Contents
1. Introduction & Scope 2. Definitions 3. Data We Collect 4. How We Collect Data 5. Purposes & Legal Bases 6. Cookies & Tracking 7. Data Sharing & Disclosure 8. International Data Transfers 9. Data Retention 10. Security Measures 11. Your Rights 12. Children & Minors 13. Third-Party Links 14. Marketing Communications 15. Changes to This Policy 16. Contact & ComplaintsSummary: sule69 collects your personal data only as necessary to operate your Player Account, process payments, comply with applicable regulations, and improve your gaming experience. We do not sell your data to third-party marketers. You have the right to access, correct, and request deletion of your personal information at any time by contacting our support team.
1. Introduction & Scope
1.1 This Privacy Policy ("Policy") describes how sule69 ("we", "us", "our") collects, uses, stores, discloses, and protects personal data provided by or collected from individuals ("you", "Player", "User") who access and use the sule69 platform at https://sule69.cam and any associated services, applications, or communications.
1.2 This Policy applies to all data processing activities carried out by sule69 in connection with its online betting and gaming services, including the collection of data via the website, mobile interfaces, customer support channels, email communications, and payment processing integrations.
1.3 By registering a Player Account or otherwise using the sule69 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the platform immediately.
1.4 This Policy is supplemental to and should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and sule69. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.
1.5 This Policy is directed primarily at players accessing sule69 from Indonesia. References to local payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), identification documents (KTP, passport), and regulatory obligations reflect our primary operational market context.
2. Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living natural person, including name, national ID number, email address, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction. |
| "Data Controller" | sule69, as the entity that determines the purposes and means by which Personal Data is processed. |
| "Data Processor" | A third party that processes Personal Data on behalf of sule69, acting under our documented instructions (e.g., payment gateway providers, cloud infrastructure vendors). |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, including government-issued identification numbers (KTP, NIK), financial account details, and copies of identity documents submitted for KYC purposes. |
| "Cookie" | A small text file stored on your device by your web browser upon visiting the platform, used to recognise your device on subsequent visits and support platform functionality. |
| "KYC" | Know Your Customer — the identity and age verification process through which sule69 confirms a Player's identity prior to enabling withdrawal functionality. |
3. Data We Collect
3.1 sule69 collects only the minimum Personal Data necessary to deliver its services safely and in compliance with applicable regulatory obligations. The categories of data we collect are outlined in the table below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, KTP number, passport number, selfie/photo for liveness check | Account creation, KYC verification, age enforcement |
| Contact Data | Email address, phone number, residential address (province, city, postal code) | Account communications, support, withdrawal notifications |
| Financial Data | Bank account number, bank name (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay), transaction history, deposit and withdrawal amounts in IDR/Rp | Payment processing, anti-money-laundering (AML) compliance, fraud prevention |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone (WIB/WITA/WIT) | Security, fraud detection, platform optimization |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns, search queries within the platform | Service improvement, responsible gaming monitoring, personalization |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp support messages, feedback submissions | Customer support, quality assurance, dispute resolution |
| Marketing Data | Communication preferences, promotional interaction history, bonus claim records | Personalized offers, promotional communications (where consented) |
3.2 We do not intentionally collect Special Category data (such as health, racial, political, or religious information). If any such data is inadvertently disclosed to us, it will be deleted promptly upon discovery.
4. How We Collect Data
4.1 sule69 collects Personal Data through the following channels:
Direct Collection
Data you actively provide when you: register a Player Account; complete KYC verification by uploading your KTP or passport; make a deposit or request a withdrawal; contact our support team via live chat, email, or WhatsApp; participate in promotions or competitions; or respond to surveys or feedback requests.
Automated Collection
Data collected automatically as you use the platform through: browser cookies and local storage; server logs capturing your IP address, access timestamps, and request details; analytics tools that record navigation patterns and feature usage; and device fingerprinting for fraud prevention purposes.
Third-Party Sources
We may receive data about you from: payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay) confirming transaction status; identity verification service providers assisting with KYC; fraud screening services providing risk scores; and publicly available sources such as sanctions screening databases and politically exposed persons (PEP) lists.
5. Purposes & Legal Bases for Processing
5.1 sule69 processes your Personal Data only where a valid legal basis exists. The primary legal bases and corresponding purposes are set out below:
- Contractual Necessity: Processing required to perform our contract with you — operating your Player Account, processing deposits and withdrawals, crediting bonuses, and delivering gaming services.
- Legal Obligation: Processing required to comply with applicable law — KYC/AML identity verification, sanctions screening, regulatory reporting, and responding to lawful requests from competent authorities.
- Legitimate Interests: Processing for our legitimate business interests where they are not overridden by your rights — fraud detection, platform security, responsible gaming monitoring, internal analytics, service quality improvement, and protecting the integrity of our games.
- Consent: Processing based on your freely given, specific, and informed consent — marketing email communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5.2 Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure our interests do not unduly prejudice your privacy rights. You have the right to object to processing carried out on this basis (see Section 11).
6. Cookies & Tracking Technologies
6.1 sule69 uses cookies and similar tracking technologies to ensure the platform functions correctly, maintain session security, and improve your experience. The cookies we use fall into the following categories:
- Strictly Necessary Cookies: Essential for the platform to operate. These enable session management, login state persistence, and security functions. They cannot be disabled without impairing basic platform functionality.
- Functional Cookies: Remember your preferences such as language settings, currency display (IDR/Rp), and preferred payment method, to provide a more personalized experience.
- Analytical Cookies: Collect anonymized data about h ow you use the platform — pages visited, session duration, error rates — to help us improve our services. Data collected is aggregated and does not identify individual players.
- Security Cookies: Used for fraud prevention and bot detection, helping to protect your account and the integrity of the platform.
6.2 Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use core platform features, including logging in and processing transactions.
6.3 We do not use third-party advertising or retargeting cookies. We do not share cookie-derived data with external advertising networks.
Cookie Lifespan: Session cookies expire when you close your browser. Persistent cookies used for preference storage are retained for a maximum of 12 months, after which they expire and are renewed only upon your next login.
7. Data Sharing & Disclosure
7.1 sule69 does not sell, rent, or trade your Personal Data to third parties for commercial or marketing purposes. We share your data only in the circumstances described in this section.
7.1 Service Providers (Data Processors)
We engage trusted third-party service providers who process data strictly on our behalf and under our documented instructions. These include:
- Payment processors: BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, and ShopeePay — to facilitate deposits and withdrawals in IDR/Rp.
- KYC & identity verification vendors: Specialist providers that cross-reference submitted documents against official databases.
- Cloud infrastructure providers: Hosting and database services operating under strict data processing agreements.
- Customer support platforms: Live chat, email ticketing, and messaging tools used to manage Player communications.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum session data necessary to deliver and audit game rounds.
7.2 Regulatory & Legal Disclosure
sule69 may disclose Personal Data to competent authorities, courts, regulators, or law enforcement agencies where required by applicable law, valid legal process, or our licensing obligations. Such disclosures may be made without prior notice to you where the law so requires or where advance notice would prejudice an ongoing investigation.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of sule69's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via email or a prominent notice on the platform before your data becomes subject to a different privacy policy.
7.4 Protection of Rights
We may disclose data where we reasonably believe disclosure is necessary to: protect the rights, property, or safety of sule69, our Players, or the public; investigate suspected fraud, money laundering, or other illegal activity; or enforce our Terms & Conditions.
8. International Data Transfers
8.1 As an internationally operated platform, sule69 may transfer your Personal Data to servers and service providers located outside Indonesia. Wherever such transfers occur, we ensure appropriate safeguards are in place, which may include:
- Standard contractual clauses (SCCs) incorporated into agreements with Data Processors.
- Data processing agreements that impose equivalent data protection obligations on the receiving party.
- Transfer only to jurisdictions that maintain adequate data protection standards as assessed by our compliance team.
8.2 By using the sule69 platform, you acknowledge and consent to the transfer of your Personal Data to countries that may not have data protection laws equivalent to those in Indonesia, subject to the safeguards described above.
Data Sovereignty Note: Wherever technically and operationally feasible, sule69 prefers to store the Personal Data of Indonesian Players on servers located within Southeast Asia to minimize latency and support regional data sovereignty principles.
9. Data Retention
9.1 sule69 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, satisfy legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years from account closure or last transaction | AML/KYC regulatory obligation |
| Financial transaction records | 5 years from the date of transaction | Financial compliance & audit requirements |
| Account & contact data | Duration of account plus 2 years post-closure | Contractual & dispute resolution |
| Betting & gaming history | 3 years from the date of the wager | Responsible gaming monitoring, dispute resolution |
| Customer support communications | 2 years from the date of the last message | Quality assurance & dispute resolution |
| Marketing preferences & consent records | Until consent is withdrawn, plus 1 year for records | Proof of lawful processing basis |
| Technical & log data | Up to 12 months from collection | Security monitoring & fraud detection |
9.2 At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.
10. Security Measures
10.1 sule69 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:
- Transport Encryption: All data transmitted between your browser and our servers is protected using TLS 1.2 or higher (HTTPS).
- Data Encryption at Rest: Sensitive data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
- Access Controls: Access to Personal Data is restricted to authorized sule69 personnel and Data Processors on a strict need-to-know basis, enforced through role-based access control (RBAC).
- Multi-Factor Authentication: Internal systems handling Personal Data require multi-factor authentication (MFA) for all staff access.
- Intrusion Detection & Monitoring: Continuous monitoring of systems for suspicious activity, unauthorized access attempts, and anomalous data flows.
- Regular Security Audits: Periodic penetration testing and vulnerability assessments conducted by independent third-party security specialists.
- Incident Response Plan: A documented data breach response procedure including notification protocols for affected Players within the timeframes required by applicable law.
10.2 While sule69 employs industry-standard security practices, no data transmission over the internet can be guaranteed as entirely secure. You are responsible for maintaining the security of your own login credentials and device.
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, sule69 will notify affected Players without undue delay, describing the nature of the breach, the data affected, and the steps we are taking to address it.
11. Your Privacy Rights
11.1 As a Player whose data is processed by sule69, you have the following rights with respect to your Personal Data. You may exercise any of these rights by contacting our support team at [email protected].
Right of Access
Request a copy of all Personal Data we hold about you, including the categories of data, purposes of processing, and any third parties with whom it has been shared.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data. For account-level corrections (name, address), you may also update information directly in your account settings.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the original purpose, or where you withdraw consent. This right is subject to retention obligations under applicable law.
Right to Restriction
Request that we limit our processing of your data — for example, while we investigate a dispute about accuracy or a pending objection to legitimate-interest processing.
Right to Portability
Receive a copy of Personal Data you provided to us in a structured, commonly used, machine-readable format (e.g., JSON or CSV), where technically feasible.
Right to Object
Object to processing of your Personal Data carried out on the basis of legitimate interests or for direct marketing purposes. We will cease such processing unless compelling legitimate grounds override your interests.
Withdraw Consent
Withdraw previously given consent for marketing communications or non-essential cookies at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to Complain
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been violated, after first giving sule69 the opportunity to address your concern.
11.2 We will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
11.3 We may require you to verify your identity before processing a privacy rights request to protect against unauthorized requests made in your name. This may involve re-confirming your registered email address or providing a copy of your ID.
12. Children & Minors
12.1 The sule69 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21.
12.2 All accounts undergo mandatory age verification during the KYC process. Any account found to belong to a person under 21 will be immediately suspended, all associated data will be handled in accordance with our legal obligations, and deposited funds (excluding any winnings) will be returned to the originating payment method.
12.3 If you believe that a minor has registered an account on sule69, please contact our support team at [email protected] immediately. We will investigate and take appropriate action within 24 hours.
12.4 Parents and guardians who are concerned about underage gambling are encouraged to visit our Responsible Gaming page, which provides guidance on parental controls, filtering software, and support resources available in Indonesia.
13. Third-Party Links
13.1 The sule69 platform may contain references or links to third-party websites, game providers, or payment platforms. Once you navigate away from sule69 to a third-party site, this Policy no longer applies. We have no control over and assume no responsibility for the privacy practices, content, or data handling of any third-party websites or services.
13.2 We recommend reviewing the privacy policy of any third-party service you interact with. Our inclusion of a reference to a third-party provider does not constitute an endorsement of their privacy practices.
14. Marketing Communications
14.1 With your consent, sule69 may send you promotional communications about new games, exclusive bonuses, seasonal promotions (including Indonesian holiday offers such as Idul Fitri, Ramadhan, and Nyepi specials), VIP program updates, and platform news.
14.2 You can opt out of marketing communications at any time by: clicking the unsubscribe link in any marketing email; updating your communication preferences in your account settings; or contacting our support team directly.
14.3 Opting out of marketing communications will not affect transactional or service-related communications, which are sent regardless of marketing preference as they form part of our contractual obligations to you (e.g., deposit confirmations, withdrawal notifications, security alerts).
14.4 sule69 does not engage in unsolicited SMS marketing. Any SMS messages sent by sule69 relate exclusively to transactional events — such as one-time passcodes (OTPs) for account security — and are never promotional in nature.
15. Changes to This Policy
15.1 sule69 reserves the right to update or modify this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects when the most recent revision took effect.
15.2 For material changes — those that significantly affect how we collect or use your Personal Data, or that materially reduce your rights — we will provide at least 14 calendar days' advance notice by email to your registered address and/or a prominent notice displayed on the platform when you next log in.
15.3 Your continued use of the sule69 platform after the effective date of any revised Policy constitutes your acceptance of those changes. If you do not agree with a revised Policy, you should stop using the platform and request account closure before the effective date.
16. Contact & Complaints
16.1 For any questions, requests, or concerns relating to this Privacy Policy or our handling of your Personal Data, please contact the sule69 Privacy Team using the details below:
Privacy & Data Inquiries:
Email: [email protected] (subject line: "Privacy Request — [Your Account ID]")
Response Time: Initial acknowledgment within 2 business days; full response within 30 calendar days.
Support Hours: 24/7, including Indonesian public holidays. Indonesian-speaking agents available during WIB business hours and beyond.
16.2 If you believe your privacy rights have been violated and our response does not satisfactorily resolve your concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
16.3 We take all privacy complaints seriously and will acknowledge, investigate, and respond to each one in good faith. Our goal is to resolve every legitimate concern fairly and within the timeframes stated above.
Our Commitment: sule69 is committed to handling your Personal Data with the highest standards of care, transparency, and integrity. We will never sell your data, and we will never use it for any purpose beyond those clearly described in this Policy.
How sule69 Protects Your Privacy
Six concrete commitments that underpin every aspect of our Privacy Policy.
Your Personal Data is never sold, rented, or traded to third-party advertisers or data brokers under any circumstance. Information you share with sule69 stays within sule69's controlled environment.
All sensitive data — KTP scans, financial records, and account credentials — is encrypted at rest using AES-256 and in transit via TLS 1.2+. Your information is protected to banking-grade standards.
Only authorized sule69 personnel with a verified business need can access your Personal Data. Role-based access control (RBAC) and multi-factor authentication are enforced across all internal systems.
Access, correct, export, or delete your Personal Data at any time by contacting our support team. We respond to all verified data requests within 30 calendar days — no runaround, no delays.
We retain your data only as long as legally required or operationally necessary. Once a retention period expires, data is securely deleted or irreversibly anonymized — it is not archived indefinitely.
In the unlikely event of a data breach affecting your information, we will notify you promptly — describing what happened, what data was involved, and what steps we are taking to protect you.
Questions About Your Privacy?
Our support team is available around the clock to address any privacy concern, process a data request, or clarify how your information is used. You can also explore our related policy pages below.