stc76 Privacy Policy

stc76 ("we", "us", "our") operates the online casino and sportsbook platform accessible at stc76.ws. As a platform that serves Indonesian players across Jakarta, Surabaya, Bandung, Bali, Medan, and beyond, we understand that the privacy and security of your personal information is of paramount importance.

This Privacy Policy describes the categories of personal data we collect when you register an Account, make deposits and withdrawals through local Indonesian payment channels such as BCA, BRI, BNI, Mandiri, OVO, and DANA, place bets on our sportsbook, play our casino games, or otherwise interact with the stc76 platform. It also explains how we use, store, protect, and — where necessary — share that data, and the rights you hold in relation to it.

By creating an account on stc76 or continuing to use our Services after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy in full and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you should discontinue use of the stc76 platform and contact us to request account closure.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and stc76. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

stc76 collects Personal Data through several distinct channels. The categories of data we collect, and the circumstances under which each category is collected, are described below.

3.1 Registration Data. When you create an Account on stc76, we collect: your full legal name; date of birth; email address; Indonesian mobile phone number; username; and password (stored in hashed, non-recoverable form). You may also be asked to provide your city of residence (e.g., Jakarta, Surabaya, Bali) for localization and fraud-prevention purposes.

3.2 Identity Verification (KYC) Data. Prior to processing your first withdrawal, stc76 conducts mandatory Know Your Customer (KYC) verification. During this process we collect: a copy of your government-issued Indonesian identification document (KTP, passport, or SIM); a selfie or live facial scan for document-to-face matching; and, where required, proof of address such as a recent utility bill or bank statement. This data is classified as Sensitive Data and is processed with heightened security controls.

3.3 Financial Data. To facilitate deposits and withdrawals in Indonesian Rupiah (IDR), stc76 collects: the name of your selected payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja); your bank account number or e-wallet identifier; and transaction reference details. stc76 does not store full debit or credit card numbers on its own servers — card data, where accepted, is tokenized by our PCI-DSS-compliant payment processor.

3.4 Transactional & Gaming Data. During your use of the stc76 platform, we automatically log: all deposit and withdrawal transactions; all bets placed on the sportsbook (including BRI Liga 1, EPL, Champions League, and other markets, as well as mix parlay combinations and voor bola Asian handicap selections); all casino game sessions and outcomes; bonus claims and wagering progress; and account balance history. This data is essential for regulatory compliance, dispute resolution, and responsible gaming monitoring.

3.5 Technical & Device Data. When you access stc76 via desktop browser or mobile device, we automatically collect: IP address; device type, model, and operating system; browser type and version; screen resolution; session timestamps; referring URL; and, where applicable, mobile advertising identifier (IDFA/GAID). This data is used for fraud detection, security monitoring, and platform optimization.

3.6 Communications Data. If you contact stc76 via live chat, email ([email protected]), or any other support channel, we retain a record of that communication — including the content of messages, attachments, and the timestamp — for customer service quality assurance, compliance auditing, and dispute resolution.

3.7 Voluntary & Preference Data. You may optionally provide additional data such as language preference, notification settings, and self-imposed responsible gaming limits (deposit limits, loss limits, cooling-off periods). Where you voluntarily disclose information about your gaming habits in connection with a responsible gaming request, that information is processed under strict confidentiality controls.

stc76 uses the Personal Data it collects for the following specific purposes:

• Account Administration: Creating, maintaining, and securing your stc76 Account; authenticating your identity at login; and processing account closure requests.
• Service Delivery: Processing deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet; settling sports bets and casino game outcomes; awarding bonuses and tracking wagering requirements.
• Identity Verification & Fraud Prevention: Conducting KYC verification prior to withdrawal; screening against sanctions and politically exposed persons (PEP) lists; detecting and preventing fraudulent transactions, multi-accounting, and bonus abuse.
• Legal & Regulatory Compliance: Meeting anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; retaining transaction records for the legally mandated retention period; responding to lawful requests from competent authorities.
• Responsible Gaming: Monitoring gaming activity patterns for signs of problem gambling; enforcing self-imposed limits and self-exclusion requests; sending responsible gaming communications where stc76 identifies a potential concern.
• Platform Security: Detecting unauthorized access attempts; investigating and responding to security incidents; maintaining audit logs for forensic purposes.
• Customer Support: Resolving account queries, deposit/withdrawal disputes, and game-related complaints; conducting customer satisfaction follow-ups.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal campaign updates (e.g., Idul Fitri special promotions, Ramadhan reload bonuses) — subject to your marketing consent preferences, which you may withdraw at any time.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game selection, cashier performance, mobile responsiveness, and overall user experience on the stc76 platform.

stc76 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

stc76 does not sell, rent, or trade your Personal Data to any third party for their independent marketing use. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

6.1 Service Providers (Data Processors). stc76 engages carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These providers operate exclusively on our documented instructions and are prohibited from using your data for any purpose beyond fulfilling their contracted service. Categories of processors we engage include:

• Payment processors and banking partners facilitating IDR transactions through BCA, BRI, BNI, Mandiri, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC and identity verification technology providers performing automated document checks and facial-match analysis.
• Cloud infrastructure and hosting providers on whose servers the stc76 platform operates.
• Game studios — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — which receive limited session data necessary to deliver their game content and verify outcomes.
• Fraud detection and risk management platforms that analyze transaction and behavioral data to identify suspicious activity.
• Customer support software providers that manage live chat and email ticketing infrastructure.

6.2 Regulatory & Law Enforcement Authorities. stc76 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of stc76, its Members, or the general public.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of stc76's assets, your Personal Data may be transferred to the acquiring or successor entity. stc76 will provide reasonable notice of any such transfer and ensure that the receiving entity agrees to process your data in accordance with standards equivalent to those described in this Policy.

6.4 With Your Consent. Beyond the circumstances described above, stc76 will not disclose your Personal Data to third parties without your prior explicit consent.

stc76 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to enhance platform functionality, maintain your login session, and gather analytics data. The categories of cookies we deploy are as follows:

You may manage your non-essential cookie preferences through your browser settings. Note that disabling functional cookies may impair your stc76 experience. Disabling strictly necessary or fraud-detection cookies is not possible without preventing access to the platform.

stc76 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention schedule is outlined below:

• Active Account Data: Retained for the full duration of your active membership on the stc76 platform, plus a minimum post-closure retention period as required by AML regulations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in line with internationally applicable AML retention requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, to support regulatory audit obligations and dispute resolution.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a given support thread, unless the subject matter relates to an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of active consent plus three (3) years after withdrawal, to evidence lawful processing history.
• Technical & Device Logs: Retained for twelve (12) months on a rolling basis for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where anonymization is not technically feasible (e.g., physical KYC document copies), data is destroyed by certified secure disposal methods.

stc76 implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, loss, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the stc76 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Our SSL certificate is maintained with a valid, continuously renewed chain of trust.
• Password Hashing: Member passwords are never stored in plain text. stc76 uses a modern, salted hashing algorithm (bcrypt or equivalent) to ensure that even in the theoretical event of a database breach, your password cannot be recovered.
• Two-Factor Authentication (2FA): stc76 strongly recommends enabling 2FA on your Account. 2FA adds a second verification layer — a one-time code sent to your registered Indonesian mobile number — that must be provided at login in addition to your password.
• Access Controls: Access to Member Personal Data within stc76's internal systems is restricted on a strict need-to-know basis. All internal access is logged, reviewed, and audited on a regular schedule.
• PCI-DSS Compliance: Financial transaction data processed through the stc76 cashier is handled in accordance with Payment Card Industry Data Security Standard (PCI-DSS) requirements.
• Intrusion Detection & Monitoring: stc76's infrastructure is continuously monitored by automated security systems capable of detecting and alerting on anomalous access patterns, brute-force attempts, and injection attacks in real time.
• Data Breach Response: stc76 maintains a documented incident response procedure. In the event of a confirmed data breach affecting Member Personal Data, affected individuals will be notified without undue delay, and the relevant supervisory authority will be informed in accordance with applicable law.

While stc76 takes all reasonable and technically practicable measures to secure your data, no digital platform can guarantee absolute security. You are responsible for safeguarding your own Account credentials and for notifying stc76 immediately at [email protected] if you suspect any unauthorized access to your Account.

As a Member of the stc76 platform, you hold a number of rights in relation to your Personal Data. These rights are described below. To exercise any of them, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". stc76 will respond to all verifiable requests within 30 days.

The stc76 platform is strictly intended for adults aged 21 years and older. stc76 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Age verification controls are in place at the point of registration and are reinforced during KYC verification.

If stc76 becomes aware that Personal Data has been submitted by or on behalf of an individual under 21, we will immediately suspend the relevant Account, delete all associated Personal Data to the extent not legally required to be retained, and return any deposited funds to the originating payment method following identity verification of the rightful owner.

stc76 operates as an internationally licensed platform. As a result, your Personal Data may be transferred to, and processed in, countries outside Indonesia where stc76's infrastructure providers, game studios, or KYC partners are located. These countries may have data protection laws that differ from those applicable in Indonesia.

Where stc76 transfers Personal Data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that described in this Privacy Policy. Such safeguards include:

• Data processing agreements incorporating internationally recognized standard contractual clauses where applicable.
• Contractual requirements that recipient entities implement technical and organizational measures equivalent to those stc76 applies internally.
• Transfer impact assessments for high-risk cross-border data flows, particularly those involving KYC and financial data.

If you require further information about the specific safeguards applied to any given international transfer, please contact us at [email protected].

The stc76 platform may contain references to third-party payment providers, game studios, and sports data providers. stc76 does not control the privacy practices of any third-party website or service, and this Privacy Policy does not apply to any data collected by third parties directly. stc76 recommends that you review the privacy policy of any third-party service before submitting Personal Data to them.

stc76 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify you by posting a prominent notice on the stc76 platform and, where practicable, by sending a notification to your registered email address.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the stc76 platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not accept the amended Policy, you must discontinue use of the platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way stc76 processes your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — Subject line: "Privacy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the stc76 platform after logging into your Account.
• Response Time: stc76 targets a first response within 2 minutes via live chat. Email inquiries relating to data rights requests are handled within 30 calendar days in accordance with applicable data protection standards.

stc76 is committed to handling all privacy-related inquiries with the highest degree of professionalism and confidentiality. If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.