sumaterabet Privacy Policy

This page describes what we collect when you use sumaterabet and how we keep that data protected. We understand that privacy matters to our users, so we outline exactly what information we gather, who can access it, and how long we retain it.

When you open an account on sumaterabet, verify your identity, or make a deposit through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank virtual account, we receive personal information. We handle this data according to applicable law and best practice security standards. We never sell your data to marketers or data brokers.

Our commitment is transparency. If you have questions about how we use your information, contact our support team. We respond to data access and deletion requests during standard business hours.

What Data We Collect on sumaterabet

We collect several categories of data when you register and use sumaterabet. Your account registration requires an email address, phone number, legal name, date of birth, and a government-issued ID number. We also collect your residential address for verification purposes.

When you fund your account, we record your deposit amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), and the timestamp. When you place a bet on football markets, live-dealer tables, slot games, or esports competitions, we log your bet details, stake, and outcome. When you withdraw, we record the withdrawal amount, destination, and processing status.

We also collect technical data: your IP address, browser type, device information, and how you navigate sumaterabet. This helps us troubleshoot issues and detect fraudulent access.

How We Use Your Data

We use your personal data for several purposes. First, we verify your identity to comply with financial regulations. We are required by law to confirm that you are who you claim to be before we process your withdrawals. Second, we use your data to process deposits and withdrawals through your chosen payment provider.

Third, we use your account information to manage your account, respond to support requests, and enforce our terms of service. If you contact us about a bet dispute or a payment issue, we pull your account data to investigate. Fourth, we use technical data to monitor platform security, detect fraud, and prevent unauthorised access.

We do not use your data for marketing without your explicit consent. We may send you service announcements (such as account verification reminders or policy updates) via email, but these are not promotional in nature.

Our Data Storage and Encryption

We store your personal data on secure servers. Your identity documents (ID photo, address proof) are encrypted and stored separately from your gaming activity and betting history. We use industry-standard TLS encryption for data in transit—when you log in or send information to sumaterabet, that data is encrypted before it reaches our servers.

Our servers may be located outside your jurisdiction; however, we apply the same security standards regardless of physical location. We conduct regular security audits and maintain a responsible disclosure policy for security vulnerabilities.

Encryption standard

We use TLS 1.2 or higher for all data in transit to sumaterabet servers.

At-rest storage

Identity documents and sensitive data are encrypted at rest using AES-256 or equivalent.

Access control

Only authorised staff members can access personal data, and only for legitimate business purposes.

Third-Party Processors and Payment Partners

When you deposit via mobile banking, local payment, online payment, e-wallet, or mobile banking, we share minimal data with those e-wallet providers—only your phone number and transaction amount. We do not share your full name, ID number, or betting history with them. Bank virtual accounts (local payment, online payment, e-wallet, mobile banking) receive similar limited information for processing purposes.

We also work with identity-verification vendors to confirm your documents. These vendors see your ID and address information but do not store it; they return a verification result to us and then delete your data according to their own retention policy.

We do not authorize third parties to use your data for their own marketing. Our processor agreements include strict data-protection clauses. If a processor breaches these terms, we terminate the relationship.

Your Rights Regarding Your Data

You have the right to request a copy of all personal data we hold about you. Send a data access request to support, and we will provide a download of your records within 10 business days. You also have the right to correct inaccurate data—if your address or phone number has changed, update it in your account settings or contact support.

You may request deletion of your personal data, subject to legal requirements. We may retain some data for a period if it is needed for dispute resolution, regulatory compliance, or fraud prevention. We will inform you of any retention period when you make a deletion request.

Data Retention Policy

We retain your account data (name, email, ID number, address) for as long as your account is active and for a minimum of 5 years after closure, per financial regulations. Betting and transaction history is retained for the same period. Technical logs (IP addresses, session data) are retained for 90 days, then deleted.

If your account is suspended or closed due to violation of our terms, we retain your data for an additional 3 years to prevent account reopening under false identities.

Cookies and Tracking

We use cookies on sumaterabet to store your login session, remember your language preference, and track how you navigate the platform. These cookies do not contain personal data; they are identifiers that link to your account only while you are logged in.

We do not use third-party tracking cookies (such as Google Analytics pixels) on sumaterabet. We do not sell your browsing data to advertising networks. If you prefer not to use cookies, you can disable them in your browser settings, but some platform features may not work correctly.

Security Incidents and Breach Notification

If we discover that your personal data has been compromised due to a security breach, we will notify you via email within 48 hours. We will describe what data was affected, what steps we have taken to secure it, and what you should do to protect yourself.

We maintain a cyber-insurance policy and conduct annual penetration testing to identify and fix vulnerabilities before they are exploited. Our incident-response team has a documented protocol for containing and investigating breaches.

International Data Transfers

Your data may be processed, stored, or transferred outside Indonesia. By using sumaterabet, you acknowledge that your data may be transferred to servers in other countries. We apply the same security and privacy standards to international data as we do to data stored domestically. We do not transfer your data to jurisdictions with weaker privacy laws without legal safeguards.

Contact and Policy Changes

If you have questions about this privacy policy, contact our support team via in-app chat or email. We are available during standard business hours. For urgent privacy concerns, label your email "PRIVACY REQUEST" and we will escalate it to our data-protection team.

We may update this policy at any time. We will notify you via email of material changes. Your continued use of sumaterabet after such notification means you accept the updated policy. If you disagree with changes, you may request account closure and a data deletion within 30 days of notification.

We at sumaterabet take data protection seriously. Your trust is essential to our relationship with you, and we commit to handling your information responsibly, transparently, and securely.