sumo138 Platform Privacy Notice
This page describes what we collect when you use sumo138 and how we keep that data protected. We take your privacy seriously and operate under strict data-protection principles. When you register, deposit, verify your identity, or place wagers on our platform, we collect personal information—but only what's necessary to serve you reliably and comply with applicable law.
We at sumo138 are transparent about who has access to your data, where it's stored, and how long we retain it. This notice explains our practices clearly so you understand your rights and our responsibilities. If you have questions after reading, our support team is available to clarify any section.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's regulations.
What We Collect on sumo138
We collect personal information during account registration—your full name, email address, date of birth, and residential address. We also collect phone number if you provide it during account recovery or customer support interactions. This information is essential for creating your account and enabling deposits and withdrawals.
For identity verification (KYC), we require you to upload a valid government-issued ID and proof of address. We collect and store images of these documents securely. We also collect your payment method details—for example, when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we record the transaction reference and amount. We do not store full credit card numbers or wallet credentials; payment processors handle sensitive payment data separately under their own encryption standards.
We automatically collect technical data about your use of sumo138. This includes your IP address, device type, browser type, pages visited, time spent, and clicks. We use cookies and similar tracking tools to recognize you on repeat visits and to improve our platform's performance. We also collect information about your wagers—which sports markets, live-dealer tables, or slot games you access—so we can personalize promotions and calculate your loyalty tier accurately.
How We Use Your Data on sumo138
We use your personal information to create and manage your sumo138 account, process deposits and withdrawals, and verify your identity before your first withdrawal. This is a legal requirement in most jurisdictions where we operate. We also use your data to calculate your weekly cashback, track your loyalty tier progression, and apply seasonal bonuses during events like Liga 1, Piala AFF, Idul Fitri, Idul Adha, Imlek, and Nyepi.
We use your email and phone number to send account notifications—password resets, deposit confirmations, bonus credits, and loyalty tier updates. If you opt into marketing emails, we also send you information about new games, promotions, and platform updates. You can unsubscribe from marketing emails anytime through your account settings; this does not affect transactional notifications.
We analyze your wagering history and technical behavior to detect fraud, money laundering, and account abuse. If we suspect unusual activity, we may freeze your account temporarily and ask for additional verification. We also use aggregated, anonymized data to improve our platform's speed, security, and user experience. This aggregated data never identifies you personally.
Your privacy is a right, not a convenience. We encrypt your data, limit access to essential staff only, and delete it when no longer needed.
Third Parties and Data Processors
We work with trusted third-party vendors to operate sumo138. Our payment processors (e.g., for mobile banking, local payment, online payment, and bank transfers) handle your transaction data securely and separately. Our cloud hosting provider stores our databases and backups in data centres that may be located outside your jurisdiction. Our identity-verification service (KYC provider) processes your documents and confirms you are who you claim to be. All these vendors sign strict data-protection agreements with us and are prohibited from using your data for any purpose other than providing their service to sumo138.
We may disclose your data if required by law—for example, if a court orders us to provide evidence of a specific transaction, or if a financial regulator requests information for an investigation. We do not voluntarily share your data with government agencies; we comply only with valid legal orders. We also do not share your data with marketing firms, data brokers, or other unrelated businesses.
Your Rights on sumo138
You have the right to access your personal data anytime. Log into your sumo138 account and download your profile information, wagering history, and transaction records. You can update your email, phone number, and address directly in your account settings. If you believe any information is incorrect, contact our support team with evidence of the error and we will correct it.
You have the right to request deletion of your account and associated data, subject to legal retention requirements. If you close your account, we retain your KYC documents, transaction records, and payment history for a minimum period required by anti-money-laundering law—typically 5–7 years. After that period expires, we delete your data securely. You can request account closure through your account settings or by contacting our support team.
You have the right to opt out of non-essential cookies through your browser settings, though this may limit some platform features. You can manage your marketing email preferences in your account. If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data-protection authority.
Data Security and Retention
We at sumo138 use industry-standard encryption (TLS/SSL) to protect your data in transit and at rest. Our servers are protected by firewalls, intrusion-detection systems, and regular security audits. We limit staff access to personal data on a need-to-know basis and require multi-factor authentication for all internal accounts. Despite these precautions, no system is non-specific info secure; if we discover a breach, we notify you immediately and take steps to mitigate harm.
We retain different categories of data for different periods. Your account profile (name, email, address) is retained for as long as your account is active and for a reasonable period thereafter. Your KYC documents and transaction records are retained for 5–7 years as required by law. Your technical data (IP logs, cookies) is typically retained for 90 days unless we have reason to investigate suspicious activity. Payment records are retained in accordance with banking regulations and our payment processors' policies.
Cookies and Tracking Technologies
We use cookies to recognize you on repeat visits to sumo138, to remember your preferences, and to track your session security. Functional cookies are essential to platform operation—for example, they store your login state and remember your language preference. Analytics cookies help us understand how you use sumo138 and where we can improve performance. You can disable cookies in your browser settings, but this may prevent you from logging in or accessing certain features.
We also use pixel tags (small transparent images) in our promotional emails to measure open rates and click engagement. These tags do not identify you personally; they simply tell us whether an email was opened and which links were clicked. This helps us send you more relevant promotions in future.
Jurisdiction and Policy Changes
Our services are available only where local law permits. We operate in accordance with data-protection regulations in the jurisdictions where we are authorized. Users are responsible for verifying that access and use comply with their own jurisdiction's law. If you access sumo138 from a jurisdiction where it is prohibited, we reserve the right to suspend or close your account and forfeit your balance.
We may update this privacy notice from time to time as our practices evolve or as regulations change. We will post updates on this page and notify you via email of material changes. Continued use of sumo138 after we post changes constitutes acceptance of the updated privacy notice. If you disagree with our practices, you have the right to close your account anytime.
Related documentation
Contact us: If you have privacy concerns or would like to exercise your data rights, contact our data-protection team through the support channel in your sumo138 account. We respond to all data-access requests within 14 business days. Thank you for trusting us with your information.