Privacy Policy

This Privacy Policy describes how sr866 ("we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of users ("you" or "your") who access or use the sr866 website located at sr866.cam and all associated services (collectively, the "Platform"). We are committed to handling your personal data responsibly and in accordance with applicable data protection principles and international best practices.

By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Account" means the personal gaming account created by a User on the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means sr866, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Third Party" means any person or entity other than you, sr866, and persons directly authorised by sr866 to process data under the Data Controller's instructions.
• "KYC" (Know Your Customer) means the identity-verification procedures we conduct to confirm the identity of Users, prevent fraud, and satisfy anti-money-laundering obligations.
• "Cookies" means small text files placed on your device when you visit the Platform, as described further in Section 8.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an Account, use our Services, or communicate with us, we may collect the following categories of Personal Data:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document (e.g., KTP, passport, or SIM).
• Contact Information: Email address, mobile telephone number, and residential address in Indonesia (including province, city, and postal code).
• Financial Information: Bank account details (account holder name, bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or Bank Permata, account number), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history on the Platform.
• Verification Documents: Photographs or scanned copies of government-issued identification and proof-of-address documents submitted during KYC verification.
• Account Credentials: Username, encrypted password, security questions and answers.
• Support Communications: Records of your interactions with our customer support team via live chat, WhatsApp, email, or Telegram, including content of messages and attachments.
• Preferences and Consent Records: Marketing preferences, responsible-gaming settings (deposit limits, session limits, self-exclusion elections), and records of consents provided.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages viewed, links clicked, games played, bets placed, session duration, timestamps, referring URLs, and navigation paths through the Platform.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location without your explicit consent.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar technologies as described in Section 8.

3. How We Collect Your Information

We collect Personal Data through the following channels:

• Directly from you during account registration, identity verification, deposit and withdrawal requests, bonus claim forms, customer support interactions, and voluntary feedback or survey submissions.
• Automatically through server logs, cookies, analytics tags, and similar tracking technologies embedded in the Platform.
• From third-party payment processors when you initiate deposits or withdrawals through Indonesian banks or e-wallet providers, to verify transaction status and detect fraudulent activity.
• From identity-verification services engaged to assist with KYC compliance, who may cross-reference the documents you provide against government or commercial databases.
• From fraud-prevention and security partners who may share information about high-risk IP addresses, device fingerprints linked to known fraudulent activity, or compromised credentials.

4. How We Use Your Information

sr866 processes your Personal Data for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your Account.
• Authenticating your identity when you log in.
• Processing deposits and withdrawals through your registered payment method.
• Crediting bonuses and promotional rewards to your Account.
• Providing access to sports betting, live casino, slot games, lottery products including togel (Indonesia's traditional numbers lottery), and all other Services.
• Providing customer support and responding to your enquiries.

4.2 Identity Verification and Regulatory Compliance

• Verifying your age (you must be at least 21 years old) and identity through KYC procedures.
• Complying with anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations.
• Detecting, investigating, and reporting fraud, money laundering, or other financial crimes to competent authorities.
• Maintaining records required by applicable gaming regulations.

4.3 Platform Improvement and Analytics

• Analysing usage patterns to improve Platform performance, design, and game selection.
• Conducting internal research and statistical analysis, always using anonymised or aggregated data where possible.
• Testing new features, promotions, and user-experience improvements.

4.4 Marketing and Communications

With your explicit consent, we may use your contact information to send you promotional communications about bonuses, tournaments, new games, and special offers on sr866. You may withdraw your consent to marketing communications at any time by contacting customer support or adjusting your Account notification settings.

4.5 Security and Fraud Prevention

• Monitoring for suspicious login activity, unusual betting patterns, and potential bonus abuse.
• Protecting the integrity of our platform against automated bots, credential-stuffing attacks, and other cyber threats.
• Investigating reported incidents and enforcing our Terms & Conditions.

5. Legal Basis for Processing

We rely on the following legal bases when processing your Personal Data:

• Contract Performance: Processing necessary to provide the Services you have requested, including account creation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, tax reporting duties, and gaming licence conditions.
• Legitimate Interests: Processing for fraud prevention, platform security, internal analytics, and service improvement, where our interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and the placement of non-essential cookies, which you may withdraw at any time.

6. Sharing and Disclosure of Your Information

We do not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your information only in the following circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict contractual data-processing agreements, including:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, and others) necessary to facilitate deposits and withdrawals.
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process e-wallet transactions.
• KYC and identity-verification service providers.
• Cloud hosting and server infrastructure providers.
• Customer support software providers.
• Analytics and fraud-detection technology vendors.
• Game content providers (such as Pragmatic Play, Evolution Gaming, Microgaming, and others) to the limited extent necessary for game delivery and fairness auditing.

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, government authorities, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of sr866, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of sr866's business assets, your Personal Data may be transferred to the acquiring entity. We will notify affected users before their data becomes subject to a materially different privacy policy.

6.4 Aggregated or Anonymised Data

We may share aggregated, anonymised, or de-identified information that cannot reasonably be used to identify you with business partners, researchers, or the public for purposes such as industry benchmarking, marketing research, or platform improvement.

7. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Transaction Records: Retained for a minimum of five (5) years following Account closure to comply with AML/CTF regulations and to resolve any post-closure disputes.
• KYC Verification Documents: Retained for a minimum of five (5) years after Account closure or the completion of the last transaction, whichever is later.
• Customer Support Communications: Retained for three (3) years to support dispute resolution and service quality review.
• Marketing Consent Records: Retained for three (3) years following withdrawal of consent to demonstrate compliance.
• Technical Logs and Usage Data: Retained for up to twelve (12) months in identifiable form, then anonymised or deleted.

When Personal Data is no longer required, we securely delete or anonymise it in accordance with industry-standard data disposal procedures.

8. Cookies and Tracking Technologies

The sr866 Platform uses cookies and similar tracking technologies to ensure proper functioning, enhance your experience, and gather analytics data. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as session management, authentication, security, and shopping-cart-style bet slips. These cookies cannot be disabled.
• Performance and Analytics Cookies: Collect anonymous information about how visitors use the Platform, such as which pages are visited most frequently and how users navigate between sections. This data helps us improve Platform performance and usability.
• Functionality Cookies: Remember your preferences such as language settings, preferred deposit method, odds display format, and responsible-gaming settings so you don't have to reconfigure them each visit.
• Targeting and Marketing Cookies: Used with your consent to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. We do not use these cookies to build profiles sold to third parties.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. For non-essential cookies, you may withdraw consent at any time by adjusting your browser settings or contacting customer support.

9. Data Security

sr866 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security protocols, the same standard used by international banks.
• Data Encryption at Rest: Sensitive Personal Data stored on our servers, including financial information and KYC documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with authorised access are bound by confidentiality obligations and undergo regular data-protection training.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for Account logins to provide an additional layer of protection against unauthorised access.
• Penetration Testing and Security Audits: We engage independent cybersecurity specialists to conduct regular penetration tests and security audits of our Platform infrastructure.
• Fraud Detection Systems: Real-time monitoring tools analyse transaction patterns and login behaviour to flag suspicious activity and prevent unauthorised Account access.
• Incident Response: We maintain a documented data-breach response plan. In the event of a breach likely to result in risk to your rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

10. Your Rights as a Data Subject

Depending on applicable data-protection laws, you may have the following rights with respect to your Personal Data held by sr866:

10.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed. We will provide this information within 30 days of receiving a verified request.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most Account information directly through your Account settings, or contact customer support for assistance with information that cannot be self-edited.

10.3 Right to Erasure

You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be unable to fulfil erasure requests where retention is required by applicable law (e.g., AML/CTF record-keeping obligations).

10.4 Right to Restrict Processing

You may request that we restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or where you object to processing based on legitimate interests.

10.5 Right to Data Portability

Where processing is based on your consent or on a contract, you have the right to receive the Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another controller where technically feasible.

10.6 Right to Object

You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, although we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact our customer support team or adjust your Account settings.

To exercise any of these rights, please contact us at [email protected]. We may require you to verify your identity before processing your request. We will respond within 30 days; in complex cases we may extend this period by a further 60 days with prior notification.

11. Children and Underage Users

The sr866 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires users to confirm they meet the age requirement, and our KYC procedures include age-verification checks against government-issued identification.

If we discover or are notified that we have inadvertently collected Personal Data from an individual under the age of 21, we will immediately suspend the associated Account, delete the data as quickly as technically practicable, and notify the relevant authorities where required. If you believe a minor has created an Account on sr866, please contact us immediately at [email protected].

12. International Data Transfers

As an internationally operated platform serving Indonesian players, some of your Personal Data may be processed by our service providers or infrastructure partners located outside Indonesia. Where such transfers occur, we take steps to ensure that adequate protections are in place, including:

• Entering into data-processing agreements with third-party service providers that incorporate internationally recognised data-transfer safeguards.
• Ensuring that recipient countries or entities provide a level of data protection materially equivalent to the standards described in this Privacy Policy.
• Conducting due diligence on third-party processors to verify their data-security practices before engagement.

Your consent to this Privacy Policy, followed by your submission of Personal Data to us, represents your agreement to such transfers as described above.

13. Third-Party Links and Services

The Platform may contain references to or integrations with third-party services such as game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others) and payment processors. While we take care to partner with reputable organisations, we are not responsible for the privacy practices of third parties. Each third-party service operates under its own privacy policy. We encourage you to review those policies before submitting Personal Data directly to any third-party service.

This Privacy Policy applies exclusively to data collected and processed by sr866 through the Platform. It does not extend to any third-party websites, applications, or services that may be accessible through the Platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data-processing practices, legal obligations, or regulatory requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email or a prominent notice displayed on the Platform prior to the changes taking effect.
• Where required by law, seek fresh consent for any new processing activities.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after any changes become effective constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way sr866 handles your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the sr866 Platform
• WhatsApp: Accessible through the customer support portal on the Platform

Our customer support team operates around the clock, including during Indonesian public holidays such as Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, and Christmas. Support is available in both Indonesian and English. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 calendar days.