Your privacy matters to us. This Privacy Policy explains precisely what personal data stm888 collects from players in Indonesia, how that data is used and stored, who it may be shared with, and what rights you hold over your own information. We are committed to handling your data responsibly and transparently.
We collect only the data necessary to operate your account, process transactions, verify your identity, and comply with our licensing obligations — nothing beyond what is required for a safe, functional platform.
All data transmitted between your browser and stm888 servers is protected using TLS 1.3 encryption. Sensitive fields such as payment details and identity documents are encrypted at rest using AES-256 standards.
stm888 does not sell, rent, or trade your personal information to unaffiliated third parties for marketing purposes. Your data stays within the stm888 ecosystem and its directly licensed service partners.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 7 business days as required by our licensing framework.
stm888 uses functional, analytical, and session cookies to deliver a seamless platform experience. You can adjust cookie preferences via your browser settings, though disabling essential cookies may affect platform functionality.
We do not hold your data indefinitely. Retention periods are tied to regulatory requirements — account and transaction data is retained for a minimum of 5 years post-account closure in line with international AML obligations.
stm888 ("we", "us", "our", "the Platform") operates the online casino and sportsbook accessible at https://stm888.app. We are committed to protecting the privacy and personal data of every player who registers, deposits, places bets, or otherwise interacts with our platform. This Privacy Policy ("Policy") sets out in plain, professional English exactly how we collect, use, store, share, and protect your personal information.
This Policy applies to all personal data collected through the stm888 website, including data submitted during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and passive data collected through cookies and analytics tools when you browse the platform.
stm888 operates under an international gaming license. Our data practices are designed to meet the standards imposed by that licensing framework, which incorporate internationally recognized data protection principles including purpose limitation, data minimization, storage limitation, integrity, and confidentiality. Where applicable, we also consider the personal data protection guidelines relevant to our Indonesian player base.
By registering an stm888 account or continuing to use the platform after any material update to this Policy, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create or continue to use an stm888 account.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, either directly (e.g., full name, national identity number) or indirectly (e.g., device ID combined with IP address and behavioral pattern). |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, or deletion. |
| "Data Controller" | stm888, as the entity that determines the purposes and means by which Personal Data is processed on this platform. |
| "Data Processor" | A third-party entity that processes Personal Data on behalf of stm888 under a binding data processing agreement — such as a payment gateway, KYC verification service, or cloud infrastructure provider. |
| "Player" / "You" | Any individual who has registered or is in the process of registering an account on the stm888 platform. |
| "KYC" | Know Your Customer — the identity verification process required before withdrawals are processed, comprising proof of identity, proof of address, and proof of payment method ownership. |
| "Cookies" | Small text files placed on your device by the stm888 platform to maintain session state, remember preferences, and collect analytical data. |
| "Sensitive Data" | A subset of Personal Data that warrants heightened protection — including government-issued identity document numbers (e.g., Indonesian KTP number, passport number), financial account details, and data relating to health or responsible gaming status. |
stm888 collects personal data through three primary channels: data you provide directly, data we generate through your use of the platform, and data received from third-party partners. The following table summarizes the categories of data we collect and the context in which each category arises.
| Data Category | Specific Items | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian NIK or passport number, photograph | Account registration form; KYC document upload |
| Contact Data | Email address, mobile phone number, residential address in Indonesia | Account registration form; account settings updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet registered name and ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction amounts in IDR | Cashier / payment flow; KYC proof-of-payment document |
| Verification Data | Copies of government-issued ID (KTP, SIM, Passport), proof of address documents, selfie photographs for liveness verification | KYC document upload portal |
| Technical Data | IP address, browser type and version, operating system, device type, device fingerprint hash, time-zone setting (WIB/WITA/WIT), session tokens | Automatically collected on platform access |
| Behavioral Data | Pages visited, games played, bet history, login timestamps, deposit and withdrawal frequencies, promotional offer interactions | Platform analytics; game and sportsbook transaction logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, complaint submissions | Customer support channels |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, time-out period records, any vulnerability flags raised by our responsible gaming monitoring system | Account settings; responsible gaming tools; automated risk monitoring |
stm888 processes your personal data only for defined, legitimate purposes. The following table maps each processing purpose to the lawful basis on which we rely and the data categories involved.
| Purpose | Lawful Basis | Data Categories Used |
|---|---|---|
| Account creation and management | Contractual necessity | Identity, Contact |
| Processing deposits and withdrawals in IDR | Contractual necessity | Financial, Identity |
| KYC identity verification | Legal obligation; contractual necessity | Identity, Verification, Financial |
| Fraud detection and prevention | Legitimate interest; legal obligation | Technical, Behavioral, Financial |
| Anti-money laundering (AML) monitoring | Legal obligation | Financial, Identity, Behavioral |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interest | Behavioral, Responsible Gaming |
| Customer support and dispute resolution | Contractual necessity | Identity, Contact, Communications |
| Platform security and technical maintenance | Legitimate interest | Technical, Behavioral |
| Promotional communications (with consent) | Consent | Contact, Behavioral |
| Compliance with regulatory reporting obligations | Legal obligation | Identity, Financial, Behavioral |
stm888 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new game launches, sportsbook promotions (including events tied to BRI Liga 1, EPL, Champions League, and MotoGP's Mandalika circuit), and seasonal offers around Indonesian cultural events such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August). You may opt out of promotional communications at any time by updating your notification preferences in your account settings or by contacting our support team. Opting out of marketing communications does not affect operational communications such as transaction confirmations, security alerts, and policy updates.
stm888 uses automated systems to monitor account activity for fraud indicators, AML red flags, and responsible gaming risk signals. These systems may trigger automated account restrictions (such as temporary withdrawal holds or escalation to manual review) without prior human intervention. Where an automated decision produces a significant effect on your account, you have the right to request a manual review by a member of the stm888 compliance team. To exercise this right, contact [email protected] with the subject line "Manual Review Request".
stm888 does not sell, rent, auction, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the specific circumstances described below.
stm888 engages carefully vetted third-party service providers who act as Data Processors under binding data processing agreements. These providers include:
stm888 may disclose your personal data to relevant authorities without prior notice to you where required or authorized to do so by:
In all such cases, stm888 discloses only the minimum personal data required to satisfy the specific legal obligation and documents the disclosure in our internal compliance records.
In the event that stm888 undergoes a merger, acquisition, or transfer of substantially all of its business assets to a successor entity, your personal data may be transferred as part of that transaction. You will be notified at your registered email address at least 14 days before any such transfer takes effect, and you will be given the opportunity to close your account and withdraw your balance before the transfer is completed.
stm888 uses cookies and similar client-side storage technologies to operate the platform, maintain your session, remember your preferences, and collect analytical data that helps us improve the user experience. The following cookie categories are in use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain login session state, CSRF protection tokens, load balancing identifiers, and platform security controls. Without these cookies the platform cannot function. | No — required for platform operation |
| Functional | Remember your language preference, display settings, last-visited game category, and responsible gaming limit settings between sessions. | Yes — via browser settings (may affect UX) |
| Analytical | Aggregate, anonymized statistics on page views, session duration, feature usage, and navigation paths — used to identify UX improvements. No personally identifiable data is transmitted to third-party analytics services. | Yes — via browser settings |
| Fraud Prevention | Device fingerprinting tokens used to detect multi-accounting, bot activity, and fraudulent deposit patterns. These cookies are classified as strictly necessary for platform integrity. | No — required for platform security |
stm888 does not use third-party advertising or retargeting cookies. We do not participate in cross-site behavioral advertising networks. To manage cookie settings, refer to the help documentation for your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet on Android devices commonly used in Jakarta, Surabaya, and across Indonesia).
stm888 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to overriding regulatory retention obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years from account closure date | International AML regulatory obligation |
| Financial Transaction Records | 5 years from transaction date | AML and gaming license compliance |
| KYC Verification Documents | 5 years from account closure date | Regulatory obligation; fraud investigation |
| Customer Support Communications | 3 years from last interaction | Dispute resolution; contractual obligation |
| Behavioral & Analytical Data | 24 months from collection (rolling) | Legitimate interest — platform improvement |
| Responsible Gaming Records | Duration of self-exclusion + 2 years | Regulatory obligation; player protection |
| Marketing Consent Records | Duration of consent + 3 years | Demonstration of consent lawfulness |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized such that it can no longer be linked to an identifiable individual. Physical document copies (where applicable) are destroyed by secure shredding. Digital records are overwritten using industry-standard data erasure protocols.
stm888 implements technical and organizational security measures appropriate to the sensitivity of the data we process. Key security controls in place include:
As a player on the stm888 platform, you hold the following rights in relation to your personal data. These rights are subject to certain limitations where overriding regulatory obligations apply (for example, we cannot delete financial transaction records that we are required to retain for AML compliance purposes).
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Request Type]". We will acknowledge your request within 48 hours and provide a substantive response within 7 business days. Complex requests may require up to 30 days, in which case we will notify you of the extended timeline.
stm888 operates as an internationally licensed platform. Some of the third-party service providers we engage — particularly game studios such as Pragmatic Play and Evolution Gaming, and cloud infrastructure providers — are headquartered or operate servers outside Indonesia. Where your personal data is transferred to a jurisdiction outside Indonesia for processing, stm888 ensures that such transfers are protected by one or more of the following safeguards:
stm888 does not transfer your sensitive verification documents (KTP, passport, proof of address) outside of the KYC service provider ecosystem. These documents are processed in a controlled, audited environment and are not retained by stm888 on servers outside our primary hosting infrastructure beyond the active verification period.
stm888 enforces a strict 21+ only policy across all platform services. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the stm888 account registration process and the KYC procedure.
If stm888 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will:
If you are a parent or guardian and believe that a minor in your care may have registered or attempted to register on the stm888 platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take these reports extremely seriously and will investigate and respond within 24 hours.
stm888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, regulatory requirements, or legal obligations. All updates will be published on this page at https://stm888.app/privacy-policy with a revised "Last Updated" date.
For material changes — those that affect how we collect or use your personal data in a way that is meaningfully different from what was previously disclosed — we will send a notification to your registered email address at least 7 calendar days before the change takes effect. Minor clarifications, formatting corrections, or updates that do not affect the substance of our data practices will take effect upon publication without prior notice.
Continued use of the stm888 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material update, you may close your account and withdraw your balance before the effective date of the change. To close your account, contact our support team via live chat or email.
If you have any questions, concerns, or requests relating to this Privacy Policy or stm888's data practices, please reach out to our Data Protection team. We are committed to responding to all privacy-related inquiries promptly and transparently.
When contacting us about a data rights request or privacy concern, please include your registered account username or email address and a brief description of your request. This allows our team to locate your account records and respond accurately and efficiently. Do not include your password, full financial account number, or other sensitive credentials in any email correspondence.
Now that you understand how we protect your data, dive into the stm888 platform — sports betting, live casino, slots, roulette, and more. Your privacy is secured at every step.