Effective Date: January 1, 2026 | Last Updated: January 1, 2026

This Privacy Policy ("Policy") describes how idr77 ("we", "us", "our", "Company") collects, uses, discloses, and protects personal information provided by users ("you", "your", "User", "Player") of our online betting platform (the "Service", "Platform", "Website"). By accessing or using our Service, you consent to the data practices described in this Policy.

1. Information We Collect

We collect various types of information to provide, maintain, and improve our Service, ensure security, comply with legal obligations, and deliver a personalized betting experience to Indonesian players.

1.1 Personal Information You Provide

When you register an Account with idr77, you directly provide us with personal information, including but not limited to:

  • Identity Information: Full legal name, date of birth, gender, Indonesian ID card (KTP) number, and copies of your KTP for KYC verification purposes.
  • Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code).
  • Account Credentials: Username, password (encrypted and not accessible by our staff).
  • Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), transaction history, deposit and withdrawal records.
  • Verification Documents: Photographs or scans of your Indonesian ID card (KTP), proof of address (utility bills, bank statements), and selfie photos for identity verification.

1.2 Information Automatically Collected

When you access or use our Platform, we automatically collect certain technical and usage information:

  • Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, UDID, MAC address).
  • Connection Data: IP address, internet service provider (ISP), geographic location (city, region derived from IP address), time zone settings.
  • Usage Data: Pages visited, features used, games played, bet history, login/logout times, session duration, referring URLs, search queries within our Platform.
  • Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and local storage to track user preferences, authenticate sessions, analyze site traffic, and deliver personalized content. See Section 9 for detailed information about cookies.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: When you deposit or withdraw funds via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), these payment providers may share transaction confirmation data, account validation results, and fraud prevention signals with us.
  • Identity Verification Services: Third-party KYC verification providers may confirm your identity against Indonesian government databases to verify that your ID card (KTP) is valid and matches the information you provided.
  • Fraud Prevention Services: Anti-fraud and anti-money laundering service providers may share risk scores, behavioral analytics, and watchlist screening results to help us prevent fraudulent activity.

2. How We Use Your Information

idr77 uses the collected information for the following purposes:

2.1 Service Delivery and Account Management

  • Create, maintain, and manage your betting Account.
  • Process your registration, login authentication, and password recovery requests.
  • Verify your identity, age (21+ requirement), and residency in Indonesia through KYC procedures.
  • Enable you to place bets on sports events, play casino games, slots, and togel lottery draws.
  • Process deposits, withdrawals, and internal fund transfers.
  • Maintain accurate transaction records and betting history.

2.2 Security and Fraud Prevention

  • Detect, investigate, and prevent fraudulent activity, bonus abuse, collusion, money laundering, and other illegal activities.
  • Monitor for multiple accounts, suspicious betting patterns, and use of automated betting software.
  • Protect the integrity of our games and ensure fair play for all users.
  • Verify payment methods to prevent use of stolen bank accounts or credit cards.
  • Comply with anti-money laundering (AML) regulations and sanctions screening requirements.

2.3 Customer Support and Communication

  • Respond to your inquiries, complaints, and support requests via live chat, WhatsApp, and email.
  • Send you account notifications (deposit confirmations, withdrawal approvals, bonus credits, password changes).
  • Provide 24/7 Indonesian-speaking customer service tailored to your needs.
  • Notify you of important Platform updates, maintenance schedules, and policy changes.

2.4 Personalization and Improvement

  • Personalize your experience by recommending games, sports markets, and promotions based on your betting history and preferences.
  • Analyze usage patterns to improve Platform performance, identify popular features, and optimize user interface design.
  • Conduct research and analytics to understand Indonesian player behavior and preferences.
  • Test new features, games, and functionalities before full release.

2.5 Marketing and Promotions

  • Send you promotional offers, bonus announcements, tournament invitations, and VIP program benefits (with your consent).
  • Deliver targeted advertising based on your interests, betting activity, and demographic information.
  • Notify you of special events, seasonal promotions (Indonesian Independence Day, Idul Fitri, Chinese New Year), and exclusive offers for Indonesian players.

2.6 Legal Compliance and Regulatory Requirements

  • Comply with Indonesian and international laws, regulations, and licensing requirements governing online gambling operations.
  • Respond to legal requests from government authorities, courts, and law enforcement agencies.
  • Enforce our Terms & Conditions, resolve disputes, and protect our legal rights.
  • Maintain records required by gambling regulators, tax authorities, and financial oversight bodies.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

3.1 Service Providers and Business Partners

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your deposits and withdrawals on our behalf.
  • Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) may receive limited data (username, bet amounts, game session IDs) to deliver casino games, slots, and live dealer experiences.
  • Identity Verification Services: KYC verification providers validate your Indonesian ID card (KTP) and proof of address against government databases.
  • Fraud Prevention Services: Anti-fraud and AML screening providers analyze transaction patterns and risk scores to protect against fraudulent activity.
  • Cloud Hosting Providers: Our Platform infrastructure, databases, and backup systems are hosted with third-party cloud service providers that maintain strict data security standards.
  • Customer Support Tools: Live chat software, helpdesk ticketing systems, and CRM platforms process your support inquiries and communication history.

3.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, regulators, courts, and law enforcement when:

  • Required by Indonesian law, court order, subpoena, or legal process.
  • Necessary to comply with gambling licensing requirements and regulatory audits.
  • Investigating suspected illegal activity (money laundering, fraud, underage gambling).
  • Responding to national security or public safety threats.
  • Enforcing our Terms & Conditions or protecting our legal rights and property.

3.3 Business Transfers

If idr77 is involved in a merger, acquisition, corporate restructuring, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company as part of the business assets. We will notify you via email or Platform notification before your information is transferred and becomes subject to a different Privacy Policy.

3.4 With Your Consent

We may share your information with third parties not listed above when you explicitly consent to such sharing, such as when you participate in partner promotions, affiliate programs, or third-party loyalty schemes.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Type Retention Period
Account Registration Data Duration of Account + 7 years after closure (regulatory requirement)
KYC Documents (ID Card, Proof of Address) Duration of Account + 7 years after closure (AML compliance)
Transaction History (Deposits, Withdrawals, Bets) 7 years after transaction date (tax and regulatory requirement)
Customer Support Communications 3 years after last interaction (quality assurance and dispute resolution)
Marketing Consent Records Until consent is withdrawn + 2 years (proof of consent)
Login and Usage Logs 2 years after creation (security monitoring and fraud prevention)

After the retention period expires, we securely delete or anonymize your personal information so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

5. Data Security

idr77 implements industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Security Measures

  • SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption protocols.
  • Password Protection: Your password is hashed using bcrypt or similar one-way encryption algorithms. We cannot retrieve your original password—only you can reset it.
  • Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls, DDoS mitigation systems, and real-time intrusion detection software.
  • Secure Data Storage: Personal information is stored in encrypted databases hosted in secure data centers with physical access controls, surveillance, and 24/7 monitoring.
  • Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and third-party security audits to identify and remediate potential risks.

5.2 Organizational Security Measures

  • Access Controls: Only authorized employees with legitimate business needs can access personal information. Access is logged and monitored.
  • Employee Training: Staff members receive regular training on data protection, privacy regulations, and security best practices.
  • Confidentiality Agreements: All employees and contractors sign confidentiality agreements prohibiting unauthorized use or disclosure of user data.
  • Incident Response Plan: We maintain a data breach response plan to quickly contain, investigate, and remediate security incidents.

5.3 Your Responsibility

While we implement robust security measures, you also play a critical role in protecting your Account:

  • Choose a strong, unique password combining uppercase and lowercase letters, numbers, and special characters.
  • Never share your login credentials with anyone, including customer support staff (we will never ask for your password).
  • Log out of your Account when using shared or public devices.
  • Enable two-factor authentication (2FA) if available to add an extra layer of security.
  • Notify us immediately if you suspect unauthorized access to your Account.

6. Your Privacy Rights

As an idr77 user, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Submit your request to our customer support team, and we will provide a data export within 30 days (subject to identity verification).

6.2 Right to Rectification

You can update or correct inaccurate personal information through your Account settings or by contacting customer support. For KYC documents (ID card, proof of address), you may need to submit new documents for verification.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances (e.g., when the data is no longer necessary for the purposes it was collected). However, we may retain certain data to comply with legal obligations (7-year retention for transaction records) or defend against legal claims.

6.4 Right to Restrict Processing

You can request that we temporarily restrict processing of your personal information while we investigate a dispute over accuracy or lawfulness of processing.

6.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and transmit it to another service provider.

6.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time by clicking "unsubscribe" in promotional emails or adjusting your communication preferences in Account settings.

6.7 Right to Withdraw Consent

If processing is based on your consent (e.g., marketing communications), you can withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at: [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days after verifying your identity.

7. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside Indonesia where our service providers, cloud hosting infrastructure, or business partners operate. These countries may have data protection laws that differ from Indonesian regulations.

When we transfer your information internationally, we ensure adequate protection through:

  • Standard contractual clauses approved by data protection authorities.
  • Binding corporate rules for intra-group transfers.
  • Certification under recognized data protection frameworks (e.g., ISO 27001).
  • Ensuring service providers maintain equivalent security standards to those described in this Policy.

By using idr77, you acknowledge and consent to the international transfer of your personal information as described above.

8. Children's Privacy

Our Service is strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete it and close the associated Account.

If you are a parent or guardian and believe your child has provided personal information to idr77, please contact us immediately at [email protected] so we can take appropriate action.

9. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content.

9.1 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for basic Platform functionality (login, session management, security). Cannot be disabled. Session or up to 30 days
Performance Cookies Collect anonymous usage statistics to help us improve Platform performance and identify technical issues. Up to 2 years
Functionality Cookies Remember your preferences (language, timezone, display settings) to personalize your experience. Up to 1 year
Advertising Cookies Track your interests and betting activity to deliver relevant promotional offers and targeted ads. Up to 1 year

9.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may impair certain Platform features and prevent you from accessing your Account.

To manage cookies, consult your browser's help documentation:

  • Google Chrome: Settings → Privacy and Security → Cookies and other site data
  • Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via:

  • Email notification to your registered email address.
  • Prominent notice on our Platform homepage and Account dashboard.
  • In-app notification upon your next login.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of idr77 after changes are posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

  • Email: [email protected] (Subject: Privacy Inquiry)
  • Live Chat: Available 24/7 on our Platform (select "Privacy & Data Protection" category)
  • WhatsApp: Available 24/7 (contact details provided after registration)

We aim to respond to all privacy inquiries within 7 business days. For formal data subject rights requests (access, erasure, portability), we will respond within 30 days after verifying your identity.

Acknowledgment: By using idr77, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You also confirm that you are at least 21 years of age and legally eligible to use our Service.

Our Privacy Commitments

SSL Encryption

All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption, the same security standard used by banks.

Secure Data Storage

Personal information is stored in encrypted databases with physical access controls, 24/7 monitoring, and regular security audits.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays protected.

KYC Verification

Mandatory identity verification (Indonesian ID card) ensures only legitimate, 21+ players can create accounts and protects against fraud.

Your Privacy Rights

Access, correct, delete, or export your personal data anytime. We respect your control over your information.

Transparent Retention

Clear data retention periods (7 years for transaction records, per regulatory requirements) with secure deletion after expiration.

Questions About Your Privacy?

Our customer support team is available 24/7 to answer any questions about how we collect, use, and protect your personal information.