Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "slo212", "we", "us", "our" — the operator of the Platform at https://slo212.cam and all associated services.
• "Platform" — the slo212 website, mobile-optimized interface, and all digital services accessible through https://slo212.cam.
• "Member", "you", "your" — any individual who registers an account with or otherwise accesses slo212.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, national identity number, financial details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; for this Platform, that is slo212.
• "Third Party" — any individual or organization that is not slo212 or the Member.
• "Cookies" — small text files placed on your device by the Platform to enable functionality and analytical tracking.
• "KYC" — Know Your Customer; the identity and document verification process required before processing withdrawals.

2. Data Controller Information

slo212 is the Data Controller responsible for the personal data collected through https://slo212.cam. We are committed to processing your data lawfully, fairly, and transparently in accordance with internationally recognized data protection principles.

If you have any questions about how your data is processed, or wish to exercise any of your data subject rights described in Section 10 of this Policy, you may contact our Data Protection team using the details provided in Section 14.

Our Platform is operated for and primarily directed at residents of Indonesia. Where applicable, we handle personal data in accordance with the requirements of Law No. 27 of 2022 on Personal Data Protection (UU PDP) of the Republic of Indonesia, as well as international data protection best practices consistent with frameworks such as the GDPR.

3. Personal Data We Collect

We collect different categories of personal data depending on how you interact with the slo212 Platform. The following table summarizes the categories of data we collect and examples of specific data points within each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification purposes. We do not collect credit card numbers or full payment card data — all payment processing is handled by our PCI-DSS-compliant payment partners.

4. How We Collect Your Data

slo212 collects your personal data through the following channels and methods:

4.1 Direct Collection

We collect data that you provide directly to us when you:

• Register an account on the Platform
• Complete the KYC identity verification process
• Make a deposit or request a withdrawal
• Contact our customer support team via live chat, email, or WhatsApp
• Participate in promotions, tournaments, or surveys
• Update your account profile or contact preferences

4.2 Automated Collection

We automatically collect certain technical and behavioral data when you access or use the Platform, including through cookies, web beacons, and server logs. This data is collected to ensure Platform security, diagnose technical issues, and improve user experience. Please refer to Section 9 for our full Cookies policy.

4.3 Third-Party Sources

In limited circumstances, we may receive personal data about you from third parties, including:

• Identity verification providers — who confirm the authenticity of documents you submit during KYC
• Payment processors — who confirm the status and ownership of bank accounts and e-wallets used for transactions
• Fraud prevention services — who flag suspicious account activity patterns across multiple platforms
• Analytics partners — who provide aggregated, anonymized data about traffic sources and user behavior

5. Purposes & Legal Bases for Processing

We process your personal data only where we have a lawful basis for doing so. The table below sets out the primary purposes for which slo212 processes personal data and the corresponding legal basis under applicable data protection law:

Where we rely on consent as our legal basis (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of marketing communications, contact us at [email protected] or adjust your preferences within your account settings.

6. Data Sharing & Third-Party Disclosure

6.1 Permitted Disclosures

slo212 does not sell your personal data to third-party marketers or advertisers under any circumstances. We may share your personal data with carefully selected third parties only in the following circumstances:

• Payment Processors: We share necessary financial data with our payment processing partners to facilitate deposits and withdrawals through BCA, BRI, BNI, Mandiri, and e-wallets.
• Identity Verification Providers: KYC document data is shared with licensed identity verification services solely for the purpose of verifying your identity and age.
• Game Software Providers: Studio providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session data necessary to operate their games on our Platform.
• Analytics Providers: Aggregated, non-personally-identifiable usage data may be shared with analytics platforms to help us improve the Platform experience.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, regulators, or government bodies when required by applicable law or a valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.2 Data Processing Agreements

All third parties with whom we share personal data are bound by written data processing agreements that require them to handle your data in compliance with applicable data protection laws and to use it only for the specific purposes for which it was shared. We conduct due diligence on all third-party processors before engaging them.

7. Data Retention

slo212 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:

Where personal data is no longer required, we securely delete or anonymize it so that it can no longer be associated with you as an individual. In some cases, we may retain anonymized, aggregated data indefinitely for statistical and analytical purposes, as this data no longer constitutes personal data.

8. Data Security

slo212 employs a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

8.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the slo212 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are stored as salted cryptographic hashes. We never store passwords in plain text, and our team will never ask you for your full password.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Firewall & Intrusion Detection: Our servers are protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for unauthorized access attempts around the clock.

8.2 Organizational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only authorized personnel whose job functions require access to specific data categories are permitted to view that data.
• All slo212 staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• We conduct regular internal security audits and periodic third-party penetration testing to identify and remediate vulnerabilities.
• A documented data breach response procedure is in place. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Members without undue delay.

9. Cookies & Tracking Technologies

slo212 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how Members use our services. This section explains what cookies we use and how you can manage them.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login sessions, security token management, and payment gateway handshakes. You cannot opt out of these cookies without impacting Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how visitors use the Platform — for example, which pages are visited most frequently and whether error messages are received. This data helps us improve the overall user experience.
• Functionality Cookies: These cookies remember your preferences, such as your preferred language, display settings, and notification preferences, so you do not need to re-enter them on each visit.
• Marketing Cookies: Where you have given consent, we may use cookies to deliver relevant promotional content based on your browsing activity and game preferences on the Platform. We do not use cross-site marketing cookies that track your activity on external websites.

9.2 Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings menus. Please note that disabling certain cookies may affect the functionality of the slo212 Platform, including your ability to stay logged in or access personalized features. Blocking strictly necessary cookies may prevent you from using the Platform at all.

9.3 Cookie Lifespan

Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months — or until you delete them manually. The specific lifespan of each cookie can be viewed through your browser's developer tools.

10. Your Rights as a Data Subject

As a Member of slo212 and a resident of Indonesia, you have a number of rights with respect to your personal data. We are committed to honoring these rights promptly and without undue restriction. Your rights include:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic profile information directly within your account settings.
• Right to Erasure: Subject to our legal retention obligations (e.g., financial records required for regulatory compliance), you may request the deletion of your personal data. We will assess each erasure request on its merits and inform you of the outcome.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Lodge a Complaint: If you believe that slo212 has not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority in Indonesia or the jurisdiction where you reside.

To exercise any of the rights listed above, please submit a written request to [email protected]. We may need to verify your identity before processing your request. We will respond to all valid data subject requests within 30 calendar days.

11. International Data Transfers

slo212 operates with the support of technology partners, cloud infrastructure providers, and game studios located in various countries outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than your country of residence. These transfers are necessary to deliver the services described in our Terms & Conditions.

Whenever personal data is transferred outside Indonesia, slo212 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under Indonesian data protection law. These safeguards may include:

• Contractual clauses requiring the recipient to process data to an equivalent standard
• Transfers to countries recognized as providing an adequate level of data protection
• Compliance with the binding corporate rules of our technology partners

By using the slo212 Platform, you acknowledge and consent to these international transfers taking place as described in this section.

12. Protection of Minors

slo212 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires all Members to confirm that they are at least 21 years of age, and our KYC verification process is designed to identify and remove underage accounts.

If you are a parent or guardian and believe that a minor under your care has registered an account with slo212 or submitted personal data to us without your consent, please contact us immediately at [email protected]. We will promptly investigate the matter, close the relevant account, and securely delete all associated personal data in accordance with our data retention obligations.

We support the use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. For more information on protecting younger users, please visit our Responsible Gaming page.

13. Changes to This Privacy Policy

slo212 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When we make material changes, we will notify registered Members via email and by posting a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically so that you remain informed about how we are protecting your personal information. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and request account closure by contacting our support team before the changes take effect.

14. Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way slo212 processes your personal data, please reach out to our dedicated Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client)
• Subject Line: Privacy Request — [Your Account Username]
• Live Chat: Available 24/7 through the slo212 Platform interface
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 calendar days

When submitting a data subject request, please include your full name, registered email address, and a brief description of your request so that we can verify your identity and process your inquiry efficiently. We may request additional proof of identity before acting on sensitive data requests such as erasure or data portability.