ide77 Privacy Policy

1 Introduction

ide77 takes the privacy of its Members seriously. As an internationally operated gaming platform serving players across Indonesia — including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and beyond — ide77 understands that personal data protection is a fundamental expectation of our Members and a core operational responsibility.

This Policy governs how ide77 collects, processes, stores, shares, and protects personal data in connection with Member registration, account management, gaming activity, payment processing, identity verification (KYC), customer support, responsible gaming operations, and marketing communications (where consent is given).

ide77 processes personal data as a data controller. This means ide77 determines the purposes and means by which your personal data is processed. In certain contexts — such as the operation of third-party live dealer games or payment gateway processing — ide77 acts as a data processor on behalf of or in conjunction with certified third-party providers.

2 Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Member" means any individual who has registered an Account on the ide77 platform.
• "KYC Data" means identity verification documents and associated data collected as part of ide77's Know Your Customer process, including government-issued identity cards (KTP), passports, and proof-of-address documents.
• "Transaction Data" means records of deposits, withdrawals, bets placed, game results, and bonus transactions associated with a Member's Account.
• "Device Data" means technical information about the device used to access the ide77 platform, including IP address, browser type, operating system, and device identifiers.
• "Cookies" means small text files or similar technologies placed on a Member's device by the ide77 platform to enable session management, security, and platform functionality.

3 Personal Data We Collect

ide77 collects the following categories of personal data from Members and prospective Members:

4 How We Collect Your Data

ide77 collects personal data through the following channels:

• Direct Registration: Information you provide when creating an Account on ide77, including your name, date of birth, contact details, and chosen payment methods.
• KYC Verification: Identity documents you submit in response to ide77's verification requests, processed via our secure document upload system.
• Platform Usage: Data generated automatically as you interact with the ide77 platform, including game sessions, sportsbook bets, deposit and withdrawal activity, and navigation patterns.
• Payment Providers: Transaction confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make deposits or withdrawals.
• Customer Support: Information you provide when contacting ide77's support team via live chat or email, including the content of your communications and any account details you share to facilitate resolution of your query.
• Cookies and Tracking Technologies: Technical and behavioral data collected through session cookies and similar technologies as described in Section 10 of this Policy.
• Third-Party Game Studios: Aggregated game result and session data provided by certified third-party game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe) in connection with games played within the ide77 platform.

5 How We Use Your Personal Data

ide77 uses the personal data collected from Members for the following purposes:

• Account Management: To register, operate, maintain, and close your ide77 Account, including processing login sessions and enforcing account security measures such as two-factor authentication.
• Payment Processing: To process deposits from and withdrawals to your Indonesian bank accounts and e-wallets, verify payment method ownership, and maintain transaction records.
• Identity Verification (KYC): To verify your identity, confirm your age (21+), and confirm your eligibility to use the ide77 platform in accordance with our Terms & Conditions and applicable anti-money laundering obligations.
• Platform Operation: To deliver the sportsbook, live casino, slot games, and all other products available on ide77, including displaying personalized account information and game history.
• Responsible Gaming: To monitor betting patterns, session data, and account behavior for indicators of problem gambling, and to enforce any self-imposed or ide77-mandated responsible gaming limits.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in ide77's Terms & Conditions.
• Customer Support: To respond to your queries, investigate complaints, process disputes, and deliver a high standard of Member service through ide77's 24/7 Indonesian-speaking support team.
• Legal Compliance: To fulfill ide77's obligations under applicable law, including record-keeping requirements, anti-money laundering regulations, and any disclosures required by competent legal or regulatory authorities.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve platform performance, user experience, and game offerings.
• Marketing Communications (with consent): Where you have opted in to receive promotional communications, to send you information about ide77 bonuses, promotions, and new product features. You may withdraw this consent at any time.

6 Legal Basis for Processing

ide77 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill ide77's obligations to you under the Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between you and ide77.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, KYC verification requirements, and record-keeping mandates, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of ide77's legitimate interests in operating a safe, secure, and compliant gaming platform, provided that such interests are not overridden by your rights and interests.
• Consent: Processing carried out for marketing communications is based on your prior consent. You may withdraw consent at any time by contacting ide77 support or updating your Account communication preferences.

7 Data Sharing & Disclosure

ide77 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only with parties who are bound by appropriate data protection obligations:

• Payment Processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals.
• KYC Verification Providers: Where ide77 engages a third-party identity verification service to assist with KYC processing, that provider receives only the identity data necessary to complete the verification, and is contractually bound to process it solely for that purpose.
• Game Studios: Certified third-party game studios (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Pocket Games Soft) receive session and stake data as necessary to deliver games within the ide77 platform and to certify game fairness.
• Legal and Regulatory Authorities: ide77 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law or a valid legal order. ide77 will, where legally permitted, notify affected Members of such disclosures.
• Professional Advisers: ide77's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis as part of their professional engagement with ide77, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of ide77's business or assets, personal data may be transferred to the acquiring entity, provided that entity agrees to be bound by privacy protections no less protective than those in this Policy.

8 Data Retention

ide77 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account plus five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in compliance with applicable financial crime prevention regulations.
• Transaction Records: Retained for five (5) years following the date of the relevant transaction, consistent with standard financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or until the related dispute or enquiry is fully resolved, whichever is later.
• Marketing Consent Records: Retained for as long as you are an active Member plus one (1) year following Account closure or consent withdrawal, to demonstrate compliance with consent-based marketing obligations.
• Technical and Device Data: Retained for up to twelve (12) months for security and fraud investigation purposes, then anonymized or deleted.

Upon expiry of the applicable retention period, ide77 will securely delete or anonymize personal data in a manner that prevents its reconstruction or re-identification.

9 Data Security

ide77 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the ide77 platform is protected by TLS 1.2 or higher (256-bit SSL encryption), including during login, account management, KYC uploads, and payment flows.
• Encryption at Rest: Personal data stored on ide77's servers — including KYC documents, financial data, and account credentials — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within ide77's internal systems is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative systems.
• Security Monitoring: ide77's security team conducts continuous monitoring of platform infrastructure for unauthorized access attempts, anomalous activity, and potential data breaches.
• Third-Party Security Assessments: ide77's platform infrastructure undergoes periodic security assessments by independent security professionals.
• Incident Response: ide77 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, ide77 will notify affected Members in accordance with applicable legal requirements.

10 Cookies & Similar Technologies

ide77 uses cookies and similar browser-based technologies on the ide77 platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the ide77 platform to function. They manage your login session, maintain your Account security token, and remember your language and display preferences. These cookies cannot be disabled without impairing platform functionality.
• Performance Cookies: These cookies collect anonymized data about how Members use the ide77 platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance and is not linked to individual Member identities.
• Security Cookies: These cookies help ide77 detect and prevent fraudulent login attempts, bot activity, and other security threats. They record information about login patterns and device characteristics to identify anomalous access attempts.

ide77 does not use cross-site advertising cookies, behavioral targeting cookies, or third-party social media tracking pixels on the ide77 platform. Your browsing activity on ide77 is not shared with advertising networks.

11 Your Data Rights

As an ide77 Member, you have the following rights with respect to your personal data. To exercise any of these rights, contact ide77 support via live chat or at [email protected]. ide77 will respond to verified requests within thirty (30) days.

12 Children's Privacy

The ide77 platform is strictly restricted to adults aged 21 and over. ide77 does not knowingly collect personal data from individuals under the age of 21. If ide77 discovers or has reasonable grounds to believe that an Account has been registered by a person under 21 years of age, ide77 will immediately suspend the Account, retain only the data required to fulfill its legal obligations, and securely delete all other data associated with that Account.

If you believe that an individual under the age of 21 has registered an Account on ide77, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 International Data Transfers

As an internationally operated platform, ide77 may transfer personal data to servers and service providers located outside of Indonesia. Where such transfers occur, ide77 takes appropriate steps to ensure that your personal data receives an adequate level of protection, including:

• Entering into data processing agreements with third-party processors that require them to apply data protection standards consistent with this Policy.
• Transferring data only to countries or processors that provide an adequate level of data protection, or implementing appropriate safeguards (such as standard contractual clauses) where an adequacy decision is not available.
• Ensuring that third-party game studios and payment processors that receive personal data are bound by contractual data protection obligations and are subject to independent compliance audits.

14 Changes to This Policy

ide77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform features. The current version of the Policy, with its effective date, will always be published at ide77.club/privacy-policy.

Where ide77 makes a material change to this Policy — for example, introducing a new purpose for processing personal data or changing the way data is shared with third parties — ide77 will provide notice to Members via the platform and/or by email to the address registered on the Member's Account at least seven (7) days before the change takes effect. Continued use of the ide77 platform after the effective date of an amended Policy constitutes acceptance of the updated terms.

15 Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ide77 handles your personal data, you may contact ide77's support team through the following channels:

ide77 aims to acknowledge all privacy-related enquiries within 24 hours and to resolve the majority of data rights requests within thirty (30) calendar days of receipt of a verified request. Where a request is complex or ide77 receives a high volume of requests simultaneously, the resolution period may be extended by an additional thirty (30) days, in which case ide77 will notify the requesting Member of the extension and its reason.

For concerns relating to responsible gaming, self-exclusion, or deposit limit requests, please visit our Responsible Gaming page or contact the support team directly via live chat — available around the clock across all time zones served by ide77, including Western Indonesia Time (WIB, UTC+7), Central Indonesia Time (WITA, UTC+8), and Eastern Indonesia Time (WIT, UTC+9).