Privacy Policy

Introduction

sukajp ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our online gaming services at https://sukajp.cam. This Privacy Policy explains in clear, plain terms what personal information we collect, why we collect it, how we use and store it, with whom we may share it, and what rights you hold over your own data.

This Policy applies to all players, visitors, and any other persons whose personal data is processed by sukajp in connection with the provision of our casino games, sports betting markets, lottery entertainment, promotional offers, and customer support services. By accessing or using the sukajp Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together govern your relationship with sukajp.

1. Definitions

For clarity and consistency throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, whether directly (e.g., full name, national ID number) or indirectly (e.g., IP address, device fingerprint, account username).
• "Processing" means any operation performed on Personal Data, including but not limited to collection, recording, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, restriction, or erasure.
• "Data Controller" refers to sukajp, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of sukajp under a written data-processing agreement, such as payment service providers and cloud infrastructure vendors.
• "Player" or "User" refers to any natural person who registers an Account on the sukajp Platform for the purpose of using our gaming and betting services.
• "KYC" (Know Your Customer) means the identity verification procedure through which sukajp confirms a Player's age, identity, and residential status, as required by international anti-money-laundering standards.
• "Cookies" are small text files placed on your device by our website to store preferences, session data, and analytics information.

2. Data We Collect

2.1 Registration and Account Data

When you create a sukajp account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify that you are at least 21 years of age)
• Residential address (city, province, postal code, Indonesia)
• Email address and mobile phone number
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)

2.2 Identity Verification (KYC) Documents

Before your first withdrawal can be processed, we require documentary proof of identity as part of our KYC compliance obligations. Documents collected may include:

• National Identity Card (Kartu Tanda Penduduk / KTP) or valid Passport
• Proof of residential address (recent utility bill, bank statement, or government correspondence dated within three months)
• Selfie photograph holding your identity document, used for biometric facial matching

All KYC documents are encrypted immediately upon receipt and stored on access-controlled servers. Documents are used solely for identity verification and regulatory compliance, and are never shared with third parties for marketing or profiling purposes.

2.3 Financial Transaction Data

To facilitate deposits and withdrawals, we collect and retain financial data including bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, transaction timestamps, and transaction reference numbers. We do not store full bank account passwords or internet banking credentials under any circumstances.

2.4 Gaming and Betting Activity

We automatically record details of your gaming and betting activity, including the games played, bet amounts, win/loss records, session durations, and responsible gaming tool usage. This data is used to maintain accurate account balances, resolve disputes, detect fraud or bonus abuse, and generate regulatory reports where required.

2.5 Technical and Device Data

We collect certain technical information automatically when you access the Platform, including:

• IP address and approximate geolocation (city and country level)
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Referring website URL
• Pages visited, links clicked, and session duration on the Platform
• Time-zone information (we default to WIB — Western Indonesia Time, UTC+7 — for server-side timestamps)

2.6 Communications Data

When you contact our customer support team via live chat, email, or WhatsApp, we retain records of those communications, including message content, timestamps, and the resolution provided. This data is used for quality assurance, staff training, and dispute resolution.

3. How We Use Your Data

sukajp processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your gaming account, including processing login requests, resetting credentials, and enforcing account-level restrictions.
2. Service Delivery: Providing access to casino games, sports betting markets, lottery draws, promotional offers, and all other features of the Platform.
3. Payment Processing: Facilitating deposits via Indonesian banks and e-wallets, and processing withdrawal requests to your verified bank account or e-wallet.
4. Identity Verification (KYC): Confirming that you meet our eligibility requirements—specifically that you are a resident of Indonesia aged at least 21 years—in compliance with international anti-money-laundering and responsible gaming regulations.
5. Fraud Prevention and Security: Monitoring transactions and gameplay patterns to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorized access to accounts.
6. Responsible Gaming: Monitoring your gaming behavior to identify signs of problem gambling, enforcing self-imposed deposit limits, loss limits, session time limits, and self-exclusion requests, and providing relevant support resources.
7. Marketing and Promotions: Sending you promotional communications about bonuses, tournaments, and other offers—only where you have consented to receive such communications. You may withdraw consent at any time through your account notification settings.
8. Analytics and Product Improvement: Analysing aggregated, anonymised usage data to understand how Players interact with the Platform and to guide product development decisions.
9. Legal and Regulatory Compliance: Retaining records and responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

4. Legal Basis for Processing

sukajp processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and sukajp—primarily delivering gaming services, managing your account, and processing payments.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing conducted for the legitimate interests of sukajp, including fraud prevention, security monitoring, and business analytics, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent—primarily for marketing communications and optional analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

sukajp does not sell your Personal Data. We may share your data with the following categories of recipients only where necessary and under strict confidentiality obligations:

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial information with our partner banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as Data Processors under written agreements and are authorised to use your data only for payment processing purposes.

5.2 Identity Verification Partners

We engage certified KYC technology providers to assist with document verification and biometric identity checks. These providers process your identity documents solely for verification purposes under strict data security standards.

5.3 Technology and Infrastructure Partners

Our Platform is hosted on enterprise-grade cloud infrastructure. We may share technical data with cloud service providers, cybersecurity firms, and analytics vendors to maintain platform performance and security. All such vendors are bound by data processing agreements that restrict their use of your data.

5.4 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent regulatory authorities, financial intelligence units, or law enforcement agencies where required by applicable law or a valid court order. We will notify you of any such disclosure to the extent permitted by law.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

6. Data Retention

sukajp retains your Personal Data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for seven (7) years from the date of the transaction.
• Gaming and betting activity logs: Retained for five (5) years from the date of activity.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of consent and for two (2) years following withdrawal of consent.

When Personal Data is no longer required, we securely delete or anonymise it in accordance with industry-standard data destruction procedures.

7. Security Measures

sukajp employs comprehensive technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Personal Data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems and multi-factor authentication.
• Regular Security Audits: Our platform undergoes periodic third-party penetration testing and security assessments to identify and remediate vulnerabilities.
• Intrusion Detection Systems: Real-time monitoring systems are in place to detect and respond to suspicious access attempts or anomalous activity patterns.
• Incident Response Plan: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals promptly and take immediate remedial action.

While we implement robust safeguards, no system is entirely immune to risk. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorized access to your account.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device across sessions, remember your preferences, and collect analytical data about how you interact with the site. sukajp uses both first-party cookies (set directly by us) and third-party cookies (set by our trusted service providers).

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security enforcement. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations, to provide a more personalized experience.
• Analytical Cookies: Collect aggregated, anonymised information about how visitors use our Platform—pages visited, time spent, and navigation paths—to help us improve our services. These require your consent.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and to deliver relevant offers within the Platform. These require your explicit consent and may be declined without affecting core Platform functionality.

8.3 Managing Cookies

You can control non-essential cookies through your account preferences settings on the Platform. You may also configure your browser to block or delete cookies; however, doing so may affect the functionality of certain Platform features. Please note that strictly necessary cookies cannot be disabled as they are integral to secure Platform operation.

9. Your Privacy Rights

As a Player whose Personal Data is processed by sukajp, you hold the following rights. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your full name and registered email address. We will respond within thirty (30) calendar days.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Minors and Age Restriction

The sukajp Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a minor, we will immediately suspend the associated account, delete all data collected in connection with that account, and void any transactions or winnings accrued. If you believe a minor has registered on our Platform, please notify us immediately at [email protected] so that we can take prompt action.

11. Third-Party Links and Services

The sukajp Platform may display content sourced from third-party gaming providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe. While we vet all third-party providers for security compliance, sukajp is not responsible for the privacy practices of external entities. If you access any third-party service or website through links or embedded content on our Platform, you do so at your own risk and subject to the privacy policies of those third parties. We encourage you to review those policies before submitting any Personal Data to external services.

12. Amendments to This Policy

sukajp reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will post the updated Policy on this page with a revised "Last Updated" date and, where appropriate, notify registered Players via email or in-platform notification. Your continued use of the Platform following publication of any changes constitutes acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how we protect your data.

13. Contact and Data Protection Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by sukajp, please contact our Data Protection team using the details below. All communications must be in writing and include your full name, registered email address, and a clear description of your inquiry.

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Rights Request"
• Response Time: We acknowledge all inquiries within five (5) business days and aim to provide a full response within thirty (30) calendar days.
• Support Hours: 24 hours a day, 7 days a week via live chat; email responses during business hours (WIB, UTC+7).

We are committed to resolving all privacy-related concerns promptly and transparently. If you remain dissatisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.