Privacy Policy — sr666

Introduction

sr666 ("we", "us", "our") operates the online betting and casino platform accessible at sr666.cam (the "Platform"). As the data controller, sr666 is responsible for deciding how and why your personal data is processed.

This Privacy Policy applies to all personal data collected about you when you visit the Platform, create an account, place a bet, make a deposit or withdrawal, contact our support team, or interact with any other feature of the sr666 service. It applies regardless of the device you use to access the Platform, whether that is a desktop browser, mobile browser, or any sr666 mobile application.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. Our practices are designed to respect the privacy expectations of players based in Indonesia while meeting the compliance standards of our international gaming licence.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to that person's identity.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means sr666, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on sr666's behalf and under sr666's documented instructions.
• "Player" or "You" means any individual who accesses the Platform or holds a registered account with sr666.
• "KYC Data" means identity and age-verification documents submitted during the Know Your Customer process, including copies of government-issued identification (Indonesian KTP or passport) and supporting selfies.
• "Transaction Data" means records of all deposits, withdrawals, bets, and game outcomes associated with your account.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 9.
• "Platform" has the same meaning given in Section 1 above.

Data We Collect

sr666 collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and responsible gaming purposes. We do not collect biometric data beyond the document selfies required for KYC.

How We Collect Your Data

sr666 collects Personal Data through the following channels:

• Direct submission by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to surveys or promotions.
• Automated collection: When you visit or use the Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser information, and session activity logs.
• Cookies and tracking technologies: As described in Section 9, the Platform uses cookies, web beacons, and similar technologies to collect usage and preference data.
• Third-party payment providers: When you make a deposit or withdrawal via BCA, BRI, BNI, Mandiri, or e-wallets such as OVO, DANA, or GoPay, we may receive confirmation data from those providers sufficient to reconcile the transaction with your account.
• Identity verification services: We may use third-party KYC and anti-fraud vendors to cross-check the identity documents you submit. These vendors process your data as Data Processors under our instruction.
• Publicly available sources: In limited fraud-prevention and compliance contexts, we may reference publicly available information to verify the accuracy of data you have provided.

Purposes & Legal Bases for Processing

We process your Personal Data only where we have a valid legal basis to do so. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Sharing Your Personal Data

sr666 does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:

• Payment processors and banking partners: To facilitate deposits and withdrawals, we share the minimum necessary Financial Data with our payment infrastructure partners, including local Indonesian bank transfer gateways and e-wallet operators. All payment partners are contractually bound to process your data solely for the purpose of completing your transaction.
• Identity verification providers: Third-party KYC and document-verification services receive your KYC Data for the sole purpose of verifying your identity and age. These providers operate as Data Processors under written data processing agreements.
• Game content studios: Live casino and slot game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe) may receive a session token and anonymised player identifier sufficient to run the game session. These studios do not receive your full identity or financial profile.
• Fraud prevention and security vendors: We share Technical Data (including IP addresses and device fingerprints) with anti-fraud and cybersecurity providers to detect and prevent account compromise, bonus abuse, and financial crime.
• Legal and regulatory authorities: We are required by law and by our licensing obligations to report certain categories of suspicious activity to the relevant authorities. In such cases, we will disclose the minimum Personal Data required to fulfil the legal obligation, without prior notice to the Player where notice is legally prohibited.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the sr666 business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance where legally permissible.

All third parties with whom we share your data are required to implement appropriate technical and organisational security measures and to process your data only for the stated purpose and duration.

International Data Transfers

As an internationally operated platform, sr666 may store and process your Personal Data on servers located outside Indonesia, including in jurisdictions where our gaming licence is held and where our technology infrastructure partners operate.

Where Personal Data is transferred outside Indonesia, sr666 takes appropriate safeguards to ensure that your data receives a level of protection equivalent to that applied within Indonesia. These safeguards include:

• Entering into standard contractual data protection clauses with the receiving entity.
• Transferring data only to recipients in jurisdictions assessed to provide an adequate level of data protection.
• Implementing technical measures such as encryption in transit and at rest to reduce risk associated with cross-border data flows.

You may request details of the specific safeguards applied to any international transfer of your data by contacting our data protection contact listed in Section 15.

Retention Periods

We retain your Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account our legal, regulatory, and contractual obligations. The following retention periods apply:

At the end of the applicable retention period, your Personal Data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is not technically feasible, the data will be placed in secure archive storage with access restricted to essential personnel.

Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to deliver, maintain, and improve the service. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without materially affecting the Platform's operation.
• Functional Cookies: Store your preferences — such as language settings, odds format, and responsible gaming tool configurations — so that they persist between sessions.
• Analytics Cookies: Collect anonymised data about how Players navigate and use the Platform, enabling us to identify and resolve usability issues and improve the overall experience. Analytics data is aggregated and does not identify you as an individual.
• Marketing Cookies: Used only with your consent to personalise promotional content and measure the effectiveness of our marketing campaigns. You can withdraw consent for marketing cookies at any time through the cookie settings available on the Platform.

sr666 does not use cookies to track your browsing activity on third-party websites outside the Platform.

Your Rights Over Your Personal Data

Subject to applicable law and our legitimate operational constraints, you have the following rights with respect to your Personal Data held by sr666:

To exercise any of the above rights, please contact our data protection contact as set out in Section 15. We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. In complex or high-volume cases, we may extend this period by a further 30 days with prior notice.

Where we are unable to fulfil a request — for example, because retention is required by law — we will explain the reason in writing. Certain rights, particularly the right to erasure, are subject to overriding legal retention obligations (see Section 8) and cannot be exercised in relation to Transaction Data or KYC records that we are legally required to keep.

Children's Privacy

The Platform is strictly intended for adults aged 21 and over. sr666 does not knowingly collect or process Personal Data from persons under the age of 21. Our registration flow includes mandatory age-declaration steps, and our KYC process verifies the age of all Players before full account access is granted.

If we become aware that a Player has provided false age information and is in fact under 21, we will immediately close the associated account, return any deposited funds where legally permissible, and securely delete the relevant Personal Data, except where retention is required for anti-fraud or regulatory reporting purposes.

If you are a parent or guardian and believe that a minor may have created an account on the Platform using false information, please contact our support team immediately so that the account can be closed and the matter escalated to our compliance team.

Security Measures

sr666 implements a multi-layered approach to protecting your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data exchanged between your device and our servers is protected by TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at Rest: Sensitive data categories — including KYC documents and Financial Data — are encrypted in our database using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within sr666 is restricted on a need-to-know basis. Staff with access to sensitive data undergo background screening and regular privacy training.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts. Internal system access by sr666 staff also requires multi-factor authentication.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: sr666 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected Players promptly and without undue delay.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also have a role to play — keeping your account credentials confidential and reporting any suspected unauthorised access to [email protected] (plain text only — not a clickable link).

Third-Party Links

The Platform may contain references to third-party content providers, game studios, or payment processors. If you navigate away from the Platform to a third-party service, that service operates under its own privacy policy, which we encourage you to read before submitting any personal data to them.

sr666 is not responsible for the privacy practices or data security measures of any third-party service, and a reference to a third-party service on the Platform does not constitute an endorsement of that service's privacy practices.

Amendments to This Privacy Policy

sr666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — for example, where we introduce a new purpose for processing or share data with a new category of third party — we will provide at least 14 days' prior notice by displaying a prominent notice on the Platform and, where possible, by sending a notification to your registered email address.

The "Last updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of an amendment constitutes your acceptance of the revised policy. If you do not accept the amended policy, you must cease using the Platform and contact support to close your account before the effective date of the change.

Contact & Data Protection Inquiries

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how sr666 has handled your Personal Data, please contact us through any of the following channels:

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the supervisory authority in the jurisdiction of our gaming licence or, where applicable, to seek resolution through the dispute mechanisms described in our Terms & Conditions.