Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by st7899 ("we", "us", "our", or the "Company") and applies to all individuals who visit, register on, or otherwise interact with the st7899 platform accessible at https://st7899.cam (the "Platform").

We are committed to processing personal data in a lawful, fair, and transparent manner. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using our Platform and sharing your information with us.

By registering an account or continuing to use the Platform after this Policy is published, you acknowledge that you have read, understood, and accepted the practices described herein. This Policy should be read alongside our Terms & Conditions, which together form the full legal framework governing your use of st7899.

2 Definitions

The following terms, as used in this Policy, carry the meanings set out below:

3 Data We Collect

st7899 collects personal data across three broad categories, each described below:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (collected to enforce our strict 21+ age requirement).
• Indonesian national identity card number (KTP) or passport number, provided during KYC verification.
• Residential address, including city and postal code (e.g., Jakarta, Surabaya, Bandung, Medan, Bali).
• Email address and mobile phone number used to contact you and secure your account.
• Username and encrypted password (passwords are stored as one-way hashed values and are never visible to our staff).

3.2 Financial & Transaction Data

• Bank account details sufficient to process deposits and withdrawals, including the bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account holder name, and account number.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja where used as a payment method.
• Transaction history: deposit amounts, withdrawal requests, bonus credits, wagering activity, and balance movements — all denominated in Indonesian Rupiah (IDR).
• Source-of-funds declarations where requested as part of enhanced due diligence for high-value accounts.

3.3 Technical & Behavioral Data

• IP address and approximate geolocation at the time of login and during active sessions.
• Device type, operating system, browser type and version, and screen resolution.
• Session duration, pages visited, games played, bet history, and click-stream data collected to improve Platform performance and personalize your experience.
• Login timestamps, session tokens, and device fingerprint data used for fraud detection and account security.
• Customer support interaction records, including live chat transcripts and email correspondence, retained to resolve disputes and improve service quality.

4 How We Collect Data

st7899 collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey.
• Automatically: Through cookies, web beacons, session tracking scripts, and server log files that record your interactions with the Platform each time you access it.
• From third-party verification services: Identity verification providers and credit-reference agencies engaged to confirm the authenticity of documents submitted during KYC, and to screen against sanctions or politically exposed person (PEP) lists.
• From payment processors: Transaction confirmation data returned by our banking and e-wallet partners, including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, to reconcile your account balance.
• From fraud-prevention partners: Risk signals shared by authorized third-party fraud-detection networks to protect the Platform and its users from unauthorized activity.

5 Purpose of Processing

We process your personal data only for specific, documented purposes. The table below maps each data category to its primary processing purpose:

st7899 does not use your personal data for automated individual decision-making that produces significant legal effects without human oversight. Where profiling is used (for example, to identify responsible gaming risk patterns), it is reviewed by our compliance team before any action is taken on your account.

6 Legal Basis for Processing

st7899 relies on the following legal bases to process your personal data lawfully:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and KYC verification — is carried out on the basis that it is necessary to deliver the service you have contracted for.
• Legal obligation: Certain processing activities, including AML screening, sanctions checks, and retention of transaction records, are required by applicable laws and regulations and are carried out to keep st7899 compliant with those obligations.
• Legitimate interests: Technical and behavioral data is processed for fraud prevention, Platform security, and product improvement on the basis of our legitimate interests as a Platform operator, provided those interests are not overridden by your fundamental rights.
• Consent: Where we send you marketing communications about st7899 promotions, new game launches, or seasonal offers (such as those tied to Idul Fitri or Indonesian Independence Day), we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time by contacting our support team.

7 Data Sharing & Disclosure

st7899 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below:

• Payment processors and banking partners: We share the minimum necessary financial data with BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other authorized payment partners to execute your deposit and withdrawal instructions.
• Identity verification providers: KYC document data is transmitted to authorized identity verification and sanctions-screening services operating under binding data-processing agreements with st7899.
• Game content providers: Where technically necessary, anonymized or pseudonymized session data may be shared with licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe) to facilitate fair game delivery and dispute resolution.
• Fraud prevention networks: Risk-signal data may be shared with authorized fraud-prevention partners to protect the Platform and the wider financial ecosystem from criminal activity.
• Legal and regulatory authorities: We will disclose personal data to competent law enforcement, judicial, or regulatory bodies where required by law, court order, or lawful governmental request, and to the extent strictly necessary to comply with that requirement.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the successor entity, subject to the same or stronger privacy protections as set out in this Policy.

8 Cookies & Tracking Technologies

st7899 uses cookies and similar tracking technologies to deliver a functional, secure, and personalized Platform experience. The categories of cookies we deploy are as follows:

Most web browsers allow you to control cookie acceptance through their settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytical cookies will not prevent access but may reduce the quality of your experience.

9 Data Retention

st7899 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your active account relationship with st7899, plus a minimum of five (5) years following account closure to satisfy AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by a specific legal or regulatory obligation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support correspondence: Retained for three (3) years from the date of the last interaction, unless the record is relevant to an ongoing dispute or investigation.
• Technical and behavioral logs: Retained for up to twelve (12) months from collection, after which they are aggregated, anonymized, or deleted.
• Marketing consent records: Retained for the period of active consent, and for three (3) years after consent is withdrawn, to demonstrate compliance.

When personal data is no longer required, st7899 will securely delete or irreversibly anonymize it in accordance with our internal data destruction procedures.

10 Security Measures

st7899 implements a layered set of technical and organizational security controls designed to protect your personal data against unauthorized access, accidental loss, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that your login credentials, payment details, and personal information are never exposed in transit.
• Password hashing: Account passwords are stored exclusively as salted, one-way cryptographic hashes. No st7899 employee has access to your plaintext password at any time.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access privileges undergo background screening and regular security awareness training.
• Two-factor authentication (2FA): Available to all registered members and strongly recommended as an additional layer of account security, particularly before processing any withdrawal.
• Intrusion detection and monitoring: Our infrastructure is monitored around the clock for anomalous activity. Automated alerts trigger immediate investigation of suspicious access patterns.
• Penetration testing: The Platform undergoes periodic security assessments conducted by independent third-party cybersecurity specialists.

11 Your Rights

As a data subject, you hold meaningful rights over the personal data st7899 holds about you. These rights are described below, along with guidance on how to exercise them:

• Right of Access: You may request a copy of all personal data st7899 holds about you, along with information about how it is processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update certain information directly through your Account profile page.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that certain data must be retained to meet our legal obligations — we will explain any such limitations when responding to your request.
• Right to Restriction: You may request that we temporarily suspend active processing of your data — for example, while an accuracy dispute is being resolved — without requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on legitimate interests, including any profiling carried out for marketing or responsible gaming monitoring purposes. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection team via the email address set out in Section 15 of this Policy. We may ask you to verify your identity before processing your request. All requests are handled free of charge unless they are manifestly unfounded or excessive.

12 Minors

The st7899 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process incorporates age-verification steps specifically designed to identify and reject applications from underage users.

If you are a parent or guardian and believe that a minor in your care has accessed the Platform or provided us with personal data without your consent, please contact us immediately using the details in Section 15. Upon receiving a credible notification, we will promptly investigate, close any such account, and securely delete the associated personal data from our systems.

13 Third-Party Links

The st7899 Platform does not contain links to external third-party websites. All navigation within the Platform remains within the st7899 domain. However, some game content delivered by licensed studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe) is rendered via embedded frames or APIs that originate from those providers' own infrastructure.

st7899 is not responsible for the privacy practices of game content providers operating their own backend systems. We recommend reviewing the privacy documentation of any third-party technology provider whose infrastructure you may interact with during gameplay. Our contractual arrangements with these providers require them to implement appropriate data-protection standards consistent with our own obligations.

14 Policy Changes

st7899 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, legal requirements, or regulatory developments. When we make material changes, we will notify registered members by email and by posting a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how st7899 protects your information. Your continued use of the Platform after a revised Policy takes effect constitutes your acknowledgment of the changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way st7899 processes your personal data, please reach out through any of the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. This is the fastest way to reach an Indonesian-speaking support agent.
• WhatsApp & Phone: Contact details are displayed in your Account dashboard after login.
• Email: [email protected] — please allow up to 24 hours for a response. For formal data-subject requests, please include "Data Privacy Request" in the subject line so your message is routed to our Data Protection team promptly.

We are committed to resolving all privacy-related inquiries in a timely, transparent, and respectful manner. If you are not satisfied with our response, you retain the right to escalate your concern to the competent data-protection supervisory authority in your jurisdiction.