Privacy Policy

01 Introduction

sm065 ("we", "us", "our", "the Platform") operates the online betting platform accessible at https://sm065.cam, offering services including sports wagering, live casino games, togel (Indonesia's traditional numbers lottery) pools, slot gacor (high-frequency payout slot games), and related entertainment products primarily to members residing in Indonesia.

This Privacy Policy ("Policy") explains how sm065 collects, stores, uses, discloses, and protects the personal data of individuals who register for an account, browse the Platform, or otherwise interact with our services. It also describes the rights you hold with respect to your personal data and the mechanisms available to exercise those rights.

By registering an account on sm065 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must cease using the Platform and contact our support team to close your account.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and sm065.

02 Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to sm065 in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" refers to any third party that processes Personal Data on behalf of sm065 under a contractual agreement, such as a payment gateway or analytics provider.
• "Member" refers to any natural person who has completed registration on the sm065 Platform and holds an active or suspended account.
• "Sensitive Data" refers to Personal Data that warrants heightened protection, including government-issued identity numbers (NIK), financial account details, and any health-related information provided in the context of responsible gaming self-exclusion requests.
• "Cookie" refers to a small text file placed on your device by the Platform to store preferences, session information, and analytical data.

03 Data We Collect

3.1 Registration and Identity Data

When you create an sm065 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you are at least 21 years of age)
• Indonesian National Identity Card number (NIK from your e-KTP) or passport number
• Residential address in Indonesia (city, province, postal code)
• Email address
• Mobile phone number registered in Indonesia
• Username and encrypted password

3.2 Financial and Transaction Data

To facilitate deposits and withdrawals in Indonesian Rupiah (IDR / Rp), sm065 collects:

• Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and others)
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit amounts, withdrawal amounts, and complete transaction history
• Wagering history, including bet amounts, game types, outcomes, and timestamps

3.3 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Scanned or photographed copies of government-issued identity documents
• Selfie photographs or liveness check images submitted for document verification
• Proof of address documents such as bank statements or utility bills issued within the last three months

3.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, time spent on each page, click-stream data, and referral source
• Session duration and login/logout timestamps
• Error logs and platform performance data

3.5 Communications Data

If you contact sm065's support team, we retain records of those communications — including email correspondence, live chat transcripts, and any attachments or screenshots you submit — for the purposes of resolving your query and maintaining a customer service audit trail.

3.6 Responsible Gaming Data

If you interact with sm065's responsible gaming tools — such as requesting a deposit limit, a time-out period, or self-exclusion — we record the details of that request and maintain it on file for compliance and safeguarding purposes. This data is treated as Sensitive Data and is subject to heightened access controls.

04 How We Collect Data

sm065 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or interact with any feature of the Platform that requires you to input information.
• Automatically — through cookies, web beacons, server logs, and analytics tools that operate in the background as you browse and use the Platform. See Clause 9 (Cookies & Tracking) for full details.
• From third-party payment processors — when you initiate a deposit or withdrawal, the relevant bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) may share transaction confirmation data with us to reconcile your account balance.
• From identity verification services — if sm065 engages a third-party KYC verification provider, that provider may share the outcome of document verification checks (pass/fail) and certain extracted data points with us.
• From fraud prevention and anti-money laundering systems — automated risk-scoring tools may generate derived data points about your account activity that are retained alongside your Personal Data.

05 Purpose & Legal Basis for Processing

The following table summarizes the primary purposes for which sm065 processes your Personal Data and the legal basis on which that processing rests:

06 Data Sharing

6.1 Categories of Recipients

sm065 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors and financial institutions — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — to facilitate deposits and withdrawals.
• KYC and identity verification providers — third-party services engaged to verify the authenticity of identity documents submitted by members.
• Fraud prevention and AML service providers — to screen transactions and member profiles against risk databases and regulatory watchlists.
• Game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — who may receive session identifiers to power their games within the sm065 platform.
• IT infrastructure and hosting providers — contracted cloud and server infrastructure providers who process data under strict data processing agreements.
• Legal and regulatory authorities — law enforcement agencies, financial intelligence units, or regulatory bodies, where sm065 is legally required to disclose data.
• Professional advisors — lawyers, auditors, and consultants who require access to data in the course of providing services to sm065, subject to confidentiality obligations.

6.2 No Sale of Personal Data

sm065 does not, under any circumstances, sell, rent, exchange, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or any other commercial entity for their independent marketing or commercial purposes.

07 International Data Transfers

sm065's primary operational infrastructure is designed to serve the Indonesian market. However, certain third-party service providers — particularly game content studios, fraud screening services, and cloud infrastructure providers — may be located outside of Indonesia. Where your personal data is transferred to a recipient in another country, sm065 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to handle your data to a standard equivalent to the protections described in this Policy.
• Vendor security assessments to confirm that recipient organizations maintain appropriate technical and organizational data security measures.
• Data minimization practices, ensuring that only the minimum necessary data is transferred across jurisdictions.

08 Data Retention

sm065 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to comply with anti-money laundering and gaming compliance obligations.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the most recent correspondence in a given case.
• Technical and usage data (cookies, logs): Retained for up to thirteen (13) months from the date of collection, after which they are anonymized or deleted.
• Responsible gaming records: Retained for a minimum of five (5) years from the date of a self-exclusion or limit request, to ensure compliance with responsible gaming obligations and prevent circumvention.

When retention periods expire, data is securely deleted or anonymized so that it can no longer be attributed to any individual.

09 Cookies & Tracking Technologies

9.1 Types of Cookies Used

sm065 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as session authentication, account balance display, and security token management. They cannot be disabled without rendering the Platform inoperable.
• Performance and Analytics Cookies: Used to collect anonymized data about how members use the Platform — such as pages visited, time on site, and error occurrences — to help us improve the user experience. No personally identifiable information is collected via these cookies.
• Functionality Cookies: Used to remember your preferences — such as display settings, language preferences, and recently played game categories — to provide a more personalized experience on return visits.
• Marketing Cookies (opt-in only): Where you have consented to receive personalized promotional content, these cookies help us deliver relevant offers. You may withdraw this consent at any time.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For full instructions on managing cookies in your browser (Chrome, Firefox, Safari, or others), refer to your browser's official help documentation.

10 Security Measures

sm065 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the sm065 servers is encrypted using 256-bit SSL/TLS protocols.
• Encrypted data storage: Sensitive data fields — including identity document numbers, financial account details, and passwords — are stored in encrypted form using industry-standard encryption algorithms. Passwords are hashed and salted; they are never stored in plain text.
• Access controls: Access to member data is restricted on a strict need-to-know basis. All internal access is logged, audited, and subject to periodic review.
• Two-factor authentication (2FA): sm065 offers optional two-factor authentication for member accounts to provide an additional layer of login security.
• Intrusion detection systems: The Platform is monitored continuously for suspicious access patterns, potential brute-force attacks, and anomalous data access activity.
• Regular security audits: sm065 conducts periodic penetration testing and security assessments to identify and remediate vulnerabilities before they can be exploited.

11 Your Data Rights

As a registered sm065 member, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. sm065 will respond to all valid requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data sm065 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data held by sm065 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that sm065 delete your personal data. This right is subject to limitations where retention is required by law (e.g., anti-money laundering obligations) or where data is necessary for the establishment, exercise, or defense of legal claims.
• Right to Restriction of Processing: You may request that sm065 limit its processing of your personal data in circumstances where you contest its accuracy, the processing is unlawful, or you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of such an objection, sm065 will cease processing your data for marketing purposes immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Children's Privacy

The sm065 Platform is strictly intended for adults aged 21 years and above. sm065 does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has created an account on sm065 or submitted personal data to the Platform, please contact us immediately at [email protected]. Upon confirmation, sm065 will take immediate steps to close the account and delete all associated personal data.

sm065 employs age-verification checks during the registration process and may require additional KYC documentation to confirm the age of any member where there is reasonable doubt about their eligibility.

13 Third-Party Services

The sm065 Platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game provided by a third party, a connection to that provider's servers is established. These providers may collect certain technical data — such as your session identifier and game activity — in order to deliver the game content and calculate outcomes.

sm065 contracts with all third-party providers under data processing agreements that require them to handle any member data in accordance with applicable data protection standards and to use that data solely for the purpose of delivering the contracted service. sm065 is not responsible for the independent privacy practices of third-party providers beyond the scope of these contractual obligations.

This Policy does not apply to any website, service, or platform that is not owned and operated by sm065. If you follow a link from the sm065 Platform to an external site, that site's own privacy policy will govern the collection and use of your data.

14 Policy Amendments

sm065 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing, a new category of data collected, or a new category of third-party recipient — sm065 will provide reasonable advance notice to members via email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you must cease using the Platform and contact our support team to arrange account closure and data erasure.

We encourage you to review this Policy periodically to stay informed about how sm065 protects your personal information.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or sm065's handling of your personal data, please contact our Data Support team using the details below. Our team is available 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri, Idul Adha, Nyepi, and Indonesian Independence Day (17 August). Support is available in both English and Indonesian (Bahasa Indonesia).

If you believe sm065 has not adequately addressed your data privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. sm065 encourages members to contact us directly in the first instance so that we may attempt to resolve any concern promptly and fairly.