sudirman Casino & Sportsbook Data Care
This page describes what we collect when you use sudirman and how we keep that data protected. We handle your personal information with the same care we apply to account security and game integrity—no selling to third parties, no hidden tracking, no surprise uses. Our data practices reflect a simple principle: you own your information, and we keep it safe.
We at sudirman collect only the information necessary to verify your identity, process your payments (via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), settle your winnings, and respond to support requests. Gameplay data—your bets, wins, and session history—helps us detect fraud and improve game stability. Your personal documents (national ID, proof of address) are stored in encrypted vaults accessible only to our compliance team.
Our services are available only where local law permits. By accessing sudirman from Jakarta, Surabaya, Bandung, Medan, Semarang, or other supported regions, you agree to our data practices. Read this policy carefully. If you have questions about how we handle your information, contact our privacy team directly.
What Data We Collect on sudirman
We collect your email address, full legal name, date of birth, phone number, and residential address when you create an account. These details are required for identity verification and account recovery. We also collect government-issued ID images (national ID, passport, or driver's license) and proof of address (utility bill, bank statement, government letter). These documents stay encrypted on our secure servers and are never shared with third parties beyond what law requires.
During gameplay, we log your bets, game session timestamps, win and loss amounts, and betting patterns. This data helps us detect fraud—for example, if an unauthorized person accesses your account, unusual betting patterns trigger a security alert. We also use gameplay logs to settle disputes fairly. If you claim a game outcome was wrong, we review the recorded hand or spin and verify the settlement.
Payment data includes the payment method you used (DANA wallet ID, bank account number, etc.), transaction amounts, and timing. We do not store raw credit-card or wallet passwords on our servers. Instead, we use PCI-compliant payment gateways that handle credential encryption on their own servers. We see only a token confirming the transaction succeeded, not your actual payment secret.
How We Use Your Data
We use your personal information for five primary purposes: (1) account verification and fraud prevention; (2) payment processing and settlement; (3) customer support and dispute resolution; (4) legal compliance and record-keeping; and (5) platform security and improvement.
Our compliance team accesses your documents only during account verification (first sign-up), during identity review if a withdrawal is flagged as unusual, or if we suspect fraud. This typically happens within hours and completes within 48 hours. We do not use your documents for any other purpose. We keep documents for seven years as required by anti-money-laundering regulations, then delete them unless you request earlier deletion.
We analyze gameplay data in aggregate—not individual players—to spot patterns like sudden large wins that may indicate system glitches or account compromise. We do not sell individual behavioral data to advertisers or third parties. We use aggregated insights (e.g., "players in Liga 1 betting season show non-specific info higher daily active rates") to improve our platform, not to profile individual users.
Your data belongs to you. We keep it safe, use it only as stated, and delete it when no longer needed.
Third Parties and Our Data Partners
We work with third-party processors who handle specific functions on our behalf. Payment gateways process deposits and withdrawals but do not see your sudirman balance or game history. Email service providers send account notifications and support replies but do not have access to your documents or payment data. Cloud infrastructure hosts our databases but is contractually bound to encrypt data at rest and in transit, with access logs we audit quarterly.
We do not allow third parties to use your data for marketing, profiling, or any purpose beyond the specific function they perform for sudirman. All third-party processors sign strict data-protection agreements binding them to confidentiality. If a processor is breached, we audit the incident, notify affected users, and take corrective action immediately.
Our servers may sit outside your jurisdiction. For example, data centers may be in Singapore or Australia. This is necessary for low-latency game delivery—live-dealer streams and sportsbook odds updates need fast connectivity. By using sudirman, you acknowledge that your data may be stored internationally, but remains protected under our encryption and access controls regardless of location.
Data protection essentials
- We collect only information necessary for account security, payments, and fraud prevention
- Personal documents are encrypted and accessed only by compliance staff during verification or dispute investigation
- Gameplay logs help us detect fraud and settle disputes fairly, not to profile individual players
- Payment data is processed through PCI-compliant gateways; we never store raw payment credentials
- Third-party processors are contractually bound to confidentiality and restricted to their specific function
Cookies and Tracking Technologies
We use cookies to keep you logged in across sessions and to remember your preferences (e.g., whether you prefer turbo-spin mode in slot games). These session cookies expire after 24 hours of inactivity. We also use cookies to detect fraud—for example, if a cookie shows a login from a new device, we may request additional verification before allowing withdrawal.
We do not use cookies to track your activity across other websites or build a profile of your browsing habits. We do not install third-party advertising cookies. We do not sell cookie data to analytics or marketing firms. Our cookies serve only sudirman's internal operations.
You can disable cookies in your browser settings, but doing so may limit functionality—for example, you may need to log in again more frequently. Most browsers allow you to block only third-party cookies while keeping first-party (sudirman) cookies active, which maintains security while limiting external tracking.
Your Rights Regarding Your Data on sudirman
You have the right to access your data. Log into your sudirman account and view your profile, document history, and all gameplay sessions. You can download a copy of your data in standard format (CSV or JSON) by requesting an export via our privacy form. We process export requests within 5 business days.
You can request correction of inaccurate data. If your registered name is misspelled, contact support and we update it immediately. You can request deletion of your documents after the mandatory retention period (seven years) expires. You can also request account closure anytime, which freezes all account access and allows us to delete personal data after the retention period.
You have the right to data portability—we provide your data in machine-readable format so you can transfer it to another service if you wish. You have the right to object to certain data uses. For example, if we process your data for fraud prevention, you can request that we stop, though this may limit our ability to serve you (for instance, we may reject your withdrawals if we cannot verify your identity).
Data Breaches and Security Incidents
We encrypt your data at rest (on our servers) and in transit (during uploads and downloads) using industry-standard protocols. Our servers are protected by firewalls, intrusion-detection systems, and regular security audits. We conduct penetration testing twice yearly to identify and patch vulnerabilities.
If we discover a data breach, we investigate immediately. If your personal data is compromised, we notify you via email within 72 hours and provide clear steps to secure your account (e.g., change your password, enable two-factor authentication). We do not require you to pay anything; we cover recovery costs ourselves.
We maintain incident-response procedures and cyber insurance. A breach of sudirman's systems is rare, but if it occurs, we have processes to contain the damage, notify affected users, and work with law enforcement and regulators as needed. You can review our incident-response policy by contacting our privacy team.
Policy Updates and Contact
We may update this privacy policy from time to time. If we make material changes, we notify you via email at least 30 days before they take effect. You may review the change history on our website. By continuing to use sudirman after the notification period, you accept the updated policy.
If you have questions about our data practices or wish to exercise your rights, contact our privacy team at [email protected] or via the privacy form in your account settings. We respond to inquiries within 5 business days. For urgent matters, use our live-chat support during business hours.
Related guides
Our Commitment to Your Privacy
We at sudirman built this privacy policy with a core principle: your data is your property, and we are stewards of it. We do not treat data as a commodity to monetize. We collect only what is necessary, use it only as stated, and delete it when no longer needed. We encrypt everything, audit access logs, and respond to breaches immediately.
Our privacy team is independent of marketing and gaming departments. They report directly to management and have authority to enforce data protection across the entire organization. If a game team wants to use player data in a way that violates this policy, privacy overrules them. This separation ensures that commercial pressures never compromise your rights.
sudirman operates only where local law permits. Your privacy is protected by our commitment and by the laws of the jurisdictions in which we operate. If you have concerns about how we handle your data, you have the right to lodge a complaint with your local data-protection authority. We support your right to do so and cooperate fully with regulators.