sonPrivacy Policy

This page describes what we collect when you use son and how we keep that data protected. We at son take your privacy seriously. When you register for an account, deposit funds, or place bets on our platform, we collect certain personal information to verify your identity, process your payments, and comply with local law. We do not sell or rent your data to third parties.

Our data handling practices comply with applicable privacy and data protection regulations in the jurisdictions where son operates. Your personal information is encrypted in transit and at rest on our servers. We use industry-standard security protocols — SSL/TLS encryption, secure password hashing, and regular security audits — to protect your account from unauthorized access.

We store some data on servers located outside Indonesia, including in regional data centers managed by our payment and hosting partners. These partners operate under contractual commitments to protect your data to the same standard we do. This privacy policy applies to all users of son, whether you access via desktop, mobile browser, or Android app. We update this policy periodically; material changes are communicated via email or in-platform notice.

What We Collect and How We Use It

Personal data collected on son

When you register on son, we collect your email address and a secure password of your choice. During account setup, we ask for your full name, date of birth, and phone number. These details allow us to verify your identity and contact you if needed.

When you make your first deposit, we collect payment method information — your e-wallet account number (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet) or bank account details (for mobile banking, local payment, online payment, e-wallet virtual accounts). We also request a government-issued photo ID and a selfie to confirm your identity matches your registration. This verification process is required by local anti-money-laundering law and protects both you and son from fraud.

We record all transactions on son — deposits, withdrawals, bets placed, games played, and outcomes. This transaction history is stored in your account and remains accessible to you at any time. We also log your login times, device information (browser type, operating system, IP address), and the duration of your sessions. This information helps us detect suspicious activity and prevent unauthorized access.

How we use your data on son

We use your personal information for the following purposes: to create and manage your son account, to verify your identity and prevent fraud, to process your deposits and withdrawals, to comply with anti-money-laundering and know-your-customer regulations, and to respond to your support requests. We also use your email and phone number to send account notifications — password reset requests, deposit confirmations, withdrawal status updates, and important platform announcements.

We analyze anonymized transaction and gameplay data to improve son's performance and user experience. This analysis does not identify you personally; it shows us patterns like peak usage times, popular game types, and common payment methods. These insights help us optimize our infrastructure and tailor our game offerings.

Our Data Protection Commitments

Third-party processors and payment partners

We work with third-party processors to handle payments, verify identity, and store data. These partners include our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), identity verification services, and cloud hosting providers. Each partner has signed a data processing agreement committing them to protect your data to the same standard we do. We do not permit them to use your data for their own marketing purposes.

Your payment information is passed to mobile banking, local payment, online payment, e-wallet, or mobile banking only when you initiate a deposit or withdrawal through those channels. Your bank details (for local payment, online payment, e-wallet, mobile banking transfers) are shared with the respective bank and our payment partner solely to process the transaction. We do not store your complete card or bank account numbers on son's servers; our payment partners handle that encryption.

Data retention and deletion

We retain your account data as long as your account is active. If you close your account, we retain essential transaction records (deposit history, withdrawal history, bet settlements) for a minimum of seven years to comply with anti-money-laundering regulations. We delete other personal data — email backup, support messages, device logs — within 30 days of account closure, unless we are required by law to retain it longer.

If you request deletion of your data before account closure, we can anonymize your profile information but cannot delete transaction history due to legal requirements. You can request a copy of all data we hold about you by contacting our support team. We will provide this within 30 days.

Cookies and tracking on son

We use cookies to keep you logged into son, to remember your preferences (language, table limits, game filters), and to track your activity on our platform. These are session cookies and persistent cookies. Session cookies expire when you close your browser. Persistent cookies remain on your device until you clear your browser cache or they expire (typically after 12 months).

We do not use cookies to track you across other websites. Our cookies are set only on son.run and are used only to improve your experience on our platform. You can disable cookies in your browser settings, though this may affect your ability to use son.

We at son believe that transparency about data practices builds trust. You own your data, and we are stewards of it only during your time with us.

Your rights and how to contact us

You have the right to access your personal data held on son. You can download your account history, transaction records, and profile information through your account dashboard. You also have the right to correct inaccurate information — if your name or phone number is wrong, contact our support team and we will update it within 48 hours.

If you have concerns about how we handle your data, or if you wish to exercise your rights under applicable privacy law, contact our support team. We operate support channels in Jakarta, Surabaya, Bandung, Medan, and Semarang, and we respond to data requests within 30 days. We also comply with data subject requests from users in all jurisdictions where son is available. For urgent privacy concerns, use the in-platform chat widget to reach our data protection officer.

Jurisdiction-restricted data handling

We do not offer son services in jurisdictions where online wagering is prohibited by statute. If we detect access from a prohibited jurisdiction, we may suspend your account and your data handling changes. Our servers may sit outside your jurisdiction — this means your data may be processed in regions with different privacy standards than your home country. By using son, you acknowledge this cross-border data transfer.

This privacy policy is governed by the law of the jurisdiction in which son is registered. We update this policy periodically; continued use of son after an update means you accept the revised policy. If you do not agree with our data practices, you can close your account at any time.