sumatrabet Privacy Policy
This page describes what we collect when you use sumatrabet and how we keep that data protected. We recognise that your information is sensitive—account credentials, payment details, betting history, and device identifiers all flow through our platform. Our commitment is to handle each data point according to applicable law and our own operational standards.
We at sumatrabet operate as a jurisdiction-restricted service. Your access and use depend on whether our service is available in your location under local law. Before you deposit funds or place any markets, you are responsible for verifying that your jurisdiction permits access to our platform.
What We Collect and How We Use It
We collect your email address, full name, date of birth, and national ID or passport number when you register an account on sumatrabet. We also capture your mobile phone number, postal address, and bank or e-wallet account details when you link a payment method. These identifiers allow us to verify your identity, comply with anti-money-laundering (AML) regulations, and process deposits and withdrawals.
Our servers log your IP address, device type, browser fingerprint, and session timestamps whenever you log in or place a market. We track which Liga 1 fixtures, Champions League matches, live-dealer tables, and slot games you view or engage with. This behavioural data helps us detect fraud, prevent duplicate accounts, and optimise our platform performance. We do not sell this data to third parties; we use it internally to secure your account and improve our service.
When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, the payment gateway shares transaction details with us—amount, timestamp, and confirmation status. If you fund your account through mobile banking, local payment, online payment, or e-wallet virtual-account transfers, we receive your bank reference number and deposit proof. We retain these records for seven years to satisfy regulatory audit requirements.
We do not share your account details with third-party marketers
Your personal information stays within sumatrabet and our trusted payment processors. We never rent your email or phone number to external advertisers or data brokers.
Cookies and tracking pixels on sumatrabet allow us to remember your login state, preferred language, and recent bets. These are session-based and expire when you close your browser, or persistent if you choose "remember me" at login. We use no third-party analytics trackers (Google Analytics, Facebook Pixel, etc.). Our own servers measure page load times and crash reports to improve stability during high-traffic periods such as Liga 1 finals or Piala AFF tournaments.
Third-Party Processors and Data Transfers
Our payment gateways (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and the online payment / e-wallet / mobile banking / local payment banking networks) are third-party processors. When you initiate a deposit or withdrawal, your financial data passes to these entities' servers. Each processor operates under their own privacy policy. We encourage you to review their terms before linking your e-wallet or bank account to sumatrabet.
Our servers may sit outside your jurisdiction. We store encrypted backups on cloud infrastructure in Southeast Asia and potentially in other regions. You acknowledge that your data may be accessed, processed, or transferred outside Indonesia where applicable. We apply encryption (AES-256 for sensitive fields) and access controls to mitigate this risk.
Your Rights and Data Requests
You may request a copy of the personal data we hold about you on sumatrabet. Submit a formal request via email to our support team with your account email and a photo of your ID. We will respond within 14 business days with a downloadable archive of your account information, betting history, and payment records.
You may also request that we delete your account and associated data. Once you confirm deletion, we anonymise your betting history and remove personal identifiers within 30 days, except where local law requires us to retain records for tax or AML compliance (typically seven years). After the retention period expires, your data is purged permanently.
Our sumatrabet Commitment and Contact
We at sumatrabet commit to protecting your data against unauthorised access, alteration, and loss. We use HTTPS encryption for all web traffic, firewall rules to restrict access to our databases, and multi-factor authentication to secure staff accounts. We conduct annual security audits and penetration tests. If a breach occurs, we will notify affected users within 24 hours and cooperate with relevant authorities.
We review this privacy policy annually and update it if our data practices change. Material changes will be announced on our homepage or via in-app notification. Continued use of sumatrabet after an update constitutes your acceptance of the revised policy.
Questions about your data on sumatrabet?
Contact our support team via the help icon in your account settings. Include your account email and the specific data you wish to discuss. Response time is typically one business day during Jakarta office hours.
This privacy policy is current as of the date shown in your account "Settings" page. We at sumatrabet remain the data controller for all personal information you provide when using our platform, available only where local law permits.