sodoku Platform Privacy Notice
This page describes what we collect when you use sodoku and how we keep that data protected. We at sodoku collect personal information during account registration, Know Your Customer verification, deposits via DANA, e-wallet, mobile banking, local payment, online payment, or bank transfer, and gameplay activity. All data is encrypted and stored securely on our servers.
We use your information to verify your identity, process payments, comply with local regulations, and prevent fraud. We do not sell your personal data to third parties. We share information only with payment processors, regulatory bodies, and law enforcement when legally required.
Our privacy practices apply to all sodoku users, whether accessing our platform via Android app, iOS browser, or desktop. This notice explains your rights and our obligations regarding your data.
What Data We Collect on sodoku
We collect several categories of information when you use sodoku. First, account registration data: your full name, email address, phone number, and date of birth. Second, identity verification data: a copy of your passport, driver's license, or national ID, plus a selfie for facial verification. Third, payment data: your payment method (DANA account, e-wallet account, bank account number, or mobile banking identifier) and transaction history. Fourth, gameplay data: your account balance, game selections, market activity, and session timestamps.
We also collect device information: your phone model, operating system version, app version, and IP address. This helps us troubleshoot technical issues and detect fraud. We collect this data automatically when you use sodoku; you do not need to provide it manually.
We do not collect your payment credentials directly. When you deposit via local payment, online payment, e-wallet, mobile banking, or local payment, you authorize the transaction in your payment app. We receive only confirmation that the transaction succeeded. For bank transfers, we receive your bank account number and transaction reference, but not your banking password.
Data we collect on sodoku
- Account registration: name, email, phone, date of birth
- Identity verification: ID document, selfie, address
- Payment information: payment method, transaction history
- Gameplay activity: balance, game selections, session logs
- Device information: phone model, OS, IP address
How We Use Your Data
We use your data for specific purposes. We verify your identity to comply with Know Your Customer regulations and prevent account fraud. We process your payment information to confirm deposits and execute withdrawals. We analyze your gameplay activity to detect unusual patterns that may indicate fraud or account compromise.
We use your email and phone number to send account notifications: deposit confirmations, withdrawal approvals, login alerts, and password-reset codes. You can control notification frequency in your sodoku account settings. We do not send marketing emails unless you opt in.
We retain your data for compliance and dispute resolution. If you request account closure, we retain minimal data as required by local law—typically for seven years for financial records.
Third-Party Processors and Data Sharing
We share your data with third-party processors only when necessary. Our payment processors (online payment, e-wallet, mobile banking, local payment, online payment, and our bank partners) receive your payment information to process transactions. These processors have their own privacy policies; we recommend reviewing them. We do not control how they use your data beyond transaction processing.
We may share your data with regulatory bodies, tax authorities, and law enforcement if legally required. We comply with requests from Indonesian authorities and authorities in other jurisdictions where sodoku operates. We do not share your data with marketing companies, data brokers, or advertisers.
Your Rights and Our Commitments on sodoku
You have the right to access your personal data held by sodoku. Submit a request to our support team, and we will provide a copy of your data within 30 days. You have the right to correct inaccurate information: if your name or address is wrong in our records, contact us and we will update it. You have the right to request deletion of your data, subject to legal retention requirements.
We encrypt all data transmitted between your device and our sodoku servers using TLS 1.2 or higher. Your password is hashed and never stored in plaintext. We store data on secure servers with restricted access. We conduct regular security audits and penetration testing to identify vulnerabilities.
Cookies and Tracking on sodoku
We use cookies to maintain your login session and remember your preferences. These are session cookies that expire when you log out. We do not use tracking cookies for advertising or analytics. Our Android app does not use cookies; instead, it stores your session token locally on your device.
Data Location and Cross-Border Transfer
Our servers may sit outside your jurisdiction. When you use sodoku from Jakarta, Surabaya, Bandung, or Medan, your data may be processed and stored on servers in other countries. By using sodoku, you consent to this cross-border transfer. We apply the same security standards regardless of server location.
Changes to This Privacy Notice
We may update this privacy notice to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-app notification. Your continued use of sodoku after such changes constitutes acceptance of the updated notice.
We at sodoku protect your personal data with encryption, secure storage, and strict access controls. Your privacy is central to how we operate.
Contact sodoku
If you have questions about our privacy practices or want to exercise your data rights, contact our support team through the sodoku app or website. We respond to privacy inquiries within 10 business days. For data access requests, we may ask you to verify your identity before providing information.