Privacy Policy —
sn777 Data Protection Notice

This Privacy Policy ("Policy") describes how sn777 ("sn777", "the Company", "we", "us", "our"), operator of the online betting and gaming platform accessible at sn777.asia, collects, processes, stores, and discloses personal information about individuals who visit, register with, or otherwise interact with the Platform.

sn777 is committed to protecting the personal data of all players, including those based in Jakarta, Surabaya, Medan, Bandung, Bali, and across the Indonesian archipelago. We operate in accordance with internationally recognised data-protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

By accessing the Platform, registering an Account, making a deposit, or placing a wager, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy applies to all data collected through the sn777 website at sn777.asia, its mobile-optimised interfaces, any associated APIs, and all communication channels operated by sn777, including live chat and email correspondence at [email protected].

The following capitalised terms carry the meanings assigned below throughout this Policy:

sn777 collects Personal Data in several categories depending on the nature of your interaction with the Platform. We apply the principle of data minimisation — we collect only what is genuinely necessary for the stated purpose.

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the mandatory 21+ age requirement).
• Indonesian National Identity Card number (NIK / KTP number) or passport number.
• Residential address, including city and province (e.g., Jakarta, Surabaya, Bandung).
• Active email address and mobile phone number.
• Preferred username and encrypted password (passwords are never stored in plain text).
• Preferred deposit and withdrawal method (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, USDT TRC-20).

3.2 Financial & Transaction Data

• Bank account details and e-wallet identifiers associated with your registered payment methods.
• Deposit amounts, deposit timestamps, and originating payment reference numbers.
• Withdrawal requests, withdrawal amounts, destination account details, and processing status.
• Bonus claims, wagering activity, game-session records, and win/loss history.
• USDT wallet addresses used for TRC-20 transactions (blockchain transaction hashes are also recorded).

3.3 Identity Verification (KYC) Documents

• Photographs or scanned copies of government-issued photo identification (KTP, passport, SIM).
• Proof of address documents (bank statements, utility bills, official government correspondence dated within the past three months).
• Selfie or liveness-check images submitted to verify document ownership.
• Source-of-funds declarations and supporting documentation for enhanced due diligence (EDD) cases.

3.4 Technical & Usage Data

• IP address, geolocation data (country and city level), and ISP identifier.
• Device type, operating system, browser type and version, screen resolution.
• Session start and end timestamps, page views, click paths, and feature interactions.
• In-play betting activity logs, game launch records, and live-chat conversation transcripts.
• Cookies, pixel tags, and similar tracking technologies — see Section 10 for full details.

3.5 Communications Data

• Content of emails, live-chat messages, and WhatsApp interactions with the sn777 support team.
• Complaint records, dispute history, and formal correspondence.
• Marketing preference records (opt-in / opt-out status for promotional communications).

sn777 collects Personal Data through the following channels:

1. Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support via live chat or email, or respond to a promotional survey.
2. Automatically — when you access the Platform, our servers, analytics tools, and session-recording software automatically log technical data including your IP address, device fingerprint, and browsing behaviour on the site.
3. From third-party payment processors — when you make a deposit via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or a cryptocurrency gateway, the payment provider shares transaction confirmation data with sn777 to credit your Account.
4. From identity verification providers — sn777 may engage a third-party KYC service provider to perform automated identity checks. The provider shares a verification result (pass/fail/pending) and a confidence score with sn777; sn777 does not receive raw biometric data beyond what is described in Section 3.3.
5. From fraud detection and AML screening services — sn777 uses automated screening tools to cross-reference player profiles against international sanctions lists, Politically Exposed Persons (PEP) databases, and adverse media sources as required by our licensing obligations.
6. From cookies and tracking technologies — as detailed in Section 10, our website uses first-party cookies and, where applicable, third-party analytics tools to understand how players navigate the Platform and to optimise the user experience.

sn777 processes your Personal Data for the following specific, documented purposes:

sn777 does not use your Personal Data to make fully automated decisions with significant legal or similarly significant effects on you without providing a mechanism for human review. Automated tools used in fraud detection and KYC screening are subject to human oversight at the review stage.

sn777 relies on the following legal grounds for processing Personal Data, consistent with internationally recognised data-protection frameworks:

• Contractual necessity: Processing your registration data, financial data, and account activity records is necessary for sn777 to perform the contract (these Terms) with you as a Player. Without this processing, we cannot provide the betting and gaming service.
• Legal obligation: KYC identity verification, AML screening, PEP checks, and the retention of transaction records for audit purposes are required by the conditions of sn777's international operating licences. This processing is mandatory and cannot be refused by the Player without affecting their ability to use the Platform.
• Legitimate interests: Technical data processing for fraud detection, platform security, responsible gaming monitoring, and service analytics is conducted based on sn777's legitimate interest in maintaining a secure, fair, and legally compliant platform for all players. These interests do not override your fundamental rights and freedoms where adequate safeguards are in place.
• Consent: Marketing communications — including promotional emails, SMS messages, and personalised bonus offers — are sent only to Players who have explicitly opted in to receive them. You may withdraw consent at any time by contacting support or updating your communication preferences in your Account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

sn777 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data with third parties only where necessary, under strict data-processing agreements, and for the purposes described in this Policy.

Categories of third parties who may receive your data:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency gateway providers receive the transaction data necessary to process your deposits and withdrawals. Each processor operates under its own published privacy policy and applicable Indonesian banking regulations.
• KYC & identity verification providers: Third-party KYC service providers receive your identity documents and liveness-check data solely for the purpose of verifying your eligibility to hold a sn777 Account. These providers are contractually prohibited from using your data for any other purpose.
• Game studio and platform technology providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymised session identifiers and game-round data necessary to deliver their games and resolve game-round disputes. They do not receive your full name, national identity number, or financial account details.
• AML & fraud screening services: Automated screening tools cross-reference player data against international sanctions lists and PEP databases. Results are shared back to sn777 for review; raw data is not retained by the screening provider beyond the minimum necessary period.
• Legal and regulatory authorities: sn777 may be required to disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to a lawful request, court order, or regulatory direction. We will, where legally permitted, notify the affected Player of such a disclosure.
• Professional advisors: Lawyers, auditors, and insurers engaged by sn777 on a confidential basis may access limited Personal Data where necessary to provide their professional services.

sn777 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or licensing conditions. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with sn777's data lifecycle management procedures. Where deletion is not immediately possible due to backup system architecture, the data will be isolated and protected from further active processing until deletion can be completed.

sn777 applies a defence-in-depth security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls include:

• Encryption in transit: All data transmitted between your browser or device and the sn777 Platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTP Strict Transport Security (HSTS) is enforced to prevent protocol downgrade attacks.
• Encryption at rest: Sensitive Personal Data — including identity document images, national identity numbers, and bank account details — is encrypted at rest using AES-256. Database fields containing particularly sensitive values are encrypted at the application layer before storage.
• Password security: Player passwords are never stored in plain text or in reversible encrypted form. Passwords are hashed using bcrypt with a high work factor, ensuring that even a database compromise does not expose usable credentials.
• Access controls: Internal access to Personal Data is governed by role-based access control (RBAC). Only staff with a documented business need are granted access to specific data categories. All internal access events are logged for audit purposes.
• Network security: The Platform is protected by a Web Application Firewall (WAF), DDoS mitigation infrastructure, intrusion detection systems (IDS), and regular vulnerability scanning. Critical systems are isolated in a demilitarised zone (DMZ) architecture.
• Security testing: sn777 commissions independent penetration testing of its platform infrastructure on a periodic basis. Critical and high-severity findings are remediated within defined SLA windows before the next production deployment cycle.
• Incident response: sn777 maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to affected Players, sn777 will notify impacted individuals without undue delay via their registered email address.

sn777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, detect fraud, and analyse how players use the site. The following categories of cookies may be active during your visit:

Most web browsers allow you to control cookie settings through their privacy or security preferences. You may choose to block or delete optional cookies at any time; however, doing so may affect the functionality of the Platform. Strictly necessary and security cookies cannot be disabled without logging out of your Account or discontinuing use of the Platform entirely.

sn777 does not use third-party advertising cookies or cross-site tracking pixels for the purpose of serving targeted advertisements on external websites.

Subject to applicable law and the limitations described below, you have the following rights in relation to your Personal Data held by sn777. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request — [Your Username]". sn777 will respond within 30 calendar days of receiving a valid request.

sn777 operates as an internationally licensed platform. In the course of delivering our services, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia. Such transfers may occur when we engage third-party processors — including KYC providers, game studio technology partners, and cloud infrastructure providers — whose servers or operational teams are located in other countries.

Whenever Personal Data is transferred internationally, sn777 takes appropriate steps to ensure that your data receives a level of protection consistent with this Policy and recognised international data-protection standards. Safeguards we apply include:

• Binding contractual clauses in all data-processing agreements with third-party processors, requiring them to implement equivalent security and privacy standards.
• Restricting data transfers to jurisdictions that maintain adequate data-protection frameworks or to processors that are certified under recognised compliance programmes.
• Minimising the scope of data shared in cross-border transfers to only what is strictly necessary for the specific processing purpose.
• Regular review of processor compliance through due-diligence assessments conducted by the sn777 compliance team.

By using the Platform and accepting this Policy, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

The sn777 Platform is strictly intended for adults aged 21 years or older. sn777 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process; any Account found to belong to a person under 21 will be closed immediately, all funds returned, and all associated Personal Data deleted subject to any applicable legal retention requirements.

If you are a parent or guardian and have reason to believe that a minor has provided Personal Data to sn777 or has registered an Account on the Platform, please contact us immediately at [email protected] with the subject line "Minor Protection — Urgent". sn777 will investigate and take appropriate remedial action within 24 hours of receiving a valid report.

sn777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data-processing practices, the introduction of new Platform features, or feedback from regulatory bodies.

When material changes are made to this Policy, sn777 will notify registered Players via their registered email address and by posting a prominent notice on the Platform homepage at least 14 calendar days before the changes take effect. The "Last Updated" date at the top of this document will be revised accordingly. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Where a proposed change would materially reduce your privacy rights or expand the scope of Personal Data collected beyond what is described in the current version of this Policy, sn777 will seek fresh, explicit consent before applying the change to your Account data.

We encourage you to review this Policy periodically to stay informed about how sn777 protects your information. Archived versions of previous Policy revisions are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by sn777, please reach out to our support team through any of the following channels:

• 24/7 Live Chat: Available directly within your Account dashboard after logging in. Our native Indonesian-speaking support agents are available around the clock to assist you with data-related enquiries.
• Email: [email protected] — please include your registered username and the subject line "Privacy Enquiry — [Your Username]". Responses are typically provided within 4 business hours.
• WhatsApp: Contact details are available in your Account dashboard after login (displayed as plain text — not a clickable link on this page).

For formal Data Subject Rights requests — including access, rectification, erasure, or objection — please email [email protected] with the subject line "Data Subject Rights Request — [Your Username]". sn777 will acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days. Customer service operating hours for callbacks where available are 08:00–22:00 WIB (Western Indonesia Time, UTC+7), Monday through Sunday.