Your privacy matters to us. This Privacy Policy explains what personal data play77 collects from Indonesian players, how we use and protect it, and what rights you hold over your own information. Please read this document carefully before registering an Account or using our Services.
1.1 About This Policy. This Privacy Policy ("Policy") describes how play77 ("we", "us", "our", or "the Company") collects, processes, stores, and protects personal data belonging to registered Players and visitors ("you" or "User") of the play77 Platform at https://play77.cam.
1.2 Scope. This Policy applies to all personal data processed in connection with your use of the play77 Platform, including data provided during Account registration, during gameplay, through customer support interactions, and through the use of payment services. It applies to all Players accessing the Platform from Indonesia and any other jurisdiction.
1.3 Data Controller. play77 acts as the data controller for all personal data collected through the Platform. For questions regarding data processing or to exercise your data rights, you may contact our Data Protection Officer (DPO) at the details provided in Section 14 of this Policy.
1.4 Relationship with Terms & Conditions. This Privacy Policy forms part of the overall agreement between you and play77, alongside the Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data-privacy matter, this Policy shall prevail.
2.1 play77 collects the following categories of personal data from Players and Platform visitors:
| Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian KTP / passport / SIM number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, Indonesian mobile number, residential address (city, province, postal code) | Account communications, customer support, promotional notifications |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens, geolocation data | Platform security, fraud detection, service optimization |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions, click-stream data | Service improvement, personalization, responsible gaming monitoring |
| Communications Data | Live chat transcripts, email correspondence, support tickets | Customer support quality, dispute resolution, training |
| KYC Documents | Scanned/photographed copies of government-issued ID, proof of address (utility bill, bank statement dated within 90 days) | Mandatory identity verification prior to withdrawal processing |
2.2 Sensitive Data. play77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such information is incidentally included in a KYC document or support communication, it will be stored only for as long as necessary and handled with the highest level of protection.
play77 collects personal data through the following channels:
play77 uses the personal data we collect for the following purposes:
play77 processes your personal data on one or more of the following legal bases:
6.1 play77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data only in the following circumstances:
6.2 All third-party data processors engaged by play77 are contractually bound to handle personal data in accordance with data protection standards consistent with this Policy and applicable law.
7.1 Retention Periods. play77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of Account plus 5 years after closure |
| Financial & Transaction Records | 7 years from the date of the transaction (AML compliance) |
| KYC Documents | 5 years after Account closure or last transaction |
| Betting & Gaming History | 5 years from the date of the wager |
| Customer Support Communications | 3 years from the date of the interaction |
| Technical & Usage Logs | 13 months from collection date |
| Marketing Consent Records | Until consent is withdrawn plus 3 years |
7.2 Extended Retention. Where a legal dispute, regulatory investigation, or fraud case is ongoing, play77 may retain relevant personal data beyond the standard periods stated above until the matter is fully resolved.
7.3 Secure Deletion. Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or anonymized so that it can no longer be associated with any individual Player.
8.1 Technical Safeguards. play77 employs industry-standard technical security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:
8.2 Organizational Safeguards. Access to personal data within play77 is restricted on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training. Access privileges are reviewed periodically and revoked promptly upon role changes or departure.
8.3 Data Breach Response. In the event of a personal data breach that poses a risk to Player rights and freedoms, play77 will take immediate containment steps and notify affected Players and the relevant supervisory authority within the timeframes required by applicable data protection law.
8.4 Player Responsibility. While play77 takes extensive measures to secure your data, you are also responsible for maintaining the security of your Account. Use a strong, unique password, enable multi-factor authentication where available, and never share your login credentials with any third party.
9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the play77 Platform. They allow the Platform to recognize your device, maintain your session, remember your preferences, and collect anonymized usage data for analytics purposes.
9.2 Types of Cookies Used. play77 uses the following categories of cookies:
9.3 Cookie Management. Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, disabling strictly necessary cookies may prevent you from logging in or accessing core Platform features. Functional and analytics cookies may be disabled without affecting basic Platform access.
9.4 No Third-Party Advertising Cookies. play77 does not use cookies for third-party advertising or behavioral targeting. We do not share cookie data with advertising networks.
As a Player whose personal data is processed by play77, you hold the following rights in relation to your information. To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 14.
Request a copy of the personal data play77 holds about you, along with information on how it is used.
Request correction of any inaccurate or incomplete personal data held in your Account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that processing of your data be restricted while a dispute or verification request is pending.
Request a structured, machine-readable export of personal data you have provided to play77.
Object to processing based on legitimate interests, or withdraw consent for marketing communications at any time.
Response Timeframe. play77 will acknowledge all data rights requests within 5 business days and aim to resolve them within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extended timeframe in advance.
11.1 The play77 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in our KYC process, and we actively enforce the 21+ restriction through document-based identity checks.
11.2 If play77 discovers that personal data has been collected from an individual who is under the age of 21 — whether through misrepresentation or any other means — we will immediately close the associated Account, delete all personal data collected in connection with that Account to the extent permitted by law, and forfeit any Funds in accordance with our Terms & Conditions.
11.3 Parents and guardians are encouraged to use device-level parental controls and filtering software to prevent minors from accessing gambling platforms, including play77.
12.1 The play77 Platform integrates content and services from third-party providers, including game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe), payment gateways, and analytics platforms. These third parties operate under their own privacy policies and data processing agreements.
12.2 play77 is not responsible for the privacy practices of third-party providers. However, we contractually require all third-party processors to implement data protection standards consistent with this Policy and to process personal data only for the specific purposes authorized by play77.
12.3 The play77 Platform does not contain links to external third-party websites. Any reference to third-party brands (BCA, BRI, Pragmatic Play, etc.) is for informational purposes only and does not constitute an endorsement of their privacy practices.
13.1 play77 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in Indonesian data protection law, international privacy standards, changes in our data processing practices, or new product and service offerings.
13.2 When material changes are made to this Policy, play77 will notify registered Players via email to the address on file and will display a prominent notice on the Platform. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent amendment.
13.3 Your continued use of the play77 Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way play77 processes your personal data, you may contact our Data Protection Officer (DPO) using the following details:
All communications with our DPO are handled with strict confidentiality. We will never use a data rights enquiry as a basis for restricting your Account or treating you less favorably.
Six core principles that underpin how play77 approaches your personal data every day.
Every data transmission between your device and the play77 Platform is protected by bank-grade SSL encryption. Your credentials and financial details travel securely.
play77 does not sell, rent, or trade your personal data to advertisers, data brokers, or any commercial third party. Your information stays within the play77 ecosystem.
We retain your data only as long as legally required or operationally necessary. Financial records are held for 7 years per AML rules; most other data is deleted within 5 years of Account closure.
We only send promotional communications where you have given explicit consent. Withdraw at any time via Account settings or by contacting support — no questions asked.
Request a copy of your data, correct inaccuracies, or ask for deletion at any time. Our DPO responds within 5 business days and resolves requests within 30 calendar days.
play77's infrastructure undergoes periodic third-party penetration testing and security reviews to identify and resolve vulnerabilities before they can affect Player data.
Our Data Protection Officer and 24/7 support team are ready to help. Whether you want to access your data, update your preferences, or simply understand how play77 uses your information, we are here to assist.
play77 operates under an international gaming licence. Adults only. Gambling can be addictive — please play responsibly.