Privacy Policy

1. Introduction & Scope

77slot ("we," "us," "our") is committed to protecting the privacy and personal data of all users who access our online casino and sports betting platform at 77slot.cam and any associated sub-domains, mobile-optimised pages, or application interfaces (collectively, the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of 77slot services.

This Policy applies to all individuals who interact with 77slot in any capacity, including registered members, prospective members who browse without registering, and individuals who contact our customer support team. By registering an account, depositing funds, placing bets, or otherwise using our Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which contain additional information relevant to your use of 77slot.

2. Definitions

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means 77slot, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of 77slot under a contractual agreement and in accordance with our instructions.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of personal data relating to them.
• "KYC" (Know Your Customer) means the identity verification process required to confirm a user's identity, age, and residence in compliance with anti-money laundering (AML) regulations.
• "Cookies" means small text files placed on your device by our website to collect standard internet log information and visitor behaviour information.

3. Data We Collect

77slot collects several categories of personal data in the ordinary course of providing our services. The specific data collected depends on how you interact with our Platform:

3.1 Registration & Identity Data

When you create a 77slot account, we collect:

3.2 Identity Verification (KYC) Data

To comply with international anti-money laundering regulations and verify your eligibility, we collect:

3.3 Financial & Transaction Data

To process deposits and withdrawals, we collect:

We do not store full bank account numbers, card numbers, or CVV codes on our servers. All sensitive payment data is tokenized by our PCI-DSS Level 1 certified payment gateway partners.

3.4 Gaming Activity Data

3.5 Technical & Device Data

3.6 Communications Data

When you contact our support team, we retain records of:

4. How We Collect Data

77slot collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to surveys.
• Automatically: Through cookies, web beacons, pixel tags, and server logs when you visit and interact with our Platform. See Section 10 (Cookies & Tracking) for details.
• From payment processors: When you deposit or withdraw using Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment partners share transaction confirmation data with us.
• From identity verification partners: Our third-party KYC verification service providers may return verification status and risk scores based on the identity documents you submit.
• From fraud prevention services: We use third-party fraud detection services that analyse transaction patterns and device fingerprints to identify and prevent fraudulent activity.

5. Purposes of Processing

77slot processes your personal data for the following specific purposes:

Purpose	Data Categories Used
Account creation & management	Registration data, identity data
Identity verification (KYC/AML compliance)	KYC documents, identity data, financial data
Processing deposits & withdrawals	Financial & transaction data, identity data
Providing gaming services	Gaming activity data, technical data
Fraud prevention & security	Technical data, transaction data, gaming data
Customer support & dispute resolution	Communications data, account data, transaction data
Responsible gaming monitoring	Gaming activity data, session data, financial data
Marketing & promotional communications	Registration data, gaming activity data (with consent)
Platform performance & analytics	Technical data, gaming data (anonymised/aggregated)
Legal & regulatory compliance	All categories as required by applicable law

6. Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide gaming services, process transactions, manage your account, and deliver customer support.
• Legal Obligation: Processing is required to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, fraud prevention obligations, and any other applicable laws or regulatory requirements.
• Legitimate Interests: We process certain data based on our legitimate business interests, including preventing fraud, improving our platform, ensuring system security, and conducting analytics — where these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications, optional analytics tracking, and non-essential cookies, we rely on your freely given, informed consent. You may withdraw consent at any time by contacting us or using the opt-out mechanisms provided.

7. Data Sharing & Disclosure

77slot does not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share necessary transaction data with our banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These processors are contractually bound to handle your data securely.
• KYC & AML Verification Services: Identity documents submitted for KYC are shared with our third-party verification partners, who are bound by strict data processing agreements and may not use your data for any purpose other than identity verification.
• Game Technology Providers: Game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) receive minimal session data necessary to deliver games. They operate under data processing agreements and are not permitted to use player data independently.
• Fraud Prevention & Security Services: We share device and transaction data with fraud detection service providers to protect the platform and all players from fraudulent activity.
• Customer Support Platform: Our live chat and ticketing system provider processes communications data on our behalf under a data processing agreement.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities when required by law, court order, or where we believe disclosure is necessary to prevent fraud, illegal activity, or harm to persons.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, provided the acquiring party agrees to honour this Privacy Policy or prov ides equivalent privacy protections.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years	Contractual obligation & AML compliance
KYC identity documents	Duration of account + 7 years	Regulatory requirement
Financial transaction records	7 years from transaction date	AML / legal obligation
Gaming activity records	Duration of account + 3 years	Responsible gaming monitoring & disputes
Customer support communications	3 years from last interaction	Dispute resolution & service improvement
Technical & device logs	12 months	Security & fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and analytical purposes.

9. Data Security

77slot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.3), the same encryption standard used by major international banks.
• Data Encryption at Rest: Sensitive personal data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorised 77slot staff on a strict need-to-know basis. All staff who handle personal data undergo mandatory data protection training and are bound by confidentiality agreements.
• Two-Factor Authentication (2FA): We encourage all users to enable 2FA on their accounts. Our internal systems also require 2FA for all staff accessing production data environments.
• PCI-DSS Level 1 Compliance: All payment processing is handled by PCI-DSS Level 1 certified gateways. We do not store raw card numbers or full bank account details on our servers.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses.
• Intrusion Detection Systems: Our infrastructure is protected by real-time intrusion detection and prevention systems (IDS/IPS) that monitor for suspicious activity 24/7.
• Data Breach Response: In the unlikely event of a personal data breach, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

10. Cookies & Tracking Technologies

77slot uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate the Platform, remember your preferences, analyse usage patterns, and personalise your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences such as language settings, display options, and last-visited game categories. Disabling them may affect your experience but will not prevent basic functionality.
• Analytics Cookies: We use anonymised analytics to understand how users navigate and interact with the Platform, which pages are most popular, and where technical errors occur. This data is aggregated and cannot identify individual users.
• Marketing & Retargeting Cookies: With your consent, we may use cookies to deliver relevant promotional content based on your gaming interests and activity. You may opt out of marketing cookies at any time.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain categories, or delete existing cookies. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For full details on how to manage cookies in popular browsers, consult your browser's help documentation.

11. Your Privacy Rights

As a 77slot user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] or via our 24/7 Live Chat.

• Right of Access: You have the right to request a copy of all personal data we hold about you, including the purposes for which it is processed, the categories of data involved, and any third parties to whom it has been disclosed. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details (such as your phone number or email address) directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Note that we may be legally required to retain certain data (e.g., KYC and transaction records) for regulatory compliance periods, in which case we will inform you of the applicable retention period.
• Right to Restriction of Processing: You may request that we restrict processing of your data while a dispute is being investigated, if you contest the accuracy of data, or if processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your data based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond to all privacy rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

12. Children's Privacy

77slot strictly prohibits the use of our Platform by individuals under the age of 21. Our Services are designed exclusively for adults who meet the minimum age requirement under our Terms & Conditions.

We do not knowingly collect personal data from individuals under 21. During account registration, we require users to confirm their date of birth, and all accounts are subject to KYC identity verification that confirms age eligibility. If we discover that personal data has been collected from a person under 21, we will immediately suspend the account, delete all associated data, and return any deposited funds to the original payment source.

If you are a parent or guardian and believe your child has created a 77slot account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. International Data Transfers

As an internationally operated platform serving Indonesian players, some of your personal data may be transferred to, stored, or processed in countries outside Indonesia. This may occur when we use cloud infrastructure, game technology providers, or payment processors based in other jurisdictions.

Whenever personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to an equivalent standard as within Indonesia, including:

• Contractual data processing agreements with all international processors that impose data protection obligations consistent with this Privacy Policy.
• Use of service providers located in jurisdictions with adequately recognised data protection frameworks.
• Technical security measures (encryption, access controls) that apply regardless of where data is physically stored.

By using 77slot's Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

14. Changes to This Policy

77slot reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date.
• Send an email notification to your registered email address at least 14 days before the changes take effect.
• Display a prominent notice on the Platform homepage for at least 14 days following publication of material changes.

Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must cease using our Services and may request account closure by contacting our support team.

15. Contact the Data Controller

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our Data Protection team through any of the following channels:

• Privacy Enquiries: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the Platform (average response: under 60 seconds)
• WhatsApp: +62 812-3456-7890 (07:00–23:00 WIB daily)

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject access requests or requests to exercise any rights under Section 11, please email [email protected] with the subject line "Data Subject Request" and include your full name, registered email address, and a description of your request. We may require identity verification before processing your request to prevent unauthorised disclosure.