Privacy Policy — sr789

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by sr789 ("we," "us," or "our"), the operator of the online casino and sportsbook platform accessible at https://sr789.net (the "Platform"). This Policy applies to all registered players, visitors, and any other individuals whose personal data is processed in connection with their use of sr789.

By registering an account, accessing the Platform, or otherwise interacting with sr789's services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read in conjunction with sr789's Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement governing your use of the Platform.

sr789 collects personal data through several distinct channels and for clearly defined purposes. We apply the principle of data minimization — collecting only the data that is strictly necessary to deliver our services, fulfill our legal obligations, and protect the integrity of the Platform.

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, or health information beyond what may be incidentally disclosed in responsible gaming communications. If such data is provided, it will be treated with the highest level of protection and used solely for the purpose for which it was shared.

sr789 processes your personal data only for the purposes set out below, each of which is grounded in a lawful basis for processing:

• Account Management. To create, maintain, and administer your player account, verify your identity, and ensure continuity of your gaming experience across sessions.
• Transaction Processing. To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records associated with your account.
• KYC and Fraud Prevention. To verify that you meet sr789's eligibility requirements (including the minimum age of 21 years and Indonesian residency), to detect and prevent fraudulent activity, money laundering, and unauthorized account access, and to fulfill our obligations under applicable anti-money laundering (AML) standards.
• Regulatory Compliance. To maintain records required by our licensing authority and to respond to lawful requests from regulatory bodies or law enforcement agencies where such disclosure is legally required.
• Customer Support. To respond to your queries, resolve disputes, and communicate service updates, including responding to responsible gaming requests submitted through live chat, email, or WhatsApp.
• Platform Improvement. To analyze anonymized and aggregated usage data to improve the performance, design, and game selection of the sr789 Platform, and to identify and resolve technical issues.
• Responsible Gaming Monitoring. To identify indicators of problem gambling behavior and to intervene proactively in accordance with our Responsible Gaming policy, including applying account restrictions where necessary.
• Marketing Communications. To send you promotional offers, bonus notifications, and seasonal promotions — including those aligned with Indonesian cultural events such as Idul Fitri, Ramadan, Chinese New Year (Imlek), and Indonesian Independence Day (17 August) — where you have provided your consent to receive such communications. You may withdraw consent at any time by contacting support or using the unsubscribe link in any marketing email.

sr789 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary:

• Game Providers. Our platform hosts games from licensed providers including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe. These providers may process technical and session data necessary to operate their respective game environments. They are contractually bound to use such data solely for game delivery purposes and in accordance with data protection standards no less stringent than those described in this Policy.
• Payment Processors. To facilitate deposits and withdrawals, we share the minimum financial data required with Indonesian banking partners and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities operate under their own privacy policies and applicable Indonesian financial regulations.
• Identity Verification Services. We may engage third-party KYC verification providers to authenticate player identities. These providers receive only the data necessary to perform the verification and are prohibited from retaining or using it for any other purpose.
• Fraud Detection and AML Services. We may share transaction data and account activity with specialist fraud detection and anti-money laundering service providers for the purpose of risk assessment and financial crime prevention.
• Legal and Regulatory Authorities. We will disclose personal data to government agencies, regulatory bodies, or law enforcement authorities where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of sr789, its players, or the public.
• Business Transfers. In the event of a merger, acquisition, or transfer of all or substantially all of sr789's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via the Platform or email in advance of any such transfer, and the acquiring entity will be required to honor the terms of this Privacy Policy.

sr789 uses cookies and similar browser-based technologies to operate the Platform efficiently, remember your preferences, maintain your session, and gather anonymized performance analytics. The following categories of cookies are used:

sr789 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site behavioral tracking technology. You may configure your browser to refuse or delete cookies at any time; however, disabling strictly necessary cookies may prevent core Platform functionality — including login, deposit, and game access — from operating correctly.

sr789 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or to comply with applicable legal, regulatory, and contractual obligations. Our standard retention periods are as follows:

• Active Account Data. Retained for the full duration of your account's existence and for a minimum of 5 years following account closure, in accordance with AML and financial record-keeping requirements.
• KYC Documentation. Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, in compliance with international AML standards.
• Transaction Records. Retained for a minimum of 5 years following the date of each transaction, consistent with financial audit and regulatory requirements.
• Customer Support Communications. Retained for up to 3 years from the date of the last interaction, unless a longer period is required due to an ongoing dispute or legal matter.
• Marketing Consent Records. Retained for the duration of your account's existence and for 3 years following account closure, to demonstrate compliance with consent requirements.
• Anonymized Analytics Data. May be retained indefinitely in anonymized, aggregated form that cannot be used to identify individual players.

Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing systems and scheduled for deletion at the earliest practicable opportunity.

sr789 implements a layered security architecture to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption. All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols, preventing interception in transit.
• Encrypted Data Storage. Sensitive data fields — including passwords (stored as salted hashes), payment details, and KYC documents — are encrypted at rest using AES-256 encryption.
• Access Controls. Access to personal data within sr789's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged for audit purposes.
• Intrusion Detection. Our infrastructure is monitored continuously for unauthorized access attempts, unusual data access patterns, and other indicators of compromise.
• Regular Security Audits. sr789 engages independent security professionals to conduct periodic penetration tests and vulnerability assessments of the Platform.
• Incident Response. In the event of a personal data breach that poses a risk to your rights or interests, sr789 will notify affected players and relevant authorities within the timeframes required by applicable data protection standards.

As a player on sr789, you hold a defined set of rights with respect to your personal data. To exercise any of the rights described below, please contact our support team via live chat, email at [email protected], or WhatsApp at +62 812 3456 7890. We will respond to all data rights requests within 30 days of receipt.

• Right of Access. You have the right to request a copy of the personal data sr789 holds about you, along with information about how it is being processed.
• Right to Rectification. If any personal data held by sr789 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through the Account Settings section of the Platform.
• Right to Erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been unlawfully processed. This right is subject to our legal obligation to retain certain data for AML, KYC, and regulatory purposes, as described in Section 6.
• Right to Restriction of Processing. You have the right to request that sr789 restricts the processing of your personal data in certain circumstances, including while the accuracy of the data is being contested or while a complaint is under review.
• Right to Data Portability. Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object. You have the right to object to processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sr789 is strictly an adults-only platform. Access is limited to individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21 under any circumstances.

As part of our registration and KYC processes, sr789 implements age verification measures designed to confirm that all players meet the minimum age requirement before they are permitted to deposit funds or participate in any game. These measures include date-of-birth collection at registration and documentary identity verification on request.

If sr789 discovers or is notified that it has collected personal data from an individual under the age of 21, we will immediately close the associated account, return any deposits made (where technically feasible and subject to applicable law), and securely delete all personal data associated with the underage user.

Parents and guardians who believe a minor may have registered on sr789 are encouraged to contact our support team immediately at [email protected]. We treat all such reports as urgent and will investigate and respond within 24 hours.

sr789 operates as an internationally licensed platform, and some of the service providers and infrastructure partners we engage — including game providers such as Pragmatic Play, Evolution Gaming, and Spribe — may be located in jurisdictions outside Indonesia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Indonesia.

Where such international transfers occur, sr789 ensures that adequate safeguards are in place to protect your personal data to a standard that is at minimum equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses requiring the recipient to process personal data in accordance with internationally recognized data protection standards.
• Ensuring that recipient entities operate in jurisdictions with data protection frameworks recognized as providing an adequate level of protection.
• Implementing technical measures, including encryption of data in transit and at rest, to protect data regardless of the jurisdiction in which it is processed.

By using the sr789 Platform, you acknowledge and consent to the transfer of your personal data to third-party service providers located outside Indonesia, subject to the safeguards described above.

sr789 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The "Last Updated" date at the top of this page will be revised to reflect the date on which material changes take effect.

Where changes are material — meaning they meaningfully affect your rights or the way we process your personal data — sr789 will notify registered players via email or a prominent notice on the Platform at least 7 days before the changes come into effect. Non-material clarifications or corrections may be implemented without prior notice.

Your continued use of the sr789 Platform following notification of a material change to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with a change, you should cease using the Platform and contact our support team to arrange account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact sr789's support team through any of the following channels. All privacy-related inquiries are handled with priority by our dedicated data protection team.

• Live Chat: Available 24/7 directly from the Platform. Indonesian-speaking agents are available at all hours.
• Email: [email protected] — Response within 24 hours for general queries; within 72 hours for formal data rights requests.
• WhatsApp: +62 812 3456 7890 — Available 07:00–23:00 WIB.

When submitting a data rights request, please include your registered account username and email address so that we can verify your identity and locate your data efficiently. We will not process data rights requests submitted anonymously, as we cannot verify that the requester is the account holder.

For questions about our responsible gaming data practices specifically — including how we process self-exclusion requests and deposit limit configurations — please also refer to our Responsible Gaming page.