Privacy Policy

1. Introduction and Commitment to Privacy

At 77luki, we are deeply committed to protecting the privacy and security of our Indonesian players. We understand that trust is the foundation of our relationship with you, and safeguarding your personal information is paramount to maintaining that trust. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your data when you register an account, make deposits or withdrawals, place bets, or interact with our customer support team.

We collect only the information necessary to provide you with secure, personalized gaming services and to comply with international regulations governing online gaming platforms. Your data is never sold to third parties for marketing purposes. We implement industry-leading security measures including 256-bit SSL encryption—the same standard used by major Indonesian banks like BCA, BRI, BNI, and Mandiri—to protect your information from unauthorized access, disclosure, or misuse.

This policy applies to all 77luki users, including Indonesian residents accessing our platform from Jakarta, Surabaya, Medan, Bandung, Bali, and throughout the archipelago. If you have questions about how we handle your data or wish to exercise your privacy rights, please contact our Data Protection team using the contact information provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with 77luki, we collect the following personal information:

• Identity Information: Full legal name as it appears on your Indonesian KTP (National ID) or SIM (Driver's License), date of birth, gender, and nationality.
• Contact Information: Email address, mobile phone number, residential address including city and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions for account recovery.
• Payment Information: Bank account details (account number, bank name such as BCA/BRI/BNI/Mandiri, account holder name) used for deposits and withdrawals in Indonesian Rupiah (IDR).
• Verification Documents: Copies of your Indonesian KTP or SIM, proof of address documents, and selfie photos for KYC (Know Your Customer) verification required before first withdrawal.
• Communication Content: Messages you send to our customer support team via live chat, email, or WhatsApp, including any attachments or screenshots you provide.

2.2 Information Collected Automatically

When you use 77luki services, we automatically collect certain technical and behavioral data:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider, geographic location (country, region, city), and timestamp of access.
• Gameplay Data: Betting history including bet amounts, types of bets (sports betting, live casino, slots), game outcomes, win/loss records, and active session duration.
• Website Interaction: Pages visited, features used, clickstream data, search queries, and navigation paths through the platform.
• Cookies and Tracking Technologies: Session cookies, authentication cookies, preference cookies, and analytics cookies to enhance your user experience and platform functionality.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and Indonesian banks to verify transaction authenticity and prevent fraud.
• Identity verification services to confirm the accuracy of your KYC documents.
• Game providers who supply sports betting data, live casino feeds, and slot games hosted on our platform.
• Fraud detection agencies to identify suspicious activity and protect player accounts.

3. How We Use Your Information

77luki uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account.
• Processing deposits, withdrawals, and currency conversions (though we primarily operate in IDR).
• Verifying your identity and age to ensure compliance with our 21+ age restriction policy.
• Providing access to sports betting on BRI Liga 1, EPL, Champions League, live casino games, and slot games.
• Tracking your gameplay, bet history, and account balance in real-time.
• Delivering personalized game recommendations based on your preferences.

3.2 Customer Support and Communication

• Responding to your inquiries via live chat, email, or WhatsApp with Indonesian-speaking support agents.
• Sending transactional notifications about deposits, withdrawals, bonus credits, and account activity.
• Providing updates about platform maintenance, new features, and service improvements.
• Sending promotional communications about bonuses, VIP rewards, and special offers (with your consent; you may opt-out anytime).

3.3 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraudulent transactions, multiple accounts, bonus abuse, and other prohibited activities.
• Monitoring for problem gambling behaviors and enforcing responsible gaming limits.
• Complying with anti-money laundering (AML) regulations and international gaming license requirements.
• Responding to legal requests from law enforcement or regulatory authorities when required by law.
• Protecting the security and integrity of our platform infrastructure.

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve website design, game selection, and user experience.
• Conducting market research to understand Indonesian player preferences for sports betting, togel (lottery games), and casino games.
• Testing new features, payment methods, and promotional campaigns.
• Generating aggregated, anonymized statistics for business intelligence (these statistics do not identify individual players).

4. Data Protection and Security Measures

77luki implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

4.1 Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard employed by Indonesian banking institutions.
• Password Hashing: Your password is never stored in plain text. We use industry-standard hashing algorithms with salt to protect your login credentials.
• Payment Data Protection: Bank account details and transaction information are encrypted both in transit and at rest.

4.2 Access Controls

• Personal data is accessible only to authorized 77luki personnel who require it to perform their job functions (customer support, compliance, technical operations).
• All employees and contractors sign confidentiality agreements and receive data protection training.
• Multi-factor authentication and role-based access controls restrict access to sensitive systems.

4.3 Infrastructure Security

• Our servers are hosted in secure data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Regular security audits, vulnerability assessments, and penetration testing identify and address potential weaknesses.
• Automated backup systems ensure data can be restored in the event of system failure or disaster.
• Firewalls, intrusion detection systems, and anti-malware software protect against cyber attacks.

4.4 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your account's active status.
• Closed Accounts: After voluntary account closure, we retain essential records for 7 years to comply with financial regulations and resolve potential disputes.
• Inactive Accounts: Accounts inactive for 24 consecutive months may be closed, with data retained according to the closed account policy.
• Marketing Preferences: If you opt out of promotional communications, we retain your contact information solely to honor your opt-out request.

5. Information Sharing and Disclosure

77luki does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata) process deposits and withdrawals. They receive only the information necessary to complete transactions.
• KYC Verification Services: Third-party identity verification providers validate your Indonesian KTP or SIM documents. They are contractually bound to protect your data and delete it after verification.
• Game Providers: Suppliers of sports betting data, live casino platforms, and slot games may receive limited technical data (account ID, bet amounts) to deliver gameplay but do not receive personally identifiable information.
• Customer Support Tools: Cloud-based live chat and ticketing systems store communication transcripts securely.
• Analytics and Monitoring: Web analytics services help us understand platform usage through aggregated, anonymized data.

All service providers are carefully selected, sign data processing agreements, and are required to maintain confidentiality and security standards equivalent to our own.

5.2 Legal and Regulatory Requirements

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or subpoenas.
• Respond to requests from law enforcement or regulatory authorities investigating illegal activity.
• Protect the rights, property, or safety of 77luki, our players, or the public.
• Enforce our Terms & Conditions or investigate violations.
• Detect, prevent, or address fraud, security breaches, or technical issues.

5.3 Business Transfers

In the event that 77luki is acquired by, merges with, or transfers assets to another company, your personal information may be transferred as part of that transaction. We will notify you via email and prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, non-personally identifiable data with partners for research, marketing, and business development purposes. This data cannot be used to identify individual players. Examples include overall platform statistics (total players, total bets placed, popular games) and demographic trends.

6. Your Privacy Rights

As a 77luki player, you have the following rights regarding your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request.

6.2 Correction and Update

You may update certain account information (email address, phone number, password) directly through your account settings. For other corrections, such as name or date of birth changes, contact our customer support team with appropriate documentation.

6.3 Deletion and Erasure

You may request deletion of your account and associated personal data. Please note that we may be required to retain certain information for legal, regulatory, or security purposes even after account closure. Retained data is subject to the data retention periods outlined in Section 4.4.

6.4 Withdrawal of Consent

Where we rely on your consent to process your data (such as for marketing communications), you may withdraw that consent at any time by:

• Clicking the "unsubscribe" link in promotional emails.
• Adjusting your communication preferences in account settings.
• Contacting our customer support team.

Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

6.5 Objection and Restriction

You have the right to object to certain types of data processing, such as automated decision-making or profiling. You may also request that we restrict processing of your data in specific circumstances, such as while we verify data accuracy or investigate a complaint.

6.6 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 10 of this policy. We will respond to your request within 30 days and may require identity verification to protect your information from unauthorized access.

7. Cookies and Tracking Technologies

77luki uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, account access, and secure navigation. Cannot be disabled.	Session or 1 year
Functional Cookies	Remember your preferences (language, timezone, display settings).	1 year
Analytics Cookies	Track page views, navigation patterns, and feature usage to improve platform design.	2 years
Marketing Cookies	Deliver personalized promotions and track campaign effectiveness (with consent).	1 year

7.2 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to block all cookies, accept only certain cookies, or delete cookies after your session. Please note that disabling essential cookies may prevent you from accessing certain features of 77luki, including account login and secure transactions.

For more information on managing cookies in popular browsers, visit the browser's help documentation:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Microsoft Edge: Settings > Cookies and site permissions

8. Children's Privacy

77luki is strictly an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. Our Terms & Conditions clearly state that all players must be at least 21 years old and we enforce this requirement through mandatory KYC verification using Indonesian identity documents (KTP or SIM).

If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information, close the account, and refund any deposited funds to the payment source. If you believe that an underage individual has created an account on 77luki, please contact us immediately at the email address provided in Section 10.

We encourage parents and guardians to monitor their children's internet usage and to educate them about the risks of underage gambling. Our platform implements age verification checks, but parental oversight is the first line of defense in preventing underage access to online gaming sites.

9. International Data Transfers

While 77luki primarily serves Indonesian players and operates servers within secure data centers, certain service providers (game providers, payment processors, cloud services) may process data in jurisdictions outside Indonesia. When we transfer your personal information internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by international data protection authorities.
• Verification that the recipient country provides adequate data protection laws.
• Binding corporate rules for transfers within multinational service provider groups.
• Your explicit consent for specific transfers when required.

We remain responsible for the protection of your data even when it is processed by third parties in other countries. All partners are contractually obligated to maintain security and confidentiality standards equivalent to those described in this Privacy Policy.

10. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how 77luki handles your personal information, please contact our Data Protection team:

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the platform (Indonesian-speaking agents available 08:00-23:00 WIB)

When contacting us about privacy matters, please include your full name, account username (if applicable), and a detailed description of your inquiry or request. For security purposes, we may require identity verification before disclosing personal information or making changes to your account.

We aim to respond to all privacy-related inquiries within 10 business days and to resolve data access or deletion requests within 30 days as required by data protection regulations.

11. Changes to This Privacy Policy

77luki reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on the 77luki homepage.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of 77luki services after changes are posted constitutes your acceptance of the updated policy. If you do not agree with any changes, you must discontinue use of the platform and may request account closure.

For significant policy changes that materially affect your rights, we may require your explicit consent before the changes take effect for your account.