Privacy Policy

For the purposes of this Policy, the following terms shall have the meanings ascribed below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means sl789, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of sl789 under a contractual arrangement and in accordance with our instructions.
• "Sensitive Personal Data" means a subset of Personal Data that warrants heightened protection, including national identity number (NIK), financial account details, and — where applicable — health information related to responsible gaming assessments.
• "Cookies" means small text files placed on your device by the Platform or by authorized third-party services to store session and preference information.
• "KYC" (Know Your Customer) means the identity and document verification process required before processing withdrawals or as otherwise requested by our compliance team.

This Policy applies to all Personal Data collected by sl789 through the Platform, whether submitted directly by you (e.g., during registration or KYC), generated automatically by your use of the Platform (e.g., device and session data), or received from authorized third-party sources (e.g., payment processors confirming transaction details).

sl789 acts as the Data Controller for all Personal Data Processed in connection with the operation of the Platform. Where sl789 engages third-party Data Processors — such as payment gateway providers, game studio analytics services, or cloud hosting vendors — those parties Process data solely on sl789's instructions and are bound by data processing agreements consistent with this Policy.

This Policy is directed at players who are residents of Indonesia and are at least 21 years of age. If you are located outside Indonesia, different or additional data protection laws may apply to your situation. sl789 makes no representation that the Platform is appropriate or available for use in jurisdictions other than those for which it is designed.

sl789 collects the following categories of Personal Data, grouped by the context in which they arise:

sl789 does not knowingly collect Sensitive Personal Data beyond what is strictly necessary for KYC compliance and fraud prevention. We do not collect biometric data (e.g., fingerprints or facial scans) through the Platform at this time.

sl789 collects Personal Data through the following methods:

• Direct Submission: Information you provide when registering an account on the sl789 Login page, completing the KYC process, making a deposit or withdrawal, contacting our support team, or participating in a promotional activity.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including via browser cookies, server logs, pixel tags, and session-recording tools. This data is collected regardless of whether you are logged in to your account.
• Payment Processors: When you complete a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment service provider confirms transaction details to sl789 for reconciliation and fraud prevention purposes.
• Game Service Providers: Licensed game studios and live casino operators (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may share aggregated or session-level data with sl789 for the purpose of game performance monitoring and responsible gaming assessments.
• Publicly Available Sources: In certain fraud-investigation or KYC-escalation scenarios, sl789 may cross-reference publicly available information (e.g., public records, sanctions lists) to verify your identity or assess risk.

sl789 processes your Personal Data for the following purposes, each supported by a defined legal basis:

sl789 does not sell your Personal Data. We share Personal Data only in the following circumstances and only to the extent necessary for each specified purpose:

• Payment Service Providers: Financial Data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute deposit and withdrawal transactions you initiate. These providers are independent data controllers for their own platform data.
• Game Studio & Technology Providers: Technical and gaming session data is shared with licensed game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) to deliver the games you play. These providers operate under data processing agreements with sl789.
• Identity Verification Services: Identity Data and KYC documents may be shared with third-party identity verification vendors under strict confidentiality agreements for the sole purpose of completing your KYC check.
• Cloud Infrastructure & Security Vendors: Our hosting, database, and cybersecurity providers may access Technical Data in the course of maintaining Platform infrastructure. All such vendors are bound by data processing agreements.
• Legal Authorities: sl789 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful governmental request. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity, which will be required to honor the terms of this Policy or provide you with prior notice of any material changes.

All third-party recipients of Personal Data are contractually required to implement appropriate technical and organizational security measures and to use your data only for the specific purpose for which it was shared.

sl789 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyze how users interact with our services. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF). They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, such as preferred game categories, display settings, and — where applicable — your chosen Indonesian bank for deposit purposes. These enhance your experience but are not essential for platform operation.
• Analytics Cookies: Collect anonymized or pseudonymized data about how visitors use the Platform (pages visited, session duration, error events). This data helps us improve the platform experience. sl789 uses analytics tools operated under data processing agreements.
• Fraud Prevention Cookies: Help sl789 detect suspicious activity, bot traffic, and potential account takeover attempts. These are placed in the interest of platform security and player account protection.

You may control cookie preferences through your browser settings. Disabling cookies beyond the strictly necessary category may affect your experience on the Platform but will not prevent you from accessing core gaming functions. A cookie preference manager may be displayed on your first visit to the Platform.

sl789 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering (AML) record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required for financial audit and AML compliance purposes.
• KYC Documents: Retained for a minimum of five (5) years after the account to which they relate is closed. KYC documents are stored in encrypted form with access restricted to authorized compliance personnel.
• Gaming Activity Data: Retained for a minimum of three (3) years for responsible gaming monitoring, dispute resolution, and regulatory reporting purposes.
• Communications Data (support tickets, chat transcripts): Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data (cookies, server logs): Retained for twelve (12) months from collection, after which they are anonymized or deleted.
• Marketing Preference Data: Retained until you withdraw your consent or request erasure. Upon unsubscription, your email address is moved to a suppression list to prevent accidental re-subscription.

When Personal Data is no longer required, sl789 securely deletes or anonymizes it in accordance with our internal data disposal procedures. Where anonymization is not technically feasible, data is restricted from further processing until secure deletion is possible.

sl789 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed proactively.
• Encryption at Rest: Personal Data and financial records stored on sl789's servers are encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to Personal Data is restricted to authorized sl789 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication (2FA): 2FA is available for player accounts and is mandatory for all sl789 administrative system access. Players are strongly encouraged to enable 2FA on their accounts via the account security settings.
• Penetration Testing & Vulnerability Assessments: sl789 engages independent security firms to conduct regular penetration tests and vulnerability scans of the Platform infrastructure. Critical findings are remediated within defined SLA timeframes.
• Incident Response Plan: sl789 maintains a documented data breach incident response plan. In the event of a confirmed data breach affecting your Personal Data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

As a player on the sl789 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 14 business days of receiving a verified request.

• Right of Access: You have the right to request a copy of the Personal Data sl789 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that sl789 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent (and no other legal basis applies). This right is subject to sl789's legal retention obligations — for example, AML regulations require us to retain transaction records for a minimum of five years even after account closure.
• Right to Restriction of Processing: You may request that sl789 restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV), and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where sl789 relies on legitimate interest as its legal basis. sl789 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

The sl789 Platform is strictly intended for adults aged 21 years and older. sl789 does not knowingly collect, solicit, or retain Personal Data from individuals under the age of 21. Age verification checks are conducted during account registration and KYC, and any account found to belong to an individual under 21 will be immediately and permanently closed.

If you are a parent or guardian and you believe that a minor has accessed or attempted to register on the Platform, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account, delete any associated Personal Data collected from the minor, and — where appropriate — refer the matter to relevant child protection authorities.

sl789 also encourages parents and guardians to use parental control software to prevent minors from accessing online gambling platforms, and to discuss the risks of gambling with young people in their care.

The sl789 Platform may contain references to or integrations with third-party services, such as licensed game studio interfaces. These third-party environments operate under their own privacy policies, which sl789 does not control. sl789 is not responsible for the privacy practices or content of any third-party service.

When you interact with a game powered by a third-party provider — for example, entering a live dealer studio environment hosted by Evolution Gaming, or launching a slot gacor (high-payout slot) title from Pragmatic Play — that provider's platform-level data collection practices (such as game session recording for dispute resolution) are governed by that provider's own data processing terms, to which sl789 is a party on your behalf.

We recommend reviewing the privacy policies of any third-party service you interact with through the Platform if you have concerns about their data practices. If you believe that a third-party provider is processing your data in a manner inconsistent with what sl789 has represented, please contact us at [email protected] and we will investigate.

sl789 may send you promotional communications — including bonus offers, seasonal promotions tied to Indonesian holidays (such as Idul Fitri, Nyepi, and Indonesian Independence Day), new game launch announcements, and sportsbook event previews — by email or via in-platform notification, but only where you have explicitly opted in to receive such communications during registration or through your account settings.

Every marketing email sent by sl789 includes a clear and functional unsubscribe link. You may also opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email
• Adjusting your notification preferences in your account settings dashboard
• Submitting a written opt-out request to [email protected]

Unsubscribing from marketing communications will not affect your ability to receive transactional communications, including deposit confirmations, withdrawal status updates, KYC verification notices, and security alerts. These operational messages are sent as part of our contractual obligations to you and cannot be opted out of while your account is active.

sl789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will:

• Update the "Effective Date" and "Last Reviewed" fields at the top of this document
• Post a prominent notice on the Platform homepage and — where the change significantly affects your rights — notify you via your registered email address
• Where required by applicable law, seek your renewed consent before the amended practices take effect

Your continued use of the Platform after the amended Policy has been posted and any required notice period has elapsed constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should close your account and cease using the Platform before the changes take effect. Outstanding balances will be processed in accordance with the applicable withdrawal terms.

We encourage you to review this Policy periodically to stay informed about how sl789 protects your Personal Data. Archived versions of prior policy versions are available upon request by contacting [email protected].

If you have any questions, concerns, or formal requests relating to this Privacy Policy or to sl789's data practices, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform's live chat widget, staffed by Indonesian-speaking agents
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays — WIB (UTC+7 )

We take all privacy enquiries seriously and aim to resolve concerns at the first point of contact. Where a matter cannot be resolved through direct communication with sl789, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.