At sr888, the privacy of every Indonesian player on our platform is a matter we take seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information. We believe in transparency — not legalese designed to obscure. If you have a question that this document does not clearly answer, our support team is available 24/7.
Every byte of data transmitted between your device and sr888 is protected with 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text — not even on our internal networks.
sr888 will never sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies. Your data exists to service your account and improve your experience on our platform — nothing else.
We collect only the information that is genuinely necessary for account management, identity verification, payment processing, and fraud prevention. We do not collect data speculatively or build profiles beyond what is required for platform operation.
This Privacy Policy is written in plain language so that every player understands what is happening with their data. We do not hide material practices in lengthy footnotes or ambiguous cross-references to other documents.
You have the right to access your personal data, request corrections, and ask for deletion. You can exercise these rights at any time by contacting our support team. Requests are acknowledged within 48 hours and resolved within 30 days.
sr888 employs industry-standard access controls, network segmentation, and intrusion detection systems. Passwords are stored using strong one-way hashing algorithms. Internal access to personal data is limited to staff who genuinely need it.
The following defined terms are used consistently throughout this Privacy Policy:
sr888 collects Personal Data through multiple touchpoints during your relationship with the Platform. The categories below outline what we collect and in what context.
| Data Element | Purpose | Required? |
|---|---|---|
| Full legal name | Account creation | Yes |
| Date of birth | Age verification | Yes |
| Email address | Communication | Yes |
| Phone number | 2FA / support | Yes |
| National Identity Card (KTP) number | KYC verification | Conditional |
| Government-issued photo ID scan | KYC verification | Conditional |
| Selfie / liveness check image | KYC verification | Conditional |
| Data Element | Purpose | Required? |
|---|---|---|
| Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) | Payment processing | Yes |
| E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja) | Payment processing | Conditional |
| Deposit and withdrawal history | Account records | Yes |
| Betting and wagering history | Account records | Yes |
| Bonus and promotion history | Compliance | Yes |
| Data Element | Purpose | Required? |
|---|---|---|
| IP address | Fraud / security | Automatic |
| Device type, OS, browser | Platform optimisation | Automatic |
| Session timestamps and duration | Responsible gaming | Automatic |
| Pages and features visited | Platform analytics | Automatic |
| Referral source / UTM parameters | Marketing attribution | Automatic |
sr888 uses the Personal Data we collect for the following specific, legitimate purposes:
To create, maintain, and administer your sr888 account — including authentication, account balance management, responsible gaming tool configuration, and customer support interactions.
To verify that you are at least 21 years of age and to comply with our KYC obligations. KYC checks may be carried out by sr888 directly or via a contracted third-party identity verification service operating under a binding data processing agreement.
To process your deposits and withdrawals via Local Payment Methods including Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records.
To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeovers, and other prohibited activities. This includes automated pattern analysis of transaction and behavioural data.
To meet our legal and regulatory obligations, including record-keeping requirements, responding to lawful requests from authorities, and maintaining audit logs as required by our operating licence.
To monitor gameplay patterns for signs of problematic behaviour, to enforce any self-exclusion, deposit limit, or cooling-off periods you have activated, and to contact you where our algorithms flag a potential responsible gaming concern.
To analyse aggregate, anonymised usage data to improve the performance, design, and content of the Platform. No individual profiling is conducted for this purpose.
To send you promotional offers, bonus alerts, and platform news by email or in-platform notification, where you have opted in to receive such communications. You may opt out at any time via your Account settings or by contacting our support team.
sr888 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
sr888 does not sell, rent, or trade your Personal Data. We share your Personal Data only in the following limited, controlled circumstances:
We engage a limited number of carefully vetted third-party service providers to deliver core Platform functions. These providers are permitted to use your data only for the specific service they provide to sr888 and are bound by contractual obligations to protect your data to at least the same standard as sr888. Categories of providers include:
When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited transactional data (game session identifiers and bet outcomes) is shared with those studios as required to deliver the game and ensure correct settlement. Personal identification data is not shared with game studios beyond what is technically essential.
sr888 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or other legally binding process. We will, where legally permissible, notify affected Members before making such a disclosure.
In the event of a merger, acquisition, or sale of all or part of sr888's business, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections. You will be notified of any such transfer and your rights with respect to it.
sr888 uses cookies and similar technologies to make the Platform function correctly and to deliver a better experience. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens. The Platform cannot function without these. | No |
| Functional | Remembering your preferences (language display, session settings) across visits. | Yes |
| Analytics | Aggregated, anonymised data on Platform usage to help us identify and fix performance issues. | Yes |
| Marketing | Tracking referral sources and campaign attribution to understand how players found sr888. | Yes |
You can manage cookie preferences through your browser settings. Note that disabling Strictly Necessary cookies will prevent you from logging in and using the Platform. Analytics and marketing cookies can be disabled without affecting core Platform functionality.
sr888 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of membership + 5 years after account closure | Legal / regulatory obligation |
| KYC documents (ID scans, selfies) | 5 years from the date of verification | AML / regulatory obligation |
| Financial transaction records | 5 years from the date of transaction | Financial record-keeping |
| Betting and wagering history | 5 years from the date of activity | Dispute resolution / compliance |
| Customer support communications | 3 years from the date of interaction | Legitimate interest |
| Marketing consent records | Until withdrawn + 1 year | Consent accountability |
| Technical logs (IP, session data) | 12 months | Security / fraud prevention |
At the end of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical analysis.
sr888 implements a layered security framework designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
As a Member of sr888, you hold the following rights with respect to your Personal Data. These rights can be exercised at any time by contacting our support team at the contact details set out in Section 13.
All rights requests are acknowledged within 48 hours and resolved within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days, with notification to you. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
The sr888 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any individual under the age of 21. If you believe that a person under 21 has registered an account or provided Personal Data to sr888, please contact our support team immediately. Upon confirmation, we will promptly close the relevant account and delete all associated Personal Data.
sr888 implements age verification controls at the point of registration and may request documentary proof of age at any time during a Member's use of the Platform. These controls are designed to prevent minors from accessing the Platform in all regions of Indonesia, including Jakarta, Surabaya, Bandung, Bali, Medan, and beyond.
sr888 may store and process your Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, sr888 will ensure that appropriate safeguards are in place, including:
By using the sr888 Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. sr888 takes all reasonable steps to ensure that such transfers are conducted in a manner that protects your privacy and data rights to the same standard as described in this Privacy Policy.
sr888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material, we will notify you by email to the address registered on your account, or via a prominent notice on the Platform, at least seven (7) days before the changes take effect.
The effective date at the top of this document will be updated each time a revision is made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated policy.
If you object to any change in this Privacy Policy, you should cease using the Platform and may request account closure by contacting our support team. Any Personal Data held at the time of closure will be handled in accordance with the data retention schedule in Section 7.
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how sr888 handles your Personal Data, please contact our support team through any of the following channels:
Our support team is based on Western Indonesia Time (WIB, UTC+7) and serves Members across all Indonesian time zones, including WITA (UTC+8, covering Bali, Sulawesi, and South/East Kalimantan) and WIT (UTC+9, covering Maluku and Papua). Written privacy enquiries are typically acknowledged within 48 hours and resolved within 30 calendar days.
We've covered the details — now it's time to play. Explore hundreds of slots, live casino tables, and a full sportsbook, all backed by the privacy standards you just read.