At sm333, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your own information. We recommend reading it alongside our Terms & Conditions.
Summary for Players: sm333 collects personal data to operate your account, verify your identity, process payments, prevent fraud, and improve the platform. We do not sell your data to third parties. We use industry-standard encryption and access controls to protect it. You have the right to access, correct, or delete your data at any time by contacting our support team. This document explains all of this in full.
This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by sm333 in connection with the operation of the sm333 online casino and sportsbook platform, accessible at sm333.cam. It governs data collected through the website, mobile browser interface, live chat support system, email correspondence, and any other channel through which you interact with sm333.
This Policy applies to all registered Players, prospective Players who have begun but not completed the registration process, and visitors to the sm333 website who have not registered. By accessing the sm333 platform, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not use the sm333 platform.
This Policy should be read in conjunction with the sm333 Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how your data may be used in connection with account management and problem-gambling prevention.
For the purposes of this Policy, sm333 acts as the data controller in respect of all personal data collected through the platform. As data controller, sm333 determines the purposes for which personal data is processed and the means by which that processing is carried out.
sm333 is committed to processing personal data responsibly, lawfully, and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. Where sm333 engages third-party processors (for example, payment service providers and game studios), those processors are bound by data processing agreements that require them to handle your data in accordance with applicable law and this Policy.
For all data-related enquiries, requests, or complaints, please contact the sm333 data team via the support channel detailed in Clause 15 of this Policy.
sm333 collects the following categories of personal data. The specific data points collected depend on the nature of your interaction with the platform:
We do not collect: credit card numbers in full (card data is tokenised and handled entirely by the payment processor), biometric data beyond what is submitted voluntarily for liveness checks, or sensitive personal data related to race, religion, political views, or health — except where a Player voluntarily discloses health-related information to the responsible gaming team in the context of seeking support.
sm333 collects personal data through the following means:
| Collection Method | Details |
|---|---|
| Registration Form | Data entered by the Player when creating an account, including name, date of birth, email address, and chosen username. |
| KYC Verification | Documents and photographs submitted by the Player in response to an identity verification request from the sm333 compliance team. |
| Deposit & Withdrawal Transactions | Transaction metadata received from payment processors when a Player deposits or withdraws funds via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. |
| Platform Activity | Automatically generated records of bets placed, games launched, sessions started and ended, and features accessed within the sm333 platform. |
| Cookies & Analytics | Browser cookies, local storage, and analytics scripts that record device, session, and navigation data as detailed in Clause 10. |
| Support Channels | Data you provide when contacting the sm333 support team via live chat, email, or any other designated communication channel. |
| Third-Party Verification | Where sm333 uses an independent KYC or fraud-screening service to verify identity, data may be cross-referenced against publicly available government or commercial databases. |
sm333 processes personal data only where there is a lawful basis for doing so. The following table summarises the primary purposes of processing and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to provide the platform service you have requested. |
| Identity and age verification (KYC) | Legal obligation — required to verify that Players are at least 21 years of age and to comply with anti-money-laundering obligations. |
| Processing deposits and withdrawals | Performance of contract — required to complete financial transactions requested by the Player. |
| Fraud prevention and security monitoring | Legitimate interests — sm333 has a legitimate interest in detecting and preventing fraudulent activity, bonus abuse, and money laundering. |
| Responsible gaming monitoring | Legal obligation and legitimate interests — sm333 monitors for signs of problem gambling to fulfil its duty of care obligations. |
| Customer support | Performance of contract — required to resolve Player queries, disputes, and complaints. |
| Marketing communications | Consent — only where the Player has explicitly opted in to receive promotional emails or in-platform notifications. Opt-out is available at any time. |
| Platform analytics and improvement | Legitimate interests — sm333 analyses aggregated usage data to improve platform performance and the player experience. |
sm333 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of third party strictly as required for platform operation:
All third parties with whom sm333 shares personal data are required to implement appropriate technical and organisational security measures and to process that data only for the specific purpose for which it was shared.
sm333 operates a global platform serving players primarily in Indonesia. Some of the third-party service providers we use — in particular certain game studios and KYC verification services — may process data on servers located outside Indonesia. Where personal data is transferred internationally, sm333 ensures that appropriate safeguards are in place, including contractual obligations on the receiving party to maintain standards of data protection equivalent to those applied by sm333 itself.
Indonesian Players should be aware that the country receiving their data may not have data protection laws that are equivalent in scope or enforceability to Indonesian regulations. However, sm333's contractual safeguards are designed to provide an equivalent level of practical protection regardless of the jurisdiction in which the data is processed.
sm333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
When retention periods expire, data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.
sm333 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect personal data against unauthorised access, disclosure, alteration, or destruction:
While sm333 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be completely secure. Players are encouraged to use strong, unique passwords for their sm333 accounts and to enable two-factor authentication where available.
sm333 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored in your browser that allow the platform to remember your preferences and session state. The types of cookies used by sm333 are as follows:
You can manage cookie preferences through your browser settings at any time. Disabling cookies beyond the strictly necessary category may affect the functionality of certain platform features. sm333 does not use cookies to serve advertisements on third-party websites.
As a data subject, you have the following rights with respect to your personal data held by sm333. These rights apply subject to applicable legal obligations that may require sm333 to retain certain data (for example, KYC records required by anti-money-laundering law):
To exercise any of the above rights, please contact the sm333 support team via live chat or email as described in Clause 15. Requests will be processed at no charge to the Player. sm333 reserves the right to verify your identity before acting on a data rights request.
sm333 strictly prohibits the use of the platform by individuals under 21 years of age. sm333 does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.
If sm333 becomes aware — through KYC review, player-reported information, or any other means — that an account has been registered by a person under the age of 21, that account will be immediately suspended. Any deposits made will be returned to the originating payment method after deduction of any winnings generated during the period of underage access, and the account will be permanently closed.
Parents and guardians who suspect that a minor may have accessed the sm333 platform using falsified identification should contact the sm333 support team immediately. sm333 will cooperate fully with any request from a parent or guardian and will take immediate action to close the account and return deposits.
The sm333 platform integrates with third-party services including game studios (Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Spribe, Pocket Games Soft), payment processors, and analytics providers. Each of these third parties operates under its own privacy policy in respect of data processed on its own systems. sm333 is not responsible for the privacy practices of third-party game providers in respect of data processed on their own infrastructure once a game session is launched.
The sm333 platform does not contain links to third-party websites for general browsing purposes. Any links that appear on the platform connect to other sm333 pages only. If you navigate away from the sm333 platform independently, sm333 has no control over or responsibility for the data practices of external websites.
sm333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, platform features, or applicable law. The revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material — for example, a change to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — sm333 will notify registered Players via their registered email address at least 14 days before the change takes effect.
Your continued use of the sm333 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you should cease using the platform and request account closure as described in the Terms & Conditions.
For all data protection enquiries, subject access requests, rights exercises, or privacy complaints, please contact the sm333 data protection team using the details below. sm333 aims to acknowledge all data-related requests within 2 business days and to provide a substantive response within 30 days.
Data Protection Team — sm333
Email: [email protected] (plain text only — not a clickable link; please copy and paste into your email client)
Subject Line Format: "Privacy Request — [your registered username] — [type of request, e.g., Access / Deletion / Correction]"
Response Time: Acknowledgement within 2 business days; substantive response within 30 calendar days. Complex requests may take up to 3 months; you will be notified if an extension is required.
Complaints: If you are not satisfied with sm333's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.
Every data transmission between your browser and the sm333 platform is secured with industry-standard TLS encryption. Your personal information and payment details are never transmitted in plain text.
sm333 does not sell, rent, or trade your personal data to third parties for marketing purposes — ever. Data sharing is strictly limited to operational partners bound by data processing agreements.
Access, correct, export, or delete your personal data at any time by contacting our support team. We respond to all data rights requests within 30 days, at no cost to you.
We apply the principle of data minimisation — collecting only what is necessary to provide the platform, verify identity, process payments, and ensure player safety. No excess data is retained.
Personal data is held only for as long as legally required or operationally necessary, after which it is securely deleted or anonymised. Retention periods are documented and audited regularly.
In the unlikely event of a data security breach, affected Players will be notified promptly with full details of what data was involved and what steps sm333 has taken to protect them.