sgtoto Casino & Sportsbook Data Care
This page describes what we collect when you use sgtoto and how we keep that data protected. When you create an account on sgtoto, we ask for your email address, password, and basic personal information—name, date of birth, phone number. If you wish to deposit funds or withdraw winnings, we ask for identity documents and payment details so we can verify your identity and process transactions securely. We collect this information only because we need it to operate our platform safely and comply with laws that apply to gaming and betting services.
We understand that you trust sgtoto with sensitive details. Our commitment is to keep your data encrypted, limit how we share it, and give you control over what happens to it. We do not sell your information to advertisers or data brokers. We do not use your account history to profile you for marketing purposes beyond informing you of updates to our own services. We store your data only as long as necessary to serve your account and comply with legal requirements.
This policy explains our data practices transparently so you know exactly what we do and why. If you have questions or wish to request access to your data, contact our support team.
What we collect when you use sgtoto
We collect different types of information depending on what you do on sgtoto. When you register, we ask for your email address, a password, your full name, date of birth, phone number, and country of residence. We need this information to create your account, verify your identity, and check that you are eligible to use our platform under local law.
When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer to mobile banking, local payment, online payment, or e-wallet, we collect payment information. We do not store your full payment card numbers or wallet credentials on our own servers. Instead, we pass your payment details to encrypted payment processors, and they handle the transaction securely. We retain only a record that the transaction occurred—the amount, date, and payment method you used.
When you use sgtoto, we also collect usage data. We log when you log in, which games you play, which tournaments you join, and how long you remain active. We collect this data through standard web logs and analytics tools so we can understand how sgtoto is used and identify technical issues. Your IP address and device type are also recorded. We do not use this data to identify you personally; instead, we use it to improve performance and security.
How we use your data on sgtoto
We use the information we collect to operate sgtoto and serve your account. We use your email address to send you account notifications (such as verification codes and password resets), updates about tournaments and special events, and responses to your support requests. We use your payment details to process deposits and withdrawals. We use your identity documents to verify your eligibility under local law and to prevent fraud and account takeover.
We also use your data for security and legal compliance. We monitor account activity for signs of fraud, collusion, or abuse of our platform. If we detect suspicious behaviour, we may freeze your account pending investigation. We retain transaction records for tax purposes and to comply with regulations applicable to gaming operators. These legal obligations mean we may be required to disclose your data to government authorities in certain circumstances, even if you do not request it.
We do not use your sgtoto activity data (which games you play, which tournaments you enter, your account balance) for marketing purposes. We do not share this information with third-party advertisers. However, we may contact you via email about updates to sgtoto's features, new tournaments, or service changes. You can opt out of these emails through your account preferences or by contacting our support team.
Third-party processors and data location
Our sgtoto platform relies on third-party services to function. Our payment processors handle all deposit and withdrawal transactions. Our cloud hosting provider stores our servers and databases. Our email service provider sends you account notifications and support responses. These third parties are contractually required to protect your data and to use it only for the purposes we specify. We do not give them permission to use your data for their own marketing or secondary purposes.
Our servers may be located outside your jurisdiction. By creating an sgtoto account, you agree that your data may be stored and processed in multiple countries. We ensure that all data transfers are encrypted and that our processors meet standard security practices. If you are located in a region with specific data-protection laws (such as GDPR in Europe), we comply with those laws where applicable.
We work with verification services to confirm your identity during KYC. These services cross-reference your personal information against identity databases to detect fraud. We share only the minimum information necessary to complete this verification. These verification providers are bound by confidentiality agreements and may not use your information for other purposes.
Your sgtoto data: key facts
- We collect account information, payment details, and identity documents only as needed to operate sgtoto
- We encrypt all sensitive data and store payment card details with third-party processors, not on our servers
- We do not sell your data to advertisers or data brokers
- We may be required to disclose your data to government authorities for legal compliance
- You have the right to access, correct, or request deletion of your personal data
Your rights and how to contact us about your data
You have the right to request access to the personal data we hold about you. You can download your account history, transaction records, and identity documents from your sgtoto dashboard or by contacting our support team. You also have the right to request corrections if your personal information is inaccurate. If you wish to delete your account and all associated data, you may request account closure. However, we may retain certain data (such as transaction records) if required by law for anti-money-laundering or tax purposes.
If you have questions about our privacy practices or wish to exercise your rights, contact our support team during business hours via email or in-app messaging. We respond to data requests within five business days. If your request is complex (such as requesting all data across multiple jurisdictions), we may need additional time. We will inform you of any delays.
We review and update this privacy policy periodically. If we make material changes (such as expanding the types of data we collect or how we use it), we notify you via email or in-app notice. Continued use of sgtoto after such notice means you accept the updated policy. Our sgtoto platform is available only where local law permits gaming and betting. Users in all supported regions from Jakarta to Semarang are subject to the same data-protection standards. If you have specific questions about how data law applies in your jurisdiction, consult local legal guidance or contact us for clarification.
Data retention and security practices
We retain your sgtoto account information for as long as your account is active. If you close your account, we delete most personal data within thirty days. However, we retain transaction records for seven years to comply with tax and anti-money-laundering regulations. We also retain anonymized account data (such as gameplay patterns without your name attached) for product improvement, though this anonymized data cannot identify you.
We protect all sgtoto data using industry-standard encryption. Your login session uses SSL encryption, which means data transmitted between your device and our servers is scrambled and unreadable to third parties. Your password is hashed using a one-way encryption algorithm, so we cannot see your password even if our servers are breached. Payment details are encrypted and processed through secure third-party gateways. Identity documents are encrypted and stored separately from your gaming account.
We conduct regular security audits and penetration testing to identify vulnerabilities. If we discover a data breach, we notify affected users within the timeframe required by applicable law. We do not charge you for this notification or for services to monitor your account for fraudulent activity—that protection is part of our commitment to sgtoto users.
Jurisdiction and compliance
Our sgtoto platform is available only where local law permits gaming and betting. You are responsible for verifying that your jurisdiction allows use of our services. We comply with data-protection laws in jurisdictions where we operate. If your jurisdiction has specific requirements (such as mandatory data-localization or consent-before-collection rules), we follow those rules for users in that region.
We undertake to keep this privacy policy up to date as our practices evolve and as laws change. You can review the current version of our policy at any time on sgtoto.app. If you have concerns about our privacy practices or believe we have violated this policy, contact our support team and request escalation to our management team. We take data protection seriously and are committed to resolving any concerns promptly and transparently.