Privacy Policy

1. Introduction and Scope

pp77 operates an online gaming platform providing sports betting, live casino games, slot entertainment, and lottery services (including togel, Indonesia's traditional numbers lottery) to players in Indonesia and other permitted jurisdictions. We are committed to protecting the privacy and security of your personal information in accordance with international data protection standards and best practices. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how we protect it, and what rights you have regarding your data.

This Privacy Policy applies to all personal information collected through the pp77 website (pp77.cam), mobile applications, customer support channels (live chat, email, WhatsApp, Telegram), and any other pp77 services. By creating an account with pp77, making a deposit, placing a bet, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a pp77 account, we collect the following personal information that you provide directly to us:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address (street address, city, postal code, province/state, country).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Permata; e-wallet account details for OVO, DANA, GoPay, ShopeePay, and LinkAja; payment card information if applicable (last four digits only, we do not store full card numbers).
• Verification Documents: Government-issued photo identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs holding identification, and any other documents submitted during the KYC (Know Your Customer) verification process.
• Communication Records: Content of communications you send to pp77 customer support via live chat, email, WhatsApp, Telegram, or other channels, including support tickets, complaints, feedback, and inquiries.

2.2 Information Collected Automatically

When you access and use the pp77 platform, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, device manufacturer and model, unique device identifiers.
• Connection Information: IP address, internet service provider, connection type (Wi-Fi, cellular), approximate geographic location based on IP address (country, city-level only).
• Usage Information: Pages visited on the pp77 website, features accessed, games played, bet history, deposit and withdrawal history, session duration, timestamps, click patterns, navigation paths, referral sources (how you found pp77).
• Performance Data: Website loading times, error messages, crash reports, and other diagnostic information used to improve platform performance and user experience.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data, payment method verification, fraud screening results from Indonesian banks and e-wallet providers.
• Identity Verification Services: Age verification results, identity authentication data, sanctions screening, and fraud prevention checks from specialized third-party KYC service providers.
• Affiliate Partners: If you were referred to pp77 by an affiliate or marketing partner, we may receive information about the referral source and promotional campaign.

3. How We Use Your Information

pp77 collects and processes your personal information for the following specific purposes, each of which is necessary for providing our gaming services or required by law:

3.1 Account Management and Service Delivery

• Creating and maintaining your pp77 player account
• Authenticating your identity when you log in to prevent unauthorized access
• Processing deposits, withdrawals, and other financial transactions through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Recording and settling sports bets, casino wagers, slot spins, and lottery selections
• Crediting winnings to your account balance
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to your inquiries via live chat, email, or messaging apps

3.2 Legal and Regulatory Compliance

• Verifying that you meet eligibility requirements (21+ years of age, Indonesian residency or other permitted jurisdiction)
• Conducting KYC (Know Your Customer) verification to comply with anti-money laundering (AML) regulations and prevent identity fraud
• Detecting and preventing underage gambling, money laundering, fraud, collusion, bonus abuse, and other prohibited activities
• Maintaining transaction records and audit trails as required by gaming regulators and financial authorities
• Responding to lawful requests from government agencies, law enforcement, courts, or regulatory bodies
• Enforcing our Terms & Conditions and protecting pp77's legal rights

3.3 Security and Fraud Prevention

• Monitoring account activity for suspicious patterns indicating hacking, account takeover, or fraudulent transactions
• Identifying duplicate accounts (multi-accounting) and bonus abuse schemes
• Blocking access from restricted jurisdictions using IP address geolocation
• Implementing device fingerprinting and behavioral analytics to detect automated bots and scraping tools
• Protecting against distributed denial-of-service (DDoS) attacks and other cybersecurity threats

3.4 Platform Improvement and Analytics

• Analyzing user behavior to understand which games, features, and betting markets are most popular among Indonesian players
• Identifying technical issues, bugs, and performance bottlenecks to improve platform stability
• Conducting A/B testing to optimize website design, navigation, and user experience
• Generating anonymized statistical reports and aggregate analytics (no individual identification)

3.5 Marketing Communications (With Your Consent)

• Sending promotional offers, bonus announcements, and tournament invitations via email or SMS where you have opted in to receive marketing communications
• Personalizing promotional content based on your gaming preferences and activity history
• Notifying you of new game releases, sports events (BRI Liga 1, EPL, Champions League), and platform features

Important: You have the right to opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account communication preferences, or contacting customer support. Opting out of marketing does not affect essential service communications such as account security alerts, transaction confirmations, or legal notices.

4. Legal Basis for Processing (GDPR Alignment)

For users in jurisdictions with data protection laws similar to the European Union's General Data Protection Regulation (GDPR), pp77 processes your personal information under the following legal grounds:

• Contractual Necessity: Processing your data is necessary to fulfill our contract with you (providing gaming services, processing transactions, maintaining your account).
• Legal Obligation: Processing is required to comply with legal obligations including age verification, KYC/AML regulations, tax reporting, and regulatory audits.
• Legitimate Interests: Processing serves pp77's legitimate business interests in preventing fraud, ensuring platform security, improving services, and protecting our legal rights, provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is based on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

pp77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• KYC/Identity Verification Providers: Specialized third-party services that verify your identity documents, perform age checks, and screen against sanctions lists and fraud databases.
• Hosting and Infrastructure Providers: Cloud service providers and data center operators who host the pp77 platform infrastructure and store data securely.
• Customer Support Software: Live chat platforms and help desk systems used by our support team to manage player inquiries.
• Analytics and Marketing Tools: Services that help us analyze website traffic, user behavior, and campaign performance (these receive anonymized or pseudonymized data where possible).

All third-party service providers are contractually obligated to process your data only for specified purposes, maintain strict confidentiality, and implement appropriate security measures. They are prohibited from using your data for their own purposes or sharing it with others.

5.2 Legal and Regulatory Authorities

pp77 may disclose your personal information to law enforcement agencies, regulatory bodies, courts, government authorities, or other third parties when required or permitted by law, including:

• In response to a valid subpoena, court order, search warrant, or other lawful request for information
• To comply with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations, including filing suspicious activity reports
• To investigate or prevent suspected fraud, illegal activity, security breaches, or violations of our Terms & Conditions
• To protect the rights, property, or safety of pp77, our players, or the public
• To respond to gaming regulator audits, investigations, or information requests

5.3 Corporate Transactions

In the event that pp77 is involved in a merger, acquisition, asset sale, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor organization as part of the transaction. You will be notified via email and/or prominent notice on our website of any such change in ownership or control of your personal data.

6. Data Retention

pp77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained while your account is active and for 7 years after account closure to comply with financial record-keeping regulations and gaming license requirements.
• Transaction Records: Deposits, withdrawals, bets, and winnings are retained for 7 years to comply with tax laws, anti-money laundering regulations, and potential audit requirements.
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by anti-money laundering regulations.
• Communication Records: Customer support interactions are retained for 3 years for quality assurance, training purposes, and dispute resolution.
• Marketing Consent Records: Records of your marketing preferences and consent are retained indefinitely to ensure we honor your opt-out choices.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual.

7. Data Security Measures

pp77 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, destruction, loss, or theft:

7.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and pp77 servers is encrypted using 256-bit SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocols, the same encryption standard used by banks and financial institutions.
• Data Encryption at Rest: Personal information stored in our databases is encrypted at rest using AES-256 encryption algorithms.
• Firewalls and Network Security: Multi-layer firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our network infrastructure from unauthorized access and cyberattacks.
• DDoS Protection: Advanced distributed denial-of-service (DDoS) mitigation systems ensure platform availability even during attack attempts.
• Secure Password Storage: Player passwords are hashed using bcrypt or similar one-way cryptographic hash functions with salt — even pp77 staff cannot view your actual password.
• Regular Security Audits: Independent security experts conduct penetration testing and vulnerability assessments to identify and remediate potential weaknesses.

7.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized pp77 employees who require it to perform their job duties, subject to strict need-to-know principles.
• Staff Training: All employees receive mandatory data protection and information security training, including confidentiality obligations and incident response procedures.
• Confidentiality Agreements: All pp77 staff and contractors are bound by legally enforceable confidentiality agreements prohibiting unauthorized use or disclosure of personal data.
• Secure Development Practices: Our software development team follows secure coding standards (OWASP guidelines) to prevent vulnerabilities such as SQL injection, cross-site scripting (XSS), and other common attack vectors.
• Incident Response Plan: We maintain a documented data breach response plan with procedures for containing, investigating, and notifying affected individuals and authorities in the event of a security incident.

Despite these extensive security measures, no system connected to the internet is 100% secure. pp77 cannot guarantee absolute security but commits to maintaining industry-leading standards and promptly addressing any vulnerabilities discovered.

8. Your Privacy Rights

As a pp77 player, you have the following rights regarding your personal information, which you may exercise at any time by contacting our customer support team:

8.1 Right to Access

You have the right to request a copy of the personal information pp77 holds about you. We will provide this information in a commonly used electronic format (such as PDF or CSV) within 30 days of your request, free of charge for your first request in a 12-month period.

8.2 Right to Rectification

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update most information directly through your account settings, or contact customer support for assistance.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent where consent was the legal basis for processing. However, we may retain certain data where required by law (such as financial transaction records) or to establish, exercise, or defend legal claims.

8.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit this data to another service provider where technically feasible.

8.5 Right to Object and Restrict Processing

You may object to certain types of data processing (such as direct marketing) or request that we restrict processing of your data in specific circumstances. We will honor such requests unless we have compelling legitimate grounds to continue processing or need to process the data for legal claims.

8.6 Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications), you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing conducted prior to your withdrawal.

8.7 Right to Lodge a Complaint

If you believe pp77 has processed your personal information in violation of applicable data protection laws, you have the right to lodge a complaint with your local data protection authority or supervisory body.

To exercise any of these rights, please contact us at: [email protected] with the subject line "Data Privacy Request" and include your account username, registered email address, and a detailed description of your request. We will respond within 30 days and may request additional information to verify your identity before processing the request.

9. Cookies and Tracking Technologies

pp77 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits. We use the following types of cookies:

9.1 Essential Cookies (Required)

These cookies are strictly necessary for the pp77 website to function and cannot be disabled. They enable core functionality such as logging in to your account, maintaining your session, processing transactions, and providing secure access to member areas.

9.2 Performance and Analytics Cookies

These cookies collect information about how you use the pp77 platform, such as which pages you visit most often, how long you spend on each page, and whether you encounter any errors. This data is used in aggregate form to improve website performance and user experience. We use third-party analytics services such as Google Analytics for this purpose.

9.3 Functionality Cookies

These cookies remember your preferences and choices (such as language selection, display currency, favorite games) to provide a more personalized experience on subsequent visits.

9.4 Marketing and Advertising Cookies

With your consent, we may use cookies to deliver targeted advertising, measure advertising campaign effectiveness, and prevent showing you the same advertisements repeatedly. These cookies may be set by pp77 or third-party advertising networks.

Managing Cookies: Most web browsers allow you to control cookies through browser settings. You can typically set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is being set. However, disabling essential cookies will prevent you from accessing certain features of the pp77 platform, including logging in to your account. For more information on managing cookies, consult your browser's help documentation.

10. International Data Transfers

pp77 operates internationally and may transfer your personal information to servers located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Ensuring the recipient country has been deemed to provide adequate data protection
• Obtaining your explicit consent for the transfer where required by law
• Implementing additional technical and organizational security measures to protect data in transit and at the destination

11. Children's Privacy

pp77 services are intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information from our systems and permanently close the account. Parents or guardians who believe their child has provided personal information to pp77 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

pp77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on the pp77 website, email notification to your registered address, or in-account messaging. The "Last Updated" date at the bottom of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of pp77 services after changes are posted constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or pp77's data protection practices, please contact our Data Protection team:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 on the pp77 website
• WhatsApp/Telegram: Contact details available through live chat

Our customer support team includes Indonesian-speaking representatives available around the clock to assist with privacy-related questions, data access requests, or concerns about how your information is handled.