1. Introduction and Scope
This Policy applies to all users of the 55sl online betting platform accessible at https://55sl.cam, including all associated websites, mobile-optimized pages, and services operated under the 55sl brand ("Platform", "we", "us", "our"). The Policy governs how 55sl collects, processes, stores, discloses, and protects personal information relating to individuals who access or use our services ("you", "your", "User", "Player").
This Policy should be read in conjunction with our Terms & Conditions, which form the complete legal framework governing your relationship with 55sl. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
55sl primarily serves players based in Indonesia. Where relevant, this Policy reflects the data protection principles applicable to our Indonesian user base, including obligations arising under applicable Indonesian law regarding personal data protection. Indonesian residents retain specific rights regarding their personal information as further described in Section 9 of this Policy.
2. Personal Data We Collect
55sl collects personal data from you through several channels: directly when you register and use our Platform; automatically through your device and browsing activity; and, in limited cases, from third-party verification partners. The categories of data we collect include:
2.1 Identity and Contact Data
- Full legal name (as it appears on your government-issued identification)
- Date of birth (to verify you are at least 21 years of age)
- Indonesian National Identity Card number (KTP number) where required for KYC verification
- Email address (primary communication channel for account notifications and promotions)
- Mobile phone number (used for two-factor authentication and customer support)
- Residential address (city, province, and postal code — Indonesia-based address required)
2.2 Financial and Payment Data
- Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), account holder name, and account number — used exclusively to process deposits and withdrawals in Indonesian Rupiah (IDR)
- E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
- Transaction history including deposit amounts, withdrawal requests, wager amounts, and game results
- We do not store full bank account credentials or e-wallet passwords. Payment data is processed through encrypted, tokenized connections to your bank or e-wallet provider.
2.3 Identity Verification (KYC) Documents
- Scanned or photographed copies of government-issued photo identification (KTP, passport, or driver's license)
- Proof of address documentation (utility bills, bank statements) dated within the past three months
- Selfie photographs or liveness verification images when required during enhanced identity verification
2.4 Technical and Usage Data
- IP address and geographic location data (city/region level) at the time of login and transaction
- Device type, operating system, browser type and version, screen resolution
- Pages visited, time spent, click patterns, game sessions, and betting activity on the Platform
- Login timestamps, session duration, and logout events
- Cookies, local storage objects, and similar tracking technologies (see Section 7 below)
2.5 Communications Data
- Records of live chat conversations with our customer support team (retained for quality assurance and dispute resolution)
- Email correspondence related to account management, complaints, or support requests
- Feedback, survey responses, and voluntary information you provide when contacting us
3. How We Use Your Personal Data
55sl processes your personal data only for legitimate, specified purposes. The table below summarizes our key processing activities and the lawful basis for each:
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Identity, contact data | Contractual necessity |
| Processing deposits & withdrawals in IDR | Financial data | Contractual necessity |
| Identity verification (KYC / AML compliance) | KYC documents, identity data | Legal obligation |
| Fraud detection and prevention | Technical data, financial data | Legitimate interest |
| Customer support and dispute resolution | Communications, account data | Contractual necessity |
| Responsible gaming monitoring | Usage data, betting history | Legal obligation / Legitimate interest |
| Personalized promotions and bonuses | Usage data, preferences | Consent |
| Platform improvement and analytics | Technical data, usage data | Legitimate interest |
| Security and system integrity | Technical data, IP data | Legitimate interest |
55sl does not use automated decision-making that produces significant legal effects without human review. Where automated systems flag an account for fraud, bonus abuse, or underage gambling, a trained compliance team member reviews the case before any account action is taken.
4. Disclosure of Your Data to Third Parties
55sl does not sell, rent, or trade your personal data to any third party for marketing purposes. We share your data only where necessary, with the following categories of recipients:
- Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum data necessary to execute your deposit and withdrawal transactions. These entities operate under their own privacy policies and Indonesian banking data protection regulations.
- Identity verification (KYC) providers: Third-party KYC and AML screening services may process your identification documents to verify your identity and screen against sanctions lists. These partners are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
- Game studio providers: Software providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft receive anonymized player session data (user ID and game activity) for the purpose of game functionality and auditing. No personally identifiable information is shared with game studios beyond what is technically necessary.
- Fraud detection and security services: We work with specialist cybersecurity and fraud prevention providers who may analyze IP addresses, device fingerprints, and behavioral signals to detect suspicious activity. These providers are contractually prohibited from using this data for any purpose other than fraud prevention on behalf of 55sl.
- Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or to protect the rights, property, and safety of 55sl, its users, or the public.
5. Data Retention
55sl retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are as follows:
- Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering record-keeping requirements.
- KYC documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Transaction and betting records: Retained for five (5) years from the date of each transaction.
- Customer support communications: Retained for two (2) years from the date of the last communication in a support thread.
- Technical and log data: Retained for a maximum of twelve (12) months for security monitoring purposes, after which it is anonymized or deleted.
After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual.
6. Data Security Measures
55sl implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. Our security framework includes:
- 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). You will see the padlock icon and "https" in your browser address bar confirming this protection.
- Encryption at rest: Sensitive data stored in our databases (including KYC documents, payment details, and passwords) is encrypted using AES-256 encryption. Even in the unlikely event of a database breach, stored data cannot be read without the decryption key.
- Password hashing: User passwords are never stored in plain text. We use bcrypt hashing with a high cost factor to make brute-force attacks computationally infeasible.
- Two-factor authentication (2FA): We strongly recommend enabling 2FA on your 55sl account. When enabled, a one-time verification code is sent to your registered mobile number or email at each login.
- Access controls: Access to personal data within 55sl's internal systems is strictly role-based. Only personnel with a documented need to access specific data categories are granted access. Access logs are reviewed regularly.
- Regular security audits: Our platform undergoes regular penetration testing and security audits by independent cybersecurity firms to identify and remediate vulnerabilities.
Despite these measures, no data transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You acknowledge that you transmit personal data to 55sl at your own risk.
7. Cookies and Tracking Technologies
55sl uses cookies and similar technologies to enhance your browsing experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser. We use the following types of cookies:
- Strictly necessary cookies: These enable core functionality such as session management, secure login, and access to password-protected areas. The Platform cannot function properly without these cookies. They are session cookies that expire when you close your browser, or persistent cookies with a limited lifespan.
- Performance and analytics cookies: These collect information about how you interact with the Platform — which pages you visit, how long you stay, and any errors you encounter. This data is aggregated and anonymized. We use it to improve Platform performance and user experience.
- Functional cookies: These remember your preferences (language, currency display, preferred layout) so that you do not have to set them again on subsequent visits.
- Marketing cookies: These track your activity across sessions to deliver personalized bonus offers and promotional messages tailored to your betting preferences (sports betting, casino, togel, slot gacor). You can opt out of marketing cookies through your account settings.
You can control cookie preferences through your browser settings. Most browsers allow you to block cookies entirely or to receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will impair core Platform functionality and you may not be able to log in or place bets.
8. International Data Transfers
55sl primarily serves players located in Indonesia. However, our Platform infrastructure, including servers, cloud storage, and third-party service providers, may be located in jurisdictions outside Indonesia. This means your personal data may be transferred to, and processed in, countries that may have data protection laws different from those of Indonesia.
When we transfer personal data internationally, we implement appropriate safeguards to ensure your data remains protected to a standard comparable to Indonesian data protection principles. These safeguards include:
- Contractual data protection clauses with all third-party processors requiring them to protect personal data to the same standard we apply internally.
- Encryption of data in transit and at rest regardless of the physical location of the server.
- Regular audits of third-party service providers to ensure compliance with agreed data protection obligations.
9. Your Privacy Rights
As a user of 55sl, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV file).
- Right to rectification: If you believe any of your personal data held by us is inaccurate or incomplete, you may request that we correct or update it. You can update most information directly through your account settings.
- Right to erasure (right to be forgotten): You may request deletion of your personal data where we no longer have a legitimate reason to retain it. Please note that we are legally required to retain certain records (KYC documents, transaction history) for five (5) years for AML compliance, even after account closure.
- Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interest.
- Right to object: You have the right to object to processing of your personal data where we rely on legitimate interest as the lawful basis and there are no overriding legitimate grounds for the processing. You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or adjusting your account settings.
- Right to data portability: Where technically feasible, you have the right to receive your personal data in a portable format and to have it transmitted directly to another service provider.
- Right to withdraw consent: Where we process your personal data based on consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact our Data Protection team via live chat or email at [email protected] (email displayed for reference only). We will respond to your request within thirty (30) calendar days. If we are unable to fulfill your request, we will explain why.
10. Children's Privacy
Age Restriction: 21+ Only
55sl does not knowingly collect personal data from individuals under the age of 21. Online gambling is illegal for minors in Indonesia. If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and permanently close the associated account. Any winnings will be forfeited. Parents and guardians are encouraged to monitor their children's internet usage and to use parental control software to block access to gambling websites.
11. Changes to This Privacy Policy
55sl reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting to the Platform. We will notify you of material changes via email to your registered email address or through a prominent notice on the Platform.
Your continued use of 55sl after changes have been posted constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your privacy. The "Last Updated" date at the bottom of this document indicates when the Policy was most recently revised.
12. Contact Information
If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact us:
- Data Protection Inquiries: Email displayed for reference only: [email protected]
- Live Chat Support: Available 24/7 via the Platform (Indonesian and English-speaking agents)
- Postal Address (Indonesia): 55sl Data Protection Officer, Jakarta, Indonesia
We are committed to resolving privacy-related concerns in a timely and transparent manner. We will acknowledge receipt of your inquiry within 48 hours and aim to provide a substantive response within thirty (30) calendar days.
Last Updated: January 15, 2026