Privacy Policy

sor76 is committed to handling personal data responsibly and transparently. We recognise that privacy is a fundamental concern for our Members, particularly given the personal and financial nature of online gaming activity. This Policy has been written in plain language to ensure every Member — regardless of technical background — can understand how their data is handled.

This Policy should be read alongside the sor76 Terms & Conditions, which govern your overall use of the Platform. Where this Policy addresses the same subject matter as the Terms & Conditions, this Policy takes precedence in respect of data privacy matters.

sor76 primarily serves Members based in Indonesia. Our data practices are designed to align with internationally recognised privacy principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. While Indonesian data protection law continues to evolve, sor76 applies these principles as a baseline standard regardless of any specific statutory requirement.

For the purposes of this Privacy Policy, sor76 acts as the data controller in respect of personal data collected from Members and visitors to the Platform. As data controller, sor76 determines the purposes and means by which your personal data is processed.

Where sor76 engages third-party service providers — such as game studios, payment processors, or identity verification providers — to process personal data on its behalf, those providers act as data processors and are contractually required to process data only as directed by sor76 and in accordance with appropriate data protection standards.

The following table sets out the categories of personal data sor76 collects, along with the typical source of each category:

sor76 does not intentionally collect sensitive personal data (such as health information, biometric data beyond liveness verification, racial or ethnic origin, or religious beliefs) unless specifically required for responsible gaming or KYC compliance purposes, in which case the collection is disclosed to you at the point of collection.

sor76 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, or contacting sor76 support.
• Automated Collection: Technical and gaming activity data collected automatically as you use the Platform, including through cookies, server-side session tracking, and game engine logs.
• Third-Party Sources: Identity verification data from KYC service providers; transaction confirmation data from payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); fraud risk signals from anti-fraud data partners.
• Public Sources: Publicly available records consulted for due diligence purposes, such as sanctions screening databases and publicly accessible adverse media sources.

sor76 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your sor76 Account, including processing logins, account settings changes, and password resets.
• Identity & Age Verification (KYC): Confirming your identity, verifying that you are at least 21 years of age, and validating your payment method ownership in compliance with anti-money laundering obligations.
• Transaction Processing: Processing deposits and withdrawals to and from your sor76 Account via your nominated Indonesian bank account or e-wallet.
• Gaming Service Delivery: Enabling access to and use of sportsbook, live casino, slot, and other gaming products on the Platform, including maintaining accurate game session and betting records.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other forms of platform abuse.
• Responsible Gaming: Monitoring gaming activity to identify patterns potentially indicative of problem gambling; enforcing deposit limits, session limits, and self-exclusion requests; communicating with Members about responsible gaming resources.
• Customer Support: Responding to enquiries, resolving disputes, investigating complaints, and providing assistance via live chat and email.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive marketing communications. Marketing communications can be opted out of at any time via account settings or by contacting support.
• Legal Compliance: Complying with applicable legal obligations including record-keeping, reporting to regulatory bodies, and responding to lawful requests from authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's products, interface design, performance, and user experience.

sor76 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract represented by the sor76 Terms & Conditions — including account creation, payment processing, and game session management.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC, anti-money laundering screening, sanctions checks, and mandatory record-keeping.
• Legitimate Interests: Processing conducted for sor76's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, and anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

sor76 does not sell personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: Sharing of financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• Game Providers: Sharing of session and account data with game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) to the extent required to deliver game services and maintain game integrity.
• KYC & Fraud Prevention Providers: Sharing of identity documents and verification data with authorised identity verification service providers for the purpose of KYC compliance and fraud risk assessment.
• IT & Infrastructure Providers: Sharing with cloud hosting, database management, and cybersecurity service providers who process data solely as instructed by sor76 under contractual data processing agreements.
• Legal & Regulatory Authorities: Disclosure to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. sor76 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of sor76's business or assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

sor76 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

sor76 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key technical and organisational measures include:

• TLS 1.3 encryption for all data in transit between your device and sor76 servers.
• AES-256 encryption for personal data stored at rest on sor76 infrastructure.
• Bcrypt or equivalent one-way hashing for all stored account passwords — sor76 support agents cannot view or retrieve your password.
• Multi-factor authentication options available for Member accounts.
• Role-based access controls restricting staff access to personal data to only those with a documented business need.
• Regular penetration testing and vulnerability scanning by qualified third-party security assessors.
• Automated anomaly detection and real-time alerting for suspicious login or transaction activity.
• Regular staff training on data protection obligations and secure handling procedures.

sor76 uses cookies and similar tracking technologies to operate the Platform, maintain session state, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and load-balancing cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred game lobby view, and responsible gaming tool configurations — between sessions.
• Analytics Cookies: Used to collect anonymised statistical data about how Members use the Platform, including page visit frequency, navigation paths, and feature engagement rates. This data is used solely to improve the Platform and is not linked to individual identifiable profiles.
• Marketing Cookies: Used to deliver relevant promotional content to Members who have opted in to marketing communications. These cookies may track interaction with promotional banners and bonus offers on the Platform.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or accessing certain parts of the Platform. Disabling marketing cookies will not reduce the number of promotions displayed but may result in less relevant promotional content.

sor76 does not knowingly collect or process personal data from individuals under the age of 21. The Platform is strictly for adults aged 21 and above. If sor76 becomes aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, that data will be deleted as promptly as practicable and the associated Account will be closed.

Parents and guardians who believe their minor child may have accessed or registered on sor76 are asked to contact us immediately at [email protected] so that we can take appropriate action.

You hold the following rights in respect of your personal data held by sor76. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

sor76 operates globally and may transfer personal data to service providers or infrastructure located in countries outside Indonesia. Where personal data is transferred internationally, sor76 ensures that appropriate safeguards are in place, including contractual data protection obligations equivalent to internationally recognised standards.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe operate their own data processing infrastructure in various jurisdictions. Data shared with these providers is limited to session data required for game delivery and is governed by contractual data processing agreements between sor76 and each provider.

sor76 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform functionality, or data processing practices. Material changes will be communicated to Members via email to the address registered to your Account and via a prominent in-platform notification, at least 14 days before the effective date of the change.

The version number and effective date at the top of this Policy indicate the currently applicable version. Your continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgement of the updated terms. The current version of this Policy is always available at sor76.pro/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sor76, please contact us through the following channels:

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.