Privacy Policy

1. Introduction

Welcome to the stwhot Privacy Policy. This document governs the collection, use, and protection of personal information provided by users of the stwhot gaming platform, accessible at https://stwhot.cam. stwhot operates as an international online gaming platform serving Indonesian players with casino games, live dealers, and sports betting services including football (bandar bola), basketball, and esports.

By creating an account and using stwhot services, you consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must discontinue use of our platform immediately. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of stwhot services.

stwhot is committed to transparency regarding data practices and compliance with applicable data protection regulations, including GDPR principles where relevant. We recognize that Indonesian players entrust us with sensitive personal and financial information, and we take this responsibility seriously by implementing comprehensive security measures and limiting data collection to only what is necessary for platform operation and regulatory compliance.

2. Information We Collect

stwhot collects several categories of information to operate our gaming platform, verify player identity, process financial transactions, and comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations.

2.1 Information You Provide Directly

When you register for a stwhot account, you voluntarily provide the following personal information:

• Identity Information: Full legal name as it appears on your Indonesian KTP (Kartu Tanda Penduduk), date of birth, place of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, and residential address in Indonesia.
• Account Credentials: Username, password, and security questions for account access.
• Identity Verification Documents: Clear photographs of your Indonesian KTP (front and back), selfie holding your KTP, and potentially additional documents such as utility bills or bank statements for address verification.
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment card details if applicable (we do not store full credit card numbers).
• Communication Data: Contents of your communications with our customer support team via live chat, email, WhatsApp, or other support channels.

2.2 Information We Collect Automatically

When you use the stwhot platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider (ISP), connection type, and approximate geographic location derived from IP address.
• Usage Data: Pages viewed, features used, time spent on platform, click patterns, game selections, bet amounts and frequencies, deposit and withdrawal history, and session duration.
• Gaming Activity: Detailed records of all bets placed, games played, winnings and losses, bonus claims and wagering progress, and responsible gaming tool usage (deposit limits, session time, self-exclusion).
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies (see Section 6 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity and comply with regulatory requirements:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from banks, e-wallet providers, and payment gateways.
• Identity Verification Services: Data from third-party KYC and AML screening providers to verify the authenticity of your identity documents and screen against sanctions lists.
• Credit Reference Agencies: Information to verify your financial standing if required for high-value transactions or VIP account applications.

3. How We Use Your Information

stwhot uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your stwhot account.
• Authenticating your identity when you log in.
• Processing deposits, withdrawals, and other financial transactions.
• Providing customer support and responding to your inquiries.
• Enabling gameplay across our casino, live dealer, and sports betting products.
• Tracking your gaming activity, bet history, and account balance.
• Managing bonus offers, promotions, and VIP program benefits.

3.2 Legal and Regulatory Compliance

• Verifying you are at least 21 years of age and eligible to gamble under Indonesian and international regulations.
• Conducting KYC (Know Your Customer) verification to prevent identity fraud and underage gambling.
• Performing AML (Anti-Money Laundering) checks to detect and prevent money laundering and terrorist financing.
• Maintaining records required by our gaming license and regulatory authorities.
• Investigating and reporting suspicious transactions to relevant authorities.
• Complying with court orders, legal processes, and government requests.

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, account abuse, and bonus manipulation.
• Monitoring for suspicious betting patterns or collusion.
• Protecting against unauthorized account access and data breaches.
• Enforcing our Terms & Conditions and investigating violations.
• Implementing responsible gaming safeguards and self-exclusion requests.

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience.
• Understanding game popularity and player preferences to optimize our gaming library.
• Conducting market research and trend analysis for the Indonesian gaming market.
• Testing new features, games, and platform enhancements.
• Optimizing payment processing times and methods for Indonesian players.

3.5 Marketing and Communication

• Sending promotional offers, bonus notifications, and VIP program updates (only with your consent).
• Communicating important account updates, policy changes, and security alerts.
• Personalizing marketing messages based on your gaming preferences and activity.
• Notifying you about new games, features, and platform improvements.

You may opt out of promotional communications at any time by adjusting your account preferences or clicking "unsubscribe" in marketing emails. Transactional and security-related communications cannot be opted out of as they are essential to service delivery.

4. Information Sharing and Disclosure

stwhot does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform functions on our behalf:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, Visa, Mastercard).
• Game Providers: Casino game studios and live dealer providers whose games you play on our platform.
• Identity Verification Providers: Third-party KYC and AML screening services that verify your identity documents.
• Customer Support Tools: Live chat software, email providers, and CRM systems that enable customer service delivery.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host our platform and store encrypted data.
• Analytics Providers: Tools that help us understand platform usage and optimize user experience.

All service providers are bound by strict confidentiality agreements and are permitted to use your information only for the specific purposes we authorize.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, or law enforcement when:

• Required by law, court order, subpoena, or legal process.
• Necessary to comply with gaming license obligations and regulatory reporting requirements.
• Mandated by AML regulations to report suspicious transactions or activities.
• Required to protect our legal rights, prevent fraud, or ensure platform security.
• Necessary to investigate violations of our Terms & Conditions.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and prominent website notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent for a specific purpose, such as participating in a third-party promotion or survey.

5. Data Storage and Security

5.1 Security Measures

stwhot implements comprehensive technical and organizational security measures to protect your personal information:

• Encryption: All data transmissions are protected with industry-standard SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis.
• Authentication: Multi-factor authentication for employee access to sensitive systems. Strong password requirements for player accounts.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure.
• Data Segregation: Personal information, financial data, and gaming activity are stored in separate, secured databases.
• Regular Audits: Independent security audits and penetration testing to identify and address vulnerabilities.
• Employee Training: Regular privacy and security training for all staff who handle personal information.

5.2 Data Storage Locations

Your personal information is stored on secure servers located in data centers with robust physical and digital security measures. Data may be processed and stored in multiple jurisdictions to ensure redundancy and service continuity. All data centers comply with international security standards including ISO 27001 certification.

5.3 Your Security Responsibilities

While stwhot implements strong security measures, you are also responsible for protecting your account:

• Keep your password confidential and do not share it with anyone.
• Use a strong, unique password that is not used for other online services.
• Log out after each session, especially on shared computers.
• Immediately notify us if you suspect unauthorized account access.
• Keep your registered email and phone number secure as they are used for account recovery.

6. Cookies and Tracking Technologies

stwhot uses cookies, web beacons, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

6.1 Types of Cookies We Use

6.2 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair platform functionality and prevent you from using certain features. Disabling analytics or functional cookies will not affect core gaming functionality but may reduce personalization.

7. Your Privacy Rights

As a stwhot user, you have the following privacy rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

You may update or correct inaccurate personal information through your account settings or by contacting customer support. We will verify your identity before making changes to sensitive information.

7.3 Right to Erasure

You may request deletion of your personal information, subject to legal and regulatory retention requirements. We must retain certain data for AML/KYC compliance, fraud prevention, and legal obligations even after account closure.

7.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain circumstances, such as while disputing data accuracy or contesting the lawfulness of processing.

7.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests, and we will cease processing unless we demonstrate compelling legitimate grounds.

7.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, contact our privacy team at [email protected] with "Privacy Request" in the subject line. We will respond within 30 days and may require identity verification to prevent unauthorized access to your information.

8. Data Retention

stwhot retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your active account relationship with stwhot.
• Closed Accounts: After voluntary account closure, we retain essential data for 7 years to comply with AML regulations, tax requirements, and legal obligations.
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by AML regulations.
• Transaction Records: Financial transaction history is retained for 7 years for accounting, tax, and regulatory purposes.
• Marketing Data: Marketing preferences and communication history are deleted within 3 years of account inactivity unless you opt in to continued marketing.
• Gaming Activity: Detailed bet history and gaming records are retained for 7 years for dispute resolution and regulatory compliance.

We periodically review data retention practices and securely delete or anonymize information that is no longer needed for operational or legal purposes.

9. Children's Privacy

stwhot services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and terminate the associated account.

Parents or guardians who believe a minor has provided personal information to stwhot should contact us immediately at [email protected]. We take underage gambling prevention seriously and implement robust age verification procedures including KTP verification to prevent minors from accessing our platform.

10. Changes to This Privacy Policy

stwhot reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you via email to your registered email address.
• Display a prominent notice on our website homepage for 30 days.
• Request your acknowledgment of the updated policy upon your next login if changes are substantial.

Your continued use of stwhot services after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact stwhot's privacy team:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812 3456 7890 (8am-12am WIB)

Our Indonesian-speaking privacy and customer support teams are available to assist you with data access requests, privacy concerns, account security issues, and any questions about how we handle your personal information. We aim to respond to all privacy inquiries within 48 hours and resolve data subject requests within 30 days.