Privacy Policy — sip69

sip69 is Indonesia's premier online gambling destination, providing sports betting, live casino, slot gacor (high-payout slots), togel (Indonesia's traditional numbers lottery), crash games, and E-sports wagering to players across Indonesia. Our platform operates in English to serve the international-brand-preference segment of the Indonesian market, with native Bahasa Indonesia-speaking customer support available 24/7 (WIB, UTC+7).

As an internationally licensed online gaming operator, sip69 is committed to protecting the privacy and personal data of every player. This Policy sets out the types of personal data we collect, the purposes for which we process it, the circumstances under which it may be shared with third parties, and the controls available to you over your own information.

This Policy applies to all data processing activities undertaken by sip69 in connection with the platform at sip69.bio, including account registration, payment processing, KYC identity verification, customer support interactions, and marketing communications. It applies regardless of the device or network through which you access the platform.

For the purposes of this Privacy Policy, sip69 acts as the data controller in respect of all personal data collected from Players on sip69.bio. As data controller, sip69 determines the purposes and means by which your personal data is processed.

Where sip69 engages third-party service providers — such as payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), KYC verification partners, and game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — those providers act as data processors, handling personal data solely on sip69's instructions and under the terms of written data-processing agreements that impose equivalent data protection obligations.

All inquiries regarding data controllership, data subject rights, or data-related complaints should be directed to sip69 customer support via the contact details provided in Clause 13 of this Policy.

sip69 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification and payment service providers. The categories of personal data we collect are set out in the table below:

sip69 does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) from Players. If any such data is incidentally disclosed to sip69 (for example, during a responsible gaming assessment), it will be handled with the highest level of confidentiality and processed only to the extent necessary for the purpose for which it was received.

sip69 uses personal data collected from Players for the following purposes. Each purpose is linked to a legal basis for processing, as described in Clause 5:

• Account Management: To create, maintain, and administer your sip69 account, including processing your registration, authenticating your login sessions, and managing account security settings.
• Identity & Age Verification (KYC): To verify that you meet the platform's 21+ age requirement, confirm your identity against your government-issued ID (KTP), and satisfy our obligations under international anti-money laundering (AML) and know-your-customer (KYC) standards.
• Payment Processing: To process deposits and withdrawals in IDR via your registered payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), reconcile transactions, and investigate payment disputes.
• Service Delivery: To provide access to all sip69 products — sports betting (BRI Liga 1, EPL, Champions League, FIFA World Cup, MotoGP Mandalika, MPL E-sports), live casino, slot gacor, togel, and crash games — and to personalize your in-platform experience based on your game and betting history.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling, apply player-requested deposit limits and self-exclusion orders, and reach out proactively where our responsible gaming algorithms flag a concern.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance via live chat (24/7, WIB) and email.
• Marketing & Promotions: To send you promotional communications about sip69 bonuses, seasonal promotions (Ramadhan, Idul Fitri, Nyepi, Independence Day offers, etc.), new game launches, and tournament invitations — where you have given us consent to do so.
• Platform Analytics & Improvement: To analyze aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of sip69.bio.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from law enforcement or regulatory authorities, and enforce our Terms & Conditions and related policies.

sip69 processes your personal data under one or more of the following legal bases, depending on the specific purpose:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you under the Terms & Conditions — including account registration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements, fraud reporting obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing undertaken for sip69's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing of your personal data for marketing communications (promotional emails, SMS, push notifications) where you have given freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

sip69 does not sell or rent your personal data. We may share personal data with third parties only in the circumstances described below:

• Payment Service Providers: We share financial data (bank account details, transaction amounts in IDR) with our payment processing partners — including the local Indonesian banks and e-wallets listed in Clause 3 — solely to process deposits and withdrawals. These providers act as data processors under contractual data-protection obligations.
• KYC & Identity Verification Partners: We share identity and contact data with our accredited KYC verification partners to conduct age verification (21+), identity checks, and fraud screening. KYC partners are contractually prohibited from using your data for any purpose other than the verification service.
• Game Content Providers: Certain technical data (session identifiers, game round IDs, bet amounts) is shared with game studios (Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, Pocket Games Soft) to facilitate game delivery, fair-play auditing, and technical support. These studios do not receive your name, contact details, or financial account information.
• Analytics & Platform Security Providers: Aggregated, pseudonymized usage and technical data may be shared with analytics and cybersecurity service providers to support platform performance monitoring and fraud detection. Data shared for analytics purposes does not identify you individually.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, pursuant to a valid legal order, or where necessary to protect sip69's legal rights or to prevent imminent harm. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of sip69's business (or any part thereof), personal data held by sip69 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

All third parties with whom sip69 shares personal data are required to implement appropriate technical and organizational security measures and to use the data only for the specified purpose.

sip69.bio uses cookies, web beacons, pixel tags, and local storage objects to enhance your experience on the platform. The following categories of cookies are used:

You may manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will impair core platform functionality, including login sessions and payment processing. Disabling functional or analytics cookies will not prevent you from using the platform but may degrade your experience.

sip69 does not use cookies to track your activity on third-party websites outside of sip69.bio.

sip69 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of the account relationship and for a period of 5 years following account closure, in order to comply with AML record-keeping obligations and to resolve any post-closure disputes.
• KYC & Identity Verification Documents: Retained for a minimum of 5 years from the date of verification, or longer where required by the anti-money laundering regime applicable to sip69's operating jurisdiction.
• Transaction & Betting Records: Retained for 5 years from the date of the transaction, in line with standard financial record-keeping practice.
• Customer Support Records: Retained for 3 years from the date of the last support interaction, to support dispute resolution and service improvement.
• Marketing Preferences & Consent Records: Retained for 3 years from the date of last interaction, or until you withdraw consent, whichever is earlier.
• Technical & Usage Logs: Retained for 12 months from collection, after which they are either deleted or irreversibly anonymized for aggregate analytics purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with sip69's internal data lifecycle procedures. Anonymized aggregate data (from which you cannot be individually identified) may be retained indefinitely for statistical and business planning purposes.

As a data subject, you hold the following rights in respect of your personal data held by sip69. To exercise any of these rights, please contact us as described in Clause 13. sip69 will respond to all verified requests within 14 business days.

• Right of Access: You have the right to request a copy of the personal data sip69 holds about you, together with information about how it is being processed, the legal basis for processing, and the categories of recipients with whom it has been shared.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data. For minor corrections (e.g., contact number, email address), you may update your data directly via your sip69 account profile. Changes to identity-verified fields (full name, date of birth) require submission of supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that certain data must be retained to comply with legal obligations (AML record-keeping) even following an erasure request — sip69 will clearly communicate any such limitations when responding to your request.
• Right to Restriction of Processing: You have the right to request that sip69 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and sip69's legitimate grounds are being assessed.
• Right to Data Portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (CSV or JSON) and to transmit that data to another controller.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on sip69's legitimate interests, including profiling for responsible gaming monitoring or personalized game recommendations. sip69 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

sip69 implements a multi-layered technical and organizational security framework to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Transport Encryption: All data transmitted between your device and sip69.bio is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform pages, payment flows, and API communications.
• Data-at-Rest Encryption: Personally identifiable data stored in sip69's databases is encrypted at rest using AES-256 encryption. Password credentials are stored as salted, one-way cryptographic hashes (bcrypt) and are never stored in plaintext.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis through role-based access control (RBAC). All internal access events are logged and subject to periodic audit.
• Two-Factor Authentication (2FA): sip69 offers and encourages the use of two-factor authentication (OTP via registered Indonesian mobile number) for all Player accounts. 2FA significantly reduces the risk of unauthorized account access.
• Fraud Detection Systems: sip69 employs real-time automated fraud detection systems that monitor transaction patterns, login behavior, and betting activity for anomalies indicative of account compromise or AML-relevant activity.
• Penetration Testing & Vulnerability Management: sip69's platform undergoes regular third-party security audits and penetration testing. Identified vulnerabilities are remediated in accordance with a risk-prioritized patch management schedule.
• Data Breach Response: In the event of a personal data breach that poses a risk to Player rights and freedoms, sip69 will notify affected Players via their registered email address as soon as practicable. sip69 maintains an internal incident response plan that is reviewed and tested annually.

While sip69 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You also bear responsibility for maintaining the security of your account credentials. Never share your password, PIN, or OTP code with any third party, including individuals claiming to represent sip69 — our staff will never ask for this information.

sip69 operates a strict 21+ only policy. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. This policy is aligned with Indonesian societal norms regarding gambling age thresholds and international responsible gaming standards.

Age verification is a mandatory component of sip69's KYC process. All Players must submit a valid government-issued photo ID (KTP or equivalent) confirming that they are 21 years of age or older before their first withdrawal is processed. Where there is reasonable suspicion that a registered account is held by a minor, sip69 reserves the right to suspend the account and request immediate age verification documentation.

If sip69 determines that personal data has been collected from an individual under the age of 21, that data will be deleted and the associated account closed immediately. Any funds deposited by an underage Player will be returned to the source payment account following identity verification of the account holder.

If you are a parent or guardian and believe that a minor in your care has registered an account on sip69, please contact us immediately at [email protected]. We will take prompt action to investigate and close the account.

sip69 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will notify registered Players by email to the address on file and/or by displaying a prominent notice on sip69.bio at least 7 days before the updated Policy takes effect.

The "Last updated" date at the top of this Policy will be revised each time changes are made. Continued use of the sip69 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should stop using the platform and contact support to close your account and arrange return of your real-money IDR balance.

Previous versions of this Privacy Policy are available on request from our customer support team. Please email [email protected] with the subject line "Privacy Policy — Previous Version Request".

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact sip69 through one of the following channels:

• Live Chat: Available 24/7 through your sip 69 account dashboard (WIB, UTC+7). Our support agents are native Indonesian speakers and are able to assist you in Bahasa Indonesia as well as English.
• Email: [email protected] — for data subject rights requests, please use the subject line "Data Privacy Request — [Your Username]". We aim to respond within 14 business days of receiving a verified request.

sip69 takes all privacy-related complaints seriously. If you are not satisfied with our response to your inquiry, you have the right to escalate your complaint to a relevant data protection authority or consumer protection body in your jurisdiction.