Privacy Policy — web77

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

Term	Meaning
"web77" / "we" / "us"	The operator of the web77 online gaming platform at web77.one and all associated services.
"Personal Data"	Any information that identifies or could reasonably identify a living individual, directly or in combination with other data.
"Processing"	Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
"Player" / "you"	Any individual who registers an account, accesses, or uses the web77 platform.
"Services"	All products and features available on web77, including sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) products.
"KYC"	Know Your Customer — identity and age-verification procedures conducted by web77 to comply with responsible gaming and anti-fraud obligations.
"Third Party"	Any entity other than web77 and the player, including payment processors, game studios, and technology providers.

2. Personal Data We Collect

web77 collects only the Personal Data that is necessary to provide the Services, comply with our legal obligations, and protect the safety and integrity of the platform. The categories of data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Email address and, where provided, mobile phone number;
• Residential address;
• Username and hashed account password.

2.2 KYC Verification Data

• Government-issued photo identification (KTP, passport, or SIM);
• Proof of residential address (utility bill or bank statement dated within 90 days);
• Proof of payment method (screenshot or statement from the relevant BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account);
• Selfie photograph where required for liveness verification.

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references;
• Bank account or e-wallet identifiers (last four digits or masked account numbers only — web77 does not store full bank account numbers);
• Transaction history, balance records, and bonus redemption logs.

2.4 Gaming & Behavioral Data

• Betting history, game session logs, wager amounts, and outcomes;
• Product preferences (e.g., sports betting, live casino, slots, togel draws);
• Responsible gaming tool usage, including deposit limits and self-exclusion requests;
• Customer support interaction records.

2.5 Technical & Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser version;
• Session timestamps, page navigation paths, and click-stream data;
• Cookie identifiers and similar tracking technologies (see Section 8).

3. How We Collect Your Data

web77 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and analytics tools as you navigate and interact with the web77 platform;
• From third-party payment providers — transaction confirmation signals from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja when you process a deposit or withdrawal;
• From identity verification providers — confirmation of document authenticity returned by third-party KYC service providers engaged by web77;
• From fraud-prevention services — risk-scoring signals and device-fingerprint data used to detect suspicious activity.

4. Purpose & Legal Basis for Processing

web77 processes your Personal Data only for specific, legitimate purposes. The table below sets out the primary purposes and the corresponding legal basis for each:

Purpose	Legal Basis
Creating and managing your player account	Performance of a contract
Processing deposits and withdrawals via local payment channels	Performance of a contract
Age verification and KYC compliance (21+ requirement)	Legal obligation & legitimate interest
Fraud prevention, anti-money-laundering checks, and platform security	Legitimate interest & legal obligation
Responsible gaming monitoring and player protection	Legitimate interest & legal obligation
Delivering personalised game recommendations and promotions	Legitimate interest (opt-out available)
Sending transactional communications (deposit confirmations, withdrawal status)	Performance of a contract
Sending marketing communications (bonuses, seasonal promotions)	Consent (withdrawable at any time)
Analytics and platform improvement	Legitimate interest
Complying with applicable laws and responding to lawful authority requests	Legal obligation

5. Sharing Your Personal Data

5.1 web77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes.

5.2 We may share your data with carefully selected third-party service providers who process data on our behalf and under our instructions, including:

• Payment processors — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja, solely to execute payment instructions you have initiated;
• KYC and identity verification providers — third-party services engaged to verify the authenticity of identity documents and confirm player age;
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe, who may receive session identifiers necessary to deliver their games within the web77 platform;
• Customer support platforms — live-chat and ticketing providers who handle support interactions on behalf of web77;
• Analytics and security providers — technology partners who help us detect fraud, monitor platform performance, and improve the player experience.

5.3 web77 may disclose Personal Data to regulatory authorities, law-enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of web77, its players, or the public.

5.4 In the event of a merger, acquisition, or sale of all or part of web77's business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

6. Data Retention

6.1 web77 retains your Personal Data for as long as your account remains active and for a reasonable period thereafter, as required to fulfil the purposes described in this policy or to comply with applicable legal obligations.

6.2 Specific retention periods apply as follows:

• Account and identity data: retained for the duration of your account and for a minimum of five years following account closure, to satisfy anti-money-laundering and responsible gaming record-keeping requirements;
• Transaction records: retained for a minimum of five years from the date of each transaction;
• KYC documents: retained for a minimum of five years from the date of verification or account closure, whichever is later;
• Marketing consent records: retained for the duration of your consent and for one year following withdrawal of consent;
• Technical and device logs: retained for up to 12 months and then anonymised or deleted.

6.3 When Personal Data is no longer required, web77 will securely delete or anonymise it in accordance with our internal data-disposal procedures.

7. Security Measures

7.1 web77 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the web77 platform;
• Encrypted storage of passwords using industry-standard hashing algorithms — web77 staff cannot view your plain-text password;
• Role-based access controls that restrict employee access to Personal Data to those with a legitimate operational need;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties;
• Two-factor authentication (2FA) available to all players for additional account security;
• Real-time anomaly detection and automated fraud-alerting systems.

7.2 While web77 takes all reasonable precautions, no digital platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a strong, unique password. If you suspect that your account has been compromised, please contact us immediately at [email protected].

8. Cookies & Tracking Technologies

8.1 web77 uses cookies and similar tracking technologies (web beacons, local storage objects) to operate the platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device.

8.2 The types of cookies we use include:

Cookie Type	Purpose	Can You Opt Out?
Strictly Necessary	Session management, login authentication, security tokens. Required for the platform to function.	No — these are essential
Functional	Remembering language preferences, game lobby layout, and deposit-method selections.	Yes, via browser settings
Analytics	Aggregate usage statistics to help us understand how players navigate and use the platform.	Yes, via browser settings
Marketing	Tracking interactions with promotional content to measure campaign effectiveness (internal only — we do not share this data with ad networks).	Yes, via account settings or browser settings

8.3 Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may impair the functionality of the web77 platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

9. Your Privacy Rights

web77 respects your rights over your Personal Data. Depending on applicable law, you may be entitled to exercise the following rights by contacting us at [email protected]:

web77 will respond to rights requests within 30 days. We may need to verify your identity before fulfilling a request. Some rights are subject to legal exceptions — for example, we cannot erase transaction records that we are legally required to retain.

10. Minors

10.1 The web77 platform is strictly intended for adults aged 21 and over. web77 does not knowingly collect Personal Data from individuals under the age of 21.

10.2 If we become aware that Personal Data has been collected from a person under 21 years of age, we will immediately close the relevant account, void any associated transactions, and delete all related data as promptly as possible.

10.3 If you believe that a minor has registered or attempted to register on web77, please contact us immediately at [email protected].

11. Third-Party Services & Links

11.1 The web77 platform integrates with third-party services — including payment gateways, game studios, and analytics providers — each of which operates under its own privacy policy. web77 is not responsible for the privacy practices of these third parties beyond the data-processing agreements we maintain with them.

11.2 Game content delivered within the web77 platform by providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe may involve those providers collecting limited technical data (e.g., session tokens) necessary to deliver the game. This data is governed by the respective provider's data-processing terms.

11.3 web77 does not embed third-party advertising networks or social-media tracking pixels that would share your browsing data with external advertising platforms.

12. Changes to This Privacy Policy

12.1 web77 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email or by placing a prominent notice on the platform prior to the change taking effect.

12.2 The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the web77 platform after the effective date of any revision constitutes your acceptance of the updated policy.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about how web77 has handled your Personal Data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request — [Your Username]"
• Response time: We aim to respond to all privacy enquiries within 5 business days and to fulfil verified rights requests within 30 days.
• Support hours: 24/7 live chat available on the web77 platform, with native Indonesian-speaking agents across WIB, WITA, and WIT time zones.