal compliance (e.g., transaction records for 7 years for AML purposes). After mandatory retention periods expire, we can delete your data upon request.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

8.5 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time via account settings or unsubscribe links in emails.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days. To protect your privacy, we may require verification of your identity before fulfilling requests. There is no fee for exercising your rights, though we may charge a reasonable fee for excessive, repetitive, or manifestly unfounded requests.

9. Cookies and Tracking Technologies

sar888 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and provide personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, authentication, and security features. These cannot be disabled without affecting platform operation.
• Functional Cookies: Remember your preferences such as language, currency, and interface customization to provide a personalized experience.
• Analytics Cookies: Collect anonymized data on how users interact with our platform, helping us improve performance and user experience.
• Marketing Cookies: Track your activity across sessions to deliver relevant promotional offers and measure campaign effectiveness. These require your consent.

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling essential cookies may affect platform functionality and prevent you from using certain features. Disabling analytics or marketing cookies will not impact core gaming services.

9.3 Third-Party Tracking

We may use third-party analytics services (e.g., Google Analytics) that place cookies on your device to collect usage data. These third parties have their own privacy policies and cookie practices. We do not have direct access or control over third-party cookies.

10. Third-Party Links and Services

Our platform may contain links to third-party websites, applications, or services, including game providers, payment processors, and social media platforms. sar888 is not responsible for the privacy practices or content of these third parties. When you click on a third-party link, you leave our platform and are subject to that third party's privacy policy.

We encourage you to read the privacy policies of any third-party sites you visit. Third-party services may collect personal information, use cookies, and process data according to their own practices, which may differ from ours. sar888 does not endorse or assume responsibility for third-party privacy practices.

11. Children's Privacy

sar888 services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. Our registration process requires users to confirm they meet the minimum age requirement, and we verify age through identity document checks during KYC procedures.

If we discover that we have inadvertently collected personal information from an individual under 21, we will immediately delete such data and close the account. If you believe a minor has registered on sar888, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and use parental control software to prevent underage access to gambling websites.

12. Changes to This Privacy Policy

sar888 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice on our platform upon your next login

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of sar888 services after changes are made constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of our services and may request account closure.

Previous versions of our Privacy Policy are available upon request by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our customer support team:

• Email: [email protected]
• Live Chat: Available 24/7 on the sar888 platform
• Subject Line (for email): Please include "Privacy Inquiry" or "Data Protection Request" in your subject line for faster processing

When contacting us about privacy matters, please include your full name, account username (if applicable), and a detailed description of your inquiry or request. For security purposes, we may require verification of your identity before responding to requests related to personal information.

We aim to respond to all privacy-related inquiries within 30 days. Our Indonesian-speaking customer support team is trained to handle data protection requests and will assist you throughout the process.