Privacy Policy

1. Introduction

sm777 is committed to protecting the privacy and security of our users' personal information. As an international gaming platform serving Indonesian players, we recognize the trust you place in us when you share your personal data. This Privacy Policy outlines our practices in accordance with international data protection standards and describes your rights regarding your personal information.

This policy applies to all users of sm777 services, including visitors to our website, registered account holders, and anyone who interacts with our customer support channels. By accessing sm777, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

We are committed to transparency. If you have questions about any aspect of this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Officer using the contact information provided at the end of this document.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with sm777, we collect the following personal information:

• Identity Information: Full name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP or passport)
• Contact Information: Email address, phone number, residential address, and postal code
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, or other Indonesian banks), e-wallet accounts (OVO, DANA, GoPay), transaction history, and payment card information (if applicable)
• Account Credentials: Username, password, and security questions/answers
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), and source of funds documentation

2.2 Information Collected Automatically

When you use sm777 services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, time spent on site, games played, bet amounts and types, session duration, referring URLs, and click patterns
• Location Data: Approximate geographic location based on IP address (country and city level)
• Communication Data: Records of your interactions with customer support, including chat transcripts, emails, and phone call recordings (with notice)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification and fraud prevention data from banks and e-wallet providers
• Identity Verification Services: Verification results from KYC and anti-fraud databases
• Game Providers: Game play data, RTP statistics, and technical logs from providers like Pragmatic Play, Evolution Gaming, and Microgaming
• Marketing Partners: Referral source information and campaign tracking data (where applicable)

3. How We Use Your Information

sm777 uses your personal information for the following purposes:

3.1 Account Management

• Create and maintain your gaming account
• Verify your identity and age (21+ requirement)
• Process account registrations, modifications, and closures
• Authenticate your login credentials and secure your account

3.2 Transaction Processing

• Process deposits, withdrawals, and refunds
• Verify payment methods and prevent fraudulent transactions
• Reconcile financial records and maintain accurate account balances
• Comply with anti-money laundering (AML) regulations

3.3 Service Delivery

• Provide access to casino games, live dealer tables, and sports betting markets
• Process bets, calculate winnings, and settle accounts
• Track player preferences and game history
• Deliver personalized gaming experiences and recommendations

3.4 Customer Support

• Respond to inquiries, complaints, and support requests
• Troubleshoot technical issues and account problems
• Provide assistance in Indonesian and English via live chat, email, and WhatsApp
• Maintain records of customer interactions for quality assurance

3.5 Marketing & Communications

• Send promotional offers, bonuses, and loyalty rewards (with your consent)
• Deliver newsletters and updates about new games or features
• Notify you of important account or policy changes
• Conduct player surveys and gather feedback

3.6 Security & Fraud Prevention

• Monitor for suspicious activity, collusion, and bonus abuse
• Detect and prevent identity theft, payment fraud, and account takeovers
• Enforce our Terms & Conditions and investigate policy violations
• Protect against cyber attacks, malware, and unauthorized access

3.7 Legal & Regulatory Compliance

• Comply with international gaming regulations and licensing requirements
• Maintain records for tax reporting and financial audits
• Respond to legal requests from law enforcement or government authorities
• Enforce responsible gaming policies and self-exclusion programs

3.8 Analytics & Improvement

• Analyze user behavior to improve website functionality and user experience
• Conduct A/B testing and performance optimization
• Generate statistical reports and business intelligence (anonymized data)
• Develop new features and services based on player preferences

4. Data Sharing & Disclosure

sm777 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

4.1 Service Providers

We share data with trusted third-party vendors who assist in operating our business:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to process transactions
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other studios to deliver gaming content
• Identity Verification Services: KYC and fraud prevention platforms for age and identity verification
• Cloud Hosting Providers: Data storage and infrastructure services
• Customer Support Tools: Live chat, email, and ticketing systems
• Marketing Platforms: Email delivery services and analytics tools (only if you've consented to marketing)

All service providers are bound by strict data protection agreements and are prohibited from using your data for their own purposes.

4.2 Legal Requirements

We may disclose your information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms & Conditions or investigate policy violations
• Protect the rights, property, or safety of sm777, our users, or the public
• Respond to claims of illegal activity or infringement

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and on-site notice of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent, such as when participating in co-branded promotions or referring friends to sm777.

5. Data Security Measures

sm777 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• SSL/TLS Encryption: 256-bit SSL encryption for all data transmitted between your device and our servers
• Secure Data Storage: Encrypted databases with access restricted to authorized personnel only
• Firewall Protection: Multi-layer firewalls to prevent unauthorized network access
• Regular Security Audits: Third-party penetration testing and vulnerability assessments
• DDoS Protection: Advanced protection against distributed denial-of-service attacks

5.2 Organizational Security

• Access Controls: Role-based access permissions limiting employee access to sensitive data
• Employee Training: Regular data protection and security awareness training for all staff
• Confidentiality Agreements: All employees and contractors sign strict non-disclosure agreements
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security breaches

5.3 Payment Security

• PCI DSS compliance for credit/debit card transactions (if applicable)
• Tokenization of payment information to minimize data exposure
• Two-factor authentication options for account access and withdrawals
• Real-time fraud detection and transaction monitoring

6. Cookies & Tracking Technologies

sm777 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit our site. They allow us to recognize your device and remember your preferences on subsequent visits.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies have been set and delete them individually or all at once
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies from being set
• Delete all cookies when you close your browser

Please note that disabling essential cookies may impact site functionality and your ability to access certain features or services.

6.4 Other Tracking Technologies

In addition to cookies, we may use:

• Web Beacons (Pixels): Invisible images embedded in emails or webpages to track opens and engagement
• Local Storage: Browser-based storage for preferences and session data
• Device Fingerprinting: Analysis of device characteristics for fraud prevention (non-invasive)

7. Your Privacy Rights

sm777 respects your privacy rights and provides mechanisms to exercise control over your personal data. Depending on your jurisdiction, you may have the following rights:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access, contact our support team with your account username and verification details. We will provide your data in a commonly used electronic format within 30 days.

7.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings. For changes requiring verification (name, date of birth), contact customer support with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances. However, we must retain some information for legal and regulatory compliance (typically 5-7 years for financial records). Upon account closure, we will anonymize or delete non-essential data.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in specific situations, such as while we verify data accuracy or assess a complaint. During restriction, we will store your data but not actively process it.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format (e.g., CSV or JSON) and transmit it to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. We will cease such processing upon request. You can unsubscribe from marketing emails using the link in each message or through your account settings.

7.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you may withdraw consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected] (Subject: "Privacy Rights Request")
• Live Chat: Available 24/7 through your account
• Written Request: Via registered mail to our business address

We will respond to all legitimate requests within 30 days. Identity verification may be required to prevent unauthorized disclosure of personal information.

8. Data Retention

sm777 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.

8.1 Retention Periods

• Active Accounts: Data is retained for the duration of your account and for 7 years after closure (regulatory requirement for financial records)
• Transaction Data: Financial transaction records retained for 7 years per anti-money laundering regulations
• KYC Documents: Identity verification documents retained for 5 years after account closure
• Marketing Data: Consent records retained for 3 years; actual marketing lists updated immediately upon unsubscribe
• Support Communications: Customer service transcripts retained for 3 years for quality assurance
• Technical Logs: Server logs and IP address data retained for 12 months for security purposes

8.2 Secure Deletion

When data is no longer required, we securely delete or anonymize it using industry-standard methods including:

• Cryptographic erasure (encryption key destruction)
• Data wiping (overwriting storage media)
• Physical destruction of hardware containing sensitive data
• Aggregation and anonymization for statistical purposes

8.3 Dormant Account Policy

Accounts with no login activity for 12+ consecutive months are considered dormant. After 24 months of inactivity, we may close dormant accounts and begin the data retention period countdown. You will receive email notifications before any account closure.

9. International Data Transfers

sm777 operates as an international platform and may transfer your personal information across borders to servers located outside Indonesia. These transfers are necessary to provide our services and are conducted with appropriate safeguards.

9.1 Transfer Mechanisms

When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Adequacy decisions recognizing equivalent data protection standards in recipient countries
• Binding Corporate Rules for transfers within our corporate group
• Your explicit consent for specific transfers

9.2 Data Processing Locations

Your data may be processed in the following regions:

• Southeast Asia (primary data centers for Indonesian players)
• Europe (game provider servers and payment processing)
• North America (cloud backup and disaster recovery)

All data centers employ equivalent security standards regardless of location, and all service providers are bound by strict data protection obligations.

10. Children's Privacy

sm777 is committed to protecting minors from accessing online gambling services. Our platform is strictly for adults aged 21 years and older, as required by Indonesian law and responsible gaming standards.

10.1 Age Verification

We employ multiple age verification measures:

• Mandatory date of birth collection during registration
• Government-issued ID verification (Indonesian KTP, passport, driver's license)
• Cross-reference with official identity databases
• Ongoing monitoring for suspicious underage access attempts

10.2 No Knowingly Collected Minor Data

We do not knowingly collect, use, or retain personal information from individuals under 21 years of age. If we become aware that a minor has provided personal information, we will immediately:

• Close the account permanently
• Delete all associated personal data (except as required by law for regulatory reporting)
• Refund any deposits to the payment source
• Void all bets and winnings

10.3 Parental Notification

If you are a parent or guardian and believe your child has provided information to sm777, please contact us immediately at [email protected] with "Underage Account" in the subject line. We will take swift action to remove the information and prevent future access.

11. Changes to This Privacy Policy

sm777 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations.

11.1 Notification of Changes

When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notification to your registered email address
• Displaying a prominent on-site banner upon login
• Requiring acceptance before continuing to use certain services (for significant changes)

11.2 Review Responsibility

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of sm777 services after changes become effective constitutes acceptance of the revised policy.

11.3 Policy Archive

Previous versions of this Privacy Policy are archived and available upon request. Contact our Data Protection Officer if you need to review historical policy versions.

12. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:

Data Protection Contact

sm777 Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"
Response Time: Within 72 hours for acknowledgment, 30 days for full resolution

Customer Support

For general account or service inquiries:

• Live Chat: Available 24/7 through your account (Indonesian and English support)
• Email: [email protected]
• WhatsApp: Contact details available in your account dashboard

Complaints & Disputes

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with relevant data protection authorities in your jurisdiction.