At soju8, your privacy is not an afterthought — it is engineered into every layer of the platform. This Privacy Policy explains precisely what personal data soju8 collects from players in Indonesia, why we collect it, how it is used, who it may be shared with, and what rights you hold over your information. We encourage you to read it in full before creating or using a soju8 account.
These highlights provide a quick overview of our privacy commitments. They do not replace the full Privacy Policy below — please read the complete document for binding terms.
All data transmitted between your device and soju8 servers is protected by industry-standard 256-bit TLS encryption. Your login credentials, payment details, and personal information are never sent in plain text.
soju8 applies a data-minimisation principle. We collect only the personal data that is strictly required to operate your account, process transactions, complete KYC verification, and comply with anti-money laundering obligations.
soju8 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data shared with external parties is limited to licensed payment processors, KYC partners, and fraud-prevention services — and only to the extent necessary.
Player data is stored on encrypted, access-controlled servers with strict role-based permissions. KYC documents are held in isolated, audited storage environments separate from general operational data.
Registered soju8 players hold clear rights over their personal data — including the right to access, correct, restrict, or request deletion of their information. Requests are handled within 30 days via the support channel.
soju8 uses cookies strictly for session management, security, analytics, and platform performance. No third-party advertising cookies are deployed. You can review cookie categories and manage non-essential cookies via your browser settings.
In this Privacy Policy, the following terms carry the meanings defined below unless the context indicates otherwise:
| Term | Definition |
|---|---|
| "soju8" / "We" / "Us" | The operator of the soju8 online gaming platform accessible at https://soju8.vip, operated under an international gaming licence. |
| "Platform" | The soju8 website, progressive web application, and all associated gaming, betting, and account management services. |
| "Player" / "You" | Any individual who has registered for or uses a soju8 account. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, financial data, device identifiers, and behavioural data collected during Platform use. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, or deletion. |
| "KYC" | Know Your Customer — the identity and age-verification process required before withdrawals are permitted and to comply with anti-money laundering obligations. |
| "Third-Party Processor" | Any external organisation that processes Personal Data on soju8's behalf, including payment providers, KYC verification services, and fraud-prevention platforms. |
| "Cookies" | Small text files placed on your device by the Platform to enable session management, security, analytics, and performance functions. |
soju8 acts as the data controller in respect of all Personal Data collected from Players through the Platform. As data controller, soju8 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing is carried out in accordance with this Privacy Policy and applicable international data-protection standards.
soju8 is operated under an international gaming licence and serves players primarily located in Indonesia. While Indonesia's Personal Data Protection Law (UU PDP, enacted October 2022) provides the primary regulatory context for our Indonesian player base, soju8 also aligns its data-handling practices with internationally recognised principles including those reflected in the General Data Protection Regulation (GDPR) as a benchmark for best practice — even where GDPR does not directly apply.
soju8 collects Personal Data across three primary categories: data you provide directly, data generated automatically by your use of the Platform, and data received from third-party sources as part of compliance and payment processing.
When you register for an account, deposit funds, request withdrawals, complete KYC verification, or contact customer support, you may provide the following types of Personal Data:
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, national identity number (NIK from KTP), passport number |
| Contact Data | Email address, Indonesian mobile phone number, residential address (city, province) |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, account balance (denominated in IDR) |
| KYC Documents | Scanned or photographed copies of KTP, passport, driving licence, utility bills, bank statements |
| Communications Data | Live chat transcripts, email correspondence, support ticket content |
| Account Credentials | Username, hashed password (never stored in plain text), security question responses |
When you access the Platform, the following data is collected automatically through cookies, server logs, and analytics tools:
soju8 may receive Personal Data about you from the following external sources: licensed KYC and identity verification providers (who confirm the authenticity of your submitted documents), payment processors (who confirm transaction status and flag anomalies), and fraud-prevention and AML screening services (who cross-reference your details against watchlists and sanction databases).
soju8 collects Personal Data through the following mechanisms:
soju8 processes your Personal Data only where a valid legal basis exists. The table below sets out our primary processing activities, their purposes, and the legal basis relied upon:
| Purpose | Activities | Legal Basis |
|---|---|---|
| Account Registration & Management | Creating and maintaining your soju8 account, verifying login, processing account updates | Performance of a contract |
| Payment Processing | Processing IDR deposits and withdrawals via local banks and e-wallets | Performance of a contract |
| KYC & Age Verification | Verifying identity documents, confirming 21+ age requirement, screening against sanction databases | Legal obligation; legitimate interests |
| Fraud Prevention & AML | Detecting suspicious patterns, investigating potential money laundering, reporting to authorities where required | Legal obligation; legitimate interests |
| Platform Security | Preventing unauthorised access, detecting bots and automated tools, enforcing geo-restrictions | Legitimate interests |
| Customer Support | Responding to inquiries, resolving disputes, processing complaints | Performance of a contract; legitimate interests |
| Responsible Gaming | Monitoring for problem gambling indicators, enforcing self-exclusion and deposit limits | Legal obligation; legitimate interests |
| Analytics & Platform Improvement | Analysing usage patterns to improve game offerings, UX, and site performance | Legitimate interests |
| Marketing Communications | Sending promotional emails, bonus notifications, and seasonal offers (e.g., Idul Fitri, Ramadhan promotions) | Consent (opt-in at registration; withdrawable at any time) |
soju8 does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
To facilitate IDR deposits and withdrawals, soju8 shares relevant financial and identity data with licensed Indonesian payment partners including bank transfer intermediaries and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). All payment processors are contractually bound to process your data solely for transaction facilitation purposes.
KYC documents (e.g., KTP scans, selfies, proof of address) are shared with accredited third-party identity verification platforms to authenticate your identity and confirm your eligibility to hold a soju8 account. These providers operate under data-processing agreements that restrict their use of your data to verification services only.
soju8 shares relevant account and transaction data with fraud detection and anti-money laundering (AML) screening services to identify suspicious activity and comply with international financial crime obligations. This may include cross-referencing your details against international sanction lists, politically exposed persons (PEP) databases, and adverse media sources.
Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive pseudonymised session and game-round data to facilitate game delivery, resolve disputes, and comply with their own licensing obligations. These providers do not receive your full identity data unless required for a dispute investigation.
soju8 may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or lawful regulatory request. In such cases, soju8 will disclose only the minimum data required and, where legally permissible, will notify you of the disclosure.
As an internationally operated platform, soju8 may transfer your Personal Data to servers and Third-Party Processors located outside Indonesia. Wherever such transfers occur, soju8 ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under Indonesian data-protection law (UU PDP) and internationally recognised best practices.
Safeguards employed for international transfers include:
You may request further information about the specific international transfer mechanisms used for your data by contacting [email protected].
soju8 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years after account closure (for AML and dispute-resolution obligations) |
| KYC Documents | 5 years from the date of submission or account closure, whichever is later |
| Financial & Transaction Records | 5 years from the date of each transaction, in accordance with international AML standards |
| Customer Support Communications | 3 years from the date of the communication, unless related to an ongoing dispute |
| Usage & Analytics Data | 24 months from collection, after which data is aggregated and anonymised |
| Marketing Preferences | Until consent is withdrawn; consent withdrawal records retained for 3 years |
| Cookie & Session Data | Session cookies expire at end of browser session; persistent cookies up to 12 months |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.
soju8 implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:
soju8 uses cookies and similar tracking technologies to operate the Platform securely and effectively. No third-party advertising cookies or cross-site tracking technologies are used. The cookies deployed by soju8 fall into the following categories:
| Cookie Type | Examples | Expiry | Purpose |
|---|---|---|---|
| Strictly Necessary | Session token, CSRF token | Session | Maintain your logged-in session and protect form submissions against cross-site request forgery attacks. Cannot be disabled without breaking core Platform functionality. |
| Security | Bot-detection fingerprint | Up to 30 days | Detect automated traffic, prevent credential-stuffing attacks, and enforce geo-access restrictions. |
| Analytics | Internal analytics ID | Up to 12 months | Measure page views, session duration, and feature usage to improve Platform performance. Data is pseudonymised and aggregated. |
| Functional / Preferences | Language preference, last-visited game | Up to 12 months | Remember your Platform preferences to deliver a personalised experience on return visits. |
You can manage or delete cookies via your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling analytics or functional cookies will not affect your ability to place bets or access games.
As a soju8 player, you hold the following rights in relation to your Personal Data. These rights are derived from Indonesia's Personal Data Protection Law (UU PDP) and are consistent with internationally recognised privacy standards:
To exercise any of the rights listed above, submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your account username and a clear description of the right you wish to exercise. soju8 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with prior notice.
The soju8 Platform is strictly restricted to adults aged 21 years and older. soju8 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in the KYC process — no withdrawals are processed and no full account access is granted until a Player's date of birth has been confirmed against a valid government-issued identity document.
If soju8 becomes aware that Personal Data has been collected from an individual who does not meet the 21+ age requirement, that data will be permanently deleted from our systems, the associated account will be suspended immediately, and any funds held in the account will be handled in accordance with our Terms & Conditions and applicable law.
The soju8 Platform may occasionally reference or display content associated with licensed game studios (such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, or Pocket Games Soft) for game-information purposes. These references are purely informational; the soju8 Platform does not embed third-party tracking pixels or redirect you to external websites as part of normal navigation.
Should you independently navigate to any third-party website — including the websites of game studios, payment providers, or any other external service — soju8 has no control over and accepts no responsibility for the privacy practices, data-collection activities, or content of those external sites. We strongly recommend reviewing the privacy policy of any external site before submitting your Personal Data.
soju8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, regulatory guidance, or Platform features. The "Last Updated" date displayed at the top of this page will be revised whenever a material change is made.
Where a change is material — meaning it substantively affects how your Personal Data is collected, used, or shared — soju8 will provide advance notice via one or more of the following channels at least 14 days before the change takes effect:
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must stop using the Platform and contact support to request account closure.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how soju8 handles your Personal Data, please contact our support team through any of the following channels:
soju8 acknowledges all privacy-related correspondence within 5 business days. Formal complaints receive a substantive response within 30 calendar days. If you are not satisfied with soju8's response to a privacy complaint, you may escalate the matter to the relevant data-protection authority in your jurisdiction.