Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by suga33 through our website at https://suga33.cam, mobile interfaces, customer support channels, and any other services we provide (collectively referred to as "Services"). This policy governs data collected from users in Indonesia and explains our practices regarding the collection, use, disclosure, and protection of your personal information.

suga33 operates as an online betting and gaming platform serving Indonesian players. We are committed to transparency in our data handling practices and compliance with applicable data protection laws. By accessing or using suga33 Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein.

If you have questions about this Privacy Policy or how we handle your personal information, please contact our Data Protection team at [email protected]. We are committed to addressing your concerns and ensuring your privacy rights are respected.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a suga33 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP or passport number)
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted hash format), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay), transaction history
• Verification Documents: Copies of identity cards (KTP, passport), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification
• Communication Records: Content of messages sent through customer support, live chat conversations, email correspondence, and feedback submissions

2.2 Information Collected Automatically

When you access suga33 Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Information: IP address, internet service provider, connection timestamps, geographic location (country, city level only)
• Usage Data: Pages visited, features used, betting activity, game preferences, session duration, clickstream data, navigation patterns
• Cookies and Tracking Technologies: Session cookies, preference cookies, authentication tokens, and similar technologies (see Section 8 for details)
• Performance Data: Page load times, error messages, system crashes, and technical diagnostics for platform optimization

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment status, and fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Identity Verification Services: Verification results from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers
• Game Providers: Gameplay data, bet history, and win/loss records from third-party software providers (Pragmatic Play, Evolution Gaming, etc.)
• Affiliate Partners: Referral source information if you registered through an affiliate link

3. How We Use Your Information

suga33 processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your suga33 account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, slots, togel lottery, and other gaming services
• Recording and settling bets, processing game outcomes, and crediting winnings
• Managing your account balance, transaction history, and betting records
• Sending account notifications, transaction confirmations, and service updates

3.2 Verification and Compliance

• Verifying your identity and age (21+ requirement) to comply with legal obligations
• Conducting KYC (Know Your Customer) and AML (Anti-Money Laundering) checks
• Detecting and preventing fraud, money laundering, bonus abuse, and unauthorized account access
• Monitoring transactions for suspicious activity patterns
• Complying with legal obligations, regulatory requirements, and law enforcement requests
• Maintaining records as required by gaming regulations and financial reporting standards

3.3 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, email, or phone
• Troubleshooting technical issues and resolving disputes
• Providing personalized customer service based on your account history
• Sending important service announcements, security alerts, and policy updates

3.4 Marketing and Promotions

• Sending promotional offers, bonus notifications, and marketing communications (with your consent)
• Personalizing marketing messages based on your gaming preferences and activity
• Administering bonuses, tournaments, competitions, and loyalty programs
• Conducting market research and customer satisfaction surveys

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in our emails. Opting out of marketing does not affect essential service communications.

3.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve website functionality, game selection, and user experience
• Conducting A/B testing to optimize features and interface design
• Generating aggregated, anonymized statistics for business intelligence and reporting
• Enhancing security measures and fraud detection algorithms
• Developing new features, games, and services based on user behavior insights

4. Information Sharing and Disclosure

suga33 does not sell or rent your personal information to third parties. We only share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Game Providers: Software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) who deliver casino games and slots to our platform
• Identity Verification Services: Third-party KYC/AML verification providers who validate identity documents and screen for fraud
• Technology Infrastructure: Cloud hosting providers, content delivery networks (CDNs), and IT security firms that maintain our platform infrastructure
• Customer Support Tools: Live chat software providers and customer relationship management (CRM) platforms

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence on all partners before sharing data.

4.2 Legal and Regulatory Requirements

We may disclose personal information when required by law or in response to legal processes:

• Complying with court orders, subpoenas, or legal obligations
• Responding to requests from law enforcement, regulatory authorities, or government agencies
• Protecting suga33's legal rights, enforcing our Terms & Conditions, or defending against legal claims
• Reporting suspicious transactions to financial intelligence units or anti-money laundering authorities
• Cooperating with investigations into fraud, money laundering, or illegal gambling activities

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will continue to be bound by this Privacy Policy.

5. Data Retention

suga33 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Account Data: Retained for the duration of your account's active status plus 5 years after account closure, as required by financial regulations and anti-money laundering laws
• Transaction Records: Retained for 7 years after the transaction date to comply with tax and accounting requirements
• Identity Verification Documents: Retained for 5 years after account closure for regulatory compliance and dispute resolution
• Communication Records: Retained for 3 years for customer service quality assurance and dispute resolution
• Marketing Consent: Retained until you withdraw consent or your account is closed, whichever comes first

After the retention period expires, we securely delete or anonymize your personal information. Anonymized data may be retained indefinitely for statistical and business intelligence purposes.

6. Data Security

suga33 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same encryption standard used by major banks
• Password Security: Passwords are hashed using bcrypt with strong salting, ensuring even suga33 staff cannot access your password
• Secure Servers: Personal data is stored on secure servers located in protected data centers with redundant security controls
• Firewall Protection: Multi-layered firewalls and intrusion detection systems monitor and block unauthorized access attempts
• Regular Security Audits: Independent security firms conduct annual penetration testing and vulnerability assessments

6.2 Administrative Security Measures

• Access Controls: Personal data access is restricted to authorized employees on a need-to-know basis, with role-based permissions
• Staff Training: All employees undergo regular data protection and security awareness training
• Confidentiality Agreements: All staff members sign legally binding confidentiality and non-disclosure agreements
• Incident Response Plan: Documented procedures for detecting, reporting, and responding to data breaches

6.3 Your Security Responsibilities

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication (2FA) if offered
• Log out after each session, especially on shared or public devices
• Keep your email account secure, as it can be used for password resets
• Report any suspicious account activity immediately to [email protected]
• Beware of phishing emails or fake websites impersonating suga33

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access, contact [email protected] with your account details. We will provide the information in a commonly used electronic format within 30 days.

7.2 Right to Correction

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

7.3 Right to Deletion

You have the right to request deletion of your personal information, subject to legal retention requirements. Account closure requests can be submitted through customer support. Note that we may be legally required to retain certain data (transaction records, identity verification) even after account closure.

7.4 Right to Restrict Processing

You can request that we restrict processing of your personal information in certain circumstances, such as while we investigate a complaint about data accuracy.

7.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications through your account settings or by clicking unsubscribe in marketing emails.

7.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.

8. Cookies and Tracking Technologies

suga33 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content:

8.1 Types of Cookies We Use

You can control cookies through your browser settings. Note that disabling essential cookies may prevent access to certain features. Most browsers allow you to block third-party cookies while allowing first-party cookies.

9. International Data Transfers

suga33 primarily stores data within secure data centers. In some cases, your personal information may be transferred to and processed in countries outside Indonesia, particularly when using third-party service providers. We ensure that all international transfers comply with applicable data protection laws and that adequate safeguards are in place through standard contractual clauses or other approved mechanisms.

10. Children's Privacy

suga33 services are strictly intended for users 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from a minor, we will immediately delete it and close the associated account. Parents or guardians who believe their child has accessed suga33 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

suga33 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date below. For significant changes, we may also send an email notification to your registered email address.

Your continued use of suga33 Services after changes are posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For urgent privacy concerns, including suspected data breaches or unauthorized account access, please mark your communication as "URGENT - DATA SECURITY" for priority handling.