Privacy Policy

Effective Date: January 1, 2026
Last Updated: January 1, 2026

1. Introduction

This Privacy Policy applies to all users of the st189 platform (st189.cam), including website visitors, registered account holders, and anyone who interacts with our services. By accessing or using st189, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.

st189 respects your privacy rights and complies with applicable data protection laws, including principles derived from the EU General Data Protection Regulation (GDPR), to the extent applicable to our international operations. We are committed to transparency in how we handle your information and to providing you with meaningful control over your data.

2. Data Controller

The data controller responsible for your personal data is st189, an internationally licensed online betting platform. For all data protection inquiries, requests, or complaints, you may contact our Data Protection Officer at:

• Email: [email protected] (plain text only)
• Postal Address: st189 Data Protection Team, PO Box 4189, Curacao

3. Data We Collect

3.1 Information You Provide Directly

When you register an account on st189, you provide us with the following personal data:

• Identity Information: Full legal name, date of birth, gender, nationality.
• Contact Information: Email address, phone number (including Indonesian mobile numbers), residential address.
• Account Credentials: Username, password (stored in hashed form — we never see your plaintext password).
• Financial Information: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, etc.), e-wallet account details (OVO, GoPay, DANA, ShopeePay), transaction history.
• Verification Documents: Government-issued ID (KTP Nasional for Indonesian residents; passport for others), proof of address, selfie photographs for KYC verification.
• Communication Data: Live chat transcripts, email correspondence, support tickets, feedback forms.

3.2 Information Collected Automatically

When you use st189, we automatically collect certain technical data:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system (Android, iOS, Windows, macOS), browser type and version.
• Usage Data: Pages visited, time spent on site, click patterns, game history, bet history, login times, navigation paths.
• Location Data: Approximate geographic location derived from IP address (city/region level, not precise GPS coordinates).
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage, device identifiers. See Section 9 for details.

3.3 Information from Third Parties

In some cases, we may receive data about you from third parties:

• Payment Processors: Transaction confirmation, payment success/failure status from Indonesian banks and e-wallet providers.
• Identity Verification Services: Verification results from third-party KYC/AML screening providers to confirm your identity and detect fraud.
• Game Providers: Bet outcomes, game session data, RTP statistics from third-party game studios (Pragmatic Play, Evolution Gaming, etc.).

4. How We Use Your Data

st189 uses your personal data for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your st189 account.
• Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA, ShopeePay, and other supported payment methods.
• Recording and settling bets on football (BRI Liga 1, EPL, La Liga, Serie A, Champions League), togel (Singapore, Hongkong, Sydney, Macau), slots, live casino, sabung ayam, and other games.
• Providing customer support via live chat, email, and WhatsApp.
• Administering bonuses, promotions, and VIP loyalty programs.

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures.
• Preventing fraud, money laundering, and other illegal activities.
• Complying with international anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Responding to legal requests, court orders, and regulatory inquiries.

4.3 Platform Security and Improvement

• Detecting and preventing unauthorized access, hacking attempts, bot activity, and account takeovers.
• Monitoring platform performance, identifying technical issues, and improving user experience.
• Analyzing usage patterns to optimize game offerings, payment options, and promotional strategies.

4.4 Marketing and Communication

• Sending promotional emails about new games, bonuses, and special offers (you may opt out at any time).
• Notifying you of important account updates, terms changes, or security alerts.
• Conducting customer satisfaction surveys and gathering feedback.

4.5 Responsible Gaming

• Monitoring betting behavior to identify signs of problem gambling.
• Enforcing deposit limits, session timers, and self-exclusion requests.
• Providing access to responsible gaming tools and support resources.

5. Legal Basis for Processing

st189 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms & Conditions you agreed to when registering (account management, payment processing, bet settlement).
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification, and licensing conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and marketing (balanced against your privacy rights).
• Consent: Where required by law, we obtain your explicit consent before processing certain data (e.g., marketing emails, cookies). You may withdraw consent at any time.

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

st189 shares your personal data with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, GoPay, DANA, ShopeePay) process deposits and withdrawals on our behalf.
• Game Providers: Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, Pocket Games Soft deliver game content and process bet data.
• KYC/AML Vendors: Third-party identity verification services screen your documents against watchlists and verify authenticity.
• Cloud Hosting Providers: Our platform infrastructure is hosted on secure cloud servers maintained by certified data center operators.
• Customer Support Tools: Live chat and ticketing systems managed by third-party software providers.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes specified by st189. We do not allow them to use your data for their own marketing purposes.

6.2 Legal and Regulatory Authorities

st189 may disclose your personal data to law enforcement, regulators, courts, or government agencies if:

• Required by law, court order, subpoena, or regulatory request.
• Necessary to investigate suspected fraud, money laundering, or other criminal activity.
• Needed to protect the rights, property, or safety of st189, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy unless you are provided notice of a new policy and the opportunity to opt out.

6.4 No Sale of Data

st189 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is used solely to provide and improve our services, comply with legal obligations, and protect platform security.

7. Data Retention

st189 retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account activity and for a period after account closure to comply with financial record-keeping and AML requirements (typically 5–7 years).
• Transaction Records: Deposit, withdrawal, and betting history are retained for at least 7 years to comply with international financial regulations.
• KYC Documents: Identity verification documents are retained for regulatory compliance and may be kept for up to 7 years after account closure.
• Marketing Data: If you opt out of marketing communications, your email address is retained on a suppression list to ensure you are not contacted again.
• Legal Holds: If your account is subject to investigation or legal dispute, data may be retained longer as required by law.

Once retention periods expire, personal data is securely deleted or anonymized so it can no longer identify you.

8. Security Measures

st189 implements industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and st189 servers is encrypted using Transport Layer Security (TLS).
• Encrypted Storage: Personal data at rest is stored on encrypted servers in secure, ISO-certified data centers.
• Access Controls: Only authorized st189 personnel with a legitimate need can access personal data. Access is logged and monitored.
• Two-Factor Authentication (2FA): Account holders may enable 2FA for additional login security.
• Intrusion Detection: 24/7 monitoring systems detect and respond to suspicious activity, hacking attempts, and DDoS attacks.
• Regular Security Audits: st189 undergoes periodic security assessments by independent third-party auditors.

While we take all reasonable precautions, no system is 100% secure. You are responsible for maintaining the confidentiality of your password and for all activity on your account. If you suspect unauthorized access, contact support immediately.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit st189. They help us recognize you, remember your preferences, and improve your experience.

9.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality (login, session management, security). Cannot be disabled.
• Performance Cookies: Collect anonymous data on how users interact with st189 (page views, load times) to improve performance.
• Functional Cookies: Remember your preferences (language, currency, display settings).
• Advertising Cookies: Track your activity across websites to deliver personalized ads (if applicable and with consent).

9.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of st189. Most browsers allow you to:

• View and delete cookies.
• Block third-party cookies.
• Clear cookies when you close the browser.
• Set your browser to notify you when a cookie is placed.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

10.1 Right to Access

You have the right to request a copy of the personal data st189 holds about you. Contact [email protected] to submit an access request. We will respond within 30 days.

10.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone, address) directly through your account settings.

10.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances (e.g., data no longer needed for its original purpose, you withdraw consent). However, st189 may be legally required to retain certain data (transaction records, KYC documents) for regulatory compliance.

10.4 Right to Restriction

You may request that st189 limit the processing of your personal data in specific situations (e.g., while a dispute is being resolved).

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and to transmit it to another service provider.

10.6 Right to Object

You may object to processing of your data for direct marketing purposes at any time. Click "Unsubscribe" in any marketing email or contact support.

10.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10.8 Right to Lodge a Complaint

If you believe st189 has violated your privacy rights, you may lodge a complaint with the data protection authority in your jurisdiction or with our licensing authority.

11. Marketing Communications

st189 may send you promotional emails about new games, bonuses, VIP offers, and platform updates. You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email.
• Adjusting your communication preferences in your account settings.
• Contacting support at [email protected].

Even if you opt out of marketing emails, st189 may still send you transactional messages related to your account (deposit confirmations, withdrawal notifications, security alerts, terms updates). These are not marketing communications and cannot be opted out of while your account is active.

12. Protection of Minors

st189 is strictly 21+ only. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use st189 or provide any personal information to us.

If we become aware that a user is under 21, we will immediately suspend the account, void all transactions, and delete associated personal data. If you believe a minor has registered on st189, please report it to [email protected] immediately.

13. International Data Transfers

st189 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. These countries may have different data protection laws than Indonesia. When transferring data internationally, st189 ensures adequate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities.
• Transfers to countries recognized as providing adequate data protection.
• Compliance with applicable international data protection frameworks.

By using st189, you consent to the transfer of your personal data to our international servers and service providers.

14. Policy Amendments

st189 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Amendments become effective immediately upon posting to the website. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

We encourage you to review this Privacy Policy periodically. If we make material changes that significantly affect your privacy rights, we will notify you via email or prominent notice on the platform. Continued use of st189 after amendments are posted constitutes acceptance of the revised policy.

15. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact:

• Data Protection Officer Email: [email protected] (plain text only)
• General Support Email: [email protected] (plain text only)
• Live Chat: Available 24/7 via the st189 platform
• Postal Address: st189 Data Protection Team, PO Box 4189, Curacao

For questions about your account, deposits, withdrawals, or bonuses, please contact general support. For privacy-specific inquiries (access requests, deletion requests, consent withdrawal), contact the Data Protection Officer directly.

Last Reviewed: January 1, 2026