Privacy Policy — s7win

Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "s7win", "we", "us", or "our" refers to the operator of the s7win platform accessible at https://s7win.pro and all associated sub-pages and services.
• "Platform" refers to the s7win website, mobile-optimized interface, and any related digital services operated by s7win.
• "You" or "User" refers to any individual who visits, registers on, or uses the s7win Platform in any capacity.
• "Personal Data" refers to any information that identifies or can reasonably be used to identify a living individual, including name, email address, mobile number, IP address, device identifiers, and financial account details.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Controller" refers to s7win in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" refers to any third party that processes Personal Data on s7win's behalf and under s7win's documented instructions.
• "KYC" (Know Your Customer) refers to the identity and age verification process s7win conducts to confirm a player's identity, age, and source of funds in compliance with applicable anti-money-laundering and responsible gaming obligations.
• "Cookies" refers to small text files placed on your device by the s7win Platform to store session information, preferences, and analytics data.

Scope of This Policy

This Privacy Policy applies to all Personal Data collected by s7win in connection with the operation of its online casino, sportsbook, live dealer, poker tournament, and all other gaming and betting services offered through the s7win Platform. It covers data collected from:

• Visitors who browse the s7win Platform without registering an account.
• Individuals who commence but do not complete the account registration process.
• Registered players with active or inactive s7win accounts.
• Individuals who contact s7win via email, live chat, or any other support channel.
• Individuals who interact with s7win's promotional campaigns or marketing communications.

This Policy does not apply to third-party websites or services that may be referenced on the s7win Platform. s7win accepts no responsibility for the privacy practices of any third party.

Personal Data We Collect

s7win collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are set out below:

3.1 Identity and Registration Data

When you create an account, we collect your full legal name, date of birth, gender, Indonesian National Identity Card (KTP) number or passport number, and a selfie or photograph for identity verification purposes.

3.2 Contact Data

We collect your email address, Indonesian mobile phone number, and current residential address (including province and city — for example, Jakarta, Surabaya, Bandung, Bali, Medan, or Yogyakarta).

3.3 Financial Data

We collect details of the payment methods you use to deposit and withdraw funds, including bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and partial card details (Visa, Mastercard) where applicable. We do not store full card numbers on our servers; card transactions are tokenized by our PCI-DSS-compliant payment processor.

3.4 Transaction Data

We maintain records of all deposits, withdrawals, game wagers, bet placements, bonus activations, and promotional claims made through your account, including timestamps, amounts in Indonesian Rupiah (IDR), and transaction reference numbers.

3.5 Technical and Device Data

We automatically collect your IP address, browser type and version, operating system, device type and model, screen resolution, time zone setting (we note WIB/UTC+7 as the default for Indonesian users), and referring URL when you access the s7win Platform.

3.6 Usage and Behavioral Data

We collect data on how you interact with the Platform, including pages visited, games played, session duration, click patterns, search queries within the Platform, and feature usage patterns. This data is used in aggregate and individual form to improve the Platform and personalize your experience.

3.7 Communications Data

When you contact s7win's customer support team via live chat or email, we retain transcripts and records of those communications, including the date, time, channel, and content of the interaction.

How We Collect Your Data

s7win collects Personal Data through the following channels:

4.1 Direct Collection

You provide data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey or promotion, or update your account profile.

4.2 Automated Collection

The s7win Platform automatically collects technical and usage data each time you access or interact with the Platform. This collection is facilitated by cookies, web beacons, server logs, and similar tracking technologies described in Section 10 of this Policy.

4.3 Third-Party Sources

We may receive Personal Data about you from the following third-party sources:

• Payment processors — transaction confirmation data, fraud screening signals, and chargeback notifications from payment partners processing transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard.
• Identity verification providers — KYC verification results and fraud risk scores from our licensed identity verification partner.
• Game providers — game session logs and round-level transaction data from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe, as required to reconcile game outcomes and resolve player disputes.
• Analytics providers — aggregated and anonymized traffic data from web analytics platforms used to monitor Platform performance.

Purpose of Processing

s7win processes your Personal Data for the following purposes:

Legal Basis for Processing

s7win processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — specifically, to operate your account, process payments, deliver gaming services, and provide customer support.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC and AML obligations under our international gaming license conditions, and record-keeping obligations.
• Legitimate interests: Processing conducted for s7win's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, product analytics, and improving the Platform — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent, primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

s7win does not sell or rent your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary:

7.1 Service Providers (Processors)

We share Personal Data with trusted third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors, KYC verification providers, cloud infrastructure providers, email delivery platforms, customer support software providers, and fraud detection services. All processors are contractually required to process data only on s7win's documented instructions and to maintain appropriate technical and organizational security measures.

7.2 Game Providers

Game session data (including your player ID, wager amounts, and game outcomes) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe — solely for the purpose of operating the games, auditing outcomes, and resolving disputes. These studios operate under their own data protection frameworks and gaming licenses.

7.3 Regulatory and Legal Disclosure

We may disclose your Personal Data to regulators, law enforcement agencies, courts, or other governmental authorities where we are legally required to do so, or where disclosure is necessary to protect s7win's legal rights, prevent fraud, or protect the safety of any person.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material portion of s7win's business assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy implications via a prominent notice on the Platform and by email.

International Data Transfers

s7win operates as an internationally licensed gaming platform. As a result, some of the service providers and game studio partners we work with may be located in countries outside Indonesia. When Personal Data is transferred internationally, s7win ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant supervisory authority and incorporated into agreements with the receiving party.
• Transfers to processors and controllers in countries or frameworks recognized as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group that has adopted such rules.

By using s7win's Platform and services, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. In all such cases, s7win takes reasonable steps to ensure that your data receives a level of protection consistent with this Privacy Policy.

Data Retention

s7win retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

When Personal Data is no longer required, s7win securely deletes or anonymizes it in accordance with our internal data disposal procedures.

Cookies and Tracking Technologies

s7win uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, analyze usage patterns, and support our marketing activities. The main categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as preferred language, display settings, and game lobby filters. Disabling these cookies may reduce the personalization of your experience.
• Analytics Cookies: Collect anonymized or pseudonymized data on how users navigate the Platform — including pages viewed, time on site, and click paths — to help us improve content and usability.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and to limit the frequency with which you see the same promotional message. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. Note that blocking all cookies may prevent certain features of the Platform from functioning correctly, including login and game loading. Clearing cookies will also clear your active session and require you to log in again.

Your Rights

Subject to applicable law and s7win's legitimate processing obligations, you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, including the categories of data, purposes of processing, and recipients with whom it has been shared.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You may also update many data fields directly through your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the processing is unlawful. Note that s7win may be unable to delete data that we are legally required to retain, such as transaction records.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your Personal Data to transfer to another controller.
• Right to Object: You have the right to object to processing based on s7win's legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our data protection team at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days and will notify you accordingly.

Children's Privacy

s7win's Platform and Services are strictly intended for adults aged 21 years and above. s7win does not knowingly collect Personal Data from any individual under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend the account, void any pending bets or bonuses, and initiate a process to return any deposited funds following investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account on s7win, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act promptly on any such report.

Security Measures

s7win implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data in transit between your device and s7win servers is encrypted using TLS 1.2 or higher.
• At-Rest Encryption: Sensitive data stored in s7win's databases — including identity documents and financial account identifiers — is encrypted at rest using AES-256 or equivalent standards.
• Payment Tokenization: Card payment data is tokenized at the point of collection by our PCI-DSS Level 1 certified payment processor. s7win never stores full card numbers.
• Access Controls: Internal access to Personal Data is controlled by role-based access policies. All staff access is logged and reviewed regularly. Multi-factor authentication is required for all staff accessing systems containing Personal Data.
• Penetration Testing: s7win's Platform and infrastructure undergo regular third-party penetration testing and vulnerability assessments. Identified vulnerabilities are remediated according to a risk-based priority schedule.
• Incident Response: s7win maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframe required by applicable law.

Third-Party Links

The s7win Platform may contain references to third-party game studios, payment providers, and sports data suppliers in connection with the delivery of our Services. While s7win takes care to partner only with reputable organizations, we do not control the privacy practices of third parties and accept no responsibility for their data handling. Any Personal Data you provide directly to a third party (outside the s7win Platform) is governed by that third party's own privacy policy.

Updates to This Privacy Policy

s7win reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Effective Date" at the top.
• Send an email notification to all registered players at their registered email address at least 7 calendar days before the updated Policy takes effect.
• Display a prominent notice on the s7win Platform for a period of not less than 7 days prior to the change taking effect.

Your continued use of the s7win Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and may request account closure and data deletion as described in Section 11.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by s7win, please contact our data protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the s7win Platform
• Response Time: Live chat within 2 minutes; email within 4 hours during standard business hours (WIB, UTC+7)
• Support Languages: English and Indonesian-speaking agents available around the clock