sultantoPrivacy Policy

This page describes what we collect when you use sultanto and how we keep that data protected. We take your privacy seriously and apply standard encryption and access controls across all our systems.

We collect personal information only when necessary to operate our platform—to verify your identity, process your deposits and withdrawals, settle wagers, and provide customer support. We do not sell your data to third parties. We do not share your information outside sultanto unless law requires it or you explicitly request it (for example, if you ask us to refund your deposit to your bank).

Our privacy practice reflects our commitment to transparency. We explain what data flows where, how long we retain it, and what rights you have to access or delete it. If you have questions about this policy, contact our support team through the in-app Help portal.

What We Collect and How We Use Your Data on sultanto

Personal Information Collected During Registration

When you register on sultanto, we collect your legal name, date of birth, email address, and phone number. We use this information to create your account, verify your identity, and send you account notifications (such as password-reset links, bonus credits, and promotional announcements). Your email and phone are also your primary contact methods if you need account support.

We require government-issued identification (national identity card, passport, or driver's license) and proof of address (utility bill, bank statement, or lease agreement dated within three months) to verify your identity. We store these documents securely and access them only during verification and if regulatory authorities request them. Once verification is complete, we retain your documents for compliance purposes but do not use them for any other reason.

Financial Data on sultanto

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we collect transaction records showing your deposit amount, date, and payment method. We do not store full payment card numbers or bank account numbers; instead, we store tokenized references that allow us to process future transactions without re-entering sensitive data.

We retain deposit and withdrawal records for a minimum of five years to comply with financial regulations. We use this data to process your transactions, detect fraud, and respond to withdrawal requests. We do not use your financial data for marketing purposes or share it with advertisers.

Gaming Activity and Wager Records

We track all your wagers on sultanto—football betting, live-dealer games, slot games, esports markets—to calculate your cashback, track tier progression, and settle bonuses. We record your bet amounts, game results, win/loss outcomes, and timestamps. This data is used to compute your weekly cashback and verify that you have completed turnover requirements for bonus withdrawal.

We also use gaming activity to detect fraud (such as multi-accounting or bonus abuse). If we suspect suspicious patterns, we investigate and may freeze your account. We retain gaming records for at least three years and share them with you upon request through your account dashboard.

Usage Data and Analytics

When you use sultanto, we collect usage data: which pages you visit, how long you stay on each page, which games you play, and which features you access most. We use this data to understand user behaviour, improve our platform, and personalize your experience (for example, recommending games based on your preferences).

We also use cookies and similar tracking technologies to remember your login session, store your language preference, and measure campaign effectiveness. If you disable cookies in your browser, some sultanto features may not function properly. We do not use tracking data to identify you across third-party websites; our tracking is limited to sultanto only.

Communication Records on sultanto

When you contact our support team via in-app chat, email, or live help, we store your messages and our responses. We use these records to resolve your issue, train our support staff, and improve our service. We retain support tickets for at least two years and discard them unless there is an ongoing dispute or regulatory reason to keep them longer.

Your Rights and Our Data Practices on sultanto

Third-Party Data Processors

We use third-party service providers to operate sultanto. These include payment processors (to handle deposits and withdrawals), cloud hosting providers (to store your data), and customer-support platforms (to manage your help requests). We share only the minimum data necessary for each service provider to do their job.

All our third-party partners are contractually bound to keep your data confidential and use it only for the purpose we specify. They do not have permission to sell, rent, or market your data. Our servers and your data may be located outside your home jurisdiction; by using sultanto, you consent to this transfer.

Your Rights to Access, Correct, and Delete Your Data

You have the right to request access to all personal data we hold about you. You can request a copy of your complete data profile through your sultanto account settings. We will provide this within 10 business days.

You can update your email address, phone number, and other profile information anytime through your Account Settings. If you believe we have collected incorrect data about you, contact our support team and we will correct it. You can also request deletion of your account and associated personal data, subject to legal retention requirements (for example, we must retain financial records for regulatory compliance). Upon deletion request, we anonymize your account, retain only essential compliance records, and delete all other data within 30 days.

Data Retention on sultanto

We retain different data for different periods:

• Account information: Active for the life of your account; deleted within 30 days of account closure.
• Financial records: Retained for a minimum of five years for regulatory compliance.
• Gaming activity: Retained for at least three years; older records archived and inaccessible to routine support.
• Support tickets: Retained for two years unless a dispute is ongoing.
• Cookies and session data: Deleted automatically after your session ends or after 12 months of inactivity, whichever is sooner.

Security Measures We Undertake

We protect your data using SSL/TLS encryption for all data in transit (between your device and our servers). Data at rest (stored on our servers) is encrypted using AES-256 encryption. We use firewalls, intrusion-detection systems, and regular security audits to protect against unauthorized access.

Our servers undergo regular backups to ensure business continuity. Access to sensitive data (financial records, government IDs, support conversations) is restricted to authorized staff and logged for audit trails. We conduct annual security reviews and respond to any suspected breaches within 24 hours by freezing affected accounts and notifying relevant parties.

Marketing Communication Preferences

We send you account notifications (deposits received, withdrawals processed, bonuses credited, tier advancements) by default. These are essential and cannot be disabled. However, we also send promotional emails about new games, seasonal offers, and special events during holidays like Idul Fitri, Idul Adha, Imlek, and Nyepi, as well as Liga 1 and Piala Indonesia tournaments.

You can unsubscribe from promotional emails anytime by clicking the unsubscribe link in any promotional message or by updating your preferences in your Account Settings. Unsubscribing from marketing does not affect your account status or bonus eligibility; it only stops promotional emails.

Cross-Border Data Transfers

Our sultanto platform operates across multiple jurisdictions. Your personal data may be transferred to, stored in, or processed in countries outside Indonesia, including regions with different data protection laws. By registering on sultanto, you acknowledge and consent to this transfer. We take steps to ensure your data is protected under equivalent security standards regardless of physical location.

Jurisdiction and Legal Compliance

We comply with data protection laws in all jurisdictions where sultanto operates. If a court order or regulatory authority requests your data, we will comply unless legally prohibited. We will notify you of such requests unless law prevents us from doing so.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will announce significant changes at least 30 days before they take effect and post the updated policy on this page. Your continued use of sultanto after the change date constitutes acceptance of the updated policy. If you do not agree with changes, you may close your account anytime.

Contact Us for Privacy Inquiries

If you have questions about this privacy policy, requests to access your data, or concerns about how we handle your information, contact our support team through the in-app Help portal in sultanto. We respond in English and Indonesian within standard business windows (typically 1–4 hours). You can also request to speak with our Data Protection Officer if you have a formal complaint or need clarification on data-handling practices.

We are committed to protecting your privacy and maintaining your trust. Your data is fundamental to your safety and our platform's integrity. We handle it with the highest standards of care and transparency.