Privacy Policy

1. Introduction

soju88 ("we," "us," or "our") is committed to protecting the privacy and personal data of every user who interacts with our online gaming platform at https://soju88.beer. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles, including those reflected in standard KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance frameworks applicable to internationally licensed gaming operators serving the Indonesian market.

This policy applies to all personal data collected when you visit our website, create a soju88 account, make deposits via Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or BSI, use e-wallets such as OVO, DANA, GoPay, ShopeePay, or LinkAja, place bets, access customer support, or interact with us in any other way. Please read this policy carefully. If you have any questions, you are welcome to contact our support team at [email protected].

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — in particular, information that can be used to identify you directly or indirectly, such as your name, identity card number, email address, phone number, IP address, or financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, modification, or deletion.
• "Data Controller" means soju88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on our behalf and under our instruction (e.g., payment processors, cloud hosting providers, fraud detection services).
• "User," "you," or "your" means any individual who accesses the soju88 platform or whose data we process.
• "Services" means all gaming products, betting markets, payment processing, and related features provided by soju88.

3. Data We Collect

3.1 Data You Provide Directly

When you register a soju88 account or use our services, you voluntarily provide us with:

• Full legal name and date of birth
• Indonesian residential address (city, province, postal code)
• Email address and mobile phone number
• Indonesian National Identity Card (KTP) number and a copy of your KTP for identity verification
• Bank account details or e-wallet account information used for deposits and withdrawals
• Selfie photograph for biometric identity confirmation (required for accounts exceeding specified withdrawal thresholds)
• Customer support communications, including chat transcripts and email correspondence

3.2 Data Collected Automatically

When you use the soju88 platform, we automatically collect certain technical and behavioral data, including:

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited
• Betting history, game play records, deposit and withdrawal transactions
• Geolocation data (city-level, derived from IP address) to verify that you are accessing from Indonesia
• Cookies and similar tracking technologies (see Section 7)
• Referral source data (how you arrived at soju88)

3.3 Data from Third Parties

We may receive personal data about you from third-party sources, including:

• Payment processors and Indonesian bank partners (transaction confirmation data)
• Identity verification service providers used for KYC compliance
• Fraud detection and risk management partners
• Publicly available records consulted for AML screening purposes

4. How We Use Your Data

soju88 processes your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Name, date of birth, email, phone, password
Identity verification (KYC)	KTP copy, selfie, name, date of birth
Payment processing	Bank account or e-wallet details, transaction history
Fraud prevention and AML compliance	IP address, device data, transaction patterns, identity documents
Responsible gaming monitoring	Betting and deposit history, session data
Customer support	Contact details, support history, account records
Promotional communications	Email address, phone number (where consent given)
Platform analytics and improvement	Anonymized usage data, session logs
Legal and regulatory compliance	All categories as required by applicable law

We will not use your personal data for any purpose incompatible with those listed above. Where we wish to process your data for a new purpose, we will notify you and, where required, seek fresh consent.

5. Legal Basis for Processing

soju88 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted when registering, including account management, payment processing, and bet settlement.
• Legitimate interests: Processing necessary for fraud prevention, network security, platform optimization, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, KYC regulations, and other legal requirements imposed on internationally licensed gaming operators.
• Consent: Processing for marketing communications, optional cookies beyond essential functionality, and any other purpose where we have obtained your explicit consent. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing and Disclosure

6.1 Categories of Recipients

soju88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes outlined in Section 4:

• Payment processors and banking partners — to execute your deposit and withdrawal requests via BCA, BRI, BNI, Mandiri, and e-wallet providers.
• Identity verification providers — to conduct KYC checks as required by our compliance obligations.
• Fraud detection and cybersecurity providers — to identify and prevent fraudulent account activity, bonus abuse, and unauthorized access.
• Cloud infrastructure and hosting providers — to store and process data on secure servers, subject to data processing agreements.
• Game software providers — limited technical data required for game delivery and RNG certification audits (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and similar partners).
• Legal and regulatory authorities — where we are legally obligated to disclose data in response to lawful requests, court orders, or regulatory investigations.

6.2 Data Processing Agreements

All third-party data processors engaged by soju88 are required to enter into data processing agreements that bind them to process your data only on our documented instructions, implement appropriate technical and organizational security measures, and not engage sub-processors without our prior authorization. We conduct due diligence on all third-party processors before engagement.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

soju88 uses cookies and similar technologies (pixels, local storage, session storage) to deliver a functional, secure, and personalized experience. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function, including session management, authentication, and security tokens. These cannot be disabled without impairing core functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymized data about how users interact with our platform, enabling us to identify issues and improve the experience.
• Functionality cookies: Used to remember your preferences, such as language settings, preferred deposit method, and responsible gaming tool settings.
• Marketing and targeting cookies: Used (only with your consent) to measure the effectiveness of promotional campaigns and deliver relevant offers. These are not used for cross-site behavioral advertising.

7.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality. For mobile devices, consult your operating system's privacy settings.

8. Data Retention

soju88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained throughout the lifetime of your account plus five years after closure.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with AML compliance requirements.
• Identity verification documents (KTP, selfie): Retained for five years after account closure or the last transaction, whichever is later.
• Customer support records: Retained for three years from the date of the last communication.
• Marketing consent records: Retained for as long as consent remains valid, plus three years after withdrawal of consent.
• Anonymized analytics data: May be retained indefinitely as it cannot be linked back to you.

Once the retention period expires, we securely delete or anonymize your personal data in accordance with industry best practices.

9. Data Security

soju88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (including identity documents and payment information) is encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to authorized soju88 personnel on a strictly need-to-know basis, subject to role-based access controls and multi-factor authentication requirements.
• Network security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Regular security audits: We conduct quarterly internal security reviews and engage independent third-party auditors to perform annual penetration testing and vulnerability assessments.
• Incident response: We maintain a documented data breach response plan and will notify affected users and relevant authorities within 72 hours of detecting any breach involving personal data.
• Employee training: All soju88 staff members undergo mandatory data protection and security awareness training upon hiring and annually thereafter.

While we implement industry-leading security measures, no system is completely invulnerable. You also play an important role in protecting your account by choosing a strong password, never sharing your login credentials, and promptly reporting any suspicious activity to [email protected].

10. Your Rights

Subject to applicable data protection laws, you have the following rights with respect to your personal data:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly referred to as a "data subject access request." We will provide this information free of charge within 30 days of receiving a valid request.

10.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information (email, phone number, address) directly through your soju88 account settings.

10.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing. Note that we may be legally required to retain certain data (e.g., transaction records) even after account closure.

10.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed data or assess whether our legitimate interests override your objection to processing.

10.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.

10.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately. If you object to other processing, we will assess whether compelling legitimate grounds exist that override your interests.

10.7 Right to Withdraw Consent

Where we process your personal data based on consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request." We may require you to verify your identity before processing your request to ensure we do not disclose personal data to an unauthorized party.

11. Children's Privacy

soju88 services are intended exclusively for adults aged 21 and over. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. Parents or guardians who believe their child has provided personal data to soju88 should contact us immediately at [email protected]. We encourage parents to use parental control software to prevent minors from accessing gambling websites.

12. International Data Transfers

soju88 is an internationally licensed gaming operator serving players in Indonesia. Your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia where our servers, service providers, or business partners are located. These jurisdictions may have data protection laws that differ from Indonesian standards.

Where we transfer personal data outside Indonesia, we implement appropriate safeguards to ensure your data receives an equivalent level of protection, including:

• Data processing agreements incorporating standard contractual clauses recognized under international data protection frameworks
• Ensuring third-party processors maintain certifications demonstrating compliance with internationally recognized security standards (ISO 27001, SOC 2)
• Conducting due diligence and periodic audits of international service providers

By using soju88 services, you acknowledge and consent to the international transfer of your personal data as described in this section.

13. Changes to This Privacy Policy

soju88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. When we make material changes, we will notify you by prominently posting a notice on our homepage and updating the "Last Updated" date at the top of this policy. For significant changes that materially affect your rights, we may also notify you via email to the address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of soju88 services after any policy changes constitutes acceptance of the revised policy. If you do not agree with any changes, you must immediately cease using our services and close your account.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please contact us using the following methods:

• Email: [email protected] (include "Privacy Inquiry" or "Data Request" in the subject line)
• Live Chat: Available 24/7 through the soju88 platform — select "Privacy & Data Protection" from the topic menu
• Response Time: We aim to respond to all privacy inquiries within 48 hours and resolve formal data subject access requests within 30 days.

Our customer support team includes data protection specialists fluent in both Indonesian and English who are trained to handle privacy-related inquiries with the highest level of care and confidentiality.