sibukwin Privacy Policy

This page describes what we collect when you use sibukwin and how we keep that data protected. We at sibukwin handle your personal information with encryption, limited retention, and clear boundaries on third-party access. Your account data—email, username, deposit history, withdrawal records—stays encrypted both in transit and at rest on our servers.

When you create a sibukwin account, we collect your email address and phone number. During your first withdrawal, we request Know Your Customer (KYC) verification: a government ID photo, a selfie, and an address proof. These identity documents are stored in a separate encrypted vault and are not linked to your gaming activity. We retain KYC data only as long as necessary for regulatory compliance; upon account deletion, we remove identity records within thirty days.

Our sibukwin platform operates with jurisdiction-restricted access. Your location determines whether you can use our service; we do not knowingly serve regions where online gaming is prohibited. This policy sets out our data practices, your rights, and how to contact us with privacy concerns.

What we collect on sibukwin

We at sibukwin collect the following information when you create and use your account:

• Account data: Email address, username, phone number, password (hashed and never stored in plaintext).
• Identity documents: Government ID photo, selfie, and address proof during first withdrawal (KYC verification).
• Payment data: Your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet Virtual Account, mobile banking, local payment, online payment) and transaction history (deposits and withdrawals), but not card details or wallet credentials.
• Game activity: Your predictions, bets, game history, account balance, and results across all categories (football, slots, live dealer, esports).
• Device and usage data: IP address, device type, mobile operating system version, app version, push-notification preferences, and session logs.
• Communication data: Support chat transcripts, email messages, and dispute records.

We do not collect sensitive data such as your full card number, bank account password, e-wallet login credentials, or biometric data (except your selfie for KYC). We do not sell your personal data to third parties for marketing purposes.

How we use your data on sibukwin

We use your personal data for the following purposes:

• Account management: Creating and securing your account, processing your password reset, and enabling two-factor authentication.
• Payments: Processing deposits via e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and bank virtual accounts (local payment, online payment, e-wallet, mobile banking). Processing withdrawals back to your original payment method.
• KYC and regulatory compliance: Verifying your identity during first withdrawal, detecting fraud, and maintaining audit logs as required by law.
• Game settlement: Recording your predictions, calculating results, and crediting or debiting your account balance.
• Support: Responding to your support requests via live chat or email, and maintaining records of disputes and resolutions.
• Fraud prevention: Monitoring for unusual account activity, detecting duplicate accounts, and blocking access from prohibited jurisdictions.
• Service improvement: Analysing aggregate data (never individual names or account details) to improve our platform stability and user experience.

We do not use your data for automated decision-making or profiling that could significantly affect you without your explicit consent.

Third-party processors and data transfers

We at sibukwin work with third-party processors to deliver our service. We share your data only when necessary:

• Payment processors: We provide your payment method (e.g. local payment, online payment, e-wallet Virtual Account details) to the payment provider to process deposits and withdrawals. The payment provider does not retain your data after the transaction completes.
• ID verification services: We may use a third-party identity-verification provider to validate your KYC documents. Your identity data is encrypted and transmitted securely; the provider accesses it only to verify authenticity.
• Cloud hosting: Our servers may be located outside your country. Data is encrypted in transit and at rest, so it remains protected regardless of server location.
• Anti-fraud services: We may share your IP address and activity logs with fraud-detection partners to prevent abuse and collusion.

We do not share your data with marketing partners, data brokers, or advertisers. We require all third-party processors to sign data-protection agreements and use encryption for data in transit.

Cookies and tracking on sibukwin

We at sibukwin use cookies and similar technologies to maintain your session and improve your experience. Our Android app stores session tokens locally on your device; iOS browser sessions use encrypted cookies. We do not use tracking pixels or third-party analytics cookies that identify you personally. Our web server logs are retained for thirty days for security purposes only.

You can disable cookies in your browser settings; however, this may prevent you from logging into your sibukwin account. Our mobile app does not rely on browser cookies—it uses encrypted local storage that you can clear through your phone's app settings.

Data retention on sibukwin

We at sibukwin retain your data according to the following schedule:

• KYC identity documents: Retained for regulatory compliance; deleted 30 days after account closure.
• Transaction history: Retained for seven years as required by law, then anonymised.
• Account credentials: Retained while your account is active. Deleted upon account closure.
• Server logs: Retained for 30 days for security investigation; then deleted.
• Support chat transcripts: Retained for two years to handle disputes and refunds; then deleted.
• Device and usage data: Aggregated and anonymised monthly; individual session logs deleted after 90 days.

You can request deletion of your account at any time through our support team. We will permanently delete your account data (except audit logs required by law) within 30 days of your request.

Your rights under our sibukwin privacy policy

We respect your data rights. You have the following rights under our sibukwin policy:

• Right of access: You can request a copy of your personal data. Contact our support team and we will provide a CSV or PDF export of your account data within seven business days.
• Right to correction: If your account information (email, phone number) is inaccurate, you can update it in your sibukwin account settings or contact support.
• Right to deletion: You can request account deletion. We will delete your account data (except regulatory audit logs) within 30 days. Active withdrawals or pending disputes may delay deletion until resolution.
• Right to withdraw consent: If we process your data based on your consent (e.g. marketing emails), you can withdraw consent by updating your notification preferences or contacting support.
• Right to lodge a complaint: If you believe we have mishandled your data, you can file a complaint with the relevant data-protection authority in your jurisdiction.

We respond to all data-access and deletion requests within seven business days. Note that some data (such as transaction logs required by law) cannot be deleted.

Security measures on sibukwin

We at sibukwin implement multiple security layers to protect your data:

• Encryption in transit: All data between your phone and our servers uses TLS 1.2 encryption. Your predictions, account balance, and payment information are never transmitted unencrypted.
• Encryption at rest: Your password is hashed with bcrypt (never stored in plaintext). Identity documents and payment records are encrypted with AES-256 on our servers.
• Session tokens: Your session expires after subject to verification of inactivity. We do not store session tokens in cookies on shared devices; instead, we use encrypted local storage.
• Two-factor authentication: Available in supported regions during high-value transactions (large withdrawals).
• Fraud monitoring: We automatically flag suspicious activity (multiple failed logins, unusual withdrawal patterns, account access from new countries) and may require re-verification.
• Access controls: Only authorised sibukwin staff can access your data, and only for legitimate business purposes (dispute resolution, fraud investigation). Staff access is logged and audited.

While we use industry-standard security, no system is completely risk-free. We encourage you to use a strong, unique password and enable two-factor authentication where available.

Contact us about privacy on sibukwin

If you have questions about our sibukwin privacy practices, wish to exercise your data rights, or have privacy concerns, contact us through our support team:

• Live chat: Available during business hours through your sibukwin account dashboard.
• Email support: Submit your privacy request via email for non-urgent matters.
• Account settings: Update your notification preferences, email address, or phone number directly in your account.

We respond to all privacy inquiries within seven business days. If you are not satisfied with our response, you may escalate to the data-protection authority in your jurisdiction or submit a formal complaint through our support team.

Updates to our sibukwin privacy policy

We may update this privacy policy occasionally to reflect changes in our practices, technology, or law. We will notify you of material changes by email (if you have provided an email address) or by posting a notice on our sibukwin platform. Your continued use of our platform after such notice constitutes your acceptance of the updated policy.

This privacy policy was last updated and applies to all users of our sibukwin platform. We encourage you to review it periodically. If you have concerns about a specific update, contact our support team before continuing to use our service.