Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how idn777, operated under the domain idn777.cam ("idn777," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal data when you access or use our online gaming platform, including all associated pages, features, and services (collectively, "the Platform").

This Policy applies to all users who register, browse, or otherwise interact with the idn777 Platform, including residents of Indonesia and other jurisdictions where our services are accessible. By creating an account or continuing to use the Platform after this Policy becomes effective, you acknowledge that you have read, understood, and consent to the data practices described herein.

We are committed to full compliance with applicable international data-protection standards, including principles equivalent to those set out in the European Union General Data Protection Regulation (GDPR) and relevant Indonesian regulations governing electronic information and transactions. If you do not agree with this Policy, you must discontinue use of the Platform and contact us to close your account.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, email address, phone number, bank account details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" — idn777, which determines the purposes and means of Processing your Personal Data.
• "Data Subject" — you, the natural person whose Personal Data is Processed by idn777.
• "Third Party" — any natural or legal person other than you and idn777, including our service providers, payment processors, and analytics partners.
• "KYC" (Know Your Customer) — the identity and age-verification process required under international gaming regulations.
• "Cookies" — small text files stored on your device by a web browser that record your preferences and session data.

3. Data We Collect

We collect Personal Data only to the extent necessary to operate the Platform, comply with legal obligations, and provide you with a safe and personalized gaming experience. The categories of data we collect are outlined below.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, phone number, residential address (including city and postal code, relevant for users in Jakarta, Surabaya, Medan, Bandung, Bali, and other Indonesian cities), and chosen username and password.
• KYC verification documents: Indonesian National Identity Card (KTP) number and image, selfie photograph, and any supplementary proof-of-address documents requested during enhanced due-diligence reviews.
• Financial information: Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or other supported Indonesian banks. We do not store full bank-account passwords or online-banking credentials.
• Communications: Messages, chat transcripts, emails, and feedback you send to our customer-support team.
• Responsible-gaming preferences: Deposit limits, session-time settings, and self-exclusion status you configure voluntarily.

3.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and timezone (e.g., WIB UTC+7).
• Usage data: Pages visited, features accessed, games played, bet amounts and outcomes, session duration, clickstream data, and referral URL.
• Cookies and similar technologies: Session cookies (expire when you close your browser), persistent cookies (stored for a defined period), and local-storage tokens used for authentication and preference retention.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify jurisdictional eligibility and deliver localized content.

3.3 Information from Third Parties

• Payment processors: Transaction confirmation and status data from Indonesian bank payment gateways.
• Identity-verification providers: Verification results and fraud-risk scores from third-party KYC services.
• Analytics providers: Aggregated, anonymized behavioral statistics to help us improve Platform performance and user experience.

4. How We Use Your Personal Data

We process your Personal Data on the following legal bases and for the following purposes:

Purpose	Legal Basis	Data Categories Used
Account creation and management	Contract performance	Registration data, KYC documents
Age and identity verification (KYC)	Legal obligation	KTP image, selfie, date of birth
Payment processing (deposits & withdrawals)	Contract performance	Financial information, transaction data
Fraud prevention and anti-money-laundering (AML)	Legal obligation / Legitimate interest	All categories
Customer support and dispute resolution	Contract performance / Legitimate interest	Communications, account data
Responsible-gaming monitoring	Legal obligation / Legitimate interest	Gaming activity, deposit/loss data
Platform security and abuse prevention	Legitimate interest	Technical data, usage data
Marketing and promotional communications	Consent (opt-in)	Email, phone, gaming preferences
Platform analytics and improvement	Legitimate interest	Usage data, cookies (anonymized)
Legal and regulatory compliance	Legal obligation	All categories as required

We will never use your Personal Data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent. Where we rely on legitimate interest as our legal basis, we ensure that our interests are balanced against your rights and do not override them.

5. Cookies and Tracking Technologies

idn777 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, and analyze how you interact with our services. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These include authentication tokens, session identifiers, and security cookies. You cannot opt out of these without disabling the Platform entirely.
• Functional Cookies: Remember your language preferences, betting interface settings, and display options to personalize your experience across sessions.
• Analytics Cookies: Collect anonymous data on page views, session durations, and game interactions to help us understand usage patterns and improve the Platform.
• Security Cookies: Detect and prevent fraudulent activity, including bot detection and geo-fencing verification.

You may manage cookie preferences through your browser settings. Disabling analytics or functional cookies will not prevent you from using the Platform but may limit certain personalization features. We do not use third-party advertising or retargeting cookies.

6. Disclosure of Personal Data to Third Parties

We do not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with carefully selected third parties only under the following circumstances:

• Payment processors and banking partners: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and other supported payment channels.
• Identity-verification and KYC service providers: To verify your identity documents and screen against sanctions and politically-exposed-persons (PEP) lists in compliance with AML regulations.
• Cloud-hosting and infrastructure providers: To store and process data securely on servers that meet or exceed industry security benchmarks.
• Fraud-detection and cybersecurity providers: To protect the Platform and all users from unauthorized access, account takeover, and financial fraud.
• Analytics service providers: To receive aggregated, de-identified usage statistics. These providers are contractually prohibited from re-identifying or commercially exploiting the data.
• Legal and regulatory authorities: Where required by applicable law, court order, or the request of a competent government authority, we may disclose Personal Data to the extent required and permitted by law.
• Business successors: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

All Third Parties with whom we share Personal Data are contractually bound to maintain confidentiality, implement appropriate security measures, and use the data solely for the purposes for which it was disclosed.

7. International Data Transfers

idn777 operates globally, and your Personal Data may be transferred to and processed in countries outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognized data-protection authorities.
• Binding corporate rules where applicable within our group of companies.
• Transfer only to countries or service providers that offer equivalent levels of data protection.

By using the idn777 Platform, you acknowledge and consent to the international transfer of your Personal Data under the protections described above.

8. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus five (5) years after account closure to comply with AML and financial-record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by international AML standards.
• Transaction records: Retained for five (5) years from the date of each transaction.
• Customer-support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent or request deletion, plus one (1) year as evidence of prior consent.
• Anonymous analytics data: Retained indefinitely in aggre gated form with no defined retention limit.

When Personal Data is no longer required, we securely delete or anonymize it using industry-standard methods that prevent recovery or reconstruction.

9. Your Privacy Rights

Subject to applicable law and verification of your identity, you have the following rights in respect of your Personal Data held by idn777:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right of Rectification: You may request correction of inaccurate or incomplete Personal Data. For certain data fields, you may update your information directly within your account settings.
• Right of Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the Processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to Data Portability: Where Processing is based on your consent or contract performance, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to Processing based on our legitimate interests, including profiling for marketing purposes. We will cease such Processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all verified requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights may be limited where we are required to retain data to comply with legal obligations, prevent fraud, enforce our Terms and Conditions, or protect the rights and safety of other users.

10. Data Security

idn777 employs a comprehensive, multi-layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is encrypted using industry-standard TLS 1.2 or higher, indicated by the padlock icon in your browser address bar.
• Encryption at rest: Sensitive Personal Data, including KYC documents and financial details, is encrypted using AES-256 encryption when stored on our servers.
• Access controls: Strict role-based access controls ensure that only authorized personnel can access Personal Data, and only to the extent required for their specific job responsibilities.
• Two-factor authentication (2FA): Available for all user accounts and mandatory for all internal administrative access to Personal Data systems.
• Regular security audits: We conduct periodic penetration testing and vulnerability assessments, performed by independent cybersecurity firms, to identify and remediate potential weaknesses.
• Incident response procedures: In the event of a confirmed data breach that poses a risk to your rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

While we implement rigorous security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

11. Children's Privacy

The idn777 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we actively monitor for underage access attempts.

If we become aware that we have inadvertently collected Personal Data from a minor, we will promptly delete that data, close the associated account, and void any transactions made on the account. If you are a parent or guardian and believe that your child has registered on our Platform, please contact us immediately at [email protected] so that we can take appropriate action.

12. Marketing Communications

With your explicit consent, idn777 may send you promotional communications regarding new games, seasonal offers (including promotions around Idul Fitri, Ramadhan, and other cultural occasions relevant to Indonesian users), bonus opportunities, and platform updates. You may receive these communications via email or SMS, depending on the contact preferences you configure in your account settings.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email we send.
• Updating your communication preferences in your account settings under "Notifications."
• Contacting our customer-support team directly and requesting removal from our marketing list.

Withdrawal of marketing consent does not affect your ability to use the Platform or receive essential service communications, such as transaction confirmations, security alerts, and KYC status updates.

13. Links to Third-Party Services

The idn777 Platform may reference or integrate with third-party services, such as payment gateways and game-studio APIs. These third-party services operate under their own privacy policies, and idn777 is not responsible for their data-handling practices. We encourage you to review the privacy policies of any third-party service you interact with. Our disclosure of a third-party relationship does not constitute an endorsement of that party's privacy practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify you via email or a prominent in-platform notice at your next login.

We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must stop using the Platform and contact us to close your account.

15. Contact and Data Protection Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data-handling practices, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the idn777 Platform
• Response Time: We aim to acknowledge all privacy-related inquiries within 3 business days and provide a substantive response within 30 calendar days.
• Support Hours: Monday to Friday, 08:00 to 22:00 WIB (Western Indonesia Time, UTC+7)

Our customer-support and compliance teams handle all data-protection inquiries with strict confidentiality. Agents are available in both English and Bahasa Indonesia to ensure clear communication for all users across Jakarta, Surabaya, Bandung, Bali, Medan, and the rest of Indonesia.