Privacy Policy

usd77 ("we", "us", "our", or "the Platform") operates as an internationally licensed online betting and casino platform. We are committed to protecting the personal data of every individual who interacts with our services — whether as a registered Member, a visitor browsing the site, or a person contacting our support team.

This Privacy Policy has been drafted in accordance with internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and applicable data protection standards in the Asia-Pacific region. While usd77 operates internationally and primarily serves Members in Indonesia, we apply a high global standard of data stewardship across all markets.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole. Capitalized terms used in this Policy without separate definition carry the meanings given to them in the Terms & Conditions.

For the purpose of this Privacy Policy, the following definitions apply:

usd77 collects only the Personal Data necessary to deliver our services securely and in compliance with applicable regulations. The categories of data we collect are as follows:

usd77 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an Account, completing the KYC process, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and behavioral data gathered automatically as you navigate the Platform, including page views, click paths, session duration, and in-game actions, via server logs, cookies, and similar tracking technologies.
• Payment processors: Transaction confirmation data returned by our payment partners (local Indonesian banks and e-wallet providers) when you initiate a deposit or withdrawal.
• Identity verification providers: During KYC, we work with regulated third-party identity verification services that may return verification status, document validity flags, and sanctions-screening results.
• Fraud and AML screening tools: Automated systems that analyze transaction patterns and account behavior to detect money laundering, fraud, or bonus abuse, flagging anomalies for compliance review.
• Customer communications: Any Personal Data you volunteer during live chat, email, or telephone contact with our support team is recorded and stored as Communications Data.

usd77 uses the Personal Data we collect for the following specific purposes:

1. Account management: Creating, maintaining, and securing your Account, including password resets and session management.
2. Service delivery: Processing bets, settling game outcomes, handling deposits and withdrawals in IDR, and providing access to all Platform features.
3. Identity verification and KYC compliance: Verifying your identity to meet our international anti-money-laundering obligations and to prevent underage access — all Members must be at least 21 years of age.
4. Fraud prevention and security: Detecting and preventing unauthorized Account access, payment fraud, collusion, and exploitation of Platform systems.
5. Responsible gaming: Monitoring gaming behavior to identify potential signs of problem gambling and to administer self-exclusion, deposit limit, and time-out requests you have set on your Account.
6. Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services through recorded interaction analysis.
7. Marketing and promotions: Sending you relevant promotional offers by email or SMS, where you have consented to receive such communications. You may withdraw consent at any time.
8. Legal and regulatory compliance: Retaining records as required by our international gaming license and applicable financial regulations, and cooperating with lawful requests from regulatory or law enforcement authorities.
9. Platform improvement: Analyzing aggregated, anonymized usage data to improve the Platform's performance, content, and user experience.

usd77 does not use your Personal Data for automated individual decision-making that produces legal or similarly significant effects without human oversight, except where expressly required for fraud or AML screening in accordance with applicable law.

usd77 processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and usd77 — specifically, creating and operating your Account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and cooperation with lawful regulatory inquiries.
• Legitimate interests: Processing necessary for usd77's legitimate business interests — including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

usd77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors and banks: We share the minimum financial and identity data necessary with our banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals on your behalf.
• Identity verification and KYC providers: Your identity documents and personal details are shared with our regulated KYC partners solely for the purpose of verifying your identity and screening against international sanctions lists.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and NetEnt may receive anonymized session identifiers necessary to deliver their games within the Platform. They do not receive your full identity or financial data.
• Fraud and AML screening vendors: Aggregated behavioral and transactional data may be shared with specialist fraud-detection and AML platforms to identify patterns of suspicious activity.
• Legal and regulatory authorities: usd77 will disclose Personal Data to law enforcement, regulatory bodies, or courts when required to do so by law, valid legal process, or our licensing authority's instructions.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, Member data may be transferred to the successor entity, subject to the same or equivalent privacy protections as described in this Policy.

All third-party Data Processors engaged by usd77 are bound by contractual data processing agreements that require them to process Personal Data only on usd77's instructions and to implement appropriate security measures.

As an internationally operated platform, usd77 may transfer your Personal Data to servers and service providers located outside Indonesia. Some of these jurisdictions may not provide a level of data protection equivalent to the laws of your country of residence.

Where such transfers occur, usd77 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving entity equivalent to those described in this Policy. By registering an Account with usd77, you acknowledge and consent to the transfer of your Personal Data to international locations as described herein.

usd77 uses cookies and similar tracking technologies to operate core Platform functionality, analyze usage patterns, and (with your consent) deliver relevant promotional content. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. They manage login sessions, maintain your Account state across page visits, and enable secure payment flows. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language setting, display currency (IDR), and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Analytical cookies: Collect aggregated, anonymized data about how Members navigate the Platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is used exclusively to improve the Platform experience.
• Marketing cookies: Used, with your consent, to track whether you arrived at usd77 via a specific promotional campaign and to avoid showing you identical promotional messages repeatedly.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. usd77 does not use third-party advertising networks that track your activity across unrelated websites.

usd77 retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active Account data: Retained for the full duration of your Account's existence plus a minimum of five (5) years after Account closure, in accordance with international AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, to satisfy regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Support communications: Retained for up to three (3) years from the date of the last interaction, to assist with dispute resolution and service quality improvement.
• Marketing consent records: Retained for the duration of your consent plus two (2) years, to demonstrate compliance with consent obligations.
• Technical and log data: Typically retained for a period of twelve (12) months from the date of collection, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents re-identification.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your Personal Data held by usd77. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.

usd77 implements a multi-layered security framework to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted data storage for Personal Data and financial records held at rest on our infrastructure.
• Access controls: Role-based access restrictions ensure that only authorized personnel with a demonstrable business need can access sensitive Member data, including KYC documents and financial records.
• Multi-factor authentication (MFA) options available to all Members for Account login, and mandatory for internal staff accessing Member data systems.
• Regular security audits and penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: In the event of a confirmed data breach that poses a risk to Members, usd77 will notify affected individuals without undue delay and in accordance with applicable notification requirements.

While we apply rigorous security measures, no electronic system is completely impenetrable. You play an important role in protecting your own data by using a strong, unique password for your usd77 Account, enabling MFA, and not sharing your login credentials with any third party.

The usd77 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration and KYC processes include automated and manual age-verification controls specifically designed to prevent underage access.

If usd77 becomes aware that Personal Data has been collected from a person under 21, we will promptly close the associated Account, delete the collected data to the extent not required to be retained for regulatory purposes, and — where funds have been deposited — arrange their return in compliance with our AML obligations.

If you are a parent or guardian and believe that a minor has registered on the Platform, please contact us immediately at [email protected]. We will investigate and respond within 48 hours.

usd77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform functionality. When a material change is made, we will notify registered Members via email to their registered address and by posting a prominent notice on the Platform at least 7 days before the revised Policy takes effect.

The "Effective Date" at the top of this page will always reflect the date on which the current version entered into force. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of those changes. If you do not accept a revised Policy, you must cease using the Platform and contact us to close your Account before the effective date.

We encourage you to review this Policy periodically. The most current version will always be accessible at https://usd77.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a data protection concern, please reach our dedicated privacy support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Protection" in your email subject for faster routing to our compliance team
• Response time: We aim to acknowledge all privacy-related inquiries within 24 hours (WIB) and to provide a substantive response within 30 days
• Language: Requests may be submitted in English or Indonesian (Bahasa Indonesia) — our compliance team handles both languages

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. usd77 will cooperate fully with any such investigation.