Privacy Policy — sr997

In this Privacy Policy, the following terms carry the meanings defined below. These definitions apply consistently throughout this document.

2.1 Identity. sr997 acts as the data controller in respect of all Personal Data collected from members through the platform at https://sr997.net. As data controller, sr997 determines the purposes for which your Personal Data is collected and the means by which it is processed.

2.2 Jurisdiction. sr997 is operated by an internationally licensed entity. Although the platform primarily serves members resident in Indonesia, it is operated under an international gaming licence. Members access the platform voluntarily and acknowledge that data processing is subject to the laws and regulations of sr997's licensing jurisdiction, supplemented by the commitments set out in this Privacy Policy.

2.3 Data Protection Officer. Questions and requests concerning the processing of your Personal Data should be directed to the sr997 Data Protection contact point at [email protected]. We aim to acknowledge all data-related enquiries within five business days and to resolve them within 30 calendar days.

3.1 Registration Data. When you create an sr997 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to confirm you meet our 21+ age requirement).
• Residential address in Indonesia (city, province, and postal code at minimum).
• Email address (used for account communications, security alerts, and promotional messages where opted in).
• Mobile phone number (used for account verification and security notifications).
• Preferred username and encrypted password credential.

3.2 Identity Verification (KYC) Data. To process withdrawals and comply with our anti-money-laundering obligations, we collect:

• Copies of government-issued photo identification: Indonesian National Identity Card (KTP), passport, or driver's licence (SIM).
• Proof of residential address: utility bill, bank statement, or official correspondence issued within the last three months.
• Proof of payment method ownership: confirmation that the bank account or e-wallet used for transactions is registered in the same name as the sr997 account.

3.3 Financial Transaction Data. For every deposit and withdrawal, we record:

• Transaction type, amount (in IDR), date, and time (WIB).
• Payment method used — bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet name (e.g., OVO, DANA, GoPay, ShopeePay, LinkAja).
• Transaction reference numbers for reconciliation and dispute resolution.
• Running account balance at the time of each transaction.

3.4 Gaming Activity Data. As part of operating a fair and secure platform, sr997 records:

• All bets placed, including game type, stake, outcome, and timestamp.
• Sportsbook selections including market type, odds accepted, and settlement result.
• Bonus credits claimed, wagering progress against requirements, and bonus expiry events.
• Session duration, login and logout times, and session frequency patterns.

3.5 Technical & Device Data. When you access the sr997 platform, our systems automatically collect:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Referring URL (the page from which you navigated to sr997).
• Cookie identifiers and session tokens (see Section 7).

3.6 Communications Data. We retain records of communications between you and sr997, including live chat transcripts, support emails, and any formal correspondence, for a period of five years from the date of the communication. These records are used to resolve disputes, improve service quality, and maintain a complete history of member interactions.

sr997 uses the Personal Data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection.

4.1 Marketing Communications. If you have opted in to receive promotional communications from sr997, we may send you emails about new games, seasonal promotions (such as those tied to Ramadhan, Idul Fitri, or Indonesian Independence Day on 17 August), and platform updates. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any such email or by contacting our support team.

4.2 Automated Decision-Making. sr997 uses automated systems to monitor gaming activity for responsible gaming indicators and fraud signals. Where an automated process flags an account for potential closure, bonus void, or withdrawal restriction, a member of our compliance team will review the case before any material action is taken. You have the right to request human review of any automated decision that materially affects your account.

sr997 processes your Personal Data on one or more of the following lawful bases:

• Contractual Necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, transaction processing, and identity verification.
• Legitimate Interests: Processing that is necessary for sr997's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and interests.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including anti-money-laundering requirements, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Consent: Processing based on your freely given, informed consent — specifically for the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 Third-Party Service Providers. sr997 shares limited Personal Data with carefully selected third-party providers who assist in delivering our services. These providers are bound by data processing agreements and are permitted to use your data only for the specific purpose for which it was shared. Categories of providers include:

• Payment Processors: BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, BSI (Bank Syariah Indonesia), Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — for the purpose of processing deposits and withdrawals in IDR.
• KYC & Identity Verification Partners: Third-party verification providers who assist sr997 in confirming identity documents submitted during the KYC process.
• Game Software Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for the purpose of delivering game content and ensuring fair outcomes. These providers may receive anonymised session tokens but do not receive your full identity data.
• IT Infrastructure & Security Providers: Hosting, cloud, and cybersecurity vendors who maintain the technical infrastructure on which the sr997 platform operates.

6.2 Legal Disclosure. sr997 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify affected members of such disclosures to the extent permitted by law.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of sr997's business, Personal Data held by sr997 may be transferred to the acquiring entity as part of the transaction. Members will be notified in advance of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

6.4 No Sale of Data. sr997 does not sell, rent, or trade your Personal Data to any third party for that party's own commercial purposes. This commitment applies unconditionally and is not subject to any opt-out mechanism — it is a blanket policy.

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit the sr997 platform. They allow the platform to recognise your browser on subsequent visits, maintain your logged-in session, and remember your preferences. sr997 also uses similar tracking technologies including web beacons and session storage objects where appropriate.

7.2 Types of Cookies We Use

7.3 Managing Cookies. You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your sr997 account and using the platform. Disabling functional or analytics cookies will not prevent access but may reduce personalisation. For detailed instructions on managing cookies in your browser, refer to your browser's official help documentation.

8.1 Technical Measures. sr997 implements a comprehensive set of technical security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment details.
• Multi-factor authentication available for member accounts and mandatory for all sr997 staff accessing member data.
• Web Application Firewall (WAF) and Distributed Denial of Service (DDoS) protection on all platform endpoints.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Intrusion detection and real-time security monitoring with 24/7 incident response capability.

8.2 Organisational Measures. Access to member Personal Data within the sr997 organisation is governed by a strict need-to-know principle. Staff members are granted access only to the data required to perform their specific role. All staff with access to member data undergo privacy and security training and are bound by confidentiality obligations.

8.3 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and interests of affected members, sr997 will notify affected members without undue delay — and in any event within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the data affected, and the steps being taken to address it.

sr997 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by our legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to backup cycles, it will be isolated from active processing until the next scheduled secure deletion cycle.

As a member of sr997, you have the following rights in relation to your Personal Data. These rights may be exercised by submitting a written request to our support team at [email protected]. We will respond within 30 calendar days of receiving a valid request.

11.1 Age Gate. The sr997 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21. Date of birth is a mandatory field during registration, and sr997 reserves the right to request documentary proof of age at any point during a member's account lifecycle.

11.2 Discovery of Underage Data. If sr997 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately suspend that account, delete all associated Personal Data to the extent permitted by our legal obligations, and, where required, notify the relevant regulatory authority.

11.3 Parental Responsibility. Adults who share devices with individuals under 21 are responsible for ensuring that those individuals cannot access the sr997 platform. We recommend enabling device-level parental controls and never leaving an active sr997 session unattended on a shared device.

For more information on our responsible gaming commitments, including tools available to help you manage your gaming activity, please visit our Responsible Gaming page.

12.1 Scope of This Policy. This Privacy Policy applies solely to the sr997 platform at https://sr997.net and the Personal Data collected directly through it. It does not apply to any third-party websites, applications, or services that may be linked to or referenced on our platform.

12.2 No Endorsement. The presence of a reference to a third-party service — such as a payment provider's website or a game studio's promotional page — does not constitute an endorsement by sr997 of that third party's privacy practices. Each third party operates under its own privacy policy, and sr997 has no control over how those parties collect, use, or protect your data.

12.3 Your Responsibility. Before providing any Personal Data to a third-party website linked from the sr997 platform, we strongly encourage you to review that third party's privacy policy. sr997 accepts no liability for the privacy practices of third-party websites or services.

13.1 Right to Amend. sr997 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law or regulation, new services or features introduced on the platform, or feedback received from members and data protection authorities.

13.2 Notification of Material Changes. Where a proposed change is material — meaning it significantly alters how we collect, use, share, or retain your Personal Data — sr997 will notify all registered members by email to their registered address at least 14 calendar days before the change takes effect. The notification will clearly summarise what is changing and why.

13.3 Minor Updates. Non-material changes, such as corrections to typographical errors, clarification of existing language, or the addition of new definitions that do not affect the substance of the policy, may be made without advance notice. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

13.4 Continued Use as Acceptance. Your continued use of the sr997 platform following the effective date of any updated version of this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease using the platform and contact our support team to arrange account closure. This Privacy Policy was last updated on January 1, 2026. The current version is always available at https://sr997.net/privacy-policy.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way sr997 handles your Personal Data, please contact us using the details below. Our Data Protection team monitors this contact point and is committed to responding to all enquiries promptly and thoroughly.