sortoro Platform Privacy Notice

This page describes what we collect when you use sortoro and how we keep that data protected. Every sortoro account requires identity verification (Know Your Customer, or KYC) before deposits or withdrawals. We collect email, name, date of birth, identity document numbers, and proof of address. This information is encrypted and stored securely on our servers.

Our privacy practices are straightforward. We do not sell user data to advertisers or marketing firms. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and anti-fraud services necessary to process your transactions. We retain your data for the duration of your account and up to seven years after account closure for regulatory compliance.

This notice applies to all users of sortoro, whether you access the platform from Jakarta, Surabaya, Bandung, Medan, or Semarang. If you have questions about how we handle your data, you can contact our support team during business hours (Monday–Friday, 09:00–18:00 UTC+7) via the Help section on sortoro.

What Data We Collect on sortoro

We at sortoro collect different categories of information depending on how you use the platform:

• Account registration data: Email address, username, password hash (encrypted), and language preference.
• Identity verification (KYC): Full legal name, date of birth, national ID number, passport number (if applicable), selfie photograph, and proof of address (utility bill, rental agreement, or government-issued address document).
• Payment information: Bank account details, e-wallet identifiers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet), and payment transaction history. Payment details are processed through secure third-party gateways and are not stored in plain text on sortoro servers.
• Activity logs: Game play history, bet records, tournament participation, slot sessions, live-dealer table activity, and sportsbook transactions. This information is retained in your account history (Account → Transactions).
• Communication data: Support ticket content, in-app chat history, and email correspondence with our team.
• Technical data: IP address, device type, browser version, and login timestamps for security and account recovery purposes.

We collect this data to verify your identity, comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations, process deposits and withdrawals, prevent fraud, and provide customer support. We do not use your data to build marketing profiles or sell contact information to third parties.

How We Use Your Data on sortoro

We use the information we collect for these specific purposes:

• Account administration: Creating and managing your sortoro account, processing login requests, and recovering forgotten passwords.
• Payment processing: Verifying your identity before deposits and withdrawals, coordinating with payment providers, and maintaining transaction records.
• Regulatory compliance: Meeting anti-money-laundering (AML) and know-your-customer (KYC) requirements in regions where sortoro operates.
• Fraud prevention: Detecting unusual account activity, suspicious transactions, and potential security breaches. We may block withdrawals or freeze accounts if suspicious patterns are detected.
• Customer support: Responding to help requests, troubleshooting technical issues, and resolving disputes regarding game results or account settlements.
• Legal and regulatory inquiries: Providing information to law enforcement, gaming regulators, or financial authorities when legally required.

We do not use your personal data for marketing emails, promotional messages, or third-party advertising without your explicit consent. If we ever introduce optional marketing communications, you will have the ability to opt out.

Our commitment: we do not sell, lease, or trade your personal information. Data sharing happens only when legally required or necessary to process your transactions.

Data Security and Retention on sortoro

We at sortoro employ industry-standard encryption and security practices to protect your data. All personal information is encrypted in transit (HTTPS) and at rest. Access to your data is restricted to sortoro team members who require it for account administration, payment processing, or customer support. Passwords are hashed using cryptographic algorithms and are never stored in plain text.

Our servers may sit outside your jurisdiction. Your data may be transferred to and stored in countries with different data protection laws than your home country. By using sortoro, you consent to this cross-border data transfer. We retain your personal data for as long as your account is active. After account closure, we retain records for up to seven years to satisfy legal and regulatory retention requirements. You may request deletion of non-essential personal data by contacting our support team, subject to legal and compliance obligations.

Third-Party Data Processors

sortoro works with third-party vendors to operate the platform securely. These processors include:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment receive transaction data necessary to process deposits and withdrawals.
• Identity verification services: We may use third-party KYC vendors to verify identity documents and detect fraud.
• Game providers: Habanero, Pretty Gaming, and other game studios receive anonymized data about gameplay for compliance and reporting purposes. They do not receive your personal identity information.
• Support tools: Our customer support platform may be hosted by third-party service providers. Support conversations are encrypted and access-controlled.

All third-party processors are contractually obligated to protect your data and use it only for the purposes we specify. We do not permit them to use your information for their own marketing or commercial purposes.

Your Rights and Data Access on sortoro

We respect your rights regarding your personal data. You have the right to request a copy of all personal information we hold about you. To exercise this right, contact our support team via the Help section on sortoro or email our compliance contact. We will provide your data in a readable format within 15 business days of your request.

You may also request correction of inaccurate data, deletion of non-essential information (subject to legal retention requirements), or restriction of data processing for specific purposes. If you believe we have misused your data, you may file a complaint with your local data protection authority. sortoro does not penalize users for exercising their data rights.

Cookies and Tracking Technology

sortoro uses cookies and similar tracking technologies to remember your login preferences, store session information, and analyze platform usage. Essential cookies are required for the platform to function (e.g., session tokens, CSRF protection). You can disable non-essential cookies via your browser settings, but doing so may affect platform functionality.

We do not use cookies to track your activity outside of sortoro or to build consumer profiles for behavioral advertising. Analytics cookies help us understand which features users engage with most (e.g., slot tournaments during Idul Fitri or Idul Adha periods) so we can improve the platform. You have the right to opt out of analytics tracking; contact our support team for details.

Policy Updates and Contact

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or by posting a notice on sortoro. Your continued use of sortoro after changes are posted constitutes acceptance of the updated policy.

If you have privacy questions, requests to access your data, or concerns about how we handle your information, contact our multilingual support team via the Help section on sortoro (Monday–Friday, 09:00–18:00 UTC+7) or visit our legal notice page for additional compliance information. For data requests or privacy complaints, you may also contact our compliance team directly via email; response times typically range from 5 to 10 business days.