sumobola Privacy Policy

This page describes what data we collect when you use sumobola and how we keep that information protected. We collect your email address, legal name, date of birth, and payment method details (DANA, e-wallet, mobile banking, local payment account information) only when you open an account or fund your balance. We do not sell your data to third parties, and we encrypt all personal information in transit and at rest using industry-standard security protocols.

We at sumobola operate transparently about your privacy. Our commitment is straightforward: we store your account data securely, use it only to provide our service and comply with law, and give you full control over access and deletion. When you access sumobola from your Android APK or iOS browser, your login credentials, gameplay history, and transaction records are encrypted. We do not share your information with marketing partners, data brokers, or advertising networks.

This policy explains what we collect, how we use it, who processes it, and what rights you have. Read it in full to understand our practices.

What data we collect on sumobola

We collect data in two categories: information you provide, and information we derive from your use of our platform.

Information you provide: When you register on sumobola, we ask for your email address, password, legal name, date of birth, and phone number. When you fund your account, we record your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual account number). For Know Your Customer (KYC) verification, we collect your ID number (KTP or passport) and may request a photo ID. We also store any messages you send to our support team.

Information we derive: When you use sumobola, we log your gameplay history (bets placed, outcomes, timestamps), your account balance, your login times and device type (Android vs iOS), and your geographic location (inferred from your IP address). We also track how long you stay logged in, which games you play, and which payment methods you use. This data helps us detect fraud, improve our service, and comply with financial regulations.

How we use your data on sumobola

We use your data for these purposes only: to operate sumobola, process your deposits and withdrawals, prevent fraud and financial crime, verify your identity (KYC), respond to your support requests, and comply with Indonesian financial and gambling regulations.

We do not use your data to send marketing emails or push notifications unless you explicitly opt in. We do not sell your data, share it with advertisers, or use it to build marketing profiles. If you opt in to promotional communications, you can unsubscribe anytime in your account settings or by clicking the unsubscribe link in any email.

We analyze gameplay patterns in aggregate (for example, "non-specific info of players in Jakarta prefer slots over live-dealer games") to improve sumobola, but we never share individual player data with third parties for this purpose. Our analytics are internal only.

Third parties who process your data

We work with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) to handle your deposits and withdrawals. These companies see your payment method details and transaction amounts — this is necessary to process your requests. We do not control how they use your data; read their privacy policies directly.

We also use third-party service providers for: email delivery (to send account confirmations and password resets), account hosting and encryption (cloud servers operated by reputable data centers), and fraud detection (automated systems that flag suspicious activity). All third-party vendors sign data processing agreements with us that bind them to the same privacy and security standards we maintain.

We may disclose your data to law enforcement or regulatory authorities if legally required or if we reasonably believe disclosure is necessary to prevent fraud or harm. We comply with data requests from Indonesian authorities and cooperate with international regulatory bodies where applicable. In such cases, we notify you unless legally prohibited.

On sumobola, your privacy is not a secondary concern — it is built into every system we operate, from login encryption to data storage to third-party partnerships.

Cookies and tracking on sumobola

We use cookies on sumobola to remember your login session, store your language preference, and track whether you are logged in across page refreshes. These are essential cookies needed for the platform to function — they do not track you across other websites. We do not use advertising cookies or third-party tracking pixels.

You can disable cookies in your browser settings, but doing so may prevent sumobola from functioning properly. We recommend keeping them enabled. When you log out, your session cookie expires after a standard timeout period (typically subject to verification of inactivity).

Your rights regarding your data on sumobola

Under Indonesian data protection principles, you have the right to: access your personal data anytime via your account dashboard, request correction of inaccurate information, request deletion of your data (subject to legal retention requirements), and object to certain uses of your data (for example, opting out of marketing communications).

To exercise any of these rights, contact our support team via in-app chat or email. We respond within 7 business days. If you request account deletion, we deactivate your account immediately and delete your personal data within 30 days, except where we are legally required to retain it for financial or anti-money-laundering purposes (typically 5 years under Indonesian law).

You also have the right to data portability: we can export your account data (gameplay history, transaction records, personal information) in a standard, machine-readable format. Request this via support, and we prepare the export within 14 days.

Data security and storage on sumobola

We protect your data using TLS 1.2+ encryption for all data in transit (between your phone and our servers). Your personal information is encrypted at rest on our servers using AES-256. Our servers are located in data centers with physical security controls, automated backups, and redundancy to prevent data loss.

Our servers may sit outside your jurisdiction — for example, in Singapore or other regions permitted under Indonesian law. However, all encryption keys remain in our control. We do not store unencrypted personal data on public cloud services.

We conduct regular security audits and penetration tests to identify vulnerabilities. If we discover a data breach affecting your information, we notify you within 72 hours via email and provide guidance on protecting yourself. We do not share such notices publicly without your consent unless legally mandated.

Changes to this privacy policy

We may update this policy if our practices change or if new regulations require it. Material changes will be communicated to you via email and in-app notification at least 14 days before the new policy takes effect. Your continued use of sumobola after the change date means you accept the updated policy. If you do not agree, you may close your account before the change takes effect.

Contact us about privacy

If you have questions about this privacy policy, how we handle your data, or wish to exercise your privacy rights, contact our support team. We respond to all privacy inquiries within 7 business days. You can reach us via in-app chat (available on Android APK and iOS browser), email, or support portal on sumobola.

Our support team is available during standard business hours. For urgent privacy concerns, we escalate your request to our Data Protection Officer, who reviews your case personally and responds within 14 days.

We are committed to protecting your privacy. By using sumobola, you trust us with your data — we take that responsibility seriously. This policy and all practices described herein are in force as of the date shown at the top of this page. If you have any doubt about our commitment to privacy, we encourage you to contact us directly.