Privacy Policy

id777 ("we", "us", "our") operates the online gambling platform accessible at https://id777.onl (the "Platform"), which serves players primarily located in Indonesia. In providing our sportsbook, live casino, slot gacor (high-payout slot games), togel (Indonesia's traditional numbers lottery), esports betting, and slot tournament services, we necessarily collect and process certain personal data about you.

This Privacy Policy describes our practices as a data controller with respect to all personal data we collect from you directly, from third parties, and automatically through your use of the Platform. It covers data collected via the website at id777.onl, our mobile browser interface, customer support channels (live chat, WhatsApp, email), and any other service we operate under the id777 brand.

We are committed to processing your personal data lawfully, fairly, and transparently in accordance with applicable data protection principles. If you have any questions about this policy or our data practices, please refer to Section 15 (Contact Us) for how to reach our Data Protection contact.

Depending on how you interact with the Platform, we may collect the following categories of personal data:

We collect personal data through three primary channels:

3.1 Data You Provide Directly

When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey, or participate in a promotion, you actively provide us with personal data. The accuracy of data you provide is your responsibility; inaccurate data may result in account suspension or inability to process transactions.

3.2 Data Collected Automatically

When you visit the Platform, our web servers and analytics systems automatically record Technical Data and Usage Data. This includes your IP address (which may indicate your approximate location in Indonesia or elsewhere), device fingerprint, session timestamps, and interaction logs. This data is collected via cookies, web beacons, and similar technologies — please see Section 7 for full details.

3.3 Data Received from Third Parties

We may receive personal data about you from the following external sources:

• Payment service providers (e.g., BCA, BRI, OVO, DANA, GoPay) may confirm the status of a transaction and provide the registered account name for identity-matching purposes.
• KYC verification providers may return identity verification results, risk scores, or document authenticity assessments.
• Fraud detection and anti-money-laundering (AML) screening services may flag or clear an account against sanctions lists or known fraud databases.
• Analytics and advertising partners may provide aggregated audience insights or attribution data, subject to their own privacy policies.

id777 processes your personal data only for specific, legitimate purposes. The table below maps each processing purpose to the data category primarily used:

We process your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws — including KYC, AML screening, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, Platform security, analytics, and responsible gaming monitoring.
• Consent: Processing for which you have given specific, informed, and freely given consent — including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

id777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform. These include payment processors (for IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), KYC and identity verification providers, cloud hosting providers, customer support software vendors, and analytics platforms. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to id777.

6.2 Game Studios and Content Licensors

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical data (such as player session tokens) necessary to deliver their games within the id777 Platform. These studios do not receive your identity, financial, or contact data.

6.3 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required by applicable law, a valid legal process, or to protect the rights, property, or safety of id777, its members, or the public.

6.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of id777's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via a prominent notice on the Platform at least 30 days in advance, and the receiving entity will be required to honor this Privacy Policy.

The id777 Platform uses cookies and similar tracking technologies to deliver core functionality, improve your experience, and analyze Platform usage. A cookie is a small text file placed on your device by a web server.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — including session management, authentication state, shopping-cart equivalents (your active bet slip), and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences — such as your preferred payment method, language setting, and display preferences — so you do not have to re-enter them on each visit.
• Analytical/performance cookies: Collect anonymized or pseudonymized data about how visitors use the Platform (pages visited, time on page, error reports). This data helps us improve the Platform experience. We use reputable analytics providers bound by data processing agreements.
• Marketing cookies: Used only if you have consented to receive targeted promotions. They track your activity across sessions to help us deliver relevant bonus and game recommendations.

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytical cookies will not prevent access but may degrade your experience. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Samsung Internet).

We retain your personal data for as long as is necessary to fulfill the purpose for which it was collected, subject to the following minimum retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Data required by an ongoing legal hold, investigation, or dispute resolution process will be retained until that matter is resolved, regardless of the standard retention period.

id777 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the id777 Platform, matching the encryption standard used by Indonesia's major banks (BCA, BRI, BNI, Mandiri).
• Data encryption at rest for all sensitive data stored on our servers, including financial data and identity documents.
• Role-based access controls (RBAC) ensuring that id777 staff can only access personal data categories strictly required for their specific job function.
• Multi-factor authentication (MFA) enforced for all staff with access to member data systems, and available (strongly recommended) for Member accounts.
• Penetration testing and vulnerability assessments conducted periodically by independent third-party security firms.
• Intrusion detection and prevention systems (IDS/IPS) monitoring our infrastructure continuously for anomalous activity.
• Incident response plan — in the event of a confirmed data breach that poses a risk to your rights and freedoms, we will notify affected Members without undue delay and in accordance with applicable breach notification obligations.

Depending on your jurisdiction and the legal basis for processing, you may have the following rights with respect to your personal data held by id777:

• Right of access: Request a copy of the personal data we hold about you, together with information about how and why we process it.
• Right to rectification: Request correction of inaccurate or incomplete personal data. You can update most account details directly from your Account dashboard.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that we may be required to retain certain data for legal, regulatory, or fraud-prevention purposes notwithstanding an erasure request.
• Right to restrict processing: Request that we pause the processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to data portability: Receive a machine-readable copy of personal data you have provided to us, where processing is based on your consent or contractual necessity.
• Right to object: Object to processing based on our legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days. We may request proof of identity before processing your request to protect against unauthorized access to your data by third parties.

id777 operates globally and your personal data may be transferred to, stored, or processed in countries outside Indonesia, including countries where id777's infrastructure, service providers, or game studio partners are located. These jurisdictions may have data protection laws that differ from those applicable in Indonesia.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place, which may include:

• Transferring data only to countries recognized as providing an adequate level of data protection;
• Using standard contractual clauses or other approved transfer mechanisms between id777 and the recipient entity; or
• Relying on the recipient's binding corporate rules where applicable.

By using the id777 Platform, you acknowledge that your data may be transferred and processed internationally in accordance with this Privacy Policy. If you would like further details about the safeguards in place for a specific transfer, please contact us at [email protected].

The id777 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you are not permitted to access, register on, or use the Platform in any capacity.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, terminate the associated account, and — where applicable — return any deposited funds in accordance with our responsible gaming obligations. If you believe a minor may have registered on our Platform, please notify us immediately at [email protected].

The id777 Platform may contain references to third-party services — such as game studios, payment providers, or sports data feeds — that operate under their own privacy policies. id777 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policy of any third-party service you interact with in connection with using the Platform.

Links to external websites are not included in the id777 Platform interface; however, payment redirects to bank or e-wallet portals (BCA, BRI, OVO, DANA, GoPay, ShopeePay) during the deposit or withdrawal flow involve brief interaction with those providers' own environments, which are governed by the respective provider's privacy policy.

id777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When we make a material change — meaning a change that meaningfully affects your rights or how we handle your personal data — we will provide at least 14 days' advance notice by posting a prominent banner on the Platform and, where feasible, sending a notification to your registered email address.

The "Last Reviewed" date at the top of this page will always reflect the date of the most recent update. We encourage you to review this page periodically. Your continued use of the Platform after the stated effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised policy, please discontinue use of the Platform and contact support to close your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way id777 handles your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line to ensure prompt routing to our Data Protection team.
• Live Chat: Available 24/7 via the Platform, staffed by Indonesian-speaking and English-speaking agents in WIB (UTC+7).
• WhatsApp: Available 24/7; contact details provided upon Account registration.