Privacy Policy — sr997 Platform

In this Privacy Policy, the following terms carry the meanings set out below:

• "sr997" / "we" / "us" / "our" — the online betting and gaming platform operated at https://sr997.cam.
• "Player" / "you" / "your" — any individual who visits, registers with, or uses the sr997 Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, date of birth, financial details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "KYC" — Know Your Customer, the identity and age verification process required before withdrawals are processed.
• "Third-Party Providers" — external companies that supply services to sr997, including payment processors, KYC verification services, game studios, and customer support platforms.
• "Cookies" — small text files placed on your device by the Platform to support functionality, analytics, and session management.
• "IDR / Rp" — Indonesian Rupiah, the currency in which all sr997 transactions are denominated.

sr997 acts as the data controller in respect of Personal Data collected from players who use the Platform. As data controller, sr997 determines the purposes for which your Personal Data is collected and the manner in which it is processed.

This Privacy Policy applies to all Personal Data collected through:

• The sr997 website at https://sr997.cam and any associated mobile or desktop applications;
• Communications between you and sr997 via email, live chat, or other support channels;
• Account registration, KYC submission, and transaction activity on the Platform.

sr997 collects the following categories of Personal Data from players:

sr997 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data beyond what is necessary for standard KYC identity verification.

sr997 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions;
• Automatically — through cookies, server logs, and analytics tools when you access and navigate the Platform (see Section 9 for full cookie details);
• From third-party verification providers — when our KYC partners return identity check results in connection with the documents you submit;
• From payment processors — when transaction confirmation data is relayed from banks (BCA, BRI, BNI, Mandiri, Bank Permata) or e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm deposits and withdrawals.

In all cases, sr997 collects only the minimum data necessary for the specified purpose. You will be informed at the point of collection when the provision of certain data is mandatory (e.g., for KYC compliance) versus optional.

sr997 processes your Personal Data only where there is a lawful basis for doing so. The table below sets out the primary purposes of processing and the corresponding legal basis:

Where sr997 relies on your consent as the legal basis for processing (for example, sending promotional emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

sr997 does not sell, rent, or trade your Personal Data. We may share your data with the following categories of recipients, strictly for the purposes described:

• KYC and identity verification providers — to confirm your identity, age, and the authenticity of submitted documents;
• Payment processors and banking partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja, solely to process deposits and withdrawals in IDR;
• Game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, to the limited extent required to deliver game sessions and RNG certification;
• Customer support platform providers — to facilitate live chat and email support;
• Analytics and security service providers — to monitor Platform performance, detect fraud, and ensure Platform security;
• Regulatory and law enforcement authorities — where sr997 is required by applicable law, court order, or regulatory direction to disclose player data.

All third-party providers that receive Personal Data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to refrain from using the data for any other commercial purpose.

sr997 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents re-identification. Where data must be retained beyond the standard period due to a legal dispute, regulatory inquiry, or law enforcement request, sr997 will retain the relevant data until that matter is resolved.

sr997 implements a range of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser and our servers;
• Encrypted storage of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls — only authorized personnel with a defined operational need may access player Personal Data;
• Regular security audits and penetration testing to identify and remediate vulnerabilities;
• Two-factor authentication (2FA) options for player accounts and mandatory 2FA for internal staff systems;
• Intrusion detection and monitoring systems operating continuously to detect anomalous access patterns.

While sr997 takes data security seriously and applies industry-standard protections, no internet-based system is entirely immune to breach. In the event of a data security incident that is likely to result in a risk to your rights, sr997 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

The sr997 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyze how players use the site. The following categories of cookies are used:

• Strictly Necessary Cookies — required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies — remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics Cookies — collect anonymized or aggregated data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used to improve Platform performance and user experience.
• Security Cookies — help detect fraudulent activity, unusual login patterns, and potential account compromise attempts.

sr997 does not use third-party advertising or behavioral profiling cookies. No cookie data from the sr997 Platform is shared with advertising networks or data brokers.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair the functionality of the Platform. Disabling analytics cookies will not affect your ability to play or transact on the Platform.

As a player on the sr997 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at the details provided in Section 14.

• Right of Access — you may request a copy of the Personal Data sr997 holds about you. We will respond within 30 calendar days of receiving a verified request.
• Right to Rectification — if any Personal Data we hold about you is inaccurate or incomplete, you have the right to request a correction. Minor corrections (e.g., email address updates) can be made directly in your account settings.
• Right to Erasure — you may request that sr997 delete your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal obligations to retain certain data (see Section 7).
• Right to Restrict Processing — you may request that sr997 restrict the use of your Personal Data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability — you may request your Personal Data in a structured, machine-readable format to the extent technically feasible.
• Right to Withdraw Consent — where processing is based on your consent (such as for marketing emails), you may withdraw consent at any time without affecting prior lawful processing.
• Right to Object — you may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming purposes, subject to sr997's overriding regulatory obligations.

Age verification is a mandatory step in the sr997 KYC process. Players must confirm they are 21 or older during registration and must provide valid documentary proof of age before withdrawals are processed.

If sr997 determines or reasonably suspects that a player is under the age of 21, the relevant account will be immediately suspended, all bets voided, and any deposited funds returned to the originating payment method (net of any withdrawals already made) pending verification. The player's Personal Data will be retained only for as long as is necessary to complete the investigation and fulfill any legal reporting obligations, after which it will be securely deleted.

If you are a parent or guardian and believe a minor has registered an account on the sr997 Platform, please contact us immediately at [email protected] so that we can take prompt action.

As an internationally licensed gaming platform serving players primarily across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond — sr997 may transfer your Personal Data to third-party providers whose servers are located outside Indonesia.

In all cases of cross-border data transfer, sr997 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses with all third-party providers that receive personal data outside the primary jurisdiction;
• Assessment of the data protection standards of the recipient country before authorizing transfers;
• Limiting the scope of data transferred to the minimum necessary for the service being provided.

By registering an account with sr997, you acknowledge that your Personal Data may be transferred, stored, and processed outside Indonesia in connection with the services described in this policy. Such transfers are always made with appropriate protections in place and never for any purpose incompatible with this Privacy Policy.

sr997 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

When changes are material — meaning they affect the type of data we collect, the purposes for which we use it, or your rights as a player — sr997 will notify registered players via email to the address on file at least 14 days before the revised policy takes effect.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and contact our support team to request account closure and data deletion in accordance with Section 10.

If you have any questions about this Privacy Policy, wish to exercise a data right under Section 10, or wish to raise a concern about how sr997 handles your Personal Data, please contact our Data Privacy team using the details below. All privacy inquiries are handled in English and Bahasa Indonesia.

Our support team is available 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri, Idul Adha, Nyepi, and Indonesian Independence Day (17 August). For time-sensitive data security concerns, use the live chat function available on the Platform for the fastest response.

This Privacy Policy should be read alongside the sr997 Terms & Conditions, which govern the overall legal relationship between you and sr997, and our Responsible Gaming page, which explains how player activity data is used to support player welfare.