bank77 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

This Privacy Policy applies to all Personal Data collected by bank77 in connection with the operation of its online gaming platform, including data collected when you register an account, make a deposit or withdrawal, contact customer support, participate in promotions, or simply browse the platform without registering.

This Policy applies to users located in Indonesia and to all individuals who access the platform from any location. By creating an account or using the bank77 platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are available on this platform.

bank77 collects Personal Data across several categories, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name, date of birth, and gender
• Indonesian national identity card number (KTP number) or passport number
• Residential address in Indonesia (including city: Jakarta, Surabaya, Bandung, Medan, Bali, or other)
• Email address and mobile phone number
• Username and encrypted password

3.2 Financial & Transaction Data

• Bank account details for deposit and withdrawal processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, or Bank Permata
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Transaction history, including deposit amounts, withdrawal requests, and wager records in Indonesian Rupiah (IDR)
• Source of funds documentation where required by AML regulations

3.3 KYC Verification Data

• Copies of government-issued photo identification (KTP or passport)
• Proof of address documents (utility bills or bank statements)
• Selfie photographs taken alongside identity documents
• Any additional documentation requested for enhanced due diligence

3.4 Technical & Device Data

• IP address, device type, operating system, and browser type
• Mobile device identifiers and hardware fingerprint data
• Session timestamps, page visit duration, and click-path data
• Geolocation data at the country and city level (not precise GPS coordinates)

3.5 Communications Data

• Records of live chat conversations and email correspondence with our support team
• Feedback, complaint, and dispute records
• Marketing preferences and communication opt-in or opt-out status

bank77 collects your Personal Data through the following channels:

1. Directly from you when you complete the account registration form, submit KYC documents, contact customer support, or interact with any form or feature on the platform.
2. Automatically through cookies, web beacons, and server log files that capture technical and behavioral data each time you access the platform.
3. From payment service providers such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay, who may share transaction confirmation and account-holder name data to verify the source and legitimacy of funds.
4. From identity verification partners that assist bank77 in processing and authenticating KYC documents in compliance with anti-money laundering regulations.
5. From fraud-prevention and compliance services that cross-reference account information against sanctions lists, politically exposed persons (PEP) databases, and fraud watchlists.

bank77 processes your Personal Data on one or more of the following lawful bases:

bank77 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your bank77 account, including authentication, password recovery, and session management.
• Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to verified accounts in Indonesian Rupiah (IDR).
• Identity Verification: Conducting KYC checks to confirm your identity, verify your age (21+), and fulfill our anti-money laundering obligations.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, fraudulent transactions, bonus abuse, and other activities that may harm you or the integrity of the platform.
• Regulatory Compliance: Maintaining records required by applicable international gaming regulations and AML legislation, including transaction logs and KYC documentation.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and providing 24/7 Indonesian-speaking assistance.
• Responsible Gaming: Monitoring account activity to identify potential problem gambling patterns, applying deposit limits and self-exclusion requests, and meeting our duty-of-care obligations.
• Marketing & Promotions: Sending personalized promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.
• Platform Improvement: Analyzing aggregated usage data to improve game performance, user experience, and the overall quality of the bank77 platform.

bank77 will not use your Personal Data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing purpose.

bank77 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with the following categories of recipients only to the extent necessary and under appropriate data protection safeguards:

1. Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data required to process your deposits and withdrawals.
2. Identity Verification Partners: Third-party KYC service providers who process your identity documents and cross-reference them against regulatory databases on our behalf under strict data processing agreements.
3. Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session data for game performance and audit purposes. No personally identifiable information is shared with game studios.
4. Fraud Prevention Services: Specialist providers who help us detect and prevent fraudulent account activity, bonus abuse, and money laundering.
5. Regulatory Authorities: Where legally required, we may disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or financial intelligence units. Such disclosures are made only in response to lawful requests and to the extent strictly required.
6. Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations and process data only as necessary to provide their professional services to bank77.

As an internationally licensed gaming platform serving Indonesian players, bank77 may transfer certain Personal Data to servers or service providers located outside Indonesia. Such transfers occur where necessary for payment processing, KYC verification, fraud prevention, or platform infrastructure.

Whenever Personal Data is transferred internationally, bank77 ensures that adequate safeguards are in place, including:

• Transferring only to jurisdictions that maintain an adequate level of data protection under applicable international standards.
• Implementing standard contractual clauses or equivalent contractual protections in agreements with overseas Data Processors.
• Applying technical and organizational security measures that are consistent regardless of where data is stored or processed.

You may request further information about the specific safeguards applied to any international transfer of your Personal Data by contacting our support team at the address provided in Section 16 of this Policy.

bank77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized. Where data must be retained for legal or regulatory purposes beyond your account closure, bank77 will restrict further processing to only those activities required by law.

bank77 applies a comprehensive range of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bank77 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Storage: Sensitive data, including financial details and identity documents, is stored in encrypted form on secure servers with restricted access controls.
• Access Controls: Access to Personal Data is limited to authorized bank77 personnel and Data Processors who require access to perform their specific job functions. All access events are logged and monitored.
• Two-Factor Authentication: Account login is protected by optional two-factor authentication, and our internal systems require multi-factor authentication for all administrative access.
• Regular Security Audits: bank77 commissions periodic independent security assessments and penetration tests to identify and remediate vulnerabilities in its platform infrastructure.
• Incident Response: In the event of a data security incident that may affect your Personal Data, bank77 will notify affected users and relevant authorities within the timeframes required by applicable regulations.

While bank77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your account after each session, particularly on shared devices.

bank77 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyze how users interact with our services. The following categories of cookies may be in use:

You may manage your cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the bank77 platform. Strictly Necessary and Functional cookies remain active regardless of your preference settings, as they are essential to platform operation.

As a user of the bank77 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at the address set out in Section 16. bank77 will respond to all verified data rights requests within 30 days of receipt.

Where bank77 is unable to fulfill a data rights request — for example, because retention is required by AML or tax law — we will explain the specific reason in writing within the 30-day response window.

bank77 strictly prohibits access to its platform by individuals under the age of 21. We do not knowingly collect, use, or store Personal Data belonging to minors. Age verification is a mandatory component of our KYC process, and accounts that cannot be verified as belonging to an adult aged 21 or above will be suspended pending investigation.

If you have reason to believe that a person under the age of 21 has accessed the bank77 platform or that their Personal Data has been submitted without appropriate parental or guardian authorization, please contact us immediately at [email protected] (plain text — not a clickable link). We will investigate promptly and take all necessary steps to delete any relevant data and close the affected account.

We also recommend that parents and guardians residing in Indonesia make use of parental control software to restrict access to online gambling platforms on shared devices.

The bank77 platform may reference third-party service providers — such as payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA) and game software studios (Pragmatic Play, Evolution Gaming, NetEnt) — in the context of the gaming experience. Where such third-party services operate their own privacy practices, those practices are governed by the respective third party's privacy policy and are outside bank77's control.

bank77 is not responsible for the privacy practices, data handling standards, or content of any third-party service. We encourage you to review the privacy policies of any third-party providers with whom you interact in connection with payment or gaming services.

bank77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered users via email to the address on file and through a notice displayed prominently on the platform, at least 7 days before the amended Policy takes effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the bank77 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you object to any change in this Privacy Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions. Any Personal Data already processed prior to the effective date of the amendment will continue to be governed by the version of the Policy in force at the time of collection, to the extent permitted by law.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about the way bank77 handles your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform live chat feature. Average response time: under 60 seconds.
• Response Time (Email): Within 4 business hours during standard operating hours (WIB, UTC+7); within 12 hours during off-peak periods.

We take all privacy complaints seriously and will acknowledge your request within 3 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

For queries related to responsible gaming, self-exclusion, or gambling-related harm, please visit our dedicated Responsible Gaming page or reach out to our support team directly.