Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by stf808 through our website at https://stf808.cam, mobile applications, customer support communications, and any other channels through which you interact with our services. stf808 operates as an internationally licensed online betting platform serving Indonesian players, and we comply with applicable international data protection regulations including GDPR (General Data Protection Regulation) principles, Curacao eGaming data protection standards, and recognized best practices for online gaming operators.

As a player-focused platform, stf808 recognizes that Indonesian users entrust us with sensitive personal information including identity documents (KTP - Kartu Tanda Penduduk), financial details (BCA, BRI, BNI, Mandiri bank account information), and behavioral data. We take this responsibility seriously and have implemented comprehensive technical, administrative, and organizational safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.

2. Data Controller Information

stf808, operating at https://stf808.cam, is the data controller responsible for processing your personal information. As the data controller, we determine the purposes and means of processing your personal data and are accountable for compliance with applicable data protection laws. Our registered business entity operates under Curacao eGaming licensing jurisdiction.

3. What Data We Collect

stf808 collects and processes the following categories of personal data:

3.1 Account Registration Information

When you create a stf808 account, we collect:

• Identity Information: Full legal name (matching your Indonesian ID), date of birth, gender, nationality
• Contact Information: Email address, mobile phone number (Indonesian +62 number), residential address in Indonesia (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), security questions and answers

3.2 KYC Verification Documents

To comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect:

• Government-issued photo identification (KTP - Indonesian national identity card, or international passport)
• Proof of address documents (utility bills, bank statements, government correspondence dated within 3 months)
• Proof of payment method ownership (bank statements or screenshots showing your name and account number)
• Selfie photographs holding your ID document for facial verification

3.3 Financial and Transaction Data

To process deposits and withdrawals, we record:

• Bank account details (bank name such as BCA, BRI, BNI, Mandiri; account number; account holder name)
• E-wallet information (OVO, DANA, GoPay account identifiers)
• Transaction history (deposit amounts in Indonesian Rupiah, withdrawal requests, payment timestamps, transaction status)
• Bonus and promotional activity (claimed bonuses, wagering progress, bonus-related winnings)

3.4 Betting and Gaming Activity

To provide gaming services and detect fraud, we track:

• Bet history (sports bets on BRI Liga 1, EPL, La Liga; casino game sessions; togel number selections; sabung ayam wagers)
• Game preferences and play patterns
• Win/loss records and account balance changes
• Session duration and login/logout timestamps

3.5 Technical and Device Information

When you access stf808, we automatically collect:

• IP address and geographic location (city-level, used to verify Indonesian residency)
• Device information (device type, operating system, browser type and version, screen resolution)
• Usage data (pages visited, clickstream data, time spent on pages, referral sources)
• Cookies and similar tracking technologies (see Section 9 for details)

3.6 Communications and Customer Support

When you contact our support team, we retain:

• Support ticket content (your inquiries, complaints, feedback)
• Live chat transcripts
• Email correspondence with customer support
• Phone call recordings (if you contact us by phone, with notice provided at call start)

4. How We Use Your Data

stf808 processes your personal data for the following legitimate business purposes:

Important: We do not use your personal data for any purpose incompatible with those disclosed in this Privacy Policy. If we wish to process your data for a new purpose, we will notify you in advance and, where required by law, obtain your explicit consent.

5. Data Sharing and Third Parties

stf808 does not sell, rent, or trade your personal data to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers and Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft to deliver casino games and slots
• KYC Verification Services: Third-party identity verification platforms to authenticate your documents and prevent fraud
• Cloud Infrastructure: Secure data hosting and server providers for platform operation
• Customer Support Tools: Live chat software and ticketing systems to manage support inquiries

All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence on all partners to ensure adequate security standards.

5.2 Legal and Regulatory Authorities

We may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when required by law, court order, subpoena, or to comply with legal obligations such as anti-money laundering (AML) reporting, tax compliance, or investigation of suspected illegal activity.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security Measures

stf808 employs industry-leading technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions between your device and our servers use 256-bit SSL/TLS encryption (the same standard used by major Indonesian banks like BCA and Mandiri for online banking)
• Secure Data Storage: Personal data is stored on encrypted servers in secure data centers with 24/7 monitoring, access controls, and intrusion detection systems
• Password Protection: User passwords are hashed using advanced cryptographic algorithms (bcrypt) and never stored in plain text
• Access Controls: Only authorized stf808 personnel with legitimate business need can access personal data, and all access is logged and audited
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and security reviews by independent third-party experts
• Employee Training: All stf808 staff undergo regular data protection and security awareness training

Despite our best efforts, no online system is 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with legal requirements and provide guidance on protective measures.

7. Data Retention Periods

stf808 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Active accounts: data retained for the duration of your account plus 7 years after closure (to comply with financial record-keeping regulations and potential dispute resolution)
• KYC Documents: Retained for 7 years after account closure (AML/CFT legal requirement)
• Transaction Records: Retained for 7 years (financial compliance and tax regulations)
• Communications: Customer support records retained for 3 years
• Marketing Data: Retained until you withdraw consent or the data is no longer relevant (typically 2 years of inactivity)
• Technical Logs: IP addresses and device data retained for 12 months (security and fraud prevention)

After retention periods expire, personal data is securely deleted or anonymized so that it can no longer be associated with you.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention obligations
• Right to Restriction: Request temporary restriction of data processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another service
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis (e.g., marketing emails)

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days and may require identity verification to protect your data from unauthorized access. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

stf808 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your browsing experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality (login sessions, account security, transaction processing). These cannot be disabled without affecting core services.
• Performance Cookies: Collect anonymous usage statistics to help us improve site performance (page load times, error rates, popular features)
• Functional Cookies: Remember your preferences (language selection, display settings, favorite games)
• Targeting/Advertising Cookies: Used to deliver relevant promotional offers based on your interests (only with your consent)

You can control cookies through your browser settings. However, disabling essential cookies may limit your ability to use certain stf808 features. Most modern browsers allow you to view, delete, and block cookies.

10. International Data Transfers

As an internationally licensed platform, stf808 may transfer your personal data outside Indonesia to secure servers in other jurisdictions for processing, storage, or service delivery. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Transfers to countries with adequate data protection levels as recognized by international standards
• Binding corporate rules for intra-company data transfers

All international transfers comply with GDPR and Curacao data protection requirements to maintain the same level of protection your data receives in Indonesia.

11. Protection of Minors

stf808 services are strictly for adults aged 21 and above in accordance with Indonesian age-of-majority laws. We do not knowingly collect personal data from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and permanently close the associated account. Parents or guardians who believe their child has provided personal data to stf808 should contact us immediately at [email protected].

12. Privacy Policy Updates

stf808 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you via email notification, prominent website banner, or account dashboard alert at least 30 days before the changes take effect. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or stf808's data practices, please contact our Data Protection team:

You also have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.