Privacy Policy — sms808

sms808 ("we", "us", "our", "the Platform") operates the online betting and casino service accessible at sms808.cam. As a platform that processes real-money transactions for Players primarily based in Indonesia, sms808 handles personal and financial data as a routine part of its operations. We are committed to handling that data with transparency, security, and respect for individual privacy.

This Privacy Policy applies to all personal data collected through the sms808 website, mobile interface, customer support channels, and any other touchpoint through which a Player or prospective Player interacts with sms808. It forms an integral part of sms808's Terms & Conditions, which you should also read in conjunction with this document.

By registering an Account on sms808 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or continue to use sms808.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes your name, email address, phone number, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, or deletion.
• "Player" / "You" — any natural person who has registered, or is in the process of registering, an Account on sms808.
• "Account" — the registered user profile created by a Player on the sms808 Platform.
• "KYC" — Know Your Customer; the identity and age verification process that sms808 requires Players to complete before withdrawals are permitted.
• "Third-Party Service Provider" — a company or individual engaged by sms808 to perform specific functions (e.g., payment processing, fraud detection, IT infrastructure), who processes Personal Data on sms808's behalf.
• "Cookies" — small text files placed on your device by the sms808 Platform to enable functionality, remember preferences, and support analytics.
• "IDR / Rupiah" — Indonesian Rupiah, the exclusive currency in which sms808 processes all financial transactions.

sms808 collects the following categories of Personal Data depending on how you interact with the Platform:

sms808 collects Personal Data through three primary channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your Account preferences. All information you voluntarily submit to sms808 through these interactions is collected and stored.
• Automatically — when you access the sms808 Platform, our servers and analytics tools automatically record Technical Data and Usage Data. This includes your IP address, the pages you visit, the features you interact with, and the duration of each session. This data is collected using server logs, cookies, and similar tracking technologies (see Section 10 for full details).
• From Third-Party Service Providers — we may receive supplemental identity verification data from KYC/AML screening services, fraud detection platforms, and payment processors to the extent necessary to verify your identity and process your transactions securely. We only accept data from third-party sources where we have confirmed that those sources have a lawful basis for sharing the data with us.

sms808 processes your Personal Data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed below:

• Account creation and management — to register your Account, verify your identity, maintain your profile, and manage your Account preferences.
• Age and identity verification (KYC) — to confirm that all Players are at least 21 years of age and are who they claim to be, in accordance with our Terms & Conditions and applicable anti-money-laundering obligations.
• Transaction processing — to process deposits and withdrawals in IDR via your chosen payment channel (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja) and to maintain an accurate record of your financial activity on sms808.
• Customer support — to respond to your queries, complaints, and support requests, including those submitted by Players in Jakarta, Surabaya, Bandung, Medan, Yogyakarta, and other cities across Indonesia.
• Platform security and fraud prevention — to detect, investigate, and prevent fraudulent activity, money laundering, unauthorized Account access, and any other prohibited conduct described in our Terms & Conditions.
• Responsible gaming — to monitor wagering patterns, enforce deposit limits and self-exclusion requests, and identify Players who may be exhibiting signs of problem gambling.
• Legal compliance — to comply with any applicable legal obligation, court order, or lawful request from a competent authority.
• Platform improvement — to analyze aggregated Usage Data and Technical Data in order to improve the functionality, performance, and user experience of the sms808 Platform.
• Marketing communications — where you have given explicit consent, to send you promotional offers, bonus notifications, and event-specific campaigns (e.g., promotions tied to BRI Liga 1 match schedules, Idul Fitri seasonal offers, or Indonesian Independence Day events). You may withdraw consent at any time by contacting support.

sms808 processes Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual necessity — processing that is required to fulfil our obligations under the Terms & Conditions you agreed to when registering your Account. This covers identity verification, transaction processing, and Account management.
• Legal obligation — processing required to comply with applicable anti-money-laundering regulations, age-verification requirements, and any lawful instruction from a competent authority or court.
• Legitimate interests — processing necessary for sms808's legitimate business interests, including fraud prevention, platform security, and aggregate analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — where we rely on consent (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sms808 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the following limited circumstances:

• Payment processors and banking partners — to facilitate deposits and withdrawals, we share the minimum necessary financial data with your chosen payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and AML screening providers — we share identity documents with third-party identity verification and anti-money-laundering screening services to fulfill our KYC obligations.
• IT infrastructure and hosting providers — our platform data, including encrypted Account and transaction records, is hosted on secure servers managed by trusted infrastructure partners under strict confidentiality agreements.
• Game content providers — when you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), limited session and gameplay data may be transmitted to that provider's servers to operate the game. These providers process data solely for game-operation purposes under contracts with sms808.
• Fraud prevention and analytics platforms — we use third-party tools to detect anomalous betting patterns, unauthorized account access, and potential money-laundering activity. These tools receive Technical Data and Usage Data on a pseudonymized basis wherever possible.
• Legal and regulatory authorities — we will disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required by a lawful order or where we determine in good faith that disclosure is necessary to protect the rights, safety, or property of sms808, our Players, or the public.

sms808 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an individual Player. Where anonymization is not technically feasible, the data is rendered inaccessible by operational systems and flagged for scheduled deletion.

sms808 implements a layered security architecture to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and sms808's servers, ensuring that no data is transmitted in plain text.
• Encryption at rest — KYC documents, financial data, and Account credentials are stored in encrypted form on access-controlled infrastructure. Encryption keys are managed separately from the encrypted data they protect.
• Access controls — access to Personal Data within sms808's internal systems is restricted on a strict need-to-know basis. All staff who access Player data are subject to confidentiality obligations.
• Intrusion detection and monitoring — sms808 operates continuous system monitoring and intrusion-detection tools to identify and respond to security incidents in real time.
• Penetration testing — our platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) — Players are strongly encouraged to enable 2FA on their Accounts to provide an additional layer of protection beyond their password.

sms808 uses cookies and similar technologies (including web beacons and local storage objects) to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly necessary cookies — essential for the Platform to function. These cookies maintain your session state, remember your login, and enable core platform features such as placing a wager. These cookies cannot be disabled without breaking Platform functionality.
• Functional cookies — used to remember your preferences, such as your preferred payment method or display language. These cookies improve your experience but are not strictly necessary for core operations.
• Analytics cookies — used to collect aggregated information about how Players interact with the Platform, including which pages are visited most frequently, which games are most popular, and where Players exit the site. This information is used in pseudonymized or aggregated form to improve the Platform experience.
• Security cookies — used to support our fraud-detection and account-security systems, including identifying unusual login patterns and suspicious transaction behavior.

You may configure your browser to refuse cookies or to alert you when cookies are being placed on your device. Note that disabling strictly necessary cookies will impair or prevent your ability to use the sms808 Platform. Disabling other categories of cookies will limit functionality but will not prevent you from accessing the Platform.

sms808 does not use cookies to deliver third-party advertising or to build behavioral advertising profiles for sale to data brokers or advertisers.

As a Player whose Personal Data is processed by sms808, you hold the following rights with respect to your data. To exercise any of these rights, contact our support team at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

Please note that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain for anti-money-laundering compliance purposes. We will always explain any limitation that applies to your specific request.

sms808 operates a strict 21+ only policy. The Platform is not intended for, and must not be used by, any person under the age of 21. sms808 does not knowingly collect Personal Data from individuals under 21 years of age.

As part of our KYC process, every Player is required to provide documentary evidence of age before withdrawal access is granted. If sms808 identifies or reasonably suspects that a registered Account belongs to a person under 21 years of age, the Account will be immediately suspended, all associated funds will be reviewed, and the matter will be investigated in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an Account on sms808, please contact us immediately at [email protected]. We will investigate and close the Account promptly, returning any real-money balance (excluding any bonuses claimed) once identity and age have been confirmed.

sms808 operates with infrastructure and third-party service providers that may be located outside of Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions other than Indonesia. Where such transfers occur, sms808 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in Data Processing Agreements that require recipient parties to maintain data protection standards equivalent to those applied by sms808.
• Transfer only to jurisdictions that maintain an adequate level of data protection as assessed by recognized international standards.
• Technical security measures (encryption, access controls) that apply regardless of the jurisdiction in which the data is stored.

By registering an Account on sms808, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia where necessary for the operation of the Platform, subject to the safeguards described in this section.

sms808 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, our business operations, or industry best practices. When we make material changes to this Policy, we will notify you via a prominent notice on the Platform at least 7 days before the revised Policy takes effect. Non-material changes — such as clarifications, corrections of typographical errors, or updates to contact information — may take effect immediately upon publication.

Your continued use of the sms808 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment and acceptance of the changes. If you do not agree with the revised Policy, you should stop using the Platform and may request Account closure in accordance with our Terms & Conditions.

The current version of this Privacy Policy will always be accessible at sms808.cam/privacy-policy. We recommend reviewing this page periodically to remain informed of how sms808 handles your Personal Data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the sms808 support team. Our Indonesian-speaking agents are available 24 hours a day, 7 days a week (WIB — Western Indonesia Time, UTC+7).

Support Email: [email protected]

When submitting a data rights request or privacy complaint, please include your registered Account username, the nature of your request, and any relevant supporting information. This will allow us to locate your records and respond as efficiently as possible. We aim to acknowledge all privacy-related communications within 5 business days and provide a full response within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.