stm88Privacy Policy

This page describes what data we collect when you use stm88 and how we keep that data protected. We collect personal information (name, email, phone, national ID) to operate your account, process deposits and withdrawals, and comply with KYC verification. We do not sell your data to third parties. Your data is encrypted during transmission and storage, and we retain it only as long as necessary.

Our platform operates across Southeast Asia, with users in Jakarta, Surabaya, Bandung, Medan, Semarang, and other regions. Some of our servers and payment processors sit outside Indonesia, which means your data may cross borders. We protect it at every step using industry-standard encryption (TLS 1.2) and secure storage practices.

If you have questions about our privacy practices, how we handle your data, or your rights regarding your information, contact our support team via in-app chat or email. We respond to data access requests and deletion requests within 5-7 business days.

What Data We Collect on stm88

We collect data in three categories: account registration, gameplay, and payments. During registration, we collect your email address, phone number, password, full legal name, date of birth, and national ID number. This information is required to create your stm88 account and complete KYC verification before your first withdrawal.

During gameplay, we log all your betting activity: bet placements, game outcomes, deposits, withdrawals, and account balance changes. We record live-dealer hands (video and audio), sportsbook wagers (match details, odds, results), and slot game spins (timestamp, outcome, payout). We keep these records for 12 months to support dispute resolution and compliance audits.

During payment processing, we collect payment method details (wallet provider, bank name, account holder name) and transaction records. We do not store full card numbers or full bank account numbers—instead, we tokenize them (create a reference code) so we can process future transactions without storing sensitive data directly.

How We Use Your Data on stm88

We use your personal data to:

• Operate your account: Log you in, process bets, settle outcomes, and maintain your balance.
• Process payments: Coordinate with DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet to complete deposits and withdrawals.
• Verify your identity: Compare your KYC documents (national ID, address proof) against official databases to prevent fraud and underage access.
• Resolve disputes: Review your account history, game recordings, and transaction logs when you report a problem.
• Comply with law: Share data with government agencies or law-enforcement when required by court order or legal obligation.
• Improve our service: Analyze aggregate data (not individual profiles) to understand which games are popular, which payment methods are preferred, and where our platform is slow.

We do not use your data for marketing (no targeted ads, no email campaigns, no SMS promotions) unless you explicitly opt in. We do not sell your data to third parties. We do not combine your stm88 data with data from other sources to build a broader profile of you.

Data Retention and Deletion on stm88

We retain your account data for as long as your account is active plus 12 months after closure. This retention window covers game recordings, transaction history, and dispute resolution. After 12 months, we delete account data unless legal obligations require us to keep it longer.

KYC documents (national ID, address proof) are retained for 7 years per compliance requirements in most jurisdictions, then deleted. You can request deletion of your account and all associated data anytime—this is a permanent action and cannot be reversed. Upon deletion request, we refund any remaining balance first, then delete your account and all personal data except where law requires retention.

Third-Party Processors and Data Sharing

We work with external partners to operate stm88. These partners include payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment), cloud hosting providers (servers may be in Singapore, Australia, or other regions), and live-dealer studios (video streaming, game dealers). We share data with these partners only to the extent necessary to provide our service.

For example, when you request a withdrawal via online payment, we send your name, phone, and withdrawal amount to e-wallet's system so they can credit your wallet. We do not send them your password, login history, or betting data. When you join a live blackjack table, the studio receives your username and table assignment—they do not receive your account balance or deposit history.

All our third-party partners are contractually bound to protect your data and use it only for the purposes we specify. We audit these partners annually to ensure compliance. If a partner breaches our agreement, we terminate the relationship and notify affected users.

International Data Transfers and Server Locations

Our platform operates across multiple countries. Some of our servers are located outside Indonesia—for example, in Singapore or Australia. This means your data may be transferred and stored internationally. When data crosses borders, we protect it using the same encryption and security standards we use locally.

By using stm88, you acknowledge that your data may be processed outside your jurisdiction and may be subject to the laws of the country where our servers are located. We comply with all applicable data-protection laws in each jurisdiction we operate in, but standards vary. We do not make claims about data safety that exceed our actual technical capabilities.

Your data on stm88 is encrypted in transit and at rest. We do not sell it, trade it, or use it beyond the stated purposes of operating our platform.

Your Rights Regarding Your Data on stm88

You have the right to request access to your personal data. Contact our support team with your account email, and we provide a downloadable file containing all data we hold on you (KYC documents, account history, betting records, payment history). We fulfill access requests within 5-7 business days.

You have the right to request correction of inaccurate data. If you believe your name, phone, or address is recorded incorrectly on stm88, contact us and we update your account records. If your KYC documents were rejected due to image quality, you can resubmit corrected documents.

You have the right to request deletion of your account and data. Upon request, we refund your remaining balance and delete your account. This is permanent and cannot be reversed. Some data may be retained longer if required by law (e.g., tax records, anti-money-laundering records).

Cookies and Tracking on stm88

We use cookies minimally. Session cookies store your login token—they expire when you close your browser and allow us to keep you logged in without asking for your password on every click. We use these cookies because stm88 requires authentication for security.

We do not use tracking cookies to build a profile of your browsing outside stm88. We do not set third-party cookies for analytics or advertising. If you disable cookies, stm88 may not function properly (you may be logged out frequently). Your browser settings allow you to clear cookies and control cookie acceptance.

Security Measures on stm88

We protect your data using TLS 1.2 encryption for all data in transit (between your device and our servers). On our servers, we hash passwords using bcrypt so we cannot retrieve them even internally. We tokenize payment details so we never store full card or account numbers. We maintain firewalls, intrusion detection, and regular security audits.

Despite these measures, no system is perfectly secure. If we detect a breach, we notify affected users within 24-48 hours, detail what data was exposed, and recommend actions (password reset, payment-method change). We investigate breaches thoroughly and report findings to regulatory authorities if required.

Policy Changes and Contact Information

We may update this privacy policy anytime. Changes are effective immediately upon posting on this page. Your continued use of stm88 after an update constitutes acceptance of the new policy. If a change significantly reduces your privacy protections, we notify you via email at least 30 days before the change takes effect, giving you a chance to close your account or opt out.

For privacy questions, data access requests, or complaints about our data handling, contact our support team:

• In-app chat: available 08:00–22:00 Jakarta time daily
• Email address: available in your account settings
• Response time: typically within one business hour during business hours

We take data privacy seriously and respond to all requests professionally. If you believe we have violated your privacy rights, you can escalate your complaint to the data-protection authority in your jurisdiction (if applicable). stm88 operates under the legal frameworks that govern our service area. Services are available only where applicable law permits.