Your privacy is a fundamental commitment at sp252. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a player on our platform.
1.1 This Privacy Policy ("Policy") applies to all personal data collected and processed by sp252 ("we", "us", "the Company") in connection with the operation of the online betting and gaming platform available at https://sp252.cam (the "Platform"). It covers data collected from registered players, visitors browsing the Platform without an account, and individuals who contact us through support channels.
1.2 sp252 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. Our approach to data privacy reflects the expectations of our primary user base in Indonesia, as well as internationally recognized standards including the General Data Protection Regulation (GDPR) principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
1.3 By registering an account on sp252 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and contact us to close your account.
1.4 This Policy should be read alongside the sp252 Terms & Conditions, which govern the overall relationship between you and sp252, and our Responsible Gaming page, which outlines tools and obligations relating to safer gambling.
2.1 For the purposes of data protection law, sp252 acts as the data controller in respect of personal data collected and processed through the Platform. As data controller, sp252 determines the purposes for which and the means by which personal data is processed.
2.2 All data-related inquiries, access requests, and complaints should be directed to our dedicated privacy contact using the details set out in Clause 15 of this Policy.
2.3 Where sp252 engages third-party service providers to process data on its behalf (for example, payment processors, KYC verification providers, or game studio partners), those parties act as data processors and are bound by contractual obligations that require them to process data only on sp252's documented instructions and to implement appropriate security measures.
3.1 sp252 collects personal data across several categories. The table below summarizes the types of data we collect and why each category is necessary:
| Data Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number (KTP), passport or SIM scan | Account registration, age verification (21+), KYC compliance |
| Contact Data | Email address, phone number, city/region (e.g., Jakarta, Surabaya, Bali) | Account communication, support, security alerts |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Processing deposits and withdrawals in IDR, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, performance optimization |
| Usage Data | Bet history, game sessions, login times, pages visited, feature interactions | Service improvement, responsible gaming monitoring, personalization |
| Communications Data | Live chat transcripts, support emails, feedback forms | Resolving disputes, quality assurance, training |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS notifications | Sending relevant promotions only to players who have consented |
3.2 Special Categories of Data. sp252 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for a responsible gaming intervention (for example, a player voluntarily disclosing a gambling dependency during a self-exclusion request). Any such data disclosed voluntarily is treated with the highest level of confidentiality and is used solely for the purpose of providing appropriate support.
3.3 Data You Are Not Required to Provide. Certain data fields during registration are optional. However, failure to provide mandatory data — particularly identity and financial data required for KYC — may limit your ability to make withdrawals or access higher account tiers.
sp252 collects personal data through the following channels:
5.1 sp252 processes personal data only where a lawful basis exists. The primary legal bases we rely on are:
5.2 sp252 does not use your personal data for automated decision-making that produces significant legal effects, except in the context of fraud-detection systems. Where automated fraud-detection systems flag an account, a human review is conducted before any consequential action (such as account restriction or fund holds) is taken.
6.1 sp252 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.
6.2 We share personal data with the following categories of recipients only to the extent strictly necessary for the stated purpose:
6.3 All third-party data processors engaged by sp252 are subject to contractual data processing agreements that impose obligations consistent with applicable data protection standards, including requirements for data minimization, purpose limitation, and appropriate security measures.
7.1 sp252 operates globally. As a result, your personal data may be transferred to, stored in, or processed in countries outside of Indonesia. Some of those countries may have data protection frameworks that differ from Indonesian law.
7.2 Where data is transferred internationally, sp252 ensures that appropriate safeguards are in place, which may include:
7.3 By using the sp252 Platform and accepting this Policy, you acknowledge and consent to the international transfer of your personal data as described in this clause.
8.1 sp252 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
8.2 The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / KYC regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping and audit requirements |
| Betting & Gaming History | 5 years from activity date | Dispute resolution and responsible gaming review |
| Support Communications | 3 years from last contact | Quality assurance, dispute evidence |
| Technical / Log Data | 12 months from collection | Security monitoring and fraud investigation |
| Marketing Preferences | Until opt-out or account closure + 1 year | Consent management record |
8.3 Once retention periods expire, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized aggregated data (for example, overall platform usage statistics) may be retained indefinitely for business analytics purposes.
9.1 sp252 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform. The following categories of cookies are used:
9.2 Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the Platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.
10.1 Subject to applicable law, you have the following rights in respect of your personal data held by sp252. You may exercise any of these rights by contacting our support team (see Clause 15). We will respond to verified requests within 30 days.
10.2 Identity Verification. To protect the security of your personal data, sp252 will verify your identity before processing any data access, rectification, or erasure request. Requests submitted without sufficient identity verification will be declined.
10.3 Exemptions. Certain rights may be limited or overridden where sp252 has a legal obligation to retain or continue processing your data — for example, AML regulations require us to retain KYC records for a minimum period regardless of any erasure request.
11.1 sp252 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
11.2 While sp252 takes all reasonable precautions to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to take steps to protect your own account, including using a strong, unique password and enabling 2FA.
12.1 The sp252 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
12.2 If sp252 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated funds will be held pending investigation, and the data will be securely deleted in accordance with our retention and deletion procedures.
12.3 If you are a parent or guardian and believe your child has registered an account on sp252, please contact us immediately at the details provided in Clause 15. We take such reports seriously and will act promptly.
13.1 The sp252 Platform integrates with third-party services including game studio providers, payment gateways, and identity verification platforms. While these integrations are necessary to deliver the full range of services, each third party operates under its own privacy policy and data practices.
13.2 sp252 is not responsible for the privacy practices of third-party services. We conduct due diligence on all third-party partners before integration and require them to maintain data protection standards consistent with this Policy as a condition of their engagement.
13.3 If you interact directly with a third-party service (for example, by creating an account with an e-wallet provider such as OVO or GoPay independently of your sp252 account), that interaction is governed exclusively by the third party's own terms and privacy policies, for which sp252 accepts no responsibility.
14.1 sp252 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our services. The date of the most recent revision is displayed at the top of this page.
14.2 For material changes — those that significantly affect how we collect, use, or share your personal data — sp252 will provide advance notice via email to your registered address or a prominent notice on the Platform at least 14 days before the changes take effect.
14.3 Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and request account closure prior to the effective date.
14.4 The current version of this Policy supersedes all prior versions. We recommend bookmarking this page and reviewing it periodically, particularly when you receive an update notification from sp252.
15.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how sp252 handles your personal data, please contact our privacy team through any of the following channels:
15.2 Our customer support team includes native Indonesian-speaking agents available around the clock (WIB, UTC+7), serving players across Jakarta, Surabaya, Bali, Medan, Bandung, Yogyakarta, and all regions of Indonesia.
15.3 Complaints. If you are not satisfied with how sp252 has handled your personal data or responded to a data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. sp252 will cooperate fully with any such investigation.
Six core principles that define how sp252 protects and respects your personal data every day.
Every byte of data transmitted between your device and sp252 is protected by TLS encryption. Financial records and identity documents are encrypted at rest using AES-256, the same standard used by global financial institutions.
sp252 does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used solely to operate your account, process transactions, and keep the Platform secure.
Age verification is mandatory at registration and during KYC. If we discover that an account belongs to someone under 21, it is suspended immediately, associated funds are held, and the data is securely deleted.
You can access, correct, export, or delete your personal data at any time. Submit a request to our support team and we will respond within 30 days. Consent for marketing can be withdrawn instantly from your account settings.
sp252 collects only what is genuinely necessary to deliver our services and meet regulatory requirements. We do not gather data for the sake of it — every field we ask for serves a specific, documented purpose.
In the unlikely event of a data breach that affects your personal information, sp252 will notify you without undue delay and provide clear guidance on the steps you should take to protect yourself.
Our support team is available 24/7 to handle data requests, privacy concerns, and account inquiries from players across Indonesia.