Privacy Policy — sn605

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by sn605 ("we", "us", "our") in connection with your use of the sn605 platform accessible at https://sn605.net (the "Platform") and all associated services, including sports betting, live casino, online poker, slot gacor (Indonesia's popular term for high-return-rate slots), and customer support channels.

By registering an account on sn605 or by continuing to use the Platform after this Policy has been brought to your attention, you acknowledge that you have read and understood its terms and consent to the data practices described herein. If you do not agree with any part of this Policy, you must cease using the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, which together form the complete legal framework governing your relationship with sn605.

2 Data Controller

For the purposes of applicable data protection law, sn605 acts as the data controller in respect of all personal data collected through the Platform. As data controller, sn605 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable privacy and data protection regulations.

If you have any questions regarding how sn605 handles your personal data, or if you wish to exercise any of your data subject rights (see Section 11), you may contact our Data Protection team at the email address provided in Section 15 of this Policy.

3 Data We Collect

sn605 collects the following categories of personal data about you:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (required to verify that you are at least 21 years of age).
• Residential address in Indonesia (city, province, postal code).
• Valid email address and mobile phone number (Indonesian number preferred for OTP verification).
• Username chosen at the time of account registration.

3.2 Verification & KYC Data

• Copy of your Indonesian national identity card (KTP) or passport.
• Proof of residential address (e.g., utility bill, bank statement) dated within three months.
• Proof of payment method ownership (e.g., bank statement from BCA, BRI, BNI, or Mandiri; screenshot of OVO, DANA, or GoPay account registered in your name).
• Any supplementary documentation requested during enhanced due diligence reviews.

3.3 Financial Data

• Bank account details used for deposits and withdrawals (account number, bank name, account holder name). sn605 does not store full debit or credit card numbers.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers linked to your registered mobile number).
• Transaction history: deposit amounts, withdrawal requests, bet placement records, win/loss history, and bonus claim records — all denominated in Indonesian Rupiah (IDR).

3.4 Technical & Usage Data

• IP address and approximate geolocation data derived from IP lookup.
• Device type, operating system, browser type and version.
• Session logs: pages visited, time spent on each section, click paths, game titles accessed, and betting market interactions.
• Login timestamps, session durations, and logout events.
• Error logs and diagnostic data generated when the Platform encounters a technical issue during your session.

3.5 Communications Data

• Records of all communications between you and sn605 customer support, including live chat transcripts, email correspondence, and any attachments submitted.
• Records of marketing communications sent to you and whether you opened or interacted with them (where applicable and subject to your marketing consent preferences).

4 How We Collect Data

sn605 collects personal data through the following channels:

• Direct Submission: Data you provide when creating an account, completing the KYC verification process, making a deposit or withdrawal request, contacting customer support, or responding to a promotional offer.
• Automated Collection: Data collected automatically as you navigate the Platform, including via cookies, web beacons, and server-side logging (see Section 9 — Cookies & Tracking).
• Third-Party Sources: Identity verification data from licensed KYC and fraud-prevention service providers; payment confirmation data from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja); device fingerprint data from fraud detection services.
• Game Studios: Game session data (bet size, game title, round outcome) transmitted to sn605 by certified game providers including Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and NetEnt for settlement and dispute resolution purposes.

5 Purposes & Legal Basis for Processing

The table below summarises the primary purposes for which sn605 processes your personal data, together with the legal basis relied upon for each processing activity:

6 Data Sharing & Disclosure

sn605 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only where necessary and only with the categories of recipient listed below:

6.1 Service Providers & Technology Partners

We engage carefully selected third-party service providers to support platform operations. These include KYC verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process your data only on sn605's documented instructions and to maintain appropriate security standards.

6.2 Game Studios

Certified game studios such as Evolution Gaming, Pragmatic Play, and PG Soft receive limited data (session token, bet amounts, game outcomes) necessary for game delivery, jackpot calculation, and dispute resolution. Game studios are prohibited from using this data for any purpose beyond service delivery.

6.3 Financial Institutions

Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to process each deposit or withdrawal transaction. These institutions are governed by their own privacy frameworks and applicable Indonesian banking regulations.

6.4 Regulatory & Law Enforcement Authorities

sn605 may be required to disclose personal data to regulatory bodies, law enforcement agencies, courts, or other public authorities where required by law or where sn605 has a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the safety and rights of sn605, its employees, or other users.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of sn605's business assets, personal data held by sn605 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled as a consequence.

7 International Data Transfers

sn605 operates infrastructure across multiple jurisdictions to ensure platform availability and resilience. As a consequence, your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, sn605 implements appropriate safeguards to ensure that your data receives a standard of protection equivalent to that required under applicable data protection principles, including the use of contractual data transfer mechanisms and data processing agreements with all receiving entities.

If you have concerns about any specific international transfer of your data, you may contact our Data Protection team for further information (see Section 15).

8 Data Retention

sn605 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with sn605 plus a minimum of five (5) years following account closure, to satisfy anti-money laundering (AML) record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or from the date of last transaction, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with standard financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, unless the content relates to an ongoing dispute or compliance matter.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years, to enable sn605 to demonstrate compliance with consent requirements.
• Technical & Log Data: Typically retained for twelve (12) months unless retained for longer in connection with a security investigation or regulatory requirement.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with sn605's internal data destruction procedures.

9 Cookies & Tracking Technologies

sn605 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse usage patterns. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies (which keep you logged in during a session), security tokens, and load-balancing cookies. No personal data collected by strictly necessary cookies is used for marketing or analytics.

9.2 Functional Cookies

Functional cookies remember your preferences — such as language preference, last-viewed game category, and preferred deposit method — so that you do not need to re-enter them on every visit. Functional cookies are set on your device only when you interact with features that require preference storage.

9.3 Analytics Cookies

Analytics cookies collect aggregated, anonymised data about how users navigate the Platform — which pages are most visited, where users exit, and how long sessions last. This data helps sn605 improve the user experience. sn605 uses privacy-respecting analytics tools configured to anonymise IP addresses before data is processed.

9.4 Marketing & Retargeting Cookies

sn605 may use marketing cookies to display relevant promotions on the Platform and, where you have provided consent, to enable retargeting advertisements on third-party networks. You may withdraw consent for marketing cookies at any time by updating your cookie preferences via the settings panel available on the Platform, without affecting the lawfulness of processing based on consent before its withdrawal.

10 Security Measures

sn605 applies a defence-in-depth security architecture to protect personal data against unauthorised access, accidental loss, disclosure, or destruction. Key measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the sn605 Platform is encrypted in transit using industry-standard TLS 1.3 protocols.
• At-Rest Encryption: Sensitive personal data stored in sn605 databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within sn605 is granted on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their sn605 account. sn605 employees with access to production systems are required to use 2FA.
• Penetration Testing: sn605 engages accredited third-party security firms to conduct periodic penetration tests and vulnerability assessments of the Platform.
• Incident Response: sn605 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, sn605 will notify you in accordance with applicable legal requirements, including the nature of the breach, the data involved, and the steps sn605 is taking to address it.

While sn605 applies robust technical and organisational security measures, no platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your own account credentials and for logging out of shared devices after each session.

11 Your Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights in respect of your personal data held by sn605:

• Right of Access: You may request a copy of the personal data sn605 holds about you. sn605 will respond to access requests within thirty (30) days.
• Right to Rectification: If any personal data held by sn605 is inaccurate or incomplete, you have the right to request correction. Minor corrections (e.g., email address) can be made directly in your Account settings; corrections to identity data require submission of supporting documentation.
• Right to Erasure: You may request that sn605 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to sn605's legal retention obligations.
• Right to Restriction: You may request that sn605 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is under dispute.
• Right to Data Portability: You may request that sn605 provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on sn605's legitimate interests at any time, including profiling for personalised game recommendations. sn605 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact our Data Protection team using the contact details in Section 15. sn605 will respond within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, of which you will be informed in advance.

12 Minors & Age Restriction

The sn605 Platform is strictly for individuals who are 21 years of age or older. sn605 does not knowingly collect personal data from individuals under the age of 21. If sn605 becomes aware that personal data has been collected from a minor, that account will be immediately suspended and the data deleted, and any funds deposited will be returned through the original payment channel.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on sn605 without your knowledge, please contact our support team immediately via live chat or email so that we can act without delay.

13 Third-Party Links & Integrations

The sn605 Platform may contain links to third-party game studios' content interfaces or payment portals that operate under their own privacy frameworks. sn605 is not responsible for the data practices of third-party services accessed via the Platform. We recommend reviewing the privacy policies of any third-party service before providing personal data directly to that service.

14 Changes to This Privacy Policy

sn605 may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to the Platform. Where a material change is made to this Policy, sn605 will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the change takes effect.

The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this page periodically. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the sn605 Data Protection team through the following channels:

• Live Chat: Available 24/7 on the Platform — please state "Data Protection Request" at the start of your message for priority routing.
• Email: [email protected] — use the subject line "Privacy Request — [Your Username]" to ensure prompt handling.

sn605 will acknowledge all privacy-related requests within 48 hours and provide a substantive response within thirty (30) calendar days. If you are not satisfied with sn605's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.