Table of Contents
- Scope and Applicability
- Definitions
- Information We Collect
- How We Collect Your Data
- Purpose and Legal Basis for Processing
- Disclosure and Sharing of Data
- Data Retention
- Security Measures
- Cookies and Tracking Technologies
- Your Rights as a Data Subject
- Protection of Minors
- Changes to This Policy
- Contact and Data Controller
1. Scope and Applicability
This Privacy Policy applies to all personal data collected and processed by spmbet in connection with your use of our website at https://spmbet.cam and all associated services, including sports betting, live casino, slot games, lottery products, and customer support channels. It applies regardless of whether you access our platform via desktop browser, mobile browser, or any other interface.
This policy governs data collected from all registered players, prospective players who browse our website, and any individual who contacts spmbet through our support channels. Our primary audience is located in Indonesia, and we recognize the importance of transparent data practices for Indonesian consumers.
By registering an account, depositing funds, or otherwise using spmbet services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of our services and contact support to close your account.
Relationship With Our Terms & Conditions
This Privacy Policy should be read alongside our Terms & Conditions. Together, these two documents constitute the complete agreement governing your relationship with spmbet. In the event of any conflict between the two, the Terms & Conditions take precedence for matters relating to gameplay and accounts; this Privacy Policy governs all data-related matters.
2. Definitions
For clarity, the following terms carry the meanings given below throughout this policy:
- "Personal Data" — any information that identifies or can reasonably identify a living individual, including name, email address, date of birth, financial details, and device identifiers.
- "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
- "Data Controller" — spmbet, as the entity that determines the purposes and means of processing your personal data.
- "Data Processor" — any third party that processes personal data on behalf of spmbet under a contractual arrangement (e.g., payment providers, game suppliers).
- "Cookies" — small text files placed on your device by our website that enable functionality and analytics.
- "KYC" — Know Your Customer; identity verification procedures required to comply with anti-money-laundering obligations and confirm player eligibility.
- "IDR / Rp" — Indonesian Rupiah, the primary transaction currency on spmbet.
- "WIB" — Western Indonesia Time (UTC+7), the default timezone for all spmbet operating references.
3. Information We Collect
spmbet collects only the personal data that is necessary to provide our services safely, securely, and in compliance with applicable regulations. The categories of data we collect are outlined below.
3.1 Registration Data
When you create an account, we collect:
- Full legal name (as it appears on your government-issued identification)
- Date of birth (to verify the minimum age of 21 years)
- Email address and mobile phone number
- Residential address (city, province, postal code — Indonesia-based players use Indonesian addressing)
- Chosen username and a securely hashed version of your password (we never store plain-text passwords)
3.2 Identity Verification (KYC) Data
To comply with anti-fraud and anti-money-laundering requirements, and to verify your age, we collect:
- Copies of government-issued photo identification (e.g., KTP, passport, or SIM)
- Proof of address documents (e.g., utility bills, bank statements from BCA, BRI, BNI, or Mandiri)
- Selfie or biometric photograph, where required for enhanced verification
- Payment method ownership documentation (e.g., bank statement, e-wallet screenshot)
3.3 Financial and Transaction Data
- Bank account details used for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI)
- E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
- Transaction history including deposit amounts, withdrawal requests, and timestamps
- Wagering history, game activity, and bonus utilization records
3.4 Technical and Device Data
- IP address and approximate geolocation (derived from IP)
- Device type, operating system, and browser version
- Session duration, login timestamps, and navigation paths
- Cookie data and unique device identifiers
3.5 Communication Data
- Records of all support interactions via Live Chat, email, and WhatsApp
- Survey responses, feedback submissions, and promotional correspondence
- Complaint records and dispute documentation
Sensitive Data
spmbet does not intentionally collect sensitive personal data (such as health information, political opinions, or religious beliefs) through its standard services. If you voluntarily disclose such information while contacting support (e.g., mentioning a health condition in relation to a responsible gaming request), we will treat it with the highest level of confidentiality and use it solely to address your request.
4. How We Collect Your Data
We collect personal data through the following methods:
4.1 Direct Collection
Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions and surveys.
4.2 Automated Collection
Technical data collected automatically when you access our website, including server logs, cookie data, and analytics. This information helps us maintain platform performance, detect fraud, and improve the user experience.
4.3 Third-Party Sources
We may receive data from trusted third-party partners to supplement our own records, including:
- Identity verification service providers used during KYC processing
- Payment processors and banking partners (BCA, BRI, BNI, Mandiri) who confirm transaction status
- Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) who transmit gameplay records to our systems
- Fraud prevention services that flag suspicious account or transaction behavior
5. Purpose and Legal Basis for Processing
We process your personal data only where we have a lawful basis to do so. The table below summarizes our key processing activities, their purposes, and the legal basis applied.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Creating and managing your player account | Contractual necessity |
| Age and identity verification (KYC) | Confirming 21+ eligibility; preventing fraud | Legal obligation; legitimate interest |
| Transaction processing | Handling deposits and withdrawals in IDR | Contractual necessity |
| Anti-money laundering checks | Detecting and preventing financial crime | Legal obligation |
| Customer support | Resolving queries, complaints, and disputes | Contractual necessity; legitimate interest |
| Marketing communications | Sending promotions and bonus offers | Consent (opt-in) |
| Analytics and platform improvement | Understanding usage patterns; improving UX | Legitimate interest |
| Responsible gaming monitoring | Identifying problem gambling behavior | Legal obligation; legitimate interest |
| Fraud and security monitoring | Protecting players and platform integrity | Legitimate interest; legal obligation |
Where we rely on consent as our legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Disclosure and Sharing of Data
spmbet does not sell your personal data to any third party. We share your data only where strictly necessary to deliver our services or to comply with legal obligations, and only with parties who are contractually bound to protect your information to the same standard we apply internally.
6.1 Service Providers and Data Processors
We engage trusted third-party processors who act on our instructions, including:
- Payment processors: banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate IDR transactions
- KYC and identity verification providers: for age verification and fraud screening
- Game suppliers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session data necessary to deliver and audit gameplay
- IT infrastructure and hosting providers: for secure server hosting and content delivery
- Analytics providers: for aggregated, anonymized platform usage analysis
- Customer support tooling: for managing live chat, email, and WhatsApp interactions
6.2 Regulatory and Law Enforcement Disclosure
We may disclose personal data to governmental authorities, regulators, or law enforcement agencies where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
6.3 Corporate Transactions
In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the successor entity. We will notify affected players via email prior to any such transfer and ensure the receiving entity commits to equivalent data protection standards.
No Cross-Border Sale of Data
We do not transfer your personal data to third parties for their own marketing purposes. Any cross-border transfer of data to our service providers is governed by data processing agreements that include adequate safeguards consistent with international data protection standards.
7. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The table below summarizes our standard retention periods.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory and audit requirements |
| KYC and identity documents | 5 years from last transaction | Anti-money-laundering obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Customer support records | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing preference records | Until consent is withdrawn | Consent-based processing |
| Technical and device logs | 12 months on a rolling basis | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Where deletion is not immediately practicable due to backup or archiving cycles, data is quarantined and protected from further active processing until deletion is completed.
8. Security Measures
spmbet implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:
- SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, providing bank-level protection for every session.
- Password hashing: Player passwords are stored using industry-standard one-way hashing algorithms; plain-text passwords are never stored or logged.
- Two-factor authentication (2FA): Optional 2FA is available for all accounts and is strongly recommended to add an additional layer of protection.
- Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access undergo regular privacy and security training.
- Intrusion detection and monitoring: Our systems are monitored 24/7 for suspicious activity, with automated alerting and response protocols in place.
- Regular penetration testing: We conduct independent security audits and penetration tests at regular intervals to identify and remediate vulnerabilities.
- Data breach response: In the event of a confirmed data breach affecting your personal data, we will notify you without undue delay and take immediate remedial action.
While we take every reasonable precaution, no security system is entirely infallible. You play an important role in keeping your account secure by maintaining a strong, unique password and not sharing your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately.
9. Cookies and Tracking Technologies
spmbet uses cookies and similar tracking technologies to deliver a functional, personalized, and secure experience. A cookie is a small text file stored on your device by your browser when you visit our website.
9.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | Session / up to 24 hours |
| Functional | Remembering language preferences, display settings, and game history | Up to 12 months |
| Analytics | Measuring page traffic, feature usage, and navigation flows (aggregated, anonymized) | Up to 24 months |
| Security | Fraud detection, bot prevention, and suspicious-login flagging | Session / up to 30 days |
9.2 Managing Cookies
You can control cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive alerts for cookies. Please note that disabling strictly necessary cookies will impair the functionality of our platform, and you may be unable to log in or complete transactions. Analytics and functional cookies can be disabled without affecting core account access.
10. Your Rights as a Data Subject
Subject to applicable law and any overriding legitimate interests or legal obligations on our part, you have the following rights in relation to your personal data held by spmbet:
- Right of Access: You may request a copy of the personal data we hold about you, including information about how it is processed.
- Right to Rectification: If any information we hold is inaccurate or incomplete, you may request that we correct it without undue delay.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations described in Section 7.
- Right to Restriction of Processing: In certain circumstances, you may request that we limit how we use your data while a dispute or verification request is pending.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease processing for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request." We will respond within 30 days of receiving your request. In some cases, we may need to verify your identity before processing your request.
Limitations on Erasure
Please note that certain data cannot be erased on request where we are legally required to retain it — for example, KYC records and financial transaction histories that fall within mandatory regulatory retention windows. We will inform you of any such limitation when responding to your erasure request.
11. Protection of Minors
spmbet operates a strictly enforced 21+ only policy. Our services are not directed at, marketed to, or intended for individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age.
During account registration, we require players to confirm their date of birth and submit to mandatory KYC age verification before any withdrawal can be processed. Any account found to belong to an individual under 21 will be immediately suspended, all wagers voided, and the matter reported where legally required.
If you believe a minor has created an account with spmbet, please contact our support team immediately at [email protected]. We take all such reports seriously and will investigate promptly.
12. Changes to This Policy
spmbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Display a prominent notice on our website for at least 14 days following the change
- Where required, notify registered players via email to the address on file
Your continued use of spmbet services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.
13. Contact and Data Controller
spmbet is the data controller responsible for the personal data covered by this Privacy Policy. If you have any questions, concerns, or requests relating to this policy or your personal data, please contact us through the following channels:
- Email: [email protected] — responses within 6 hours during WIB business hours
- Live Chat: Available 24/7 on our website — average response time under 2 minutes
- WhatsApp: +62 812 3456 7890 — 24/7 Indonesian-speaking support agents
All privacy-related inquiries are handled by our dedicated data protection team, who operate on Western Indonesia Time (WIB, UTC+7). For formal data rights requests, please include "Data Rights Request" in the subject line of your email to ensure prompt routing to the appropriate team.