Your privacy matters to us. This Privacy Policy explains precisely what personal data st879 collects from Indonesian members, how that data is used, how long it is retained, and what rights you hold over your own information.
The following definitions apply throughout this Privacy Policy:
st879 acts as the Data Controller for all Personal Data collected through the Platform. st879 is responsible for determining how and why your Personal Data is processed, and is accountable for ensuring that such processing complies with applicable data protection principles.
For all privacy-related queries, complaints, or requests to exercise your data rights, you may contact the st879 Data Protection team directly using the contact details provided in Section 14 of this Policy.
st879 collects the following categories of Personal Data, to the extent necessary for the purposes described in Section 5:
st879 collects Personal Data through the following channels:
The majority of Personal Data we hold is provided directly by you during the course of your relationship with st879, including:
When you visit or interact with the Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device details, session data, and in-platform behavioural events such as game launches and bet placements. This automatic collection occurs via server logs, cookies, and JavaScript-based analytics tools (see Section 10).
In limited circumstances, st879 may receive Personal Data about you from trusted third-party sources, including:
In each case, st879 only receives data that is necessary for the specific compliance or operational purpose and does not use such third-party data for marketing without separate consent.
The table below sets out the primary purposes for which st879 processes your Personal Data, together with the legal basis for each processing activity:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and identity verification (including 21+ age check) | Identity & Contact; KYC Documents | Contractual necessity; Legal obligation |
| Processing deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja | Account & Financial; Identity & Contact | Contractual necessity |
| Providing gaming and sportsbook services on the Platform | Account & Financial; Technical & Usage | Contractual necessity |
| KYC compliance, anti-money-laundering checks, and fraud prevention | Identity & Contact; KYC Documents; Technical & Usage | Legal obligation; Legitimate interests |
| Responsible gaming monitoring and player-protection interventions | Account & Financial; Technical & Usage; Communications | Legal obligation; Legitimate interests |
| Customer support and dispute resolution | Identity & Contact; Communications; Account & Financial | Contractual necessity; Legitimate interests |
| Platform security, abuse prevention, and bot detection | Technical & Usage; Identity & Contact | Legitimate interests |
| Personalised promotional offers and bonus communications | Identity & Contact; Account & Financial; Technical & Usage | Consent (withdrawable at any time) |
| Platform analytics and product improvement | Technical & Usage (aggregated and pseudonymised) | Legitimate interests |
| Compliance with applicable legal or regulatory obligations | All categories as required | Legal obligation |
Where st879 relies on legitimate interests as the legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. You may request a summary of that assessment by contacting the Data Protection team (see Section 14).
st879 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below:
st879 engages carefully selected third-party service providers to support Platform operations. These providers act as data processors under written data-processing agreements and are contractually prohibited from using your data for any purpose other than delivering their specified service. Current processor categories include:
st879 may disclose your Personal Data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or legally binding governmental request. Where lawfully permitted, st879 will notify you of such a disclosure request before complying.
In the event that st879 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. st879 will provide advance notice of any such transfer via in-platform notification or email, and the acquiring entity will be required to honour this Privacy Policy.
st879 may share your Personal Data with additional third parties where you have given explicit, informed, and freely withdrawable consent for that specific sharing purpose. You may withdraw consent at any time by contacting our support team.
Given the global nature of the online gaming industry, some of the third-party processors engaged by st879 operate infrastructure located outside Indonesia. Where Personal Data is transferred internationally, st879 takes the following safeguards to ensure an adequate level of protection:
By using the Platform, you acknowledge that your Personal Data may be transferred to and stored in locations outside Indonesia in the circumstances described above, subject to the safeguards outlined in this section.
st879 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, DOB, contact details) | Duration of active membership + 5 years after account closure | Contractual record-keeping; legal obligation |
| KYC documents (ID copies, proof of address) | 5 years from the date of verification or account closure | AML compliance; legal obligation |
| Financial transaction records (deposits, withdrawals, wagers) | 5 years from the transaction date | Financial record-keeping; AML obligation |
| Customer support communications | 3 years from the date of the last communication | Dispute resolution; legitimate interests |
| Technical and usage logs (IP address, session data) | 12 months from collection | Security monitoring; fraud detection |
| Marketing consent records | Duration of consent + 3 years after withdrawal | Demonstrating lawful basis for marketing |
| Self-exclusion records | Indefinitely (to prevent re-registration during exclusion period) | Responsible gaming obligation |
When the applicable retention period expires, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
st879 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:
st879 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session, and analyse usage patterns. The following cookie categories are in use:
These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and ensure security tokens are valid. Strictly necessary cookies cannot be disabled without breaking core Platform functionality. No consent is required for these cookies.
These cookies collect anonymised or pseudonymised data about how Members use the Platform — which pages are visited most, where sessions end, and how long users spend on particular game categories. This data helps st879 improve the Platform experience. These cookies are only set with your consent.
Functional cookies remember preferences you have set — such as your preferred deposit method or game display settings — so that you do not need to re-enter them on every visit. These cookies are set with your consent and are deleted when you clear your browser data.
You may manage or withdraw your consent to non-essential cookies at any time through your browser settings. Note that disabling analytical or functional cookies will not prevent you from using core Platform features, but may result in a less personalised experience. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, and Samsung Internet — widely used across Jakarta, Surabaya, Bandung, Bali, and other Indonesian cities) are available directly through each browser's help documentation.
As a Member of st879, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact the Data Protection team as described in Section 14. st879 will respond to all verifiable requests within 30 calendar days, and will not charge a fee for standard requests.
You have the right to request a copy of the Personal Data st879 holds about you, including the categories of data held, the purposes for which it is processed, and the parties with whom it has been shared. Requests may be made via the support email address. st879 will provide a structured, machine-readable copy of your data within 30 days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor contact-detail corrections (mobile number, email address) can be made directly through your account dashboard. Corrections to identity data (legal name, date of birth) require submission of supporting documentation via the KYC process.
You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that st879 may be unable to fulfil erasure requests in full where retention is required by applicable law — for example, financial transaction records and KYC documents must be retained for a minimum of 5 years under AML obligations.
You have the right to request that st879 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint about processing is under investigation. Restricted data will be stored but not otherwise processed until the restriction is lifted.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to request that it be transmitted to another controller where technically feasible.
You have the right to object at any time to the processing of your Personal Data for direct marketing purposes (including profiling for marketing purposes). Upon receipt of a valid objection to marketing, st879 will cease all marketing communications within 5 business days. You may also object to processing based on legitimate interests, though st879 may be able to demonstrate compelling grounds that override your objection in specific cases.
Where processing is based on your consent, you may withdraw that consent at any time by contacting support or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
The st879 Platform is strictly restricted to individuals aged 21 years or older. st879 does not knowingly collect, process, or retain the Personal Data of any person under the age of 21. Registration requires affirmative confirmation that the applicant meets the age requirement, and st879 reserves the right to request supporting proof-of-age documentation at any point during the membership lifecycle.
If st879 becomes aware — through KYC review, a third-party report, or any other means — that Personal Data belonging to an individual under the age of 21 has been collected, the account will be suspended immediately, all associated balances will be frozen pending investigation, and the relevant Personal Data will be deleted once any legally required reporting obligations have been fulfilled. Any winnings generated during underage use are forfeited without exception.
Parents and guardians who believe that a minor in their care has registered on the Platform should contact st879 support immediately via live chat so that the account can be investigated and closed without delay.
st879 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or our business operations. Material changes — those that substantively affect your rights or our obligations — will be communicated to registered Members via email or in-platform notification at least 7 calendar days before the revised Policy takes effect.
Non-material changes — such as typographical corrections, clarifications that do not alter the substance of any section, or the addition of new processing activities that are straightforwardly covered by existing legal bases — may take effect immediately upon publication. The Effective Date and Version number at the top of this page will be updated with each revision.
Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should stop using the Platform and may request account closure in accordance with Clause 11.2 of the Terms & Conditions. The current version of this Policy is always available at st879.net/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by st879, please reach out to our Data Protection team through the following channels:
When submitting a privacy request by email, please include your registered username or account email address, a clear description of your request (e.g., access request, erasure request, objection to marketing), and a copy of a government-issued ID so that we can verify your identity efficiently. st879 will not process unverified privacy requests.
Every technical and organisational measure described in this Policy translates into a concrete protection for you as an st879 member.
Every login, deposit, and KYC upload on st879 travels over a 256-bit SSL-encrypted connection. Your credentials, bank details, and identity documents are never exposed in transit.
Identity documents submitted during K YC are encrypted at rest and accessible only to authorised compliance staff. st879 never shares your KTP or passport copy with any party outside of our verified verification providers.
st879 never sells, rents, or trades your Personal Data to third-party marketers. Your information is used solely to operate your account, process payments, and keep the Platform secure.
st879 retains your data only as long as legally required or operationally necessary. Transaction records are held for 5 years per AML rules; technical logs are purged after 12 months.
You hold the right to access, correct, erase, restrict, and port your Personal Data at any time. Submit a request via live chat or email and our Data Protection team will respond within 30 days.
The Platform undergoes scheduled third-party penetration testing and internal privacy audits. Any critical vulnerabilities are remediated promptly, keeping your account data protected at all times.
Now that you understand how st879 protects your privacy, explore our full range of games and sports markets — all backed by SSL encryption, fair-play guarantees, and 24/7 Indonesian-speaking support.