Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or transferred by stm888 in connection with the operation of the stm888 platform accessible at stm888.cam, including any mobile-optimized version thereof. It applies to all registered players, prospective players who browse the platform without completing registration, and any individual who contacts stm888 through our support channels.

This Policy does not apply to third-party websites, services, or applications that may be referenced in our content or accessible via links that exist solely within the platform's informational pages. stm888 does not control the privacy practices of such third parties and accepts no responsibility for their data-handling conduct.

Data Controller: For the purposes of applicable data protection law, stm888 acts as the data controller with respect to personal data collected through the platform. Our contact address for data-related matters is [email protected].

stm888 collects the following categories of personal data in the course of providing its services:

stm888 collects your personal data through the following methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated Technologies: Technical and behavioral data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the platform. See Section 10 for full details on our cookie practices.
• Third-Party Sources: Identity verification and fraud screening data received from our licensed KYC and AML service providers, where we are legally permitted to obtain such data to fulfill our compliance obligations.
• Payment Processors: Confirmation and transaction-status data received from our Indonesian payment partners (including bank transfer intermediaries and e-wallet providers such as OVO, DANA, and GoPay) in connection with processing your deposits and withdrawals.
• Game Providers: Session and game-outcome data received from our integrated game studio partners (such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft) as required for account balance management and dispute resolution.

stm888 processes your personal data only for the purposes listed below. We do not use your data for any purpose incompatible with these stated objectives without your prior consent or a lawful basis to do so:

• Account Management: Creating, maintaining, and securing your stm888 account, including authenticating your identity at login and processing account-related requests.
• Service Delivery: Processing deposits and withdrawals via your chosen Indonesian payment method, crediting winnings, applying bonuses, and executing your bets and game sessions.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and international gaming license conditions — including mandatory reporting to relevant authorities where required by law.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as described in our Terms and Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify players who may be exhibiting signs of problem gambling, and facilitating the application of player-requested responsible gaming tools such as deposit limits and self-exclusion.
• Platform Improvement: Analyzing aggregated and anonymized behavioral and technical data to improve platform performance, user experience, game selection, and feature development.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through our 24/7 support channels.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time.
• Legal Defense: Establishing, exercising, or defending legal claims in the event of a dispute between you and stm888.

stm888 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you — including service delivery, payment processing, and account management.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and any mandatory reporting obligations under our gaming license conditions.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate business interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without consequence to your account status.

stm888 does not sell or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share necessary financial data with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
• KYC and AML Providers: We share identity documents and related data with licensed identity verification and fraud screening service providers to fulfill our compliance obligations. These providers are contractually prohibited from using your data for any purpose beyond the designated verification service.
• Game Studio Partners: Limited session and account data is shared with integrated game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft) as technically required to operate their games within our platform.
• IT and Hosting Providers: Personal data is accessible to our vetted cloud hosting and IT infrastructure partners who store and process data on our behalf under strict data-processing agreements.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to government bodies, regulators, or law enforcement agencies when legally required to do so, including under court order or in response to a lawful request from a competent authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of stm888's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.

stm888 operates internationally and some of the service providers we engage — particularly game studio partners and cloud infrastructure providers — may process or store your data in jurisdictions outside Indonesia. Where such international transfers occur, stm888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable within Indonesia.

These safeguards may include: contractual clauses requiring the recipient to process data only in accordance with this Policy; the use of service providers who operate under recognized international security certifications; or other legally recognized transfer mechanisms applicable to the jurisdictions involved.

If you have questions about the specific countries to which your data may be transferred or the safeguards applied, you may contact us at [email protected].

stm888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data cannot be immediately deleted due to backup cycles or system architecture, it is restricted from active processing until deletion is completed.

As a player on the stm888 platform, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us at [email protected]. We will respond to all valid requests within thirty (30) calendar days of receipt.

stm888 uses cookies and similar tracking technologies to operate the platform effectively, maintain session state, prevent fraud, and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations between sessions.
• Analytical Cookies: Collect anonymized data on how players interact with the platform — pages visited, features used, and session duration — to support performance improvements. Used only in aggregate form.
• Marketing Cookies: Used to deliver relevant promotional content within the platform to players who have opted in to marketing communications. These are not used for off-platform advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling analytical or marketing cookies will not affect your ability to place bets, deposit, or withdraw funds.

stm888 employs a layered security architecture designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access undergo background screening and regular security training.
• Multi-Factor Authentication: Administrative access to data systems requires multi-factor authentication. Players are encouraged to enable available account security features.
• Intrusion Detection: Our infrastructure is monitored around the clock by automated intrusion detection systems with escalation protocols for anomalous activity.
• Penetration Testing: The platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities proactively.

In the event of a personal data breach that poses a risk to your rights and freedoms, stm888 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

The stm888 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the platform or submit any personal data through it.

If stm888 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their minor child has submitted personal data to stm888 should contact us immediately at [email protected] so that appropriate action can be taken without delay.

stm888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The "Last Updated" date displayed at the top of this page will be revised each time a change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — we will provide advance notice of at least seven (7) days by posting a prominent notice on the platform and, where feasible, sending an email notification to the address registered to your account.

Your continued use of the stm888 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting [email protected] prior to the effective date.

The most current version of this Privacy Policy is always available at stm888.cam/privacy-policy. We recommend reviewing this page periodically to remain informed of how stm888 protects your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by stm888, please reach out to our Data Support team. All privacy-related communications should be submitted in writing via email for proper documentation and tracking.

For responsible gaming-related matters — such as setting deposit limits, requesting self-exclusion, or discussing problem gambling concerns — please visit our dedicated Responsible Gaming page or contact support directly. Our team includes Indonesian-speaking agents available around the clock.