At sga505, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we protect it, and what rights you hold over your own information as a player on our platform.
Effective Date: January 1, 2026 | Last Reviewed: January 1, 2026This Privacy Policy ("Policy") describes how sga505 ("the Platform", "we", "us", "our") collects, processes, stores, protects, and discloses personal data belonging to individuals ("User", "Player", "you", "your") who access or use any service available at https://sga505.app and all associated subdomains and mobile-optimised versions (collectively, "the Site"). This Policy forms part of our broader Terms & Conditions and should be read alongside that document.
sga505 is Indonesia's premier online betting and casino platform, serving players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and all major Indonesian cities. To deliver our sportsbook, live casino, slot gacor (high-RTP Indonesian-popular slot titles), togel (Indonesia's traditional numbers lottery), and virtual sports products at the highest level of quality and security, we must process certain categories of personal data relating to our players.
This Policy is designed to give you a clear, honest, and complete picture of our data practices. We describe every category of data we collect, every purpose for which we use it, every party with whom it may be shared, and every right you can exercise over it. We have written this document in plain, professional English so that it is genuinely readable — not buried in impenetrable legal boilerplate.
If you have questions about any aspect of this Policy that are not answered below, our data protection team is reachable at the contact details provided in Section 15. We aim to respond to all privacy-related enquiries within 48 hours (WIB — Western Indonesia Time, UTC+7).
For the purposes of applicable data protection legislation, sga505 acts as the data controller in respect of the personal data collected via the Site. As data controller, sga505 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable privacy law.
Where sga505 engages third-party service providers to carry out processing activities on our behalf — such as KYC verification providers, payment processors, or fraud detection systems — those parties act as data processors and are bound by strict contractual obligations that prohibit them from using your data for any purpose other than the specific service they provide to sga505.
sga505 collects personal data across several categories. The table below provides a structured overview of the specific data types we process:
| Category | Data Types Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued identification number (KTP, passport, or driver's licence number), gender. |
| Contact Data | Email address, Indonesian mobile phone number, residential address (province and city — e.g., Jakarta, Surabaya, Bandung, Bali). |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history, account balance. |
| Account Data | Username, encrypted password hash, account registration timestamp, login history (date, time, IP address), preferred language and currency settings. |
| Gaming & Betting Data | Wager history (sport, market, odds, stake, outcome), game session logs, RTP data, bonus uptake and wagering progress, win/loss records. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL, clickstream data. |
| Communications Data | Records of live chat conversations, email correspondence, support ticket content, and any other direct communications with sga505 staff. |
| Responsible Gaming Data | Self-set deposit limits, loss limits, session time alerts, self-exclusion periods, and any responsible gaming assessments carried out by sga505's compliance team. |
| KYC Documents | Scanned or photographed copies of identity documents (KTP, passport, driver's licence), proof of address documents, and payment method ownership evidence submitted during the verification process. |
sga505 collects personal data through the following channels and mechanisms:
The majority of your personal data is collected directly from you at the point of account registration, during the KYC verification process, when you make a deposit or withdrawal request, or when you contact our customer support team. You are always informed at the point of collection what data is required and why.
When you access the sga505 website, our servers automatically record certain technical data including your IP address, device fingerprint, browser type, and session timestamps. This data is collected automatically via server logs and, where applicable, through cookies and similar tracking technologies — described in detail in Section 8.
In certain circumstances, sga505 may receive personal data about you from reputable third-party sources for the purposes of identity verification and fraud prevention. These sources include internationally accredited KYC verification bureaux and licensed credit reference agencies. Data received from third-party sources is treated with the same level of protection as data you provide directly.
sga505 may derive inferred data about your preferences, risk profile, and playing patterns from your actual activity on the Platform. Inferred data is used exclusively for responsible gaming monitoring, personalised promotional communications (where you have consented to receive them), and fraud detection. Inferred data is never shared with third-party advertisers.
sga505 processes your personal data for the following clearly defined purposes. We do not process personal data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.
Every processing activity carried out by sga505 rests on one of the following recognised legal bases:
sga505 does not sell, rent, or otherwise commercially transfer your personal data to any third party. Data is shared only in the limited circumstances described below, and only with parties who are contractually obligated to process it solely for the purpose specified:
sga505 engages carefully vetted third-party processors to assist with specific operational functions. These include KYC identity verification providers, payment gateway and banking partners (including Indonesian local banks and e-wallet operators), fraud detection and risk management platforms, cloud hosting and infrastructure providers, and customer support platform vendors. Each processor operates under a data processing agreement that prohibits secondary use, sub-processing without consent, and retention beyond the agreed period.
sga505 integrates games from internationally certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios receive only the minimum technical session data required to launch and operate their games within the sga505 environment. No personally identifiable Account data is transmitted to game studios.
sga505 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, a valid legal order, or a legitimate government request. Where legally permissible, sga505 will notify the affected Player before disclosing their data in response to such a request.
In the event of a merger, acquisition, restructuring, or sale of all or part of sga505's business, personal data held by sga505 may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified in advance and the receiving entity will be bound by privacy obligations no less protective than those set out in this Policy.
sga505 uses cookies and similar client-side tracking technologies to deliver a secure, functional, and personalised experience on the Site. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for core Site functionality including secure login sessions, balance display, bet placement, and fraud prevention. Cannot be disabled without breaking the Platform. | Session / up to 30 days |
| Functional | Remembers your preferences such as language settings, last-viewed games, and notification preferences to improve your return-visit experience. | Up to 12 months |
| Analytics | Collects anonymised, aggregated data about page views, session duration, and navigation paths to help sga505 improve the Platform. No personally identifiable data is captured. | Up to 24 months |
| Security | Used to detect suspicious login behaviour, device spoofing, and bot activity. These cookies are essential to the integrity of the Platform and cannot be opted out of. | Session / up to 7 days |
sga505 does not deploy third-party advertising or retargeting cookies. No data collected via sga505 cookies is shared with advertising networks.
You may manage cookie preferences via your browser settings. Disabling strictly necessary or security cookies may impair your ability to access and use the Platform. Disabling functional or analytics cookies will not prevent you from using sga505 but may affect the personalisation of your experience.
As a data subject, you hold the following rights in respect of the personal data that sga505 processes about you. These rights may be exercised at any time by contacting our support team at the details provided in Section 15:
All data rights requests should be submitted via email to our data protection team at the address listed in Section 15. Please include your full registered name, your sga505 Account username, and a clear description of the right you wish to exercise. We may request proof of identity before processing your request to protect against fraudulent data access.
sga505 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | International AML and financial compliance standards |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory KYC retention mandate |
| Gaming & Betting Logs | 3 years from session date | Dispute resolution and responsible gaming monitoring |
| Customer Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical / Log Data | 90 days | Security monitoring and fraud detection |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent management compliance |
On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original record. Anonymised data may be retained indefinitely for aggregated statistical analysis.
sga505 has implemented a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
sga505 is strictly an adults-only platform. In accordance with our Terms & Conditions and applicable responsible gaming obligations, access to the Platform is permitted only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data belonging to any person under the age of 21.
As part of our account registration and KYC verification process, all Players are required to provide a government-issued identity document confirming their date of birth. Accounts where the registered user is found to be under 21 years of age will be suspended immediately, any funds held will be returned to the verified payment source, and all personal data associated with the underage account will be securely deleted once the matter is resolved.
Parents and guardians are encouraged to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. sga505 supports the use of such tools as part of our broader responsible gaming commitment.
sga505 operates as an internationally regulated platform. To deliver our services at the quality and reliability our Indonesian players expect, certain processing activities — including cloud infrastructure hosting, KYC verification, and fraud detection — may involve transferring personal data to servers or processors located outside of Indonesia.
Whenever personal data is transferred internationally, sga505 ensures that an adequate level of protection is maintained through one or more of the following safeguards:
You may request information about the specific safeguards applied to any international transfer of your personal data by contacting our data protection team at the address in Section 15.
sga505 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, evolving legal obligations, new product features, or feedback received from our player community. We are committed to transparency regarding such changes.
When a material change is made to this Policy — meaning a change that alters your rights or our obligations in a meaningful way — sga505 will:
For minor, non-material changes — such as correcting typographical errors, clarifying existing language, or updating contact details — sga505 may update the Policy without advance notice. The revised date at the top of this page will always reflect the most recent review.
Your continued use of the sga505 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should cease using the Platform and contact our support team to close your Account and request data deletion in accordance with your rights under Section 9.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way sga505 handles your personal data, please do not hesitate to get in touch. Our data protection and customer support teams are available 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, and all other national holidays). Native Indonesian-speaking agents are available at all times.
For formal data subject access requests, right-to-erasure requests, or right-to-portability requests, please submit your request via email and include your full registered name, your sga505 Account username, and a clear description of the right you wish to exercise. We will acknowledge your request within 24 hours and fulfil it within the timeframes set out in Section 9.
Now that you understand how we protect your privacy, explore everything sga505 has to offer — from live sportsbook action and slot gacor titles to live casino tables and virtual sports. Adults 21+ only. Please play responsibly.