idn77 Privacy Policy

1 Introduction

idn77 operates as an internationally licensed online betting and gaming platform, serving registered Members primarily located in Indonesia. We understand that entrusting us with your personal data carries a real obligation of care. This Policy sets out the standards we apply to ensure your information is handled lawfully, fairly, and transparently — consistent with international data protection best practices, including principles aligned with the General Data Protection Regulation (GDPR) and Indonesia's Personal Data Protection Law (UU PDP No. 27 Tahun 2022).

We collect only the personal data that is strictly necessary to provide you with a secure, compliant, and personalised gaming experience. Data minimisation is a foundational principle at idn77: we do not collect data speculatively, and we do not retain it longer than is required for its stated purpose.

This Policy applies to all personal data collected through the idn77 website at https://idn77.cam, our mobile-optimised interfaces, our customer support communications, and any other touchpoint through which you interact with the idn77 Platform.

2 Definitions

The following definitions apply throughout this Policy:

• Personal Data means any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, location data, online identifier, or factors specific to that person's identity.
• Processing means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, or deletion.
• Data Controller means idn77, the entity that determines the purposes and means of Processing your Personal Data.
• Data Processor means a third party that processes Personal Data on behalf of idn77 under a binding data processing agreement (e.g., a KYC provider or payment processor).
• Sensitive Data means a subcategory of Personal Data requiring heightened protection, including national identity numbers (KTP/NIK), financial account details, and biometric data submitted during KYC verification.
• Cookies means small text files placed on your device by the idn77 Platform to store session information, preferences, and analytics data.
• KYC means Know Your Customer — the identity and documentation verification process idn77 applies to confirm Member eligibility and comply with anti-money laundering (AML) obligations.
• Consent means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.

3 Data We Collect

idn77 collects Personal Data across several categories depending on your level of interaction with the Platform. The table below summarises what we collect and the context in which it is collected:

4 How We Use Your Data

idn77 uses your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your Member account, including authentication, password reset, and session management.
• Service Delivery: Processing deposits and withdrawals via Indonesian banking and e-wallet channels; crediting winnings; applying bonuses; settling wagers on sports events, live casino tables, slot games, and other gaming products.
• Identity & Compliance Verification: Conducting KYC checks to confirm your age (21+), identity, and Indonesian residency; complying with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under applicable international standards.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling; enforcing deposit limits, loss limits, and self-exclusion requests; contacting Members who show indicators of gambling-related harm.
• Platform Security: Detecting and preventing fraud, account takeover attempts, multi-accounting, bonus abuse, and unauthorised access using technical and behavioural data signals.
• Customer Support: Responding to account queries, processing complaints, and providing dispute resolution.
• Platform Improvement: Analysing aggregated, anonymised behavioural data to improve platform performance, game offerings, and the overall Member experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign communications — only to Members who have provided explicit opt-in consent. You may withdraw this consent at any time.
• Legal Obligations: Retaining transaction records and identity data as required by applicable AML, KYC, and data retention regulations.

5 Legal Basis for Processing

idn77 processes your Personal Data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil the Member Agreement between you and idn77 — including account registration, payment processing, and withdrawal fulfilment — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with AML, KYC, and data retention obligations under applicable law is carried out on the basis of legal compliance.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated performance analytics is carried out on the basis of idn77's legitimate operational interests, provided those interests are not overridden by your fundamental data protection rights.
• Consent: Processing for marketing communications and non-essential analytics cookies is carried out on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

idn77 does not sell, rent, or trade your Personal Data. We share data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Regulated Indonesian banking partners and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, GoPay, DANA, ShopeePay, LinkAja) receive financial data necessary to process deposits and withdrawals. These entities are independent data controllers subject to their own privacy obligations under Indonesian financial regulations.
• KYC & Identity Verification Providers: Certified third-party KYC providers receive identity documents and biometric data solely for the purpose of verifying Member eligibility. KYC providers are bound by data processing agreements that prohibit secondary use of Member data.
• Game Studio Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session identifiers necessary to deliver their certified game content through the idn77 Platform. These providers do not receive personally identifiable registration or financial data.
• Fraud Prevention Services: Technical data (IP addresses, device fingerprints, behavioural signals) may be shared with specialist fraud detection providers to identify and prevent account abuse, money laundering, and multi-accounting.
• Legal & Regulatory Authorities: idn77 will disclose Personal Data to law enforcement, regulatory authorities, or courts where required by a valid legal order, subpoena, or applicable law. idn77 will notify affected Members of such disclosures to the extent permitted by law.
• Business Successors: In the event of a merger, acquisition, or sale of idn77's operations, Member data may be transferred to the acquiring entity subject to equivalent data protection commitments and prior notice to Members.

7 Cookies & Tracking Technologies

The idn77 Platform uses cookies and similar tracking technologies to ensure platform functionality, maintain session security, and — with your consent — improve our understanding of how Members use the Platform. The following cookie categories are in use:

• Essential Cookies: Required for the Platform to function. They manage your login session, maintain your account authentication state, and apply your security settings. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Store your platform preferences — such as your preferred language setting, display options, and notification configuration — so they are remembered between sessions. These are technically non-essential but significantly improve your experience.
• Analytics Cookies: Collect anonymised data about how Members navigate the Platform — page visit frequency, session duration, feature usage — to help our product team identify improvements. These cookies are optional and require your consent prior to activation.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and CSRF (cross-site request forgery) attacks. These are classified as essential and cannot be opted out of.

You may manage cookie preferences through your browser settings at any time. Deleting or blocking essential cookies may prevent you from accessing your account or using core Platform features. Blocking analytics cookies has no effect on your ability to play or transact.

idn77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform.

8 Data Security

idn77 applies a multi-layered technical and organisational security framework to protect Member data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and idn77 servers is encrypted using TLS 1.3, the current industry standard for transport-layer encryption.
• Encryption at Rest: Sensitive Personal Data — including KYC documents, financial account identifiers, and KTP/NIK numbers — is stored using AES-256 encryption in isolated, access-controlled data stores.
• Password Hashing: Member passwords are never stored in plain text. They are processed using an industry-standard adaptive hashing algorithm (bcrypt) with a unique per-account salt.
• Access Controls: Internal access to Member data is restricted to authorised idn77 personnel on a strict need-to-know basis. All internal data access is logged and subject to periodic audit.
• Penetration Testing: idn77's systems undergo regular independent penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: idn77 maintains a documented data breach response plan. In the event of a breach affecting Member data, affected Members will be notified within the timeframe required by applicable data protection law, including a description of the breach, the data affected, and the steps taken to address it.

9 Data Retention

idn77 retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. The following retention periods apply:

On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product development purposes.

10 Your Data Rights

As an idn77 Member, you hold the following rights with respect to your Personal Data. These rights are exercisable free of charge, subject to identity verification:

• Right of Access: You may request a copy of the Personal Data idn77 holds about you. We will respond within 30 calendar days of receiving a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic profile data (email address, phone number, residential address) can be updated directly in your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where Processing was unlawful. Note that certain data categories — particularly KYC and transaction records — must be retained for the periods specified in Section 9 to comply with legal obligations, and erasure requests for those categories cannot be fulfilled until those periods have elapsed.
• Right to Restriction: You may request that idn77 restrict the Processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is under review.
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for data that is processed on the basis of consent or contractual necessity.
• Right to Object: You may object to Processing carried out on the basis of legitimate interests — particularly direct marketing. Upon receipt of a valid objection to marketing, idn77 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time via the notification preferences panel in your account or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the rights above, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will acknowledge your request within 3 business days (WIB) and fulfil it within 30 calendar days, or inform you if an extension is required.

11 International Data Transfers

idn77 operates internationally, and certain service providers — including game studios and certified KYC verification platforms — may process Member data in jurisdictions outside of Indonesia. Where Personal Data is transferred internationally, idn77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Indonesian data protection law (UU PDP No. 27 Tahun 2022) and internationally recognised best practices. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfer to jurisdictions recognised as providing an adequate level of data protection by relevant regulatory authorities.
• Binding corporate rules or equivalent frameworks where applicable.

You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our support team. By using the idn77 Platform, you acknowledge that your data may be transferred, processed, and stored in jurisdictions outside Indonesia, subject to the safeguards described above.

12 Minors & Age Restriction

The idn77 Platform is strictly intended for adults aged 21 and above. idn77 does not knowingly collect, process, or retain Personal Data from individuals under 21 years of age. All registrations are subject to age verification during the KYC process.

If idn77 discovers or is notified that Personal Data has been collected from a Member who was under 21 years of age at the time of registration, we will:

• Immediately suspend the relevant account pending investigation.
• Void any wagers placed from the account.
• Return net deposits (after deducting any bonus funds received) to the original payment source where technically feasible.
• Permanently delete all Personal Data associated with the account within 30 days, except where retention is required by applicable legal obligations.

If you believe that a person under 21 years of age has registered an account on idn77, please contact us at [email protected] immediately.

13 Amendments to This Policy

idn77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Any updates will be published on this page with a revised "Last Updated" date.

For material changes — those that meaningfully affect how we process your Personal Data or that reduce your privacy rights — idn77 will provide advance notice via email to the address registered on your account, or through an in-platform notification, no fewer than 14 calendar days before the changes take effect.

Continued use of the idn77 Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must discontinue use of the Platform and contact our support team to initiate account closure and any pending withdrawal.

14 Contact & Data Protection Enquiries

For any question, concern, or formal request relating to this Privacy Policy or the processing of your Personal Data, please contact idn77 through the following channel:

For responsible gaming support, self-exclusion requests, and deposit limit adjustments, please visit our Responsible Gaming page. For general account and payment queries, visit the FAQ page. The full platform rules governing your membership are set out in the Terms & Conditions.