sultan188 Privacy Policy - How We Protect Your Data

Many operators collect user data without explaining their practices. We at sultan188 collect only what's necessary for account verification, payments, and legal compliance — and we're transparent about how we handle it. This page describes what data we gather, how we use it, who has access, and what rights you have over your information.

Your account on sultan188 requires identity verification (KYC documents), payment details (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers), and basic contact information. We store this data securely and share it only with payment processors and compliance authorities where legally required. We don't sell personal information to third parties, and we don't use your data for marketing beyond the account services you've requested.

Our data practices are shaped by the jurisdictions we operate in. Services are available only where local law permits gaming platforms to operate. Our privacy commitments reflect both best practices and the regulatory requirements of regions including Jakarta, Surabaya, Medan, Bandung, and Semarang where our user base is concentrated.

What Data We Collect at sultan188

We collect information in three categories: account registration, payment processing, and platform activity. During registration, we request your full name, date of birth, email address, and phone number. These details verify your identity and allow us to contact you about account issues or security alerts. We also collect government-issued ID (KTP, passport, or driver's licence) and proof of address to complete KYC verification required by local gaming regulations.

For payment processing, we collect details necessary to fund your account and process withdrawals. If you deposit via DANA, e-wallet, mobile banking, local payment, or online payment, we record the transaction amount, timestamp, and wallet identifier. For bank transfers (e-wallet, mobile banking, local payment, online payment), we log the virtual-account number and transfer confirmation. For e-wallet payments, we record the QR code scan and transaction reference. We do not store your complete bank account details — payment processors tokenize sensitive information, and we retain only a secure reference token that authorizes transactions.

Platform activity includes game history, bet amounts, outcomes, and balance changes. This data is logged so we can calculate your balance accurately, investigate disputes, and comply with audit requirements. We also collect IP address and device type to detect fraudulent access and ensure account security. During seasonal peaks like Idul Fitri or Idul Adha, transaction volume increases and we retain logs temporarily to investigate payment delays or discrepancies.

Data we collect

Identity data — name, date of birth, government ID, address proof (for KYC verification)
Contact information — email, phone number, preferred language
Payment details — e-wallet identifiers, bank account references (tokenized, not stored in full)
Game and transaction history — bets, outcomes, deposits, withdrawals, timestamps
Device and connection data — IP address, device type, browser information (for security)

How We Use Your Data

We use collected data for five core purposes. First, account verification — your ID and address prove eligibility and compliance with jurisdiction restrictions. Second, payment processing — payment details enable deposits and withdrawals to work correctly. Third, fraud prevention — we compare new login locations and devices against your account history to detect unauthorized access. Fourth, legal compliance — gaming operators must report certain transaction patterns to regulatory bodies, and we retain logs to fulfill those obligations. Fifth, customer support — if you contact us with a question or dispute, we reference your account history to investigate and respond.

We do not use your data for marketing outside the sultan188 service. We don't sell email addresses to third parties, don't share your game history with competitors, and don't profile you for targeted advertising unrelated to gaming. If we contact you, it's about account issues (security alerts, payment problems, account verification follow-up) or service updates. We don't send promotional messages unless you've opted in.

Third-Party Processors and Data Sharing

We work with external processors who handle specific functions. Payment processors (the companies operating mobile banking, local payment, online payment infrastructure) receive your transaction data to authenticate deposits and process withdrawals. KYC verification providers scan your ID documents and verify your identity against national databases — we share your ID image and personal details with these providers for verification only. Our server hosting provider maintains the physical infrastructure where your account data is stored; they have technical access but contractual restrictions preventing them from using your data independently.

Our servers may sit outside your jurisdiction. Account data is encrypted in transit and at rest, but data residency laws in some regions may require on-territory storage. We comply with local requirements in jurisdictions where we operate. Compliance authorities — gaming regulators in your country — may request your account information if they investigate a specific transaction or player conduct. We honor such requests as legally required.

Data Retention: We retain account and transaction data for the lifetime of your account plus 7 years after closure (to comply with accounting and tax regulations). Game history is retained indefinitely so you can always download your account statement.
Encryption: Data in transit uses TLS 1.2 or higher. Stored data is encrypted at rest. Passwords are hashed with salted algorithms, so even our administrators cannot read your password in plain text.
Access Control: Only staff with specific job functions (customer support, fraud investigation, compliance) access your data. Access is logged and audited. Account security issues are escalated immediately.

Your Rights and Our Commitments on sultan188

We recognize your rights over your own data. You can request a complete copy of your account information by contacting our support team. We will provide a downloadable export of your personal data, account history, and transaction records in a commonly used format (CSV, PDF, or JSON) within 30 days. You can also request correction of inaccurate data — if your name or address is wrong in our system, we update it immediately upon verification.

You may request deletion of non-essential data (e.g., old device records, historical IP addresses) without deleting your account. However, we must retain KYC documents, payment records, and transaction history for legal compliance — deletion of this core data requires account closure. You can delete your sultan188 account entirely by requesting account closure in our Help menu. Upon closure, we retain logs for 7 years per accounting requirements, but your profile and game data are removed from active systems within 30 days.

We use cookies to maintain your session (so you don't re-enter credentials on every page) and to track game preferences (so your last-used table opens faster on return). These are optional — you can disable non-essential cookies in your browser settings, though this may reduce convenience. We do not use tracking pixels or third-party cookies for profiling or advertising.

If you have questions about this policy, contact our support team through the in-app Help menu. We respond to privacy inquiries within 7 business days. This policy is current as of its publication date and may be updated if our practices change. We notify you of material changes by email if they affect your rights. Services are available only where local law permits — confirm your jurisdiction's eligibility before registering.