Privacy Policy

1. Information We Collect

r777 collects personal information necessary to provide, maintain, and improve our Services. The types of information we collect fall into three categories:

1.1 Information You Provide Directly

When you register for an r777 account, you voluntarily provide the following personal data:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID number (KTP / Indonesian National Identity Card, passport, or driver's license number).
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code).
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay usernames or phone numbers linked to accounts).
• Verification Documents: Copies of government-issued photo ID, proof of address (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) verification purposes.
• Communication Data: Content of messages, emails, live chat transcripts, and other communications you send to r777 customer support or receive from us.

1.2 Information Automatically Collected

When you access or use the r777 platform, we automatically collect technical and usage data, including:

• Device Information: Device type, operating system (Android, iOS, Windows, macOS, Linux), browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising IDs).
• Connection Data: IP address, internet service provider (ISP), connection type (mobile data, Wi-Fi), approximate geolocation derived from IP address.
• Usage Data: Pages visited, features accessed, time spent on platform, clickstream data, bet history, game play logs, deposit and withdrawal transactions, login timestamps, session duration.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar technologies used to recognize your device, remember preferences, analyze traffic patterns, and deliver personalized content. You can manage cookie preferences via your browser settings, but disabling cookies may limit functionality.

1.3 Information from Third Parties

r777 may receive information about you from third-party sources, including:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and other financial institutions may share transaction status, verification results, and fraud-prevention data.
• Identity Verification Services: Third-party KYC providers that confirm identity documents, detect fraudulent IDs, and cross-check data against government databases.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other game studios may share gameplay data, bet outcomes, and technical logs.
• Marketing Partners: Affiliates and advertising networks may share referral data, campaign performance metrics, and attribution information.

2. How We Use Your Information

r777 uses collected information for the following purposes:

2.1 Service Provision and Account Management

• Create, maintain, and authenticate your r777 account.
• Process deposits, withdrawals, and financial transactions.
• Verify your identity and comply with KYC and anti-money laundering (AML) regulations.
• Provide customer support and respond to inquiries, complaints, or requests.
• Enable participation in sports betting, live casino, togel (Indonesia's traditional numbers lottery), slots, and other games.

2.2 Platform Security and Fraud Prevention

• Detect, investigate, and prevent fraudulent activity, unauthorized access, account takeovers, payment fraud, bonus abuse, and multi-accounting.
• Monitor for suspicious betting patterns, collusion, match-fixing, or other violations of our Terms and Conditions.
• Enforce platform rules, including age restrictions (21+ only) and geographic restrictions.
• Conduct security audits, vulnerability testing, and incident response.

2.3 Legal Compliance and Regulatory Obligations

• Comply with Indonesian and international laws, regulations, and licensing requirements.
• Respond to lawful requests from government authorities, law enforcement, or courts (subpoenas, warrants, regulatory inquiries).
• Maintain records for audit purposes and regulatory reporting.
• Implement responsible gaming measures, including self-exclusion tracking, deposit limit enforcement, and identification of at-risk players.

2.4 Marketing and Personalization

• Send promotional emails, SMS messages, push notifications, and in-app messages about bonuses, special offers, loyalty rewards, and platform updates (with your consent, where required).
• Personalize content, game recommendations, and betting markets based on your preferences and play history.
• Conduct market research, surveys, and user experience testing to improve Services.
• Analyze aggregate usage data to identify trends, optimize performance, and develop new features.

2.5 Business Operations

• Manage affiliate and partner relationships.
• Process payments to game providers, payment processors, and other service providers.
• Maintain business continuity, disaster recovery, and data backup systems.
• Facilitate corporate transactions (mergers, acquisitions, asset sales) where your data may be transferred to a successor entity.

Our Data Protection Commitments

3. Data Sharing and Disclosure

r777 does not sell your personal information to third parties. However, we may share your data in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party vendors to perform services on our behalf, including:

• Payment Processing: Banks, e-wallet operators, and payment gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay) receive transaction data necessary to complete deposits and withdrawals.
• Game Provision: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other studios receive gameplay data to deliver betting markets, live dealer games, and slots.
• Identity Verification: KYC service providers verify identity documents, check against fraud databases, and confirm age and residency.
• Customer Support: Live chat platforms, email hosting providers, and CRM systems store communication records to facilitate support.
• Cloud Hosting: Data center operators and cloud infrastructure providers host our servers and databases.
• Marketing and Analytics: Email marketing platforms, SMS gateways, and analytics tools (Google Analytics, Firebase) track campaign performance and user behavior.

All service providers are contractually obligated to protect your data, use it only for the specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure vendors meet our security standards.

3.2 Legal Requirements

r777 may disclose your information when required by law, including:

• Responding to subpoenas, court orders, warrants, or other legal processes.
• Complying with regulatory inquiries, tax audits, or licensing authority requests.
• Cooperating with law enforcement investigations of fraud, money laundering, terrorism financing, or other criminal activity.
• Protecting the rights, property, or safety of r777, our users, or the public (e.g., preventing imminent harm).

3.3 Business Transfers

If r777 undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your data with other parties when you provide explicit consent, such as participating in co-branded promotions, referring friends, or connecting third-party apps to your r777 account.

4. Data Retention

r777 retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years	Legal compliance, dispute resolution, audit requirements
Transaction History	7 years after account closure	Tax reporting, AML compliance, fraud investigation
KYC Documents	7 years after account closure	Regulatory obligations, identity verification records
Communication Logs	3 years	Customer support records, dispute resolution evidence
Marketing Consent	Until consent is withdrawn	Compliance with marketing regulations
Device and Usage Data	2 years	Platform analytics, security monitoring, fraud detection

After the retention period expires, personal data is securely deleted or anonymized. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical analysis and business intelligence.

5. Your Privacy Rights

Depending on your location and applicable data protection laws (including Indonesia's Personal Data Protection Law and GDPR for European users), you may have the following rights:

5.1 Right to Access

You have the right to request a copy of the personal information r777 holds about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) within 30 days of your request.

5.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can request that we correct or update it. You can update most information directly via your r777 account settings. For changes requiring verification (e.g., legal name), contact customer support.

5.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent on which processing is based, and there is no other legal ground for processing.
• You object to processing and there are no overriding legitimate grounds.
• The data has been unlawfully processed.

However, we may retain data if required by law, to establish legal claims, or for legitimate business purposes (e.g., fraud prevention). Deletion requests are processed within 30 days.

5.4 Right to Data Portability

You can request that we transfer your personal data to another service provider in a portable format. This right applies to data you provided to us and data processed based on consent or contract performance.

5.5 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. To opt out of marketing emails, click the "Unsubscribe" link in any promotional email or adjust preferences in your account settings. You can also object to processing based on legitimate interests by explaining your particular situation; we will assess whether our legitimate interests override your objection.

5.6 Right to Restrict Processing

You may request that we limit processing of your personal data in certain situations, such as when you contest data accuracy or object to processing. During the restriction period, we will store the data but not process it further (except with your consent or for legal claims).

5.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Note that withdrawing consent may prevent us from providing certain Services.

5.8 How to Exercise Your Rights

To exercise any of these rights, contact r777 customer support via:

• Email: [email protected] with subject line "Privacy Rights Request"
• Live Chat: Available 24/7 on the r777 platform
• WhatsApp: +62 812 3456 7890

We may request additional information to verify your identity before processing your request. We will respond within 30 days. If your request is complex or we receive multiple requests, we may extend the response time by an additional 60 days, notifying you of the extension and reasons.

6. Security Measures

r777 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details, KYC documents) is encrypted using AES-256 encryption.
• Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access personal data. Multi-factor authentication (MFA) is required for all administrative accounts.
• Network Security: Firewalls, intrusion detection/prevention systems (IDS/IPS), and DDoS mitigation protect our infrastructure.
• Regular Audits: Annual third-party security audits, penetration testing, and vulnerability scans identify and remediate weaknesses.
• Employee Training: All r777 staff undergo data protection and security awareness training. Employees sign confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response: We maintain a documented incident response plan. In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours, as required by law.

While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for safeguarding your account credentials and notifying us immediately of any suspected unauthorized access.

7. International Data Transfers

r777 primarily stores data on servers located in Indonesia. However, some service providers (game studios, cloud hosting, analytics platforms) may process data in other countries, including the United States, European Union member states, and Singapore. These countries may have data protection laws different from Indonesian law.

When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs): We use European Commission-approved SCCs with service providers in countries without adequate data protection frameworks.
• Data Processing Agreements (DPAs): All vendors sign DPAs committing to protect your data in accordance with applicable laws.
• Adequacy Decisions: We rely on adequacy decisions where the destination country has been recognized as providing adequate data protection (e.g., EU-US Data Privacy Framework participants).

8. Children's Privacy

r777 Services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately. If you believe a person under 21 has provided personal information to r777, please contact us at [email protected].

9. Cookies and Tracking Technologies

r777 uses cookies, web beacons, pixel tags, and similar technologies to enhance user experience, analyze platform performance, and deliver personalized content. Key cookie types include:

• Essential Cookies: Required for platform functionality (login sessions, security, load balancing). Cannot be disabled.
• Performance Cookies: Collect anonymous usage data (page views, time on site, error messages) to improve platform performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Advertising Cookies: Track your activity across websites to deliver targeted ads and measure campaign effectiveness (third-party cookies from advertising networks).

You can manage cookie preferences via your browser settings (Chrome, Firefox, Safari, Edge all offer cookie controls). Disabling cookies may limit functionality. To opt out of interest-based advertising, visit the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI) opt-out pages.

10. Third-Party Links

The r777 platform may contain links to third-party websites, services, or applications (game providers, payment processors, social media). This Privacy Policy applies only to r777. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party site you visit.

11. Changes to This Privacy Policy

r777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the r777 platform or send an email notification to your registered email address.
• Require re-acknowledgment of the updated policy for continued use of Services, where legally required.

We encourage you to review this Privacy Policy periodically. Continued use of r777 after changes are posted constitutes acceptance of the revised policy.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or r777's data practices, please contact us:

• Email: [email protected] (Privacy inquiries: use subject line "Privacy Policy Question")
• Live Chat: Available 24/7 via the r777 platform
• WhatsApp: +62 812 3456 7890 (08:00 - 02:00 WIB)

We will respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.