sm188 Privacy Policy

This page describes what we collect when you use sm188 and how we keep that data protected. We at sm188 recognise that your account information, identity documents, and payment details are sensitive. Our policy reflects our commitment to encrypt your data, limit third-party access, and give you control over your own account. When you register on sm188, verify your identity, or withdraw funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect information necessary to serve you fairly and comply with local regulations.

Our servers and data processors are based outside your jurisdiction; we explain the implications of that arrangement below. We do not sell your personal data to marketers or brokers. We do share limited information with payment processors and identity-verification vendors, only when needed to complete your transaction. We retain data for as long as your account exists, and for a set period afterwards to meet regulatory requirements.

This policy applies to anyone who accesses sm188 from Jakarta, Surabaya, Bandung, Medan, Semarang, or any supported jurisdiction. If you do not agree with our practices, you may request account closure and data deletion within the limits of local law.

Data We Collect on sm188

We collect several categories of information when you use sm188. First, identity data: your full name, date of birth, government ID number (KTP or passport), and address. We require this during account verification, and we verify it against government registers before enabling tournament play or withdrawals. Second, contact data: your email address and phone number. We use these to send account notifications, reset passwords, and respond to support requests. Third, payment data: the account name, bank account number, and payment method you select for deposits and withdrawals. We do not store your full credit card or wallet credentials; our payment processors handle those securely.

Fourth, activity data: which games you play, tournament entries, session duration, and bet amounts. We use this to settle tournaments, detect fraud, and improve user experience. Fifth, device data: your IP address, browser type, and device identifier. We use this for security monitoring and to prevent account takeover. Sixth, interaction data: support tickets, chat logs with our support team, and feedback you submit. We retain these to resolve disputes and improve our service.

Identity verification
We collect government ID to prevent underage access and meet local regulations. We do not retain images after verification; we store only the verified data.
Payment processors
Our partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) are third-party providers who comply with local payment regulations.
Encryption
We transmit all data over SSL (HTTPS). Data at rest is encrypted with industry-standard algorithms. Access is restricted to authorised staff only.

Third-Party Processors and Data Sharing

We work with third parties only when necessary. Our identity-verification partner checks your KTP or passport against government databases; we disclose your name and ID number to them only. Our payment processors receive your bank account details only when you initiate a withdrawal; we do not store those details on our own servers. Our analytics vendor receives anonymised gameplay data (tournament results, session counts) but never receives your identity or payment information. Our hosting provider stores encrypted databases; they cannot read the contents.

We do not share your data with marketing partners, advertisers, or data brokers. We may disclose information to law enforcement or regulators only when legally required—for example, if Indonesian authorities (during Idul Fitri compliance checks or Liga 1 betting investigations) request account information. We notify you of such requests unless legally prohibited.

Jurisdiction note: Our data centres are located outside Indonesia. Indonesian data protection law applies to your sm188 account. We undertake to meet local legal standards even though our infrastructure sits in a different jurisdiction.

Cookies and Tracking

We use cookies to keep you logged in and to remember your preferences (language, tournament filters). These are essential cookies; without them, the site would not function. We do not use tracking cookies for behavioural advertising. You may disable non-essential cookies in your browser settings without affecting your ability to log in or play tournaments. Session cookies expire when you close your browser; persistent cookies expire after 12 months.

Your Rights and Data Retention

We retain your identity data and account history for as long as your account is active, plus three years after closure (to resolve disputes and meet tax requirements). You may request a copy of all personal data we hold about you by contacting support. You may request correction of inaccurate data—for example, if your address changed since verification. You may request deletion of non-essential data (like support chat logs), though we retain transaction data to settle disputes and prevent fraud.

You may request account closure at any time. Closure removes your ability to log in and enter tournaments, but we retain transaction records and identity data as required by law. If you request deletion beyond legal minimums, we will comply where local law permits.

Our sm188 Security Practices

We encrypt all data in transit (SSL/TLS) and at rest (AES-256). Our staff access data only on a need-to-know basis. Passwords are hashed with industry-standard algorithms; we never store plaintext passwords. We implement two-factor authentication (OTP to your phone) as an optional layer. We monitor login attempts from unusual locations and notify you if we detect suspicious activity.

We do not guarantee absolute security; no system is impenetrable. If we detect a breach affecting your sm188 account, we will notify you within 24 hours and provide guidance on password reset and account recovery. We maintain cyber-liability insurance to cover data protection incidents.

Contact and Changes to This Policy

If you have questions about this policy, contact our support team via email. We may update this policy to reflect legal changes (for example, new Piala Indonesia regulations or Imlek-period compliance amendments) or operational improvements. We will notify you of material changes and request your consent before implementing them. Your continued use of sm188 after a policy update constitutes acceptance of the new terms.

We at sm188 take your privacy seriously. Our practices reflect our belief that entertainment platforms should operate with transparency. You should always know what data we hold, why we hold it, and who can access it. If you ever doubt that we are living up to this commitment, contact support and we will investigate.

Related guides