Data Protection

sms808 Privacy Policy

sms808 is committed to protecting the privacy and security of every Member's personal data. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who it may be shared with, and the rights available to you as a Member of the sms808 platform.

At a Glance
  • Data encrypted in transit and at rest
  • No data sold to third-party marketers
  • KYC docs retained only as required
  • Access, correction & erasure rights
  • Strict 21+ age protection measures
Last Updated: 1 January 2026  |  Effective Date: 1 January 2026
1 Introduction

This Privacy Policy is published by the operator of sms808 ("sms808", "we", "us", "our"), the online casino and sportsbook platform accessible at sms808.pro. It applies to all individuals who visit, register on, or interact with the sms808 platform in any capacity, including prospective members, active members, and former members (collectively, "you" or "Member").

sms808 takes its data protection obligations seriously. We process personal data only for the purposes described in this Privacy Policy, and we apply appropriate technical and organisational safeguards to protect that data at every stage of its lifecycle — from collection through to deletion.

By registering an sms808 account or continuing to use the sms808 platform after this Privacy Policy takes effect, you acknowledge that you have read and understood its contents. If you do not agree with any aspect of this Privacy Policy, you should discontinue your use of the sms808 platform and contact the support team to arrange closure of your account.

This Privacy Policy should be read in conjunction with the sms808 Terms & Conditions, which form the primary agreement between sms808 and its Members.

2 Data We Collect

sms808 collects personal data that falls into the following categories. The specific data collected from any individual Member will depend on the nature and extent of their interaction with the sms808 platform.

2.1 Identity and Contact Data

  • Full legal name
  • Date of birth
  • Indonesian mobile number
  • Email address
  • Residential address (city and province — at minimum, Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, or other Indonesian location)
  • Government-issued identification number (as part of KYC verification)

2.2 Financial Data

  • Bank account details associated with your registered payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or other supported Indonesian banks)
  • E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Deposit transaction records
  • Withdrawal transaction records
  • Account balance history

2.3 KYC and Verification Documents

  • Copies of government-issued photo identification (Indonesian KTP, passport, or driving licence)
  • Proof of address documentation
  • Proof of payment method ownership
  • Source of funds documentation (where required for enhanced due diligence)

2.4 Account and Gameplay Data

  • sms808 username and account registration date
  • Login timestamps and session duration records
  • Betting and wagering history (all game categories including live casino, sportsbook, slots, Sic Bo, and sabung ayam)
  • Bonus and promotion history
  • Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

2.5 Technical and Usage Data

  • IP address and approximate geographic location
  • Device type, operating system, and browser information
  • Pages visited within the sms808 platform and navigation patterns
  • Session cookie identifiers

2.6 Communications Data

  • Records of live chat conversations with the sms808 support team
  • Email correspondence sent to or received from sms808
  • Records of any complaints, disputes, or escalations submitted through the platform

Sensitive Data: sms808 does not intentionally collect special categories of sensitive personal data (such as health, biometric, or religious data) unless required to do so by a legal obligation. Where KYC documents incidentally contain such information, sms808 will process only the data elements required for verification purposes.

3 How We Collect Data

sms808 collects personal data through the following channels:

  • Direct submission: Information you provide when completing the sms808 registration form, submitting KYC documents, contacting customer support, or updating your account profile.
  • Automated technical collection: Data collected automatically when you access the sms808 platform, including IP address, device identifiers, and usage logs gathered through server logs and session cookies.
  • Payment processing: Transaction data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) in connection with deposits and withdrawals.
  • Identity verification services: Confirmation signals received from third-party identity verification providers used to authenticate KYC documents.
  • Third-party game providers: Aggregated gameplay performance and session data received from certified game providers such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Microgaming in relation to games played through the sms808 platform.
4 Use of Your Data

sms808 uses your personal data exclusively for the purposes set out in this clause. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

Purpose Data Categories Used
Account registration and management Identity & Contact Data, Account Data
Identity and age verification (KYC) Identity Data, KYC Documents, Financial Data
Processing deposits and withdrawals Financial Data, Identity Data
Delivering gaming and betting services Account Data, Gameplay Data, Technical Data
Bonus and promotion administration Account Data, Gameplay Data, Financial Data
Customer support and dispute resolution Identity Data, Communications Data, Account Data
Fraud prevention and security monitoring Technical Data, Financial Data, Account Data
Responsible gaming compliance Account Data, Gameplay Data, Responsible Gaming Settings
Legal and regulatory compliance All categories, as required by applicable law
Platform analytics and improvement Technical Data, Usage Data (aggregated and anonymised)
Direct marketing communications (where you have opted in) Identity & Contact Data, Account Data

Marketing opt-out: If you have opted in to marketing communications from sms808 and wish to withdraw your consent, you may do so at any time by updating your communication preferences within the account settings panel or by contacting the sms808 support team at . Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing

sms808 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection obligations:

  • Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and any other payment infrastructure partners required to process your deposits and withdrawals in IDR.
  • Identity verification providers: Third-party KYC and document verification services used to authenticate your identity and age as required by our licensing obligations.
  • Game content providers: Certified gaming studios — including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe — which deliver game content through the sms808 platform and may receive session-level technical data required to operate their games.
  • IT and hosting infrastructure providers: Cloud hosting, data storage, and cybersecurity vendors who process data on behalf of sms808 under strict contractual data processing agreements.
  • Regulatory authorities and law enforcement: Where sms808 is required by applicable law, court order, or its international gaming licence to disclose Member information to competent authorities.
  • Professional advisors: Legal counsel, auditors, and compliance consultants who require access to Member data in connection with the provision of professional services to sms808, subject to professional confidentiality obligations.

International data transfers: Some of the third parties listed above may be located outside Indonesia. Where personal data is transferred internationally, sms808 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to provide a level of protection equivalent to that required under applicable data protection standards.

7 Data Retention

sms808 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Data Category Retention Period Basis
Account and identity data Duration of membership + 5 years post-closure Legal and regulatory obligation
KYC documents Duration of membership + 5 years post-closure Anti-money-laundering compliance
Financial transaction records Duration of membership + 5 years post-closure Legal and regulatory obligation
Gameplay and betting history Duration of membership + 2 years post-closure Dispute resolution and compliance
Customer support communications 3 years from date of last communication Dispute resolution and legitimate interests
Technical and usage logs 13 months from collection Security and fraud prevention
Marketing consent records Until consent is withdrawn + 1 year Proof of lawful processing basis
Self-exclusion records Duration of exclusion + 5 years Responsible gaming obligation

Upon expiry of the applicable retention period, sms808 will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where data has been anonymised such that it can no longer identify you, it may be retained for analytical purposes without further restriction.

8 Security Measures

sms808 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

  • 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the sms808 platform, including login, transaction, and account management pages.
  • Encryption at rest for sensitive data categories including KYC documents, payment method details, and authentication credentials stored on sms808 servers.
  • Access controls limiting access to personal data to authorised sms808 personnel and third-party processors on a strict need-to-know basis, with role-based permission management.
  • Two-factor authentication (2FA) available to all Members for their sms808 account login — strongly recommended for all users.
  • Continuous security monitoring including intrusion detection, anomaly alerts, and regular penetration testing of the sms808 platform infrastructure.
  • Staff training ensuring that all sms808 personnel who handle personal data are trained on their data protection obligations and sms808's internal security policies.

Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sms808 will notify affected Members without undue delay and will take all reasonable steps to contain, investigate, and remediate the breach.

9 Cookies & Tracking

The sms808 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The cookies used by sms808 fall into the following categories:

  • Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
  • Functional cookies: Enable the platform to remember your preferences — such as language settings, responsible gaming tool configurations, and display preferences — across sessions.
  • Analytics cookies: Used to collect anonymised data about how Members navigate and use the sms808 platform, enabling sms808 to improve the quality and performance of its services. These cookies do not identify individual users.
  • Security cookies: Used to detect and prevent fraudulent login attempts, account takeover activity, and other security threats.

sms808 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing your sms808 account.

10 Your Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights in relation to your personal data held by sms808. To exercise any of these rights, contact the sms808 Data Privacy team at with the subject line "Privacy Rights Request".

Right of Access

Request a copy of the personal data sms808 holds about you. We will provide this within 30 days of a verified request.

Right to Rectification

Request correction of inaccurate or incomplete personal data. Most contact and account data can be updated directly within your sms808 account settings.

Right to Erasure

Request deletion of your personal data where it is no longer required, subject to any overriding legal retention obligations applicable to sms808.

Right to Restrict Processing

Request that sms808 limit the processing of your data in certain circumstances, such as while a data accuracy dispute is under investigation.

Right to Data Portability

Request a machine-readable export of your personal data that you have provided to sms808, where technically feasible and legally permissible.

Right to Object

Object to the processing of your personal data where sms808 relies on legitimate interests as the legal basis, including objection to direct marketing at any time.

Identity verification for rights requests: To protect your data, sms808 will verify your identity before processing any data subject rights request. You may be asked to provide your registered email address, account username, and a copy of your identification document. sms808 will respond to all verified requests within 30 days. Complex requests may be extended by a further 30 days with prior notification.

11 Protection of Minors

sms808 strictly prohibits access to and use of the platform by individuals under the age of 21. sms808 does not knowingly collect personal data from persons under 21 years of age. Where sms808 discovers or has reasonable grounds to believe that an account is held by a person under 21, the account will be immediately suspended, all associated data will be reviewed, and deposited funds will be returned to the original payment method.

If you are a parent or guardian and believe that a minor in your care has registered an sms808 account or has had their personal data collected by sms808, please contact the support team immediately at . sms808 will investigate and take appropriate action, including deletion of any data collected in relation to that minor, without undue delay.

12 Third-Party Links

The sms808 platform may contain references to or integrations with third-party services — including certified game providers, payment processors, and analytics tools — that operate under their own privacy policies. sms808 is not responsible for the privacy practices of any third party and encourages Members to review the privacy policies of any third-party service they interact with. This Privacy Policy applies exclusively to personal data collected and processed by sms808 in connection with the sms808 platform.

13 Policy Amendments

sms808 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, sms808's data processing practices, or the services offered on the platform. Material changes will be communicated to active Members via email to the registered address or via a prominent notice on the sms808 platform prior to the effective date of the change.

The "Last Updated" date at the top of this Privacy Policy reflects the most recent revision. We encourage Members to review this Privacy Policy periodically. Your continued use of the sms808 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sms808 handles your personal data, please contact the sms808 privacy team through the following channels:

  • Email: — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" as appropriate.
  • Live Chat: Available 24/7 through your sms808 account dashboard for general privacy questions and account data concerns.

sms808 aims to resolve all privacy-related enquiries promptly and in good faith. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the relevant data protection authority or gaming regulator with jurisdiction over the sms808 platform.

Response commitment: sms808 will acknowledge all privacy enquiries within 2 business days (WIB) and will provide a substantive response within 30 calendar days of receipt. For complex data subject rights requests, the response period may be extended by a further 30 days with prior written notification.


Our Data Protection Commitments

The practical standards that underpin how sms808 handles your personal data every day.

End-to-End Encryption

Every connection to the sms808 platform is protected by 256-bit SSL/TLS encryption. Login credentials, payment details, and KYC documents are encrypted both in transit and at rest on sms808 servers.

Minimal Data Collection

sms808 collects only the personal data that is necessary for the specific purpose it serves. We do not collect data speculatively, and we review data holdings regularly to identify and remove data that is no longer needed.

No Data Selling

sms808 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Data shared with partners is shared only to deliver the services you have requested as a Member.

Defined Retention Limits

Personal data is retained only for as long as required by applicable law or the purpose for which it was collected. Clear retention schedules govern every data category held by sms808, with secure deletion upon expiry.

Your Rights, Respected

Access, rectification, erasure, portability, and objection rights are all supported by the sms808 privacy team. Verified requests are responded to within 30 days, with no administrative barriers or unnecessary delays.

Strict 21+ Protection

sms808 maintains a zero-tolerance policy on the collection of data from individuals under 21 years of age. Age verification is integrated into the KYC process, and any account identified as belonging to a minor is closed immediately.


Your Data is Safe at sms808

Questions about your personal data or your account? The sms808 support team is available 24/7. Or log in now to review your account settings, update your preferences, or explore the full range of casino and sportsbook games — all in IDR.