sma777 is committed to protecting the privacy and personal data of every member. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and the rights you hold in relation to your information.
Effective Date: 1 January 2026 | Last Updated: 1 January 2026The cards below summarize the core principles of the sma777 Privacy Policy. They are provided for convenience only — the full binding policy is contained in the clauses below and governs in the event of any conflict.
sma777 collects personal data strictly for the purposes of account management, identity verification, fraud prevention, and service improvement. We do not collect data beyond what is reasonably necessary to operate a safe and compliant online gaming platform for Indonesian members.
sma777 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Data shared with third parties is limited to what is strictly necessary for operational purposes — such as payment processing and identity verification — and is governed by binding data-processing agreements.
All personal data transmitted between your device and sma777 servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored on sma777 servers — including KTP information, payment method details, and password hashes — is encrypted at rest using industry-standard cryptographic protocols.
sma777 members have the right to access, correct, and request deletion of their personal data. You may submit a data subject request to the sma777 privacy team at any time via the contact details at the bottom of this policy. Requests are processed within 30 days of receipt.
sma777 retains personal data only for as long as it is needed to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Account data for closed accounts is typically retained for a minimum of five years to satisfy anti-money-laundering record-keeping requirements.
sma777 processes the personal data of Indonesian residents, including Indonesian national identity (KTP) details, Indonesian mobile numbers, and IDR payment account information. Data handling practices are designed to align with internationally recognized data protection principles applicable to the Indonesian market context.
Throughout this Privacy Policy, the following terms carry the meanings assigned below:
sma777 acts as the Data Controller in respect of all Personal Data collected from members and visitors of the sma777 Platform. As Data Controller, sma777 determines the purposes for which your Personal Data is processed and the means by which that processing is carried out.
sma777 engages third-party Data Processors — including payment service providers, identity verification services, and game content providers — to assist in the operation of the Platform. All such processors are bound by written data-processing agreements that restrict their use of your Personal Data to the specific purpose for which it was shared and require them to implement appropriate security measures.
For all privacy-related inquiries, data subject requests, or complaints regarding sma777's handling of your Personal Data, please contact the sma777 privacy team using the contact details set out in Clause 15 of this policy.
sma777 collects the following categories of Personal Data from members and Platform visitors:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, KTP number and scan | Registration & KYC |
| Contact Data | Indonesian mobile number (+62 format), email address | Registration |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records in IDR | First deposit / KYC |
| Technical Data | IP address, device type, operating system, browser type and version, session timestamps | Every Platform visit |
| Usage Data | Pages viewed, games played, bet amounts, win/loss records, session duration, navigation paths | Active sessions |
| Communication Data | Live chat transcripts, WhatsApp message logs, support ticket content | Support interactions |
| Verification Media | KTP photograph, selfie photograph submitted for identity verification | KYC process |
sma777 does not collect special category data (such as health data, religious beliefs, political opinions, or biometric data beyond basic identity photograph verification) unless it is strictly necessary for a specific compliance purpose and you have given explicit consent.
sma777 collects Personal Data through the following channels:
sma777 processes your Personal Data for the following specific purposes:
sma777 processes your Personal Data on the following legal grounds, consistent with internationally recognized data protection principles:
sma777 shares your Personal Data with third parties only in the specific circumstances described below. In all cases, data sharing is governed by binding contractual arrangements that restrict the third party's use of your data to the specified purpose:
sma777 does not sell, rent, or trade your Personal Data to third parties for commercial advertising or marketing purposes under any circumstances.
The sma777 Platform uses cookies and similar browser-based tracking technologies to support Platform functionality, maintain your logged-in session, and analyze usage patterns. The following categories of cookies are in use:
sma777 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. The Platform does not load Google Ads, Facebook Pixel, or similar cross-site advertising tracking tools.
You may manage your cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in and using the Platform. Disabling analytics cookies will not affect your ability to access any Platform features.
sma777 implements comprehensive technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, and destruction. Our security infrastructure includes the following measures:
While sma777 implements rigorous security measures, no system is entirely impervious to attack. You are encouraged to contribute to your own account security by using a strong, unique password, enabling OTP verification where available, and never sharing your login credentials with third parties.
sma777 retains Personal Data for as long as is necessary to fulfill the purpose for which it was collected, subject to any longer retention periods required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data (active members) | Duration of active membership | Contractual necessity |
| Account & Identity Data (closed accounts) | Minimum 5 years from account closure date | AML legal obligation |
| Financial Transaction Records | Minimum 5 years from transaction date | AML legal obligation |
| KYC Verification Documents | Minimum 5 years from submission date | AML legal obligation |
| Support Communication Logs | 3 years from the date of the interaction | Legitimate interest (dispute resolution) |
| Technical / Usage Data | 13 months from collection date | Legitimate interest (analytics) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal compliance |
At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. Where anonymization is not technically feasible, data is securely destroyed using methods that prevent reconstruction.
As a sma777 member whose Personal Data we process, you hold the following rights in relation to your information. To exercise any of these rights, contact the sma777 privacy team using the details in Clause 15. All requests are processed within 30 days of receipt, and sma777 will not charge a fee for standard requests:
The sma777 Platform is strictly intended for adults aged 21 and over. sma777 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted at registration and as part of the KYC process before the first withdrawal is processed.
If sma777 becomes aware that Personal Data has been collected from an individual under 21 — whether through a misrepresentation at registration or through any other means — that account will be closed immediately, any deposited funds will be returned to the original payment source after verification, and all associated Personal Data will be deleted from sma777 systems as promptly as legally permissible.
If you are a parent or guardian and believe that a minor in your care has registered a sma777 account, please contact the sma777 support team immediately via live chat or at [email protected]. We will investigate and act promptly.
The sma777 Platform serves Indonesian members, and the majority of data processing takes place within server infrastructure located in or near the Asia-Pacific region. In limited circumstances, Personal Data may be transferred to or processed in jurisdictions outside Indonesia — for example, where sma777 uses a third-party service provider whose infrastructure is located in a different jurisdiction.
Where such transfers occur, sma777 takes steps to ensure that your Personal Data continues to be afforded an equivalent level of protection to that applicable in its jurisdiction of collection. These steps include implementing standard contractual clauses in agreements with overseas Data Processors and selecting providers who operate under recognized data protection frameworks.
By creating a sma777 account, you acknowledge that your Personal Data may be transferred to, stored, and processed outside Indonesia in connection with the provision of the sma777 service, and that such transfers are subject to the protections described in this clause.
sma777 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, applicable legal requirements, or the features and services available on the Platform. When this policy is updated, the "Last Updated" date at the top of the page will be revised accordingly.
Where changes are material — meaning they significantly affect how your Personal Data is used or the rights available to you — sma777 will notify active members via a prominent notice on the Platform or by message to your registered mobile number or email address, providing at least 14 days' notice before the changes take effect.
Your continued use of the sma777 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any change to this policy, you should immediately cease using the Platform and contact support to request account closure. sma777 recommends reviewing this policy periodically to remain informed of how your data is handled.
For all privacy-related inquiries, data subject requests, or concerns about sma777's handling of your Personal Data, please contact the sma777 privacy team through the following channels. All privacy requests receive a written acknowledgment within 3 business days and a substantive response within 30 days:
If you are not satisfied with sma777's response to a privacy request or complaint, you have the right to escalate your concern to an appropriate supervisory authority or independent dispute resolution body. sma777 will provide guidance on escalation options upon request.
Questions about how sma777 handles your data? Our 24/7 support team is ready to help. You can also explore our full platform, review the FAQ, or check our Terms & Conditions. 21+ only. Play responsibly.