Privacy Policy

This Privacy Policy ("Policy") sets out how st7889 ("the Company", "we", "us", "our") — the operator of the online betting and casino platform accessible at https://st7889.cam — collects, uses, discloses , stores, and protects the personal data of individuals ("you", "the Player") who access or use the Platform.

This Policy applies to all personal data collected through the Platform, whether submitted directly by you during registration, generated automatically through your use of the Platform, or obtained from third-party verification service providers.

By registering an account on the st7889 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and st7889.

st7889 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

The following definitions apply throughout this Privacy Policy:

st7889 collects personal data through several channels. The categories of data we collect are described in the table below:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless this is strictly necessary for responsible gaming compliance, and only with your explicit consent.

st7889 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, including verifying your identity and processing your registration on the Platform.
• Payment Processing: To facilitate deposits and withdrawals via your nominated bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to reconcile transaction records.
• KYC & Fraud Prevention: To verify your identity as required by applicable regulations, to detect and prevent fraudulent activity, money laundering, and other financial crimes, and to enforce our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our Indonesian-speaking support team (available during WIB business hours).
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the functionality, performance, and security of the Platform.
• Personalisation: To tailor content, promotions, and game recommendations to your preferences and betting history, where you have not opted out of such personalisation.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have provided explicit consent or where we have a legitimate interest to do so, and always subject to your right to opt out at any time.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling, to enforce self-exclusion requests and deposit limits, and to fulfil our duty of care obligations.

We will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or notifying you in advance.

st7889 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform the contract between you and st7889 — including account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations and KYC verification requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and improving our products and services — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications and optional personalisation features. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

st7889 does not sell, rent, or trade your personal data. We may share your data with third parties only in the circumstances described below:

• Payment Processors: We share financial data with our licensed payment processing partners solely to execute deposits and withdrawals. These partners are bound by strict data-processing agreements and may not use your data for their own purposes.
• KYC & Identity Verification Providers: We use licensed third-party identity verification services to process the documents you submit during KYC. These providers operate under contractual obligations that mirror our own data protection standards.
• Technology & Infrastructure Providers: Our cloud hosting, cybersecurity, and analytics partners may process certain technical and behavioural data as part of the services they provide to us. All such providers are vetted and subject to data-processing agreements.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate game servers that process transaction data related to bets placed on their games. These providers operate under separate licensing and data agreements.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to regulators, law enforcement agencies, courts, or other public authorities where required to do so by applicable law, court order, or regulatory instruction. We will disclose only the minimum information required.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of st7889's business assets, personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material changes to this Policy that result from it.

The st7889 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The types of cookies we use are described below:

You may adjust your browser settings to refuse or delete non-essential cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. We do not use third-party advertising cookies or retargeting pixels.

st7889 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, and in accordance with our legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identified or identifiable individual.

As a player on the st7889 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team with a clear description of your request. We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days.

st7889 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including financial records and KYC document copies;
• Role-based access controls that limit employee access to personal data strictly to those with a legitimate operational need;
• Multi-factor authentication for all administrative system access;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Automated intrusion detection and anomaly monitoring systems operating 24/7;
• Segregated network architecture to isolate sensitive data systems from general operational infrastructure;
• Formal data breach response procedures, including notification protocols and a dedicated incident response team.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, st7889 will notify affected players without undue delay and, where required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.

The st7889 Platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect or process personal data from any individual under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will delete that data immediately and permanently close any associated account. If you believe that a minor has registered on the Platform or has been able to access it using an adult's credentials, please notify our support team without delay so that we can take appropriate action.

Parents and guardians are encouraged to make use of publicly available parental control tools and filtering software to prevent minors from accessing online gambling platforms.

The st7889 Platform is operated and accessed primarily by players based in Indonesia. However, some of our third-party technology providers and data processors may process personal data in jurisdictions outside Indonesia. In such cases, st7889 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses (equivalent to Standard Contractual Clauses) incorporated into all data-processing agreements with international providers;
• Verification that recipient jurisdictions provide an adequate level of data protection or that alternative safeguards are in place;
• Encryption of data both in transit and at rest during any international transfer.

We will never transfer your personal data internationally in a manner that reduces the level of protection afforded to you under this Privacy Policy.

st7889 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will provide at least 7 days' advance notice via a prominent notice on the Platform and, where practicable, by email to your registered address.

The revision date displayed at the top of this page will be updated whenever the Policy changes. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not agree with the revised terms, you may close your Account and withdraw any remaining Balance prior to the effective date of the changes by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way st7889 handles your personal data, please contact our support team using the details below:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction, or to seek independent dispute resolution through a mechanism designated by our applicable licensing authority.

We take all privacy complaints seriously and are committed to resolving them fairly and transparently. st7889 will not penalise any player for exercising their privacy rights in good faith.