Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by singa8 through our website (https://singa8.cam), mobile applications, customer support channels, and any other digital touchpoints where singa8 services are offered. This policy describes:

• What personal information we collect from Indonesian players and users in other jurisdictions;
• How we collect that information (directly from you, automatically through technology, or from third parties);
• Why we collect and process your data (legal basis and legitimate interests);
• How we use your information to provide services, comply with regulations, and improve user experience;
• With whom we share your data and under what circumstances;
• How we protect your information through technical and organizational security measures;
• Your rights regarding your personal data and how to exercise them;
• How long we retain your information before secure deletion.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of singa8 services. Terms defined in our Terms and Conditions have the same meaning when used in this Privacy Policy.

2. Data Controller Information

singa8 is the data controller responsible for the personal information collected through our platform. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with applicable data protection laws.

For questions, concerns, or requests regarding your personal data, you may contact our Data Protection Officer or Privacy Team at:

• Email: [email protected] (mark subject line "Privacy Inquiry" for priority handling)
• Response Time: We aim to respond to all privacy inquiries within 7 business days

3. Information We Collect

To provide gaming services, process transactions, comply with legal obligations, and enhance user experience, singa8 collects the following categories of personal information:

3.1 Information You Provide Directly

When you register for an account, verify your identity (KYC), make deposits or withdrawals, or contact customer support, you provide us with:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (Indonesian KTP number, passport number), copies of identification documents (KTP, passport, driver's license);
• Contact Information: Email address, mobile phone number, residential address (street, city, postal code, province/region);
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay account numbers or phone numbers), transaction history, deposit amounts, withdrawal requests;
• Account Credentials: Username, password (stored in encrypted form only), security questions and answers;
• Communication Content: Messages sent to customer support, live chat transcripts, emails, feedback surveys, complaint forms;
• Verification Documents: Proof of address (utility bills, bank statements, government correspondence), selfie photographs holding identification, source of funds documentation if requested.

3.2 Information Collected Automatically

When you access and use the singa8 platform, we automatically collect technical and usage information through cookies, server logs, and analytics tools:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID);
• Connection Information: IP address, internet service provider (ISP), geographic location (country, city based on IP), connection speed, network type (WiFi, mobile data);
• Usage Data: Pages visited, time spent on pages, navigation paths, games played, bet history, win/loss records, feature usage, referral sources (how you arrived at singa8), search queries within the site;
• Performance Data: Error reports, crash logs, loading times, technical issues encountered;
• Cookies and Similar Technologies: Session cookies, persistent cookies, local storage data, analytics tags, advertising pixels (see Section 9 for details).

3.3 Information from Third Parties

In limited circumstances, we may receive information about you from external sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals;
• Identity Verification Services: Age verification, identity authentication, fraud detection services that confirm your information against official databases;
• Affiliate Partners: Referral source information if you registered through an affiliate link (the referring affiliate's identifier, but not your personal information shared with the affiliate);
• Public Databases: Sanctions lists, PEP (Politically Exposed Persons) databases, and fraud watchlists used for compliance screening.

4. How We Use Your Information

singa8 uses your personal data for the following purposes, each with a lawful basis under data protection regulations:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account;
• Processing deposits and withdrawals;
• Providing access to sports betting, casino games, and other gaming products;
• Recording and settling bets and game outcomes;
• Applying bonuses and promotions to eligible accounts;
• Maintaining accurate account balances and transaction histories;
• Processing your requests and responding to inquiries.

Legal Basis: Contractual necessity (performance of our Terms and Conditions), legitimate interest (providing services you requested).

4.2 Identity Verification and Fraud Prevention

• Verifying your identity and age (21+ requirement) through KYC procedures;
• Confirming ownership of payment methods to prevent third-party fraud;
• Detecting and preventing fraudulent accounts, duplicate accounts, bonus abuse, money laundering, collusion, and other prohibited activities;
• Screening against sanctions lists, PEP databases, and fraud watchlists;
• Investigating suspicious transactions, betting patterns, or account behaviors;
• Protecting the security and integrity of the singa8 platform and other players.

Legal Basis: Legal obligation (anti-money laundering regulations, KYC requirements), legitimate interest (fraud prevention, platform security).

4.3 Regulatory Compliance and Legal Obligations

• Complying with gaming licenses, regulations, and reporting requirements;
• Cooperating with law enforcement, regulatory authorities, or court orders when legally required;
• Maintaining records for auditing and regulatory inspection purposes;
• Enforcing our Terms and Conditions and other policies;
• Resolving disputes, investigating complaints, and pursuing legal claims;
• Responding to data protection authority inquiries.

Legal Basis: Legal obligation (compliance with laws and regulations), legitimate interest (enforcing legal rights, defending against claims).

4.4 Communication and Customer Support

• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts, security warnings);
• Providing customer support via live chat, email, or WhatsApp;
• Responding to your questions, feedback, and complaints;
• Notifying you of important changes to terms, policies, or services;
• Sending promotional offers, bonus notifications, and marketing communications (with your consent, opt-out available);
• Conducting satisfaction surveys and gathering feedback.

Legal Basis: Contractual necessity (essential communications), consent (promotional communications), legitimate interest (customer service improvement).

4.5 Platform Improvement and Analytics

• Analyzing usage patterns to understand player preferences and behaviors;
• Improving website performance, user interface, and navigation;
• Testing new features, games, and betting markets;
• Conducting statistical analysis and market research;
• Personalizing your experience based on gaming preferences;
• Troubleshooting technical issues and optimizing platform stability.

Legal Basis: Legitimate interest (improving services, enhancing user experience, business development).

4.6 Responsible Gaming and Player Protection

• Monitoring gameplay for signs of problem gambling behavior;
• Enforcing deposit limits, loss limits, and self-exclusion requests;
• Providing reality-check reminders and responsible gaming tools;
• Identifying players who may benefit from responsible gaming interventions;
• Supporting players who request assistance with gambling-related concerns.

Legal Basis: Legal obligation (responsible gaming duties), legitimate interest (player welfare and protection).

5. Information Sharing and Disclosure

singa8 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary for legitimate business purposes or legal compliance:

5.1 Service Providers and Processors

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateways that facilitate deposits and withdrawals;
• Identity Verification Services: KYC verification platforms, age verification services, document authentication providers;
• Cloud Hosting and Data Storage: Secure server providers that host the singa8 platform and store encrypted data;
• Analytics Providers: Google Analytics and similar tools that help us understand website usage (data anonymized where possible);
• Customer Support Tools: Live chat software, email management systems, ticketing platforms;
• Marketing and Communication Services: Email delivery platforms, SMS gateways for transactional messages and promotional communications (with consent);
• Fraud Detection and Security Services: Anti-fraud systems, DDoS protection, intrusion detection providers.

All service providers are bound by strict data protection agreements (Data Processing Agreements) and are permitted to use your information only as necessary to perform their contracted functions. They cannot use your data for their own purposes.

5.2 Game Providers and Software Studios

When you play games from third-party providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, etc.), limited information (username, game session ID, bet amounts, outcomes) may be shared with those providers to deliver the gaming experience. Game providers do not receive your full name, contact details, financial information, or identification documents.

5.3 Regulatory Authorities and Law Enforcement

We may disclose your information to regulatory bodies, gaming authorities, law enforcement agencies, courts, or government officials when:

• Required by law, legal process, court order, or subpoena;
• Necessary to comply with gaming license conditions, anti-money laundering regulations (AML), or counter-terrorism financing (CTF) obligations;
• Requested by regulatory authorities conducting audits or investigations;
• Needed to protect singa8's legal rights, defend against legal claims, or enforce our terms;
• Necessary to protect the safety, security, or property of singa8, our users, or the public;
• Required to prevent, detect, or investigate suspected fraud, illegal activities, or terms violations.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving singa8, your personal information may be transferred to the acquiring or succeeding entity. We will notify you via email and/or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information with other third parties if you provide explicit consent for a specific purpose (e.g., participating in a promotional partnership, entering a tournament with third-party sponsors).

6. Data Security Measures

singa8 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Controls

• Encryption: All data transmitted between your device and singa8 servers is protected by 256-bit SSL/TLS encryption (same security standard used by banks). Sensitive data (passwords, financial information, identification documents) is encrypted at rest using AES-256 encryption;
• Secure Servers: Data is stored on secure servers located in certified data centers with physical security controls (24/7 surveillance, biometric access controls, fire suppression systems);
• Firewall Protection: Multi-layered firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block unauthorized access attempts;
• DDoS Mitigation: Advanced protection against distributed denial-of-service attacks to ensure platform availability;
• Regular Security Audits: Third-party penetration testing, vulnerability assessments, and security audits conducted quarterly;
• Secure Coding Practices: Code reviews, input validation, output encoding, and protection against SQL injection, cross-site scripting (XSS), and other web vulnerabilities;
• Automated Backups: Daily encrypted backups stored in geographically separate locations for disaster recovery.

6.2 Organizational Security Measures

• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis. All access is logged and monitored;
• Employee Training: All singa8 staff receive mandatory data protection and security awareness training. Non-disclosure agreements (NDAs) bind all employees;
• Incident Response Plan: Documented procedures for detecting, investigating, and responding to data breaches or security incidents. Users will be notified within 72 hours if a breach affects their personal data;
• Vendor Management: All third-party service providers undergo security assessments before engagement and are bound by data protection agreements;
• Data Minimization: We collect only the data necessary for specific purposes and delete data when no longer needed (see Section 7);
• Segregation of Duties: No single employee has complete access to all systems or data, reducing insider risk.

6.3 Your Security Responsibilities

While singa8 implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone;
• Enable two-factor authentication (2FA) if available;
• Log out after each session, especially on shared or public devices;
• Never respond to phishing emails or messages claiming to be from singa8 asking for your password or sensitive information (legitimate singa8 staff will never request your password);
• Keep your email account and mobile device secure;
• Report suspicious activity on your account immediately to customer support.

7. Data Retention Periods

singa8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

7.1 Active Account Data

• Account Information, Transaction History, Bet Records: Retained for the duration of your active account plus a minimum of 5 years after account closure (required by gaming regulations and AML laws for audit and dispute resolution purposes);
• KYC Verification Documents: Retained for 5 years after account closure or as required by applicable regulations;
• Financial Records: Retained for 7 years after the transaction date (Indonesian tax and financial record-keeping requirements);
• Customer Support Communications: Retained for 3 years to resolve disputes and improve service quality.

7.2 Inactive or Closed Accounts

• Accounts with no login activity for 12+ months are considered dormant. Account holders will be notified via email before any action is taken;
• After voluntary account closure, essential data (transaction history, KYC documents) is retained for the legally required period (minimum 5 years), then securely deleted;
• Marketing and analytics data may be anonymized (stripped of personally identifiable information) and retained indefinitely for statistical purposes.

7.3 Automated and Manual Deletion

• Session cookies expire when you close your browser;
• Persistent cookies and analytics data expire after 24 months unless you renew consent;
• Temporary files (server logs, cache) are automatically deleted after 90 days;
• Upon expiration of retention periods, data is securely deleted using industry-standard methods (secure erasure, overwriting) to prevent recovery;
• Backups containing expired data are overwritten during regular backup rotation cycles.

7.4 Legal Holds

If your data is subject to a legal hold (ongoing litigation, regulatory investigation, audit requirement), retention periods may be extended until the hold is lifted, even if normal retention periods have expired.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data. To exercise these rights, contact our Privacy Team at [email protected] with "Privacy Rights Request" in the subject line.

8.1 Right of Access

You have the right to request confirmation of whether singa8 processes your personal data and, if so, to obtain a copy of that data. We will provide access within 30 days of your request. You may request information about:

• What personal data we hold about you;
• The purposes of processing;
• The categories of data;
• The recipients or categories of recipients to whom your data has been disclosed;
• The retention periods;
• Your rights (including the right to lodge a complaint with a data protection authority).

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction or completion. You can update most information directly in your account settings or by contacting customer support.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected;
• You withdraw consent on which processing was based, and there is no other legal basis for processing;
• You object to processing based on legitimate interests, and there are no overriding legitimate grounds for continued processing;
• Your data has been unlawfully processed;
• Erasure is required by legal obligation.

Note: The right to erasure is not absolute. We may retain data if necessary for legal obligations, regulatory compliance, fraud prevention, or establishing/defending legal claims. In such cases, we will restrict processing to the minimum necessary.

8.4 Right to Restriction of Processing

You have the right to request that we limit how we use your data in certain situations:

• You contest the accuracy of your data (restriction applies while we verify accuracy);
• Processing is unlawful, but you prefer restriction over erasure;
• We no longer need the data, but you need it for legal claims;
• You have objected to processing based on legitimate interests (restriction applies pending verification of whether our legitimate grounds override your interests).

8.5 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another controller. This applies to data you provided to us (not data generated by our systems).

8.6 Right to Object

• Object to Processing Based on Legitimate Interests: You may object to processing based on our legitimate interests (e.g., analytics, fraud detection). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests or need the data for legal claims;
• Object to Direct Marketing: You may object to receiving promotional communications at any time by clicking "Unsubscribe" in emails, adjusting preferences in your account, or contacting support. Objection is absolute—we will stop marketing immediately;
• Object to Automated Decision-Making: If we use automated systems to make decisions significantly affecting you (e.g., denying withdrawals based solely on automated fraud detection), you have the right to request human review of the decision.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. To withdraw consent, contact support or adjust settings in your account preferences.

8.8 Right to Lodge a Complaint

If you believe singa8 has violated your privacy rights, you may lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve your concern directly.

9. Cookies and Tracking Technologies

singa8 uses cookies, web beacons, pixels, local storage, and similar technologies to enhance user experience, analyze platform usage, and deliver targeted communications.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, recognize you on return visits, and improve functionality.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality (login authentication, session management, security). Cannot be disabled without breaking core features. No consent required;
• Performance and Analytics Cookies: Collect anonymous data on how you use the site (pages visited, time spent, features used). Help us improve performance and user experience. Examples: Google Analytics;
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience;
• Targeting/Advertising Cookies: Track your browsing to deliver relevant promotional content. May be set by third-party advertising partners with your consent.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to:

• View and delete existing cookies;
• Block all cookies or specific types of cookies;
• Receive notifications when cookies are set;
• Enable "Do Not Track" signals (though not all websites honor these signals).

Note: Blocking or deleting cookies may impair site functionality. Essential cookies cannot be disabled without preventing access to core services.

9.4 Third-Party Cookies

Some cookies are set by third-party services we use (payment processors, analytics providers, game studios). We do not control these cookies. Please review the privacy policies of third-party services for information on their cookie practices.

10. International Data Transfers

singa8 primarily serves Indonesian players, and your data is processed within Indonesia or the jurisdiction where our servers are located. However, some service providers (cloud hosting, analytics, payment processors) may process data in other countries. When personal data is transferred internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities;
• Adequacy decisions confirming that the destination country provides adequate data protection;
• Binding Corporate Rules (BCRs) for transfers within corporate groups;
• Your explicit consent where required by law.

We carefully vet all international service providers to ensure they meet international data protection standards equivalent to or exceeding those in Indonesia and the EU GDPR framework.

11. Children's Privacy

singa8 services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. Our age verification processes during account registration and KYC verification are designed to prevent underage access.

If we become aware that we have inadvertently collected personal data from someone under 21, we will take immediate steps to delete that information and close the associated account. Parents or guardians who discover that a minor has created an account should contact us immediately at [email protected].

12. Changes to This Privacy Policy

singa8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the bottom of this policy;
• Notify you via email to your registered email address (for significant changes affecting your rights);
• Display a prominent notice on the singa8 website;
• Request renewed consent if required by law (e.g., for new processing purposes not covered by original consent).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of singa8 services after policy changes take effect constitutes acceptance of the revised policy.

13. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or how singa8 handles your personal data, please contact our Privacy Team:

• Email: [email protected] (include "Privacy Inquiry" or "Privacy Rights Request" in subject line)
• Expected Response Time: We aim to respond to all privacy inquiries within 7 business days. For privacy rights requests (access, erasure, portability), we will respond within 30 days as required by data protection laws;
• Verification: To protect your privacy, we may ask you to verify your identity before responding to privacy rights requests (provide username, date of birth, registered email address, or answer security questions).