Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how kr77 ("we," "our," or "us"), the operator of the online betting platform at kr77.cam, collects, uses, discloses, stores, and protects personal information relating to individuals who use our website, mobile platform, and associated services (collectively, the "Platform").

This Policy applies to all users of the kr77 Platform, including registered players, visitors who browse our site without registering, and individuals who contact our customer support team. By using the kr77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, identification number, contact details, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" refers to kr77 as the entity that determines the purposes and means of processing your Personal Data.
• "Third Party" means any person or entity other than you and kr77.
• "KYC Data" refers to the identity verification documents and information collected as part of our Know Your Customer process.
• "Cookies" means small text files placed on your device by the Platform to recognize you and remember your preferences.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account or use our Platform, you provide us with the following categories of information:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, and residential address in Indonesia.
• Identity Verification (KYC) Data: Copies of your Indonesian National Identity Card (KTP), proof of address documents (utility bills, bank statements), and selfie photographs taken for identity verification purposes.
• Financial Data: Bank account details for BCA, BRI, BNI, Mandiri, or other supported Indonesian banks; e-wallet account information for OVO, DANA, GoPay, or ShopeePay; deposit and withdrawal transaction records.
• Communications Data: Messages, emails, and chat transcripts from your interactions with our customer support team.
• Preference Data: Your chosen language, notification preferences, responsible gaming settings including deposit limits and session timers.

3.2 Information We Collect Automatically

When you access the kr77 Platform, we automatically collect certain technical and usage data:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Log Data: IP address, login timestamps, session duration, pages visited, and click-path data.
• Betting and Gaming Activity: Wagers placed, games accessed, betting history, win/loss records, and bonus usage patterns.
• Geolocation Data: General location information derived from your IP address, used to verify your presence in Indonesia and comply with regulatory requirements.

3.3 Information from Third Parties

We may receive additional information about you from the following third-party sources:

• Identity verification service providers who assist with KYC processing
• Fraud prevention and anti-money laundering screening services
• Payment processors and Indonesian banking partners for transaction verification
• Analytics providers who help us understand aggregate Platform usage patterns

4. How We Use Your Information

kr77 uses your Personal Data for the following purposes:

Purpose	Categories of Data Used
Account registration and management	Registration Data, KYC Data
Identity and age verification (21+ requirement)	KYC Data, Registration Data
Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay	Financial Data, Registration Data
Fraud prevention and anti-money laundering compliance	All categories
Customer support and dispute resolution	Communications Data, Account Data
Responsible gaming monitoring and player protection	Betting Activity, Preference Data
Platform improvement and personalization	Usage Data, Betting Activity
Sending account notifications and promotional offers (where consented)	Registration Data, Preference Data
Legal compliance and regulatory reporting	All categories

5. Legal Basis for Processing

kr77 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is required to perform our contract with you, including account registration, processing transactions, and delivering Platform services.
• Legal Obligation: We are required to process certain data to comply with Indonesian laws and regulations, including KYC verification, AML screening, and record-keeping obligations.
• Legitimate Interests: We process certain data to pursue legitimate interests, such as fraud prevention, Platform security, and product improvement, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent (for example, to send promotional communications), you have the right to withdraw that consent at any time by contacting our support team or updating your Account preferences.

6. Information Sharing and Disclosure

kr77 does not sell, rent, or lease your Personal Data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We share data with carefully selected third-party service providers who assist us in operating the Platform, including payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), identity verification providers, IT infrastructure partners, and customer support tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
• Legal and Regulatory Authorities: We may disclose your data to Indonesian government agencies, law enforcement authorities, or regulatory bodies where required to do so by applicable law, court order, or legal process.
• Fraud Prevention: We may share data with fraud prevention agencies and financial intelligence units to detect, investigate, and prevent financial crime, including money laundering and identity fraud.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kr77's business assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
• With Your Consent: We may share your data with third parties where you have given explicit consent for us to do so.

In all cases of data sharing, kr77 implements appropriate contractual safeguards and data processing agreements to ensure your information receives a consistent level of protection.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

kr77 uses cookies and similar tracking technologies to enhance your experience on the Platform. The cookies we use fall into the following categories:

• Essential Cookies: These are strictly necessary for the Platform to function. They enable core features such as user authentication, session management, and security. You cannot opt out of essential cookies without ceasing to use the Platform.
• Functional Cookies: These cookies remember your preferences, such as your chosen language, display settings, and responsible gaming limits, so you do not have to re-enter them on every visit.
• Analytics Cookies: We use analytics tools to collect aggregate, anonymized data about how visitors use the Platform, which pages are most visited, and where users encounter issues. This helps us continuously improve the kr77 experience.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the Platform.

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies or to alert you when a cookie is being sent. However, please be aware that disabling certain cookies may affect the functionality of the kr77 Platform, including your ability to log in and access your Account.

8. Data Security Measures

kr77 takes the security of your Personal Data seriously and maintains a comprehensive set of technical and organizational measures to protect against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher, ensuring your credentials and financial information cannot be intercepted.
• Data Encryption at Rest: Sensitive data stored on our servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): We offer 2FA for all kr77 accounts and strongly recommend that all players enable this feature for an additional layer of account security.
• Access Controls: Access to production systems and databases containing Personal Data is restricted to authorized kr77 personnel on a strict need-to-know basis, with all access events logged and audited.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration tests on our Platform infrastructure to identify and remediate potential security weaknesses proactively.
• Incident Response: kr77 maintains a documented data breach response plan. In the event of a security incident that affects your Personal Data, we will notify you in accordance with applicable legal requirements.

While we implement industry-leading security practices, no method of data transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your kr77 Account and to enable 2FA to minimize risk.

9. Data Retention

kr77 retains your Personal Data for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law. Our general retention principles are as follows:

• Active Account Data: While your kr77 Account remains open and active, we retain all Account data, transaction history, and KYC documentation.
• Closed Account Data: Following the closure of your Account, we retain your Personal Data for a minimum of five (5) years to comply with Indonesian anti-money laundering regulations, tax record requirements, and to resolve any disputes or legal claims that may arise.
• KYC Documents: Identity verification documents are retained for the duration of your Account relationship plus five years, in line with regulatory requirements applicable to the Indonesian market.
• Communication Records: Customer support communications and chat transcripts are retained for a period of three (3) years from the date of the interaction.
• Analytics and Log Data: Anonymized usage and analytics data may be retained for longer periods for statistical and Platform improvement purposes, as it can no longer be linked back to any individual.

When Personal Data is no longer required for any of the above purposes, kr77 will securely delete or irreversibly anonymize it.

10. Your Rights and Choices

As a kr77 user, you have the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct it. For basic Account details, you can update these directly within your Account settings.
• Right to Erasure: You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances, such as while we are verifying the accuracy of data you have contested.
• Right to Data Portability: Where technically feasible, you may request a structured, machine-readable copy of the Personal Data you have provided to us.
• Right to Object: You have the right to object to our processing of your data where we rely on legitimate interests as our legal basis, and we will cease processing unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. We may need to verify your identity before processing your request. We will respond within 30 calendar days, or notify you if a longer period is required.

11. Children's Privacy

The kr77 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or store Personal Data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will promptly delete that data and close the associated Account.

If you believe that a minor has registered on kr77 or that we hold Personal Data relating to a person under 21, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Third-Party Services and Links

The kr77 Platform may reference or integrate with third-party services, including payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). These third parties operate under their own privacy policies and data practices, for which kr77 is not responsible.

When you make a deposit or withdrawal through a third-party payment provider, your transaction data is processed according to that provider's terms and privacy policy. We encourage you to review the privacy policies of any third-party services you interact with.

13. International Data Transfers

kr77 primarily stores and processes your Personal Data on servers located within the Asia-Pacific region. In some cases, data may be transferred to or processed by service providers in other countries. Where such transfers occur, kr77 ensures that appropriate safeguards are in place, including contractual protections that require the recipient to handle your data with a level of protection equivalent to that described in this Policy.

14. Changes to This Policy

kr77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes, we will notify you by posting a prominent notice on the Platform or by sending an email to the address registered on your Account.

The date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the kr77 Platform following any update constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kr77's data practices, please contact our dedicated support team:

• Email: [email protected]
• Live Chat: Available 24/7 on every page of the kr77 Platform
• Response Time: We aim to respond to all privacy-related inquiries within 3 business days (WIB)

Our support team is staffed by Indonesian-speaking agents available around the clock to assist you with any data protection concerns.