Privacy Policy

At indo77, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with international data protection standards.

Last Updated: 1 January 2026

Your Data Protection Rights

A quick overview of how indo77 safeguards your information and respects your privacy rights under international law.

256-Bit SSL Encryption

All data transmitted between your device and our servers is protected by industry-standard 256-bit SSL encryption, the same security used by banks worldwide.

No Unauthorised Sharing

indo77 will never sell, rent, or share your personal information with third-party marketers. Your data is used solely to operate our services and comply with legal obligations.

Secure Data Storage

All personal data is stored on secure, segregated databases with multi-layered access controls. Sensitive information such as passwords is hashed using bcrypt algorithms.

Right to Data Access

You have the right to request a copy of all personal data we hold about you. Contact our support team to initiate a data export request.

Right to Deletion

You may request deletion of your account and associated data at any time, subject to legal retention obligations for anti-money-laundering and dispute resolution purposes.

Cookie Transparency

We use cookies to improve site performance and maintain session security. All cookies are session-based or functional — no invasive tracking cookies are deployed.

1. Introduction

This Privacy Policy describes how indo77 ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your") of the indo77 platform, accessible at https://indo77.cam (the "Platform").

By registering an account or otherwise accessing the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to any provision of this Privacy Policy, you must not use the Platform.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions. Defined terms used in this document carry the same meaning as in the Terms and Conditions unless otherwise specified.

2. Information We Collect

indo77 collects the following categories of personal information in connection with the operation of the Platform:

2.1 Information You Provide Directly

  • Registration Information: Full legal name, date of birth, email address, mobile telephone number, residential address, and password.
  • Identity Verification (KYC) Documents: Government-issued photo identification (KTP, passport, driver's licence), proof of address documents (utility bills, bank statements), and selfie photographs for identity confirmation.
  • Financial Information: Bank account details, e-wallet account numbers (OVO, DANA, GoPay, ShopeePay), and transaction history (deposits, withdrawals, wagers, winnings).
  • Correspondence: Messages, emails, live chat transcripts, and other communications exchanged with our customer support team.
  • Promotional Participation: Information submitted when entering competitions, claiming bonuses, or participating in surveys.

2.2 Information Collected Automatically

  • Device and Browser Information: IP address, browser type and version, operating system, device model, screen resolution, and language preferences.
  • Usage Data: Pages visited, time spent on pages, click-through paths, referring URLs, search queries entered on the Platform, and timestamps of activity.
  • Geolocation Data: Approximate geographic location derived from IP address for regulatory compliance and content localisation purposes.
  • Cookies and Similar Technologies: Session identifiers, authentication tokens, preference settings, and analytics data. See Clause 8 for detailed cookie information.

2.3 Information from Third Parties

  • Payment Processors: Transaction confirmation data, payment status updates, and fraud detection signals from local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers.
  • Game Providers: Betting history, game session data, and result records from third-party software studios (Pragmatic Play, Evolution Gaming, Microgaming, etc.).
  • Fraud Prevention Services: Risk assessment data, device fingerprinting signals, and identity verification results from specialised security vendors.

3. How We Use Your Data

indo77 processes personal information for the following purposes:

3.1 Service Delivery

  • To create and maintain your Account.
  • To process deposits, withdrawals, and payment transactions.
  • To deliver gaming services, including sports betting, live casino, slots, and togel markets.
  • To settle bets, credit winnings, and maintain accurate balance records.
  • To provide customer support via live chat, email, and telephone.

3.2 Compliance and Security

  • To verify your identity and age in compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
  • To detect, prevent, and investigate fraud, collusion, bonus abuse, and other prohibited conduct.
  • To enforce our Terms and Conditions and protect the integrity of the Platform.
  • To respond to legal requests, court orders, and regulatory inquiries from authorities with lawful jurisdiction.

3.3 Communication and Marketing

  • To send transactional emails and SMS messages (deposit confirmations, withdrawal notifications, password reset links).
  • To communicate promotional offers, bonuses, and platform updates where you have opted in to receive marketing communications.
  • To conduct player satisfaction surveys and gather feedback for service improvement.

3.4 Analytics and Improvement

  • To analyse usage patterns and identify opportunities for Platform improvement.
  • To conduct A/B testing on user interface elements and game recommendations.
  • To generate aggregated, anonymised reports on betting trends, popular games, and regional preferences for business intelligence purposes.

4. Legal Basis for Processing

indo77 processes personal data under the following legal bases recognised by international data protection frameworks:

  • Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions and deliver the services you have requested (account creation, payment processing, game delivery).
  • Legal Obligation: Processing required to comply with applicable laws, including age verification, KYC/AML compliance, tax reporting, and response to lawful orders from regulatory or judicial authorities.
  • Legitimate Interests: Processing necessary for fraud prevention, security monitoring, platform improvement, and other legitimate business purposes, provided such interests are not overridden by your fundamental data protection rights.
  • Consent: Where we have obtained your explicit, freely-given consent for specific processing activities, such as receiving promotional communications or participating in optional surveys.

5. Data Sharing & Third Parties

indo77 does not sell, rent, or otherwise commercially exploit your personal information. We may share your data with the following categories of third parties under strict data processing agreements:

5.1 Service Providers

  • Payment Processors: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
  • Game Content Providers: Third-party software studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe, Habanero, Spadegaming, Asia Gaming, Sexy Baccarat, Pocket Games Soft) to deliver live casino games, slots, and other gaming products.
  • Cloud Infrastructure: Secure hosting and database services for data storage and platform delivery.
  • Customer Support Tools: Live chat software, ticketing systems, and email service providers used to deliver support services.

5.2 Regulatory and Legal

  • Licensing Authorities: The regulatory body under whose licence indo77 operates, for compliance audits and regulatory reporting.
  • Law Enforcement: Government agencies, police, courts, and other authorities where disclosure is legally required or necessary to protect our rights, property, or safety.
  • Fraud Prevention Services: Specialised vendors providing identity verification, device fingerprinting, and fraud detection services to protect the Platform from criminal activity.

5.3 Business Transfers

In the event of a merger, acquisition, reorganisation, sale of assets, or bankruptcy, personal data held by indo77 may be transferred to the successor entity, subject to the same privacy obligations set out in this Policy.

Important: All third-party service providers are contractually bound to process your data only for the purposes specified by indo77 and in accordance with applicable data protection laws.

6. Data Security

indo77 employs industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

6.1 Technical Measures

  • Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Passwords are hashed using bcrypt algorithms with per-user salt values.
  • Firewalls and Intrusion Detection: Multi-layered firewall protection and real-time intrusion detection systems monitor for suspicious activity.
  • Secure Database Storage: Personal data is stored on secure, segregated databases with role-based access controls. Sensitive fields are encrypted at rest.
  • Regular Security Audits: Third-party penetration testing and vulnerability assessments are conducted quarterly.

6.2 Organisational Measures

  • Access Controls: Personal data is accessible only to authorised indo77 personnel who require such access to perform their job functions. All staff undergo data protection training.
  • Confidentiality Obligations: All indo77 employees, contractors, and agents are bound by strict confidentiality agreements.
  • Incident Response: We maintain a documented data breach response plan. In the event of a security incident affecting personal data, we will notify affected users and relevant authorities in accordance with applicable law.

6.3 Your Responsibilities

You are responsible for maintaining the confidentiality of your login credentials. Never share your password with anyone. Use a strong, unique password and enable two-factor authentication if offered. Notify us immediately if you suspect unauthorised access to your Account.

7. Data Retention

indo77 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to applicable legal retention requirements:

Data Category Retention Period Legal Basis
Account Registration Data Duration of Account + 7 years AML / Tax Compliance
KYC Documents Duration of Account + 7 years Regulatory Requirement
Transaction History Duration of Account + 7 years Financial Record Keeping
Betting History Duration of Account + 5 years Dispute Resolution
Chat Transcripts 2 years Service Quality / Dispute Resolution
Marketing Opt-In Data Until opt-out or Account closure Consent
Session Cookies Browser session or 30 days Technical Necessity

After the applicable retention period expires, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual. Aggregated, anonymised data may be retained indefinitely for statistical and business intelligence purposes.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They enable the website to recognise your device and remember certain information about your visit. indo77 uses cookies to improve site functionality, maintain session security, and analyse usage patterns.

8.2 Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable you to log in, maintain your session, and navigate the site securely. They cannot be disabled without severely impairing functionality.
  • Functional Cookies: Remember your preferences (language, currency, favourite games) to provide a more personalised experience.
  • Analytics Cookies: Collect anonymised information about how visitors use the Platform, including page views, session duration, and navigation paths. This data helps us identify areas for improvement.

8.3 Third-Party Cookies

Some cookies on the Platform are placed by third-party service providers, including payment processors and game content providers. These cookies are governed by the respective third party's privacy policy.

8.4 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Instructions for managing cookies in common browsers:

  • Google Chrome: Settings > Privacy and Security > Cookies and other site data
  • Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Microsoft Edge: Settings > Privacy, search, and services > Cookies and site permissions

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights concerning your personal information:

9.1 Right of Access

You have the right to request a copy of all personal data we hold about you. To initiate a data access request, contact our support team via live chat or email. We will provide the requested information in a commonly used electronic format within 30 days of receiving a valid request.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your Account Settings. For changes to KYC documents or other verified data, contact customer support.

9.3 Right to Erasure

You have the right to request deletion of your personal data, subject to certain legal exceptions. We may be required to retain certain data for compliance with AML regulations, tax obligations, or ongoing legal proceedings. To request Account closure and data deletion, contact our support team.

9.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as while we investigate a complaint or verify the accuracy of data you have challenged.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or adjusting your preferences in Account Settings.

9.7 Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully or violated your privacy rights, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

10. Marketing Communications

indo77 may send you promotional emails, SMS messages, and push notifications about new games, bonuses, special offers, and platform updates if you have opted in to receive marketing communications during registration or subsequently through your Account Settings.

10.1 Opting Out

You can unsubscribe from marketing communications at any time by:

  • Clicking the "unsubscribe" link at the bottom of any promotional email.
  • Replying "STOP" to any promotional SMS message.
  • Adjusting your notification preferences in Account Settings > Communication Preferences.
  • Contacting customer support to request removal from all marketing lists.

10.2 Transactional Communications

Please note that even if you opt out of marketing communications, you will continue to receive transactional emails and SMS messages related to your Account activity (deposit confirmations, withdrawal notifications, password resets, security alerts). These messages are essential to the operation of your Account and cannot be disabled.

11. International Data Transfers

indo77 operates internationally and may transfer your personal data to servers located outside Indonesia for secure storage, processing, and backup purposes. All international data transfers are conducted in accordance with applicable data protection laws and subject to appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by relevant regulatory authorities.
  • Contractual commitments from service providers to maintain equivalent data protection standards.
  • Encryption during transmission and storage to protect data in transit across borders.

By using the Platform, you consent to the transfer of your personal data to jurisdictions that may have different data protection laws than Indonesia, provided such transfers are conducted in accordance with this Privacy Policy and applicable legal requirements.

12. Children's Privacy

The indo77 Platform is not intended for use by individuals under the age of 21. We do not knowingly collect personal information from minors. If we become aware that a user is under 21 years of age, we will immediately suspend the Account, void all transactions, and delete all associated personal data.

If you are a parent or guardian and believe your child has provided personal information to indo77, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

indo77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. Where changes are material, we will provide at least 14 days' advance notice via a prominent banner on the Platform and by email to the address registered on your Account.

Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following details:

  • Email: [email protected] (plain text — not a clickable link)
  • Subject Line (for privacy requests): "Privacy Inquiry - [Your Name]"
  • Live Chat: Available 24/7 via the chat widget on the Platform
  • Response Time: Privacy-related inquiries are typically responded to within 48 hours

For data access requests, rectification requests, or Account deletion requests, please provide your full name, registered email address, and Account ID to help us process your request efficiently.

Questions About Your Privacy?

Our support team is here to help you understand how your data is protected. You can also review our full terms and responsible gaming resources.

Visit the FAQ Terms & Conditions Responsible Gaming