st7889 Privacy Policy

This Privacy Policy ("Policy") describes how st7889 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "Member", "User") who visit, register on, or otherwise interact with the st7889 platform at https://st7889.net.

st7889 operates as an internationally licensed online gaming platform serving members primarily located in Indonesia. In providing our services — which include sports betting, live casino, slot games, baccarat, and mahjong — we necessarily process personal data to verify identities, process financial transactions, prevent fraud, and deliver a safe, compliant gaming environment.

This Policy applies to all personal data processed in connection with your use of st7889, regardless of the device or channel through which you access the platform. It should be read alongside our Terms & Conditions, which govern the overall agreement between you and st7889.

By registering an account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood how st7889 handles your personal data as described herein.

st7889 collects personal data across several categories. The specific data points collected depend on how you interact with the platform.

st7889 does not collect data that is not necessary for the purposes stated above. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data, unless specifically required by applicable regulation.

st7889 collects personal data through the following methods:

• Direct provision by you: When you complete the registration form, undergo KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer, you directly provide personal data to st7889.
• Automated collection: When you access the st7889 platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity. This collection occurs through server logs, cookies, and similar tracking technologies (see Section 7).
• Payment processors and banks: When you make a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment provider shares transaction confirmation data with st7889 to enable us to credit or debit your account.
• KYC and identity verification providers: st7889 may use third-party identity verification services to process KYC documents. These providers return a verification status and extracted identity data to st7889; they do not retain your documents beyond the period necessary to complete verification.
• Fraud prevention and security providers: st7889 works with third-party security services that analyse transactional and behavioural data to identify fraudulent or suspicious activity. These providers may supply additional data points derived from their analysis.

st7889 uses the personal data we collect for the following purposes:

• Account creation and management: Processing your registration, maintaining your account, enabling login, and managing account settings and preferences.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by our licensing and anti-money laundering (AML) obligations.
• Payment processing: Receiving deposits and processing withdrawal requests to your verified Indonesian bank account or e-wallet. All financial transactions are denominated in Indonesian Rupiah (IDR).
• Service delivery: Providing access to sports betting, live casino, slot games, baccarat, mahjong, and all other platform features you use as a member.
• Fraud and security monitoring: Detecting and preventing unauthorised access, money laundering, bonus abuse, collusion, and other activities that violate our Terms & Conditions or applicable law.
• Responsible gaming: Monitoring gaming activity patterns to identify potential indicators of problem gambling and, where appropriate, reaching out to affected members or applying account-level responsible gaming controls.
• Customer support: Responding to enquiries, resolving complaints, and handling account disputes using your account records and communication history.
• Regulatory compliance: Meeting the reporting, record-keeping, and audit obligations imposed by our international gaming licence and applicable financial regulations.
• Platform improvement: Analysing aggregated, anonymised usage data to identify platform performance issues, improve user experience, and develop new features.
• Promotional communications: Sending you information about bonuses, promotions, and offers that may be relevant to your activity on st7889, where you have not opted out of receiving such communications.

st7889 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where such processing is required for fraud prevention or regulatory compliance. In those cases, you have the right to request human review of any decision that materially affects your account.

st7889 processes your personal data on the following legal grounds:

• Contractual necessity: The majority of data processing at st7889 is necessary to perform our contract with you — the account agreement established when you register. Without processing your identity, financial, and account data, we cannot provide the gaming services you have signed up to receive.
• Legal obligation: As an internationally licensed gaming operator, st7889 is subject to AML, KYC, and financial record-keeping obligations. Processing certain categories of your data — particularly identity and transaction records — is mandatory under these regulatory requirements regardless of your consent.
• Legitimate interests: st7889 processes technical and security data on the basis of legitimate interests, specifically the interest in protecting the platform, its members, and third parties from fraud, account compromise, and abuse. These interests are balanced against your privacy rights, and we limit such processing to what is necessary for the security purpose.
• Consent: Where we send you marketing communications about promotions, bonuses, or seasonal offers, we rely on your consent. You may withdraw consent for marketing communications at any time by contacting our support team or using the opt-out mechanism in any marketing email you receive from us.

st7889 may share your personal data with the following categories of recipients:

• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transactional data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• KYC and identity verification services: Third-party verification providers receive your identity documents and return a verification result to st7889. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
• Game content studios: Studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Microgaming may receive limited session and account data necessary to deliver their game content, record wagers, and return results. Studios do not receive payment account details or KYC documents.
• Fraud prevention and security providers: Specialist security services may receive technical and transactional data to perform risk scoring and fraud detection analysis on behalf of st7889.
• Regulatory and law enforcement authorities: st7889 is required to disclose member data to competent authorities upon receipt of a lawful request, court order, or where disclosure is required to comply with our licensing conditions. We will notify affected members of such disclosures where legally permitted to do so.
• Professional advisors: Legal, audit, and compliance advisors who assist st7889 in meeting its regulatory obligations may access member data under strict confidentiality agreements.

All third-party service providers who process personal data on behalf of st7889 are subject to data processing agreements that require them to maintain appropriate technical and organisational security measures and to process data only for the purposes authorised by st7889.

st7889 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve platform performance. The following categories of cookies are used:

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies will impair your ability to use the st7889 platform, including logging in and completing financial transactions. Disabling performance or personalisation cookies will not affect core platform functionality.

st7889 does not use third-party advertising cookies or tracking pixels for the purpose of targeting you with advertisements on external websites.

st7889 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in compliance with our AML and licensing record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial regulatory retention requirements.
• KYC documents: Retained for five (5) years from the date of verification, or from the date of account closure, whichever is later. After this period, documents are securely deleted.
• Support communications: Retained for two (2) years from the date of each interaction, to support dispute resolution and quality assurance.
• Technical and log data: Retained for up to twelve (12) months, after which it is anonymised or deleted. Security incident logs may be retained longer where required for investigation purposes.
• Marketing consent records: Retained for the duration of the consent period, plus one (1) year, to demonstrate compliance with consent requirements.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data set does not permit identification of any individual and is no longer subject to this Policy.

st7889 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the st7889 platform is encrypted using 256-bit TLS — the same standard used by international banks and financial institutions.
• Encrypted data storage: Sensitive data fields — including passwords (hashed with industry-standard algorithms), financial account details, and KYC document references — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within st7889's systems is restricted on a strict need-to-know basis. Staff members may only access data necessary for their specific role. All access is logged and regularly audited.
• Intrusion detection and monitoring: st7889 operates continuous automated monitoring for security anomalies, including unusual login patterns, abnormal transaction volumes, and potential data exfiltration attempts.
• Penetration testing: The st7889 platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All st7889 personnel with access to member data receive regular data protection and security awareness training.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and interests, st7889 will notify you promptly and take immediate steps to contain and investigate the incident.

You are responsible for maintaining the security of your own account credentials. If you suspect that your st7889 account has been accessed without your authorisation, contact our support team immediately via the platform's live chat.

As a member of st7889, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link) or via the in-platform live chat.

st7889 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, notifying you of the extension within the initial 30-day window. Requests that are manifestly unfounded or excessive may be refused, with written reasons provided.

st7889 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes a mandatory date-of-birth field, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If st7889 discovers that an account has been opened by an individual under the age of 21, or that a minor has in any way accessed the platform, we will immediately close the account, return any deposited funds to the payment source, and delete all personal data associated with that account. Any wagers placed during the period of underage use will be voided.

Parents and guardians who believe a minor has accessed or registered on st7889 should contact our support team immediately. We will treat such reports as urgent and act on them within 24 hours.

st7889 is an internationally licensed platform. Some of the service providers and game studios we work with operate servers and data processing facilities outside Indonesia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Indonesia.

When personal data is transferred outside Indonesia, st7889 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Indonesia. These safeguards include:

• Contractual data protection clauses incorporated into our agreements with all third-party processors outside Indonesia.
• Transfer only to processors who have demonstrated compliance with recognised data protection standards relevant to their jurisdiction.
• Minimisation of the personal data transferred to the minimum necessary for the specific processing purpose.

By using the st7889 platform, you acknowledge that your data may be transferred and processed internationally as described in this section, subject to the safeguards above.

st7889 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform operations. When a material change is made — meaning a change that significantly affects how we collect, use, or share your personal data — we will notify you by posting a prominent notice on the st7889 platform and, where practicable, sending an email notification to the address registered to your account.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the st7889 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If a proposed change would require us to use your personal data in a materially different way and we are relying on your consent as the legal basis for that use, we will seek fresh consent before the change takes effect. You are free to withdraw consent and close your account if you do not accept the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how st7889 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from within the st7889 platform. Indonesian-speaking agents are available on every shift. Live chat is the fastest channel for urgent data security concerns.
• Email: [email protected] (plain text — not a clickable link). Target response time: within 24 hours for standard queries; within 4 hours for urgent security matters.

When submitting a data rights request, please include your registered username and, where possible, the specific data or processing activity your request relates to. We may need to verify your identity before processing a request, to ensure we are disclosing or modifying data belonging to you and not a third party.

If you are not satisfied with how st7889 has handled a data concern after contacting us, you have the right to escalate your complaint to the data protection authority in the jurisdiction in which st7889 holds its gaming licence, or to seek appropriate legal remedies in a court of competent jurisdiction.