Privacy Policy — sr777

Introduction

sr777 ("the Company," "we," "us," or "our") operates the online gambling platform accessible at https://sr777.lat ("the Platform"). We are committed to protecting and respecting the privacy of all individuals who use our Platform, including players registering from cities across Indonesia such as Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and Makassar.

This Privacy Policy sets out the basis on which we collect, process, store, share, and protect personal data obtained from users of the sr777 Platform. It applies to all data collected through the Platform, our customer support channels, and any other interaction you have with sr777 as an organization.

This Privacy Policy should be read alongside the sr777 Terms & Conditions, which govern your use of the Platform generally. By registering an Account on sr777 or continuing to use the Platform after the publication of this Policy, you acknowledge that you have read and understood its contents and agree to the processing of your personal data as described herein.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile number, bank account details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or erasure.
• "Data Controller" means sr777, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of sr777 pursuant to a written data processing agreement.
• "Data Subject" means the individual to whom Personal Data relates — in the context of this Policy, a registered or prospective sr777 Player.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity verification process conducted by sr777 to confirm the identity, age, and eligibility of Players.
• "Cookies" means small text files placed on a user's device by the Platform to facilitate session management, analytics, and personalization.

Data We Collect

sr777 collects only the Personal Data that is necessary for the specific purposes described in this Policy. The categories of Personal Data we collect are as follows:

3.1 Registration Data

When you create an sr777 Account, we collect: your chosen username, your email address, your Indonesian mobile phone number, your date of birth (to verify you are 21 or older), and your chosen password (stored in irreversibly hashed form — we never store plain-text passwords).

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and to verify player eligibility, we collect: copies of government-issued photo identification (e.g., Indonesian National ID Card / KTP, passport, or driver's license), proof of address documents (e.g., bank statements or utility bills issued within the preceding three months), and, where required, selfie photographs taken alongside identification documents.

3.3 Financial Data

To process deposits and withdrawals in IDR, we collect: the names of your registered payment accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, GoPay, DANA, ShopeePay, or LinkAja), your account numbers or registered e-wallet identifiers, and transaction records including deposit amounts, withdrawal amounts, dates, and reference numbers. We do not store full card numbers or CVV codes.

3.4 Technical and Usage Data

When you access the sr777 Platform, our servers and analytics systems automatically collect: your IP address, browser type and version, operating system, device type and model, screen resolution, referring URL, pages visited, time spent on each page, game sessions initiated, bet history, and session timestamps recorded in WIB (Western Indonesia Time, UTC+7).

3.5 Communications Data

When you contact sr777 customer support, we retain records of those communications, including the content of live chat transcripts, email correspondence, and any attachments you provide. This data is retained to resolve disputes, improve service quality, and maintain an accurate record of commitments made by either party.

3.6 Marketing Preference Data

If you opt in to receive promotional communications from sr777, we record your preference, the date consent was given, and the channel through which you subscribed. We also record opt-out requests so that we can suppress your details from future marketing activity.

How We Collect Data

sr777 collects Personal Data through the following means:

• Direct input: Information you provide voluntarily when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, completing a responsible gaming self-assessment, or contacting customer support.
• Automated technical collection: Server logs, session tracking, and analytics tools that record device and usage data when you access the Platform.
• Cookies and similar technologies: As described in Section 11, the Platform uses cookies to maintain session continuity, prevent fraud, and analyze aggregate traffic patterns.
• Third-party payment processors: When a deposit or withdrawal is initiated, our payment gateway partners may share transaction confirmation data with sr777 to reconcile your Account balance.
• Identity verification services: For KYC purposes, sr777 may use third-party document verification service providers. These providers confirm the authenticity of submitted identity documents and return a pass/fail result along with extracted data fields.
• Fraud prevention databases: sr777 may cross-reference submitted Personal Data against industry fraud-prevention databases to identify accounts associated with known fraudulent activity, multi-accounting, or money laundering.

Purposes of Processing

sr777 processes your Personal Data for the following purposes, each of which is tied to a specific legal basis described in Section 6:

• Account creation and management: Creating and maintaining your sr777 Account, authenticating your identity at login, and delivering the Platform's gambling services to you.
• Age and identity verification: Confirming that you are at least 21 years of age and a genuine individual, as required by our responsible gaming obligations and international licensing terms.
• Payment processing: Processing IDR deposits from and withdrawals to your registered Indonesian bank account or e-wallet, reconciling transaction records, and resolving payment disputes.
• Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited activities.
• Responsible gaming: Monitoring gambling patterns that may indicate problem gambling behavior, administering deposit limits and self-exclusion requests, and fulfilling the Company's duty of care to its players.
• Customer support: Responding to your support queries, resolving complaints, and maintaining records of communications for quality assurance and dispute resolution.
• Platform improvement: Analyzing aggregated usage data to improve game selection, user interface design, payment flow efficiency, and overall Platform performance.
• Marketing (with consent only): Sending promotional offers, bonus announcements, seasonal promotions (e.g., Idul Fitri or Ramadhan campaigns), and new product updates to Players who have explicitly opted in to receive such communications.
• Legal compliance: Fulfilling obligations under Applicable Law, including responding to lawful requests from competent authorities and maintaining legally required records.

Legal Basis for Processing

For each processing activity described in Section 5, sr777 relies on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between sr777 and the Player (i.e., the Terms & Conditions) — including Account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML verification, age verification, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of sr777's legitimate business interests, provided those interests do not override the fundamental rights of the Data Subject — including fraud prevention, Platform security, and aggregated analytics for service improvement.
• Consent: Processing activities for which you have given explicit, freely withdrawable consent — specifically, marketing communications. You may withdraw marketing consent at any time by contacting [email protected] with the subject line "Unsubscribe."

Data Sharing

sr777 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances. We may, however, share Personal Data with the following categories of recipients for the purposes described in this Policy:

7.1 Payment Service Providers

To process IDR transactions through BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, GoPay, DANA, ShopeePay, and LinkAja, sr777 shares necessary transaction data (account name, account number, transfer amount, reference number) with the relevant payment gateway or bank. These providers act as Data Processors under written agreements that prohibit them from using the data for any purpose other than processing your specific transaction.

7.2 KYC and Identity Verification Providers

sr777 may share identity document images and basic registration data with contracted third-party KYC service providers for the purpose of document authentication. These providers are bound by strict data processing agreements and are prohibited from retaining your documents beyond the period necessary to complete verification.

7.3 Fraud Prevention and AML Service Providers

sr777 participates in industry fraud-prevention programs and may share anonymized or pseudonymized risk-signal data with contracted AML screening and fraud detection providers. This sharing is conducted under legitimate-interests and legal-obligation legal bases.

7.4 Technology and Infrastructure Providers

sr777's Platform is hosted on cloud infrastructure and delivered via content distribution networks. Our hosting and CDN providers may technically process data stored on their servers, but do so solely as Data Processors under binding agreements that strictly prohibit any independent use of that data.

7.5 Competent Authorities

sr777 will disclose Personal Data to law enforcement agencies, regulators, or other competent authorities where required to do so by Applicable Law or valid legal process. In all cases, sr777 will share only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected Player of the disclosure.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, Personal Data held by sr777 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

International Data Transfers

As an internationally operated platform serving Indonesian players, sr777's infrastructure, personnel, and third-party service providers may be located in jurisdictions outside Indonesia. When Personal Data is transferred across international borders, sr777 ensures that appropriate safeguards are in place to maintain a standard of protection consistent with this Privacy Policy, including:

• Binding contractual clauses in all data processing agreements with third-party providers.
• Conducting due-diligence assessments of the data protection practices of each recipient jurisdiction before initiating any cross-border transfer.
• Applying end-to-end encryption to all data transmitted across international networks.
• Restricting international transfers to only those categories of Personal Data strictly necessary for the contracted processing activity.

Data Retention

sr777 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Applicable Law, whichever is longer. The specific retention periods applicable to each data category are set out in the table in Section 3. The following general principles apply:

• Active Accounts: All Personal Data associated with an active sr777 Account is retained for the duration of the Account's existence.
• Closed Accounts: Following Account closure, financial records and KYC documents are retained for a minimum of seven (7) years to satisfy AML record-keeping obligations. Registration data is retained for a minimum of five (5) years.
• Technical Data: Server logs and IP address records are retained for thirteen (13) months and then automatically purged, unless a specific security investigation requires extended retention.
• Marketing Data: Opt-in records are retained for as long as you remain subscribed. Following an opt-out request, the opt-out record itself is retained for two (2) years as evidence of your withdrawal of consent.
• Legal Hold: Where Personal Data is subject to an active legal claim, regulatory inquiry, or dispute resolution process, retention may be extended beyond the standard periods until the matter is fully resolved.

Once the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymized in accordance with sr777's internal data destruction procedures.

Security Measures

sr777 employs a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• TLS/SSL Encryption: All data transmitted between your device and the sr777 Platform is encrypted using industry-standard TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms an active, valid SSL certificate.
• Password Hashing: Player passwords are stored using a strong, salted cryptographic hashing algorithm. sr777 staff cannot view or recover your plain-text password under any circumstances.
• Access Controls: Access to systems holding Personal Data is restricted to authorized personnel on a strict need-to-know basis. Access permissions are reviewed quarterly and revoked immediately upon staff departure or role change.
• Two-Factor Authentication (2FA): 2FA is available to all Players and is mandatory for all sr777 internal systems used to access Personal Data.
• Penetration Testing: The sr777 Platform undergoes regular independent security penetration testing. Identified vulnerabilities are remediated according to a risk-tiered remediation schedule.
• Data Minimization: sr777 systems are designed to collect and store only the minimum Personal Data necessary for each processing purpose, reducing the volume of data exposed in any potential security incident.
• Incident Response: sr777 maintains a documented security incident response plan. In the event of a data breach that poses a risk to Player rights, affected Players will be notified promptly and provided with guidance on protective action.

Cookies & Tracking Technologies

The sr777 Platform uses cookies and similar tracking technologies to deliver its core functionality and to understand how players interact with the site. The categories of cookies used are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly and cannot be disabled without breaking core functionality. They include session authentication tokens that keep you logged in during a game session, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure your requests are consistently routed to the correct server.

11.2 Analytics Cookies

sr777 uses privacy-respecting analytics tools to collect aggregated, anonymized information about how players navigate the Platform — including which pages are visited most frequently, how long users spend in different game categories (slots, live casino, sportsbook), and where users drop off during the registration flow. This data is used exclusively for Platform improvement and is never used to build individual behavioral profiles for advertising purposes.

11.3 Functional Cookies

Functional cookies remember your Platform preferences between sessions, including your preferred display settings, previously selected payment method, and responsible gaming limit configurations. Disabling these cookies will not prevent Platform access but will require you to re-enter these preferences at each visit.

11.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Instructions for doing so are available in your browser's help documentation. Note that blocking strictly necessary cookies will prevent you from logging in to your sr777 Account and accessing the Platform's gambling services.

Your Rights

As a Data Subject, you hold the following rights with respect to your Personal Data held by sr777. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request." We will respond within thirty (30) days of receiving a valid request.

Minors

The sr777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Registration on the Platform requires confirmation that the applicant is at least 21 years of age, and this confirmation is verified through our KYC process.

If sr777 discovers or has reasonable grounds to believe that a registered Account belongs to an individual under 21 years of age, the Account will be immediately suspended, all balances (including any winnings) will be frozen pending investigation, and all Personal Data associated with the Account will be securely deleted in accordance with applicable child data protection requirements. Parents or guardians who believe a minor has registered on the sr777 Platform should contact [email protected] immediately.

Third-Party Links

The sr777 Platform may contain references to third-party payment providers, game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), and sports data providers. Any links to third-party websites or services are provided for informational purposes only. sr777 has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party services.

When you interact with a third-party payment provider (e.g., entering your BCA or OVO credentials on their own authentication interface), you are subject to that provider's privacy policy, which is separate from this document. We encourage you to review the privacy policies of any third-party services you use in connection with your sr777 Account.

Policy Amendments

sr777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. When material changes are made, we will update the "Last Updated" date displayed at the top of this page. Where reasonably practicable, we will also notify registered Players of significant changes via email or in-Platform notification at least seven (7) days before the revised Policy takes effect.

Your continued use of the sr777 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes, you may close your Account in accordance with the sr777 Terms & Conditions and request deletion of your Personal Data as described in Section 12 of this Policy.

The current version of this Privacy Policy is always accessible at https://sr777.lat/privacy-policy. We recommend reviewing this page periodically to remain informed of how sr777 manages your personal information.

Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way sr777 handles your Personal Data, you may contact our dedicated privacy team through the following channel:

We take all privacy-related inquiries seriously and will investigate every complaint thoroughly. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.