sumobet Casino & Sportsbook Data Care

This page describes what we collect when you use sumobet and how we keep that data protected. We take your privacy seriously—your personal information, payment details, and account history remain encrypted and confined to authorized personnel only. We do not sell your data to third parties or use it for purposes unrelated to operating sumobet.

When you open an account on sumobet, we collect your legal name, date of birth, email, and phone number. During KYC verification, we request government ID and proof of address. We use this information to comply with regulatory requirements, prevent fraud, and process your deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfers (mobile banking, local payment, online payment, e-wallet). Your data is held securely on encrypted servers and deleted according to legal retention schedules.

This policy explains our collection practices, how we use your data, what rights you have, and how to contact us if you have questions. We operate under jurisdiction-restricted access—your data is managed according to the laws of the jurisdiction where sumobet operates, and our service is available only where applicable law permits.

What Data We Collect on sumobet

We at sumobet collect data in several categories. First, account information: your legal name, date of birth, email address, phone number, and physical address. Second, identity verification: a photo of your government ID and proof of address (utility bill, rental agreement, or similar). Third, payment data: we do not store your full card numbers or bank account details—instead, we store tokenized references to your DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account, plus transaction records showing deposit and withdrawal amounts and dates.

Fourth, behavioural data: we log your betting history (markets you access, bets placed, outcomes), game activity (games played, session duration, spin results), and login events (timestamp, device, IP address). Fifth, device data: when you access sumobet on Android or iOS, we collect your device model, operating system version, app version, and network type (4G, 5G, WiFi). Sixth, cookies and tracking: we use session cookies to keep you logged in; we use analytics cookies to track page views and user flows (non-personally-identifiable).

How We Use Your Data on sumobet

We use your personal data to operate sumobet. This includes processing your account creation, verifying your identity through KYC, processing your deposits and withdrawals, settling your bets and game outcomes, and communicating with you about your account status. We also use your data to comply with applicable law—we may be required by regulatory authorities to share your KYC documents and transaction history.

We use your behavioural and device data to improve sumobet. For example, we analyze which games are popular, which payment methods are used most, and which devices experience the most issues. This helps us prioritize features and fixes. We also use this data to detect fraud and unusual account activity—if your account logs in from Jakarta and then Medan within minutes, our system flags this as suspicious and may request re-verification.

We do not use your data to target you with unsolicited marketing or sell your information to third parties. We do not share your betting history or personal details with other gamblers. We do not profile you based on your plays to make predictions about future behaviour.

sumobet does not sell your data

We retain your information only to operate our platform and comply with law. We do not monetize your personal data by selling it to advertisers, data brokers, or other platforms.

Third-Party Processors and Data Locations

We at sumobet use third-party service providers to process certain data. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and your bank) receive your tokenized payment reference and transaction amount, but not your full banking credentials. Our hosting provider stores our servers and databases; these may be located outside your jurisdiction. Our analytics provider receives anonymized, non-personally-identifiable traffic data.

All third-party processors are contractually obligated to protect your data and use it only for the purposes we specify. We perform security audits of our key processors annually. If a processor experiences a data breach, we are notified and we inform affected users promptly.

Your data may cross international borders during normal sumobet operation. By using sumobet, you consent to your data being processed outside your home jurisdiction if necessary to operate our platform. We apply the same encryption and access controls regardless of where servers are physically located.

Tokenization: We replace sensitive payment data (card numbers, bank account details) with a unique token. Only our payment processor can decrypt the token back to your actual details.
TLS Encryption: All data in transit between your phone and our servers is encrypted using TLS, the same standard banks use. Outsiders cannot intercept or read this data.
Access Control: Only authorized sumobet staff can access your personal data on our servers. Access is logged and audited.

Your Rights Regarding Data on sumobet

You have the right to request what data we hold about you. Contact our support team via the in-app help menu or email, and we will provide a download of your personal data within thirty days. You have the right to correct inaccurate data—if your name or address is wrong on sumobet, contact support and we will update it.

You have the right to request deletion of your data. If you close your account on sumobet, you can ask us to delete your personal information. We will comply within the timeframe required by applicable law, with the exception of data we are legally required to retain for tax, compliance, or fraud-prevention purposes.

You have the right to withdraw consent if we process your data based on your permission (rather than legal obligation). For example, if you consented to marketing emails from sumobet, you can withdraw that consent and we will stop sending them. You can update your communication preferences in your account settings on sumobet.

Cookies and Tracking on sumobet

We at sumobet use cookies to keep you logged in to your account. These session cookies expire when you close your browser or log out manually. We also use analytics cookies to track page views, feature usage, and technical performance—these are non-personally-identifiable and do not link to your name or account.

You can disable cookies in your browser settings, but doing so may impair your ability to use sumobet properly (you may be logged out unexpectedly, or features may not work). We recommend keeping cookies enabled while using sumobet on your phone or desktop.

We do not use third-party advertising cookies or tracking pixels that follow you across other websites. If you visit sumobet on your Android phone, we do not install hidden trackers that monitor your activity outside sumobet.

Encryption at Rest: All personal data stored on our sumobet servers is encrypted using AES-256 encryption. Even if a disk is physically stolen, the data cannot be read without the encryption key.

Encryption in Transit: When you log in, deposit, or withdraw on sumobet, your data is encrypted using TLS. Man-in-the-middle attacks cannot intercept your credentials or payment details.

Password Hashing: Your sumobet password is hashed using bcrypt; we do not store plaintext passwords. If our database were compromised, attackers could not recover your password.

Access Logs: We maintain an immutable log of all staff access to sensitive data on sumobet. Unauthorized access triggers alerts.

Active Accounts: Your personal data (name, email, address, payment details) is retained for as long as your sumobet account is open.

After Account Closure: We retain KYC documents and transaction records for seven years to comply with anti-money-laundering laws. We delete other personal data within thirty days of account closure, unless you have an outstanding withdrawal or dispute.

Betting History: Your bet records and game activity are retained for three years for fraud investigation and fairness audits.

Analytics Data: Anonymized, non-personally-identifiable analytics data is retained indefinitely to track platform trends.

Data Subject Rights: You can request a copy of your data, correction of inaccuracies, deletion (subject to legal holds), or withdrawal of consent. Contact our Data Protection Officer via the in-app help menu.

Response Timeline: We aim to respond to data requests within thirty days. If your request is complex, we may request additional time.

No Retaliation: We will not penalize you for exercising your data rights. You can request deletion or correction without fear of account suspension.

Complaint Process: If you believe we have violated your data rights, you can escalate your complaint to our management team or to your local data protection authority.

Policy Updates and Contact

We at sumobet may update this privacy policy from time to time. We will notify you of material changes via email or by displaying a notice on sumobet when you log in. Your continued use of sumobet after the notification period constitutes your acceptance of the updated policy. If you disagree with changes, you may close your account and request deletion of your data before changes take effect.

How to Contact Us

If you have questions about our privacy practices, wish to exercise your data rights, or have a privacy concern, contact our support team via the in-app help menu on sumobet. You can also reach us by email through the contact form on sumobet.app. We aim to respond within twenty-four hours.

Our service is available only where applicable law permits. By using sumobet, you acknowledge that you have read and understood this privacy policy and agree that we may collect and process your data as described above. If you do not agree with our practices, do not use sumobet.

Platform security layers

sumobet protects your account and personal data through multiple overlapping security measures. All communication between your Android phone, iOS browser, or desktop and our servers is encrypted using TLS 1.2 or higher—the same encryption standard used by banks. This means your login credentials, bet details, payment information, and personal data cannot be intercepted or read by outsiders during transmission.

Your personal data stored on our sumobet servers is encrypted at rest using AES-256 encryption. Even if our data centers were physically breached, the encrypted data would be unreadable without the encryption key. Your password is never stored plaintext; instead, we hash it using bcrypt, a one-way algorithm. If our database were compromised, attackers could not recover your actual password.

We implement multi-layered access controls on sumobet. Only authorized personnel can access your personal data, and all access is logged and audited. If an unauthorized person attempts to access your account or data, we detect this and trigger alerts. We perform monthly security patches on all sumobet systems and conduct annual third-party security audits to identify and remediate vulnerabilities.

Game fairness and RTP

All RNG-based games on sumobet—slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways—use certified Random Number Generators seeded from external entropy sources. We do not manipulate outcomes based on your account balance, deposit history, or play frequency. Every spin is genuinely random and independent of previous results. sumobet publishes the RTP (Return to Player) percentage for each game; this represents how much of wagered money is returned to players over a large statistical sample of plays.

RTP is a long-term average, not a guarantee for individual sessions. A game with means that over millions of spins, players collectively receive non-specific info of all wagered money; individual sessions may return far more or far less due to variance. High-volatility games on sumobet (like some slots) deliver larger but less frequent wins; low-volatility games deliver smaller, more frequent wins.

Live-dealer games on sumobet differ from RNG-based slots. Our live blackjack, roulette, baccarat, and Dragon Tiger tables use real dealers, real cards, and real equipment operated in certified studios. Outcomes are determined by physical events—card draws, ball spins—not algorithms. The house edge is built into the odds, not into cheated outcomes. sumobet uses multi-camera feeds so you see the action unfold; dealers follow strict rules and cannot deviate from them.

KYC verification process

KYC (Know Your Customer) verification is a legal requirement on sumobet that confirms your identity and prevents money laundering and fraud. When you register on sumobet, we collect your legal name, date of birth, email, and phone number. You then upload a government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, rental agreement, or similar document dated within three months).

sumobet's verification system uses automated document scanning and cross-references your information against government records. Most verifications complete within a few hours; complex cases may take one business day. If we detect a discrepancy—for example, your ID name does not match your registered name—we contact you requesting clarification or additional documentation. Your KYC documents are treated as highly sensitive; we encrypt them, restrict access to authorized personnel, and delete them according to legal retention schedules.

KYC is not optional on sumobet; unverified accounts cannot deposit or withdraw funds, though you can browse games. KYC protects you by ensuring that only you can access your account and withdraw your winnings. It also protects sumobet by ensuring we comply with anti-money-laundering regulations and do not facilitate illegal financial flows.

User feedback and review channels

sumobet values user feedback on our games, platform, and service. Players can leave reviews in-app, contact our support team with comments, or discuss experiences on community forums. We read individual feedback carefully; while we do not publish aggregate star ratings (such numbers can be manipulated), we use player comments to identify common issues and prioritize fixes. If many users report the same problem—such as a game freezing during play or a withdrawal not arriving—we escalate to our technical and operations teams.

If you experience a technical issue on sumobet, report it immediately via our in-app support menu. Provide the time, your account ID, and what happened. Our technical team investigates and, if an error caused an incorrect payout or lost funds, we reverse the transaction and credit your account correctly. We also review fairness complaints seriously. If you believe a specific game result on sumobet is non-random or unfair, document the timestamp and bet details and submit a formal complaint. We audit those spins server-side and review our RNG state at that moment.

We do not dismiss fairness or technical complaints; we investigate thoroughly. If an audit reveals a problem, we compensate affected players and publish a transparent explanation of what happened and how we fixed it. This accountability builds trust that sumobet operates fairly and takes your concerns seriously. Our support team is available via the in-app help menu and responds to complaints within 24 hours.