sm506 Privacy Policy
Your Data, Your Rights

In this Privacy Policy, the following terms carry the meanings set out below:

• "sm506", "we", "us", or "our" refers to the operator of the sm506.club platform.
• "Member", "you", or "your" refers to any individual who has registered an account on sm506 or who visits or interacts with the sm506 website.
• "Personal Data" refers to any information relating to an identified or identifiable natural person, as defined under applicable data protection legislation.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" (Know Your Customer) refers to the identity and age verification process mandated for all Members seeking to make withdrawals from the sm506 platform.
• "Services" refers to the full suite of online casino, sportsbook, payment, and support services offered by sm506 to registered Members.
• "Third-Party Processors" refers to external service providers engaged by sm506 to perform specific functions on our behalf under contractual data-processing agreements.

sm506 acts as the Data Controller in respect of the Personal Data collected and processed in connection with the provision of the Services to Members based in Indonesia and other jurisdictions where the platform is accessible.

As Data Controller, sm506 determines the purposes and means of processing Member Personal Data and is responsible for ensuring that all processing activities comply with applicable data protection law and the principles set out in this Privacy Policy.

sm506 collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party sources where permitted by law. The categories of data we collect are set out below.

sm506 processes Personal Data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing that is required to perform our contract with you as a Member — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) obligations, KYC regulations, and financial record-keeping requirements — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and business analytics is carried out on the basis of sm506's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send optional marketing communications (such as promotional emails or SMS notifications), we do so only where you have provided explicit, freely given, and withdrawable consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

Personal Data collected by sm506 is used for the following specific and legitimate purposes:

• Account Creation & Management: To register your sm506 account, verify your identity and age (21+ requirement), maintain your account profile, and manage your Member wallet.
• Payment Processing: To facilitate IDR deposits and withdrawals via supported Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Regulatory Compliance: To fulfill our KYC, AML, and counter-terrorism financing (CTF) obligations, including transaction monitoring and suspicious activity reporting where legally required.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to enforce self-exclusion, deposit limits, and cooling-off periods requested by Members or imposed by our responsible gaming team.
• Customer Support: To respond to enquiries, resolve disputes, and administer complaints received via live chat, email, or other support channels.
• Platform Improvement: To analyse usage patterns, conduct internal analytics, test new features, and improve the overall quality and performance of the sm506 platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account compromise, collusion, and other prohibited conduct as defined in the sm506 Terms & Conditions.
• Marketing Communications: To send promotional offers, bonus notifications, and relevant product updates to Members who have opted in to receive such communications. You may opt out at any time.

sm506 will not use your Personal Data for any purpose that is incompatible with the purposes listed above without providing you with prior notice and, where required, obtaining your explicit consent.

sm506 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the sm506 website. Cookies do not contain executable code and cannot be used to run programs or deliver viruses to your device.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the sm506 platform. Disabling other cookie categories will not prevent you from accessing the Services but may reduce the quality of your experience.

sm506 shares Personal Data with third parties only in the limited circumstances described below. We do not sell or rent your Personal Data to any third party for their own commercial purposes.

As an internationally operated platform serving Indonesian players, sm506 may store and process Personal Data on servers located outside Indonesia. Where such transfers occur, sm506 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections applicable in Indonesia.

Safeguards may include contractual clauses that impose data protection obligations on the recipient, equivalent to those observed by sm506 itself, or reliance on adequacy determinations where available. If you wish to obtain further information regarding the specific safeguards applicable to any cross-border data transfer, please contact our support team.

sm506 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal obligation to retain data for a longer period. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active membership and for a period of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• KYC Documentation: Retained for five (5) years from the date of verification, in accordance with internationally recognised AML record-keeping standards.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Communications Data: Support chat transcripts and email correspondence are retained for two (2) years from the date of each interaction, unless they relate to an unresolved dispute.
• Technical & Usage Data: Anonymised analytics data may be retained indefinitely. Identifiable technical data (e.g., IP address logs) is retained for a maximum of twelve (12) months.
• Marketing Consent Records: Consent records are retained for the duration of your active membership and for one (1) year following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with sm506's internal data disposal procedures.

As a Member of sm506 and a data subject, you hold the following rights with respect to the Personal Data we process about you. These rights are not absolute and are subject to applicable legal limitations, but sm506 is committed to honouring them in good faith.

To exercise any of the rights listed above, please contact the sm506 support team via live chat or email. We will respond to all valid requests within thirty (30) calendar days of receipt. In complex cases requiring additional time, we will notify you of the extended timeframe within the initial 30-day window.

The sm506 platform is strictly intended for adults aged 21 and over. sm506 does not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes age declaration and our KYC verification process confirms each Member's date of birth before any withdrawal is processed.

If sm506 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the sm506 platform, please notify us immediately at [email protected].

sm506 maintains a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and sm506 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive data stored on sm506 systems — including KYC documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within sm506 is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly upon role changes or departures.
• Penetration Testing: sm506 conducts regular security assessments, including external penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: sm506 maintains a documented data breach response plan. In the event of a confirmed breach affecting Member data, we will notify affected Members and relevant authorities within the timeframes required by applicable law.

While sm506 takes all reasonable precautions to safeguard your Personal Data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your sm506 login credentials and for notifying us immediately if you suspect unauthorised access to your account.

The sm506 website may contain references to third-party services, game providers, or payment partners. Where any such references include links to external websites or services, those external destinations operate under their own privacy policies and sm506 is not responsible for the privacy practices or content of any third-party site.

sm506 recommends that you review the privacy policy of any third-party service you access through or in connection with the sm506 platform before providing that service with any of your Personal Data.

sm506 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify Members via the email address registered to their account or via a prominent notice on the sm506 platform, no fewer than 7 days before the changes take effect.

The date at the top of this Privacy Policy reflects the date of the most recent revision. Continued use of the sm506 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with any amendment, you should cease using the platform and contact our support team to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way sm506 handles your Personal Data, please contact us in the first instance through one of the channels below:

sm506 will acknowledge all privacy-related complaints within 5 business days and aim to resolve them within 30 calendar days. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction.

For enquiries relating to your gaming account, bonus eligibility, or payment transactions, please refer to our FAQ page or review our Terms & Conditions. For responsible gaming support tools and self-exclusion options, please visit our Responsible Gaming page.