Your privacy matters to us. This policy explains exactly what personal data st678 collects, why we collect it, how we use and protect it, and the rights you hold over your own information.
These six principles summarise how st678 handles your personal information. The full policy below contains the complete legal detail — please read it in its entirety before using the platform.
All data transmitted between your device and the st678 platform is protected by industry-standard 256-bit SSL/TLS encryption. Your account credentials, payment details, and personal information are never sent in plain text.
st678 will never sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate your account, process transactions, fulfil legal obligations, and improve your platform experience.
You have the right to access, correct, and request deletion of the personal data we hold about you at any time, subject to legal retention requirements. Submit a data request to [email protected] at any time.
All personal data and KYC documents are stored on encrypted, access-controlled servers. Access is restricted to authorised st678 personnel with a legitimate operational need, and all access events are logged and audited.
st678 uses strictly necessary cookies to keep you logged in, functional cookies to remember your preferences, and analytics cookies to understand platform usage. We do not use advertising or tracking cookies from third-party ad networks.
For any privacy-related inquiry, data access request, or concern about how st678 handles your information, our Indonesian-speaking support team is available 24/7 via live chat or email at [email protected].
Scope of This Policy: This Privacy Policy applies to all personal data processed by st678 in connection with the operation of the platform at st678.pro, including account registration, deposits and withdrawals, betting activity, customer support interactions, and any other services offered by st678 to players in Indonesia and internationally. By creating an account or using the st678 platform, you acknowledge that you have read and understood this policy.
In this Privacy Policy, the following terms carry the meanings described below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, contact details, financial information, and device identifiers. |
| Processing | Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, modification, restriction, or deletion. |
| Data Controller | The entity that determines the purposes and means of processing Personal Data — in this context, st678. |
| Data Processor | A third party that processes Personal Data on behalf of st678 under a binding contractual arrangement, such as a payment processor or identity verification provider. |
| Player / You | Any individual who has registered an account on the st678 platform or otherwise interacts with the platform as a visitor. |
| KYC | Know Your Customer — the identity and document verification process st678 applies to accounts before withdrawals may be processed. |
| Cookies | Small text files placed on your device by the st678 platform to enable core functionality, remember preferences, and gather anonymised usage analytics. |
| IDR / Rp | Indonesian Rupiah — the sole currency in which st678 accounts are denominated. |
st678 acts as the Data Controller in respect of all Personal Data collected through the st678.pro platform. As Data Controller, st678 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that such processing is carried out lawfully, fairly, and transparently.
For all privacy-related inquiries, data access requests, or complaints regarding st678's handling of your Personal Data, please contact our dedicated privacy support team using the details set out in Section 15 of this policy.
st678 collects the following categories of Personal Data in the course of operating the platform and providing betting and gaming services to players across Indonesia:
Full legal name, date of birth, nationality, and gender as provided during account registration and KYC verification. Where required for verification, a copy of a government-issued identity document (KTP, passport, or SIM driving licence) is collected and securely stored.
Email address, mobile phone number, and residential address (including city, province, and postal code) in Indonesia. Players based in cities such as Jakarta, Surabaya, Bandung, Medan, Bali, and Yogyakarta may be asked to confirm their city of residence as part of account setup.
Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. st678 records account holder names and account numbers solely to verify that payment methods are registered in the player's own name and to process transactions. st678 does not store full card numbers or bank PINs.
A complete record of all deposits, withdrawals, wagers, game outcomes, bonus claims, and account balance movements associated with your st678 account. This includes bet amounts in IDR, odds accepted, markets wagered on (sportsbook, live casino, slots, togel, esports), and timestamps in WIB (Western Indonesia Time, UTC+7).
IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, session duration, and pages visited on the st678 platform. This data is collected automatically via server logs and analytics cookies.
Records of all written communications between you and the st678 support team, including live chat transcripts, email correspondence, and any documents or screenshots submitted in support of a complaint, KYC request, or dispute.
Data relating to your gambling patterns, session frequency, wager sizes, loss history, and any responsible gaming tools you have activated (deposit limits, cooling-off periods, self-exclusion requests). This data is used exclusively to power st678's responsible gaming monitoring systems and is never used for commercial profiling.
st678 collects your Personal Data through the following methods:
st678 processes your Personal Data only where a lawful basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract — necessary to create and maintain your st678 account. |
| Processing deposits and withdrawals in IDR | Performance of a contract — necessary to fulfil your payment instructions. |
| KYC identity verification | Legal obligation — required to comply with internationally recognised AML and responsible gaming standards. |
| Fraud prevention and AML monitoring | Legitimate interest — protecting the platform and its players from financial crime. |
| Responsible gaming monitoring and interventions | Legitimate interest and legal obligation — identifying and protecting at-risk players. |
| Customer support communications | Performance of a contract — necessary to respond to your inquiries and resolve disputes. |
| Platform analytics and improvement | Legitimate interest — understanding how players use the platform to improve the user experience. |
| Promotional communications (where opted in) | Consent — where you have opted in to receive marketing emails or platform notifications from st678. |
Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting support or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
st678 does not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data only in the following strictly limited circumstances:
st678 engages carefully vetted third-party service providers who process Personal Data strictly on our behalf and under binding data processing agreements. These include payment processors (to facilitate IDR transactions via local banks and e-wallets), identity verification providers (to conduct KYC document checks), cloud hosting and infrastructure providers (to store data securely), and customer support platform providers (to power our live chat service). All processors are contractually required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they perform for st678.
st678 may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other public authorities where required to do so by applicable law, court order, or regulatory direction. In all such cases, st678 will disclose only the minimum information necessary to satisfy the legal requirement.
In the event that st678 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the privacy protections applicable to your data will be maintained.
st678 may disclose Personal Data where necessary to protect the legal rights, property, or safety of st678, its players, or the public — for example, to detect and prevent fraud, bonus abuse, or money laundering on the platform.
st678's platform serves players primarily based in Indonesia. However, certain service providers engaged by st678 — including cloud infrastructure, identity verification, and customer support platform vendors — may process data in jurisdictions outside Indonesia.
Where Personal Data is transferred internationally, st678 ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by st678 itself. st678 does not transfer Personal Data to any jurisdiction that lacks an adequate framework for personal data protection without first implementing such safeguards.
Your data remains protected regardless of where it is processed. All international transfers are governed by data processing agreements that impose the same security and confidentiality standards as apply within Indonesia. st678 reviews all third-party processors annually to confirm ongoing compliance.
st678 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account, plus 5 years following permanent account closure. |
| KYC identity documents | 5 years from the date of submission, or longer if required by AML regulations applicable to st678's licensing jurisdiction. |
| Transactional and financial records | 7 years from the date of each transaction, in line with standard international financial record-keeping requirements. |
| Customer support communications | 3 years from the date of the most recent communication in a support thread. |
| Responsible gaming records | Duration of active account, plus 5 years. Self-exclusion records are retained for a minimum of 6 years. |
| Technical and analytics data | 13 months from the date of collection, after which it is aggregated and anonymised. |
| Marketing consent records | Until consent is withdrawn, plus 3 years to evidence the lawful basis for prior communications. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be linked to an identifiable individual. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, you will be notified where legally permissible.
The st678 platform uses cookies and similar tracking technologies to deliver a functional, secure, and consistent player experience. The following categories of cookies are used:
These cookies are essential for the platform to function correctly. They maintain your login session, remember your account preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without disrupting core platform functionality. No consent is required for strictly necessary cookies as they are required to fulfil your service request.
Functional cookies remember your stated preferences — such as your preferred odds format, language display settings, and notification preferences — so that they persist across sessions. These cookies improve convenience but are not essential to use the platform. You may disable them through your browser settings, though some features may not function as expected.
st678 uses first-party analytics cookies to collect anonymised data on how players navigate and interact with the platform — including page visit frequency, feature adoption rates, and session duration. This data is used exclusively for internal platform improvement purposes. Analytics data is aggregated and cannot be traced back to individual players. st678 does not use third-party advertising networks or behavioural tracking cookies.
You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is placed. Please note that blocking strictly necessary cookies will prevent you from logging in to your st678 account. For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.
st678 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:
Player Responsibility: You are responsible for keeping your st678 account password confidential and for logging out after each session, particularly on shared devices. st678 will never ask for your password via email, live chat, or any other channel. If you suspect unauthorised access to your account, contact support immediately via live chat.
Subject to applicable law, you have the following rights in respect of your Personal Data held by st678. To exercise any of these rights, please contact the st678 privacy team using the details in Section 15.
You have the right to request a copy of all Personal Data that st678 holds about you. st678 will provide this information within 30 days of receiving a verified request. The response will be provided in a structured, commonly used, machine-readable format where technically feasible.
If any Personal Data that st678 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through the account settings panel; for changes that require manual review (such as legal name changes), please contact support with supporting documentation.
You may request that st678 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. The right to erasure is subject to exceptions where st678 is required by law to retain the data — for example, financial transaction records and KYC documents must be retained for the periods specified in Section 8.
You may request that st678 restrict the processing of your Personal Data in certain circumstances — for example, while a dispute about accuracy is being resolved, or where you have objected to processing and a determination is pending. During a restriction, st678 may store your data but will not actively process it beyond what is strictly necessary.
Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used format and to have it transmitted to another data controller, where technically feasible.
You have the right to object to the processing of your Personal Data where that processing is based on st678's legitimate interests. st678 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
Where processing is based on your consent — such as consent to receive promotional communications — you may withdraw that consent at any time without prejudice to any processing that occurred prior to withdrawal.
How to Exercise Your Rights: Send your request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". st678 will acknowledge your request within 48 hours and respond substantively within 30 days. We may ask you to verify your identity before processing the request to ensure that your data is not disclosed to an unauthorised party.
The st678 platform is strictly restricted to individuals who are at least 21 years of age. st678 does not knowingly collect or process Personal Data from any individual under the age of 21. Age verification is applied to all accounts as part of the KYC process.
If st678 discovers that Personal Data has been collected from an individual who is under 21, that account will be immediately closed, the data deleted (subject to any mandatory legal retention obligations), and all associated funds returned minus any losses incurred prior to detection. If you believe a minor has registered an account on st678, please notify us immediately at [email protected].
The st678 platform may contain links to third-party websites, game providers, or external resources. This Privacy Policy applies solely to Personal Data collected and processed by st678 in connection with the st678.pro platform. st678 has no control over the privacy practices of third-party websites and is not responsible for their content or privacy policies. We recommend reviewing the privacy policy of any third-party site you visit independently of the st678 platform.
st678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform services. Material changes will be communicated to registered players via a notice on the st678 platform homepage and, where practicable, via email to the address registered on your account.
The date of the most recent revision is displayed at the top of this document. Your continued use of the st678 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated policy, you should cease using the platform and request account closure via the support team.
For all privacy-related inquiries, data access requests, or concerns about how st678 handles your Personal Data, please contact our support team through the following channels:
st678's privacy support team includes Indonesian-speaking agents available at all times. If you are not satisfied with st678's response to a privacy inquiry, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Operating Hours: Full staffing 24/7 with enhanced coverage during WIB peak hours (18:00–24:00 WIB). Indonesian-speaking agents are available at all times to assist with privacy inquiries in addition to general support requests.
st678 combines world-class data security with a full suite of sports betting, live casino, and slot games — all designed for Indonesian players. Sign in to your account or explore the platform today.