Privacy Policy — soju8

In this Privacy Policy, the following terms have the meanings set out below:

This Privacy Policy applies to all Personal Data collected by soju8 in connection with the operation of the soju8 platform, including data collected through the soju8 website at https://soju8.cam, any mobile-browser-optimised version of the platform, customer support interactions (Live Chat, email, WhatsApp), and the account registration and KYC process.

This policy applies to all Members, prospective Members, and visitors to the soju8 platform, regardless of their country of residence. It is particularly relevant to residents of Indonesia who represent the primary audience of the soju8 platform.

soju8 collects the following categories of Personal Data from Members and platform visitors:

soju8 does not collect or process special categories of Sensitive Personal Data beyond those listed above (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless expressly required by law or regulatory direction.

soju8 collects Personal Data through the following methods:

• Direct Submission: Data you provide actively when completing the account registration form, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, device and browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 11.
• Third-Party Verification Providers: Where soju8 uses a third-party KYC or identity verification service to validate the documents you submit, that provider may return verification status data and fraud-risk signals to soju8 for the purpose of account approval and ongoing risk assessment.
• Payment Processors: Payment confirmation data — including transaction identifiers and payment status — is relayed to soju8 by the relevant payment processor (bank or e-wallet operator) when you initiate a deposit or withdrawal.

soju8 processes your Personal Data for the following purposes:

• Account Creation & Management: To register and maintain your soju8 account, verify your identity and age (21+ requirement), and administer your account profile and settings.
• Service Delivery: To enable you to use the soju8 sportsbook, casino, and lottery products; to process deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets; and to credit and manage bonus offers.
• Identity & Age Verification (KYC): To comply with internationally recognised anti-money-laundering and know-your-customer obligations, and to enforce the strict 21+ age restriction applicable to all soju8 services.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance through Live Chat, email, and WhatsApp channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account compromise, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To operate and enforce deposit limits, session time controls, self-exclusion, and cool-off periods; to monitor betting patterns for signs of problem gambling; and to provide proactive support interventions where appropriate.
• Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving platform performance, product quality, and user experience — without individually profiling Members for marketing segmentation.
• Marketing Communications: To send you bonus offers, promotional updates, and soju8 news by email or SMS — only where you have given explicit consent and only until you withdraw that consent. You may opt out at any time by contacting customer support.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from competent authorities, and to establish, exercise, or defend legal claims.

soju8 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and soju8 — including account registration, service delivery, and transaction processing.
• Legal Obligation: Processing required for compliance with applicable laws and regulatory obligations, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing necessary for soju8's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and the improvement of our products and services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

soju8 does not sell, rent, or otherwise commercially disclose your Personal Data to third parties for their own purposes. soju8 may share your Personal Data with the following categories of recipients only to the extent strictly necessary:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay) receive the transaction data necessary to process your deposits and withdrawals. These parties act as independent data controllers for their own transaction records.
• KYC & Identity Verification Providers: Third-party service providers that assist soju8 in verifying your identity documents and conducting AML screening. These providers operate as Data Processors under binding data-processing agreements and are contractually prohibited from using your data for any purpose other than the verification service.
• Technology & Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers that support the operation of the soju8 platform. All such providers are bound by confidentiality obligations and data-processing agreements.
• Game Content Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymised session identifiers necessary to deliver game content. These providers do not receive your full Personal Data profile.
• Law Enforcement & Regulatory Authorities: soju8 will disclose Personal Data to competent authorities where required by law, court order, or regulatory directive. In all such cases, soju8 will disclose only the minimum data necessary to comply with the applicable legal obligation.
• Professional Advisers: Legal counsel, accountants, and auditors, subject to confidentiality obligations, where necessary for the conduct of soju8's business.

As an internationally operated platform, some of soju8's third-party service providers (including cloud infrastructure and KYC verification partners) may process your Personal Data in jurisdictions outside of Indonesia. Where Personal Data is transferred internationally, soju8 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection obligations equivalent to those applicable in the originating jurisdiction;
• Selection of third-party processors that operate under recognised international data protection frameworks;
• Technical security measures that remain consistent regardless of the location of processing.

soju8 does not transfer your Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual safeguards.

soju8 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your membership and for a period of 5 years following account closure, to satisfy AML, fraud prevention, and dispute resolution obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the most recent interaction, or longer where relevant to an ongoing or potential dispute.
• Technical and session logs: Retained for a rolling period of 12 months for security monitoring and fraud investigation purposes.
• Marketing consent records: Retained for the duration of the consent and for 3 years following withdrawal of consent, as evidence of the consent having been given and subsequently withdrawn.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual Member.

soju8 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and soju8 is encrypted using 256-bit SSL/TLS protocol.
• Encryption at Rest: Sensitive Personal Data and financial records stored in soju8's databases are encrypted using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data within soju8's systems is strictly limited to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration Testing & Security Audits: soju8 conducts regular independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): soju8 offers 2FA for all Member accounts and strongly recommends its activation. Accounts with 2FA enabled receive an additional layer of protection against unauthorised access.
• Incident Response: soju8 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, affected Members will be notified promptly with details of the incident and the steps taken to contain it.

soju8 uses cookies and similar technologies to deliver a functional, personalised, and secure platform experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly — including session management, login authentication, and security tokens. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data on how Members navigate the platform — including which pages are visited most frequently and where errors are encountered — for the purpose of improving platform performance and usability. No individual Member is identifiable from this data.
• Functional Cookies: Used to remember your preferences — such as preferred language settings, display preferences, and last-visited pages — to provide a more personalised experience across sessions.
• Security Cookies: Used to support fraud detection, device fingerprinting, and duplicate account identification as part of soju8's security and AML compliance obligations.

soju8 does not use third-party advertising or behavioural tracking cookies. Your browsing activity on the soju8 platform is not shared with advertising networks or social media platforms for commercial targeting purposes.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and security of your soju8 account.

As a Member of soju8, you hold the following rights in respect of your Personal Data. You may exercise any of these rights by contacting soju8 customer support at [email protected]:

All data subject requests are acknowledged within 72 hours and fulfilled within 30 calendar days of identity verification. soju8 reserves the right to extend this period by a further 30 days where requests are complex or numerous, in which case you will be notified of the extension and its reason.

Exercising your data subject rights is entirely free of charge. Where a request is manifestly unfounded or excessive — particularly where it is repetitive in nature — soju8 may charge a reasonable administrative fee or decline the request, with written justification provided.

As part of the account registration process, soju8 collects date-of-birth information and may require submission of a government-issued identity document to verify that the applicant meets the 21+ age requirement before account activation.

If soju8 becomes aware that Personal Data has been collected from an individual who is under 21 years of age — whether through misrepresentation during registration or any other means — that Account will be immediately suspended, all associated balances will be frozen pending investigation, and the relevant Personal Data will be deleted as soon as practicable.

Members who are parents or legal guardians are responsible for ensuring that no minor uses their soju8 account or accesses the platform via their device. Parental control tools and internet filtering software are available that can assist in preventing underage access to gambling platforms.

soju8 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Material changes to this Privacy Policy — including changes to the categories of data collected, the purposes of processing, or the rights available to Members — will be communicated to registered Members via email notification or prominent on-site notice prior to the effective date of the change.

Your continued use of the soju8 platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree to a revised version of this policy, you should cease using the platform and contact customer support to close your account and request erasure of your Personal Data (subject to applicable retention obligations).

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about the way soju8 handles your Personal Data, please contact our support team using any of the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry — [Your Account Username]". We aim to respond to all privacy-related email enquiries within 2–6 hours.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the soju8 platform. Average response time is under 2 minutes.
• WhatsApp: +62 811 9876 5432 — available 08:00–24:00 WIB daily. Plain text only — not a clickable link.

All formal privacy complaints will be acknowledged within 24 hours and investigated within 30 calendar days. Where a complaint cannot be resolved to your satisfaction within this period, soju8 will explain the reasons for any delay and provide an estimated resolution timeframe.