c7890 Privacy Policy

1.1 About This Policy. This Privacy Policy describes how c7890 ("we", "us", "our") — the operator of the online sports betting and casino platform at https://c7890.pro — collects, uses, stores, shares, and protects the personal data of individuals ("you", "Member", "User") who access or register on our platform. This policy applies to all Services offered by c7890, including the Sportsbook, Live Casino, Slots, and togel (Indonesia's traditional numbers lottery) markets.

1.2 Scope. This policy applies to all personal data collected through your use of the c7890 website, any associated mobile-optimised pages, and any communications you have with our support team via live chat, email, or any other channel. It does not extend to third-party websites or services that may be linked to or from our platform, including the websites of game providers such as Pragmatic Play, Evolution Gaming, or NetEnt.

1.3 Commitment. c7890 is committed to processing your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We treat your privacy not as a compliance obligation but as a core element of the trust relationship between c7890 and its Members, particularly those accessing the platform from Jakarta, Surabaya, Bandung, Bali, Medan, and across Indonesia.

1.4 Data Controller. For the purposes of this Privacy Policy, c7890 acts as the data controller in respect of personal data collected from Members. Questions about how your data is processed may be directed to our support team at any time — see Section 14 for contact details.

2.1 Categories of Personal Data. c7890 collects the following categories of personal data from Members and platform visitors:

2.2 Sensitive Data. c7890 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where identity verification documents submitted during KYC incidentally reveal such information. In those cases, the data is processed solely for identity verification and is not used for any other purpose.

2.3 Voluntary Disclosure. Any personal data you include in free-text communications (live chat messages, email enquiries, feedback forms) is collected with your voluntary consent. Please avoid sharing more personal information than is necessary when contacting our support team.

3.1 Direct Collection. The majority of personal data held by c7890 is provided directly by you during the following interactions:

• Completing the account registration form on the c7890 platform;
• Submitting identity and address documents during the KYC verification process;
• Making deposits or requesting withdrawals through Indonesian banking channels or e-wallets;
• Contacting the c7890 support team via live chat or email;
• Configuring account settings such as deposit limits, session reminders, or marketing preferences.

3.2 Automated Collection. When you visit the c7890 website, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, browser fingerprint, device type, and session activity data. This automated collection occurs regardless of whether you are a registered Member or an anonymous visitor browsing the platform.

3.3 Cookies and Similar Technologies. c7890 uses cookies and similar tracking technologies to enhance your platform experience, maintain your session, remember your preferences, and gather aggregate analytics data. See Section 9 for a detailed breakdown of the cookies we use and how to manage your cookie preferences.

3.4 Third-Party Sources. In limited circumstances, c7890 may receive personal data about you from third-party sources, including:

• Identity verification and fraud-prevention service providers used to validate KYC submissions;
• Payment processors (BCA, BRI, OVO, DANA, GoPay, ShopeePay, LinkAja) confirming transaction details;
• Publicly available sanctions and politically exposed persons (PEP) screening databases, used for anti-money laundering (AML) compliance purposes.

4.1 Primary Purposes. c7890 uses your personal data to deliver, maintain, and improve the platform Services. The specific purposes for which each data category is used are described in the table below:

4.2 No Automated Decision-Making That Materially Affects You. c7890 uses automated systems for fraud detection and responsible gaming monitoring. However, any decision that materially and adversely affects your account — such as account suspension or withdrawal restriction — is reviewed by a human member of our compliance or support team before being enacted. You may request a human review of any automated decision that has affected your account by contacting support.

5.1 Contractual Necessity. Processing your Identity Data, Contact Data, Financial Data, and Gaming Data is necessary to perform our contractual obligations to you under the c7890 Terms & Conditions — specifically, to create and manage your account, process your transactions, and deliver the Services you have subscribed to. Without this processing, we cannot provide the platform.

5.2 Legal Obligation. Certain processing activities — particularly KYC verification, AML screening, and the retention of financial transaction records — are carried out because they are required by the legal and regulatory obligations under c7890's international gaming licence. c7890 has no discretion to waive these requirements.

5.3 Legitimate Interests. c7890 processes Technical Data and aggregated Gaming Data on the basis of its legitimate interest in operating a safe, secure, and commercially viable platform. This includes fraud prevention, platform analytics, and the detection of prohibited conduct such as bonus abuse or multi-accounting. We have conducted a proportionality assessment and concluded that these processing activities do not override your privacy rights.

5.4 Consent. Where c7890 sends you marketing communications — such as promotional offers, bonus announcements, or newsletters relating to upcoming BRI Liga 1 fixtures, Champions League specials, or new slot gacor releases — we do so only on the basis of your explicit consent, given at the time of registration or subsequently through your account preference settings. You may withdraw this consent at any time by updating your marketing preferences in your account dashboard or by contacting our support team.

6.1 Principle of Minimum Disclosure. c7890 does not sell, rent, or share your personal data with unauthorised third parties. Data is shared externally only where it is strictly necessary for the purposes described in this policy and only with the categories of recipients listed below.

6.2 Categories of Recipients.

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the financial and identity data necessary to process your deposit and withdrawal instructions. These providers are independent data controllers in respect of their own payment processing activities.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive limited technical and session data necessary to deliver their game content to your device. They do not receive your full identity profile or financial data.
• Identity Verification Services: Third-party KYC and AML screening providers receive identity documents and personal data submitted during the verification process. These providers operate under strict data processing agreements with c7890.
• Regulatory Authorities and Law Enforcement: c7890 may be required by law, regulation, court order, or the terms of its gaming licence to disclose Member data to competent authorities. Such disclosures are made strictly in accordance with applicable legal requirements and are not voluntary.
• Platform Infrastructure Providers: Cloud hosting, cybersecurity, and platform analytics providers may process technical data on c7890's behalf as data processors under formal data processing agreements. These providers are prohibited from using your data for their own purposes.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial part of c7890's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. c7890 will notify affected Members of any such transfer via the email address on record and will ensure that the acquiring entity is bound by privacy obligations equivalent to those in this policy before any transfer occurs.

7.1 Retention Principles. c7890 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law or our gaming licence obligations.

7.2 Retention Periods. The following standard retention periods apply to each category of data:

7.3 Secure Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction protocols. Anonymised data may be retained beyond these periods for aggregate statistical analysis, as anonymised data no longer constitutes personal data under applicable privacy frameworks.

8.1 Technical Safeguards. c7890 implements a comprehensive suite of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the c7890 platform is encrypted using 256-bit SSL/TLS protocols. Our SSL certificate is maintained with a globally trusted certificate authority.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Access to Member personal data is restricted to authorised c7890 personnel on a strict need-to-know basis. All internal access is logged and subject to regular access review audits.
• Firewall and Intrusion Detection: c7890's platform infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for and alert our security team to suspicious activity in real time.
• Password Hashing: Member account passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with a unique salt, ensuring that passwords cannot be recovered even in the event of a data breach.

8.2 Organisational Safeguards. In addition to technical controls, c7890 maintains the following organisational security practices:

• Regular mandatory data privacy and security training for all staff who handle Member data;
• Formal data breach response procedures, including defined timelines for investigating and notifying affected Members of any significant breach;
• Periodic third-party security audits and penetration testing of the c7890 platform;
• Vendor due diligence procedures applied to all third-party service providers before they are granted access to Member data.

8.3 Your Responsibility. While c7890 implements robust security measures on its end, the security of your account also depends on your own practices. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that you access c7890 from secure, trusted devices. c7890 will never ask you to share your password with any member of our staff.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function efficiently, to remember user preferences, and to provide analytical information about how a site is used. c7890 uses cookies and similar tracking technologies (such as web beacons and local storage) on its platform.

9.2 Types of Cookies We Use.

9.3 Managing Cookies. You may control cookie usage through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will impair the functionality of the c7890 platform and may prevent you from logging in or placing bets. Your browser provider's help documentation will explain how to manage cookies for your specific browser version.

9.4 No Third-Party Advertising Cookies. c7890 does not use third-party advertising or retargeting cookies. We do not permit advertising networks to place tracking cookies on our platform for the purpose of serving you targeted advertisements on other websites.

10.1 Overview. As a Member of c7890, you hold the following rights in respect of your personal data. These rights may be exercised at any time by submitting a written request to our support team (see Section 14 for contact details). c7890 will respond to all verified requests within 30 calendar days of receipt.

10.2 Marketing Opt-Out. Where you have consented to receive marketing communications from c7890, you may withdraw that consent at any time by updating your account preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and it does not affect the sending of transactional communications (such as deposit confirmations, withdrawal notifications, or security alerts) which are necessary for the operation of your account.

10.3 Identity Verification for Rights Requests. To protect Members from fraudulent data access requests, c7890 is required to verify your identity before processing any data rights request. You will be asked to confirm your registered email address and to provide one additional verification factor (such as your registered mobile number or a piece of account-specific information). c7890 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive.

11.1 Age Restriction. The c7890 platform is strictly for adults aged 21 and above. c7890 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through our KYC verification process, which requires all Members to submit a government-issued identity document confirming their date of birth before their account is fully activated.

11.2 Discovery of Underage Registration. If c7890 becomes aware — through the KYC process, a report from a third party, or any other means — that a registered Member is under the age of 21, we will immediately suspend the relevant account, void any bets placed or winnings accrued, return any deposits made to the originating payment method, and permanently delete all personal data associated with the underage registration. Any person who provides false information about their age to register on c7890 will be in breach of our Terms & Conditions and may be subject to further action.

11.3 Reporting Underage Access. If you believe that a minor has registered on the c7890 platform using false information, please report this to our support team immediately at [email protected]. We take such reports extremely seriously and will investigate promptly. Parents and guardians concerned about a minor's access to gambling content are encouraged to use parental control software to restrict access to online betting sites.

12.1 Cross-Border Processing. As an internationally licensed online gaming platform serving Members across Indonesia, c7890 necessarily processes and stores data on infrastructure located outside Indonesia. Your personal data may be transferred to and processed in countries other than Indonesia, including the jurisdiction in which c7890 holds its gaming licence and the jurisdictions in which our technology infrastructure providers are based.

12.2 Transfer Safeguards. Whenever c7890 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect the data at a standard equivalent to this Privacy Policy. These safeguards include:

• Data Processing Agreements (DPAs) with all third-party processors that include binding data protection obligations;
• Transfers only to jurisdictions that maintain adequate data protection laws or, where necessary, with additional contractual protections in place;
• Technical security measures (encryption in transit and at rest) applied consistently to data wherever it is stored or processed.

12.3 Your Acknowledgement. By registering on the c7890 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to and from jurisdictions outside Indonesia as described in this section, subject always to the safeguards described above.

13.1 Right to Update. c7890 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to the platform. We are committed to keeping this policy current and accurate.

13.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — c7890 will notify active Members of the change via the email address registered on their account at least 14 days before the change takes effect, and will display a prominent notice on the platform.

13.3 Continued Use. Your continued use of the c7890 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. The "Last Updated" date shown at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how c7890 protects your data.

13.4 Prior Versions. If you require a copy of a prior version of this Privacy Policy — for example, in connection with a dispute about data processing that occurred under a previous version — please contact our support team with the specific date range you require and we will use reasonable efforts to provide the applicable version.

14.1 Privacy Enquiries. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how c7890 has handled your personal data, please contact our support team using the details below:

• Live Chat: Available 24/7 directly through the c7890 platform. This is the fastest channel for urgent account-related privacy concerns.
• Support Email: [email protected] — please include "Privacy Request" or "Data Rights Request" in the subject line so your message is routed to the appropriate team. We aim to acknowledge all privacy-related emails within 4 hours (WIB, UTC+7) and to provide a substantive response within 30 calendar days.

14.2 Language of Communication. The c7890 support team communicates primarily in English. Indonesian-speaking agents are available during peak WIB hours for Members who prefer to discuss privacy matters in their native language.

14.3 Complaints. If you are not satisfied with how c7890 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to the relevant supervisory authority or dispute resolution body under c7890's gaming licence. Details of the applicable body are available on request from the support team.