Privacy Policy — ide77

This Privacy Policy ("Policy") is published by ide77 ("ide77", "we", "us", "our") and applies to all users ("you", "Player", "Data Subject") who access the ide77 platform at https://ide77.cam, including all sub-domains, mobile interfaces, and associated services.

ide77 operates as an internationally licensed online betting platform primarily serving English-preference players residing in Indonesia. This Policy is written in English and governs the processing of personal data regardless of the country from which the platform is accessed, subject to the applicable laws of our licensing jurisdiction.

By registering an account or using any part of the ide77 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the ide77 platform.

This Policy should be read alongside ide77's Terms & Conditions and Responsible Gaming guidelines, all of which form part of the agreement between you and ide77.

For the purposes of applicable data protection legislation, ide77 is the data controller in respect of personal data processed through the ide77 platform. ide77 operates under an internationally recognised offshore gaming licence and is responsible for determining the purposes and means of processing your personal data.

ide77 has appointed a data protection point of contact who can be reached via the contact details set out in Clause 16 of this Policy. For all data-related enquiries, including data subject rights requests and complaints, please direct your correspondence to our support team with the subject line "Data Protection Request".

ide77 collects the following categories of personal data from Players. We collect only what is necessary for the stated purposes and do not collect data we have no legitimate need for.

ide77 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless specifically required by our licensing authority's AML or enhanced due-diligence procedures, in which case explicit consent will be sought separately.

ide77 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, submit a deposit or withdrawal request, contact our support team, or update your account settings.
• Automatically through platform technology: Cookies, web beacons, server logs, and analytics tools collect technical and usage data as you browse and play on the ide77 platform. See Clause 9 for full details of our cookie usage.
• From payment providers: When you make a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider may share transaction confirmation data with ide77 to reconcile your account.
• From identity verification services: Where ide77 uses a third-party KYC or AML screening service to assist with identity verification, that service provider may share data with ide77 as part of the verification process.
• From fraud prevention databases: ide77 may check player data against publicly available fraud alert databases or industry-shared blacklists as part of our risk management obligations under our gaming licence.

ide77 processes your personal data only where a valid legal basis exists. The following table sets out the purposes for which we process your data and the corresponding legal basis for each.

ide77 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and our gaming licence conditions.

• Active account data: Retained for the duration of your account, plus a minimum of five (5) years following account closure, as required by anti-money laundering legislation applicable under our licensing jurisdiction.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, in accordance with AML record-keeping obligations.
• Financial transaction records: Retained for five (5) years from the date of each transaction.
• Communications data (live chat, email): Retained for three (3) years from the date of the communication, unless the content is relevant to an unresolved dispute, in which case it is retained until the dispute is closed.
• Technical and usage logs: Retained in identifiable form for thirteen (13) months, then aggregated and anonymised for analytics purposes.
• Marketing preferences: Retained until you withdraw consent or close your account.

Upon expiry of the relevant retention period, ide77 will securely delete or anonymise your personal data. Anonymised aggregate data may be retained indefinitely for statistical and business intelligence purposes, as it no longer constitutes personal data.

ide77 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum financial and identity data necessary with your selected payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals on your behalf.
• KYC and AML service providers: We share identity and document data with licensed third-party verification and screening services to fulfil our AML and licensing obligations. These providers operate under contractual data processing agreements with ide77.
• Technology and infrastructure partners: Hosting providers, content delivery networks, and platform maintenance contractors may have access to certain technical data as part of their service delivery. All such access is governed by strict data processing agreements.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to assist with platform performance measurement. No identifiable personal data is shared in this context.
• Regulatory and law enforcement authorities: ide77 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or our licensing authority.
• Professional advisers: Legal advisers, auditors, and accountants acting on ide77's behalf may have access to personal data on a need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom ide77 shares personal data are required to handle that data in accordance with applicable data protection standards and to use it solely for the specified purpose.

As ide77 operates as an internationally licensed platform with infrastructure hosted across multiple jurisdictions, your personal data may be transferred to and processed in countries outside Indonesia. These may include countries whose data protection laws differ from those in force in Indonesia.

Where such transfers occur, ide77 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements requiring equivalent protection standards, or transfers to jurisdictions that our licensing authority deems to provide adequate protection.

By using the ide77 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia as described in this Policy.

ide77 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit a website. They help us provide a functional, secure, and personalised experience.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the ide77 platform, including login and transaction processing. ide77 does not use cookies to serve third-party advertising to Players.

ide77 takes the security of your personal data seriously. We implement technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your device and the ide77 platform is protected by 256-bit SSL (Secure Sockets Layer) encryption. The platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data — including identity documents, financial records, and password credentials — is stored in encrypted form on ide77's servers. Passwords are hashed using a robust one-way algorithm and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorised ide77 personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Network Security: ide77's infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments. Penetration testing is conducted periodically by independent security specialists.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, ide77 will notify affected Players and relevant authorities within the timeframes required by applicable law.

While ide77 applies robust security measures, no online platform can guarantee absolute security. You play a role in protecting your own account — choose a strong, unique password, do not share your login credentials, and contact ide77 support immediately if you suspect unauthorised account activity.

As a Player whose personal data is processed by ide77, you have the following rights. To exercise any of these rights, contact ide77 support as described in Clause 16. We will respond to all verified data subject rights requests within thirty (30) days.

ide77 does not knowingly collect personal data from persons under the age of 21. The platform is strictly for adults aged 21 and over. Registration requires confirmation of age, and KYC verification independently validates date of birth against government-issued identity documents.

If ide77 becomes aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor's data has been submitted to ide77, please contact our support team immediately.

ide77 may send you promotional communications — including bonus offers, seasonal promotions (such as Idul Fitri or Indonesian Independence Day campaigns), VIP program updates, and new product announcements — where you have opted in to receive such communications at registration or through your account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings, or by contacting ide77 support with an unsubscribe request. Opt-out requests are actioned within 48 hours. Please note that unsubscribing from marketing communications does not affect transactional messages — we will continue to send you account-related communications (e.g., deposit confirmations, KYC status updates, security alerts) regardless of your marketing preference.

ide77 does not share your contact data with third-party advertisers for the purpose of marketing products or services unrelated to the ide77 platform.

The ide77 platform does not include links to third-party websites for promotional or advertising purposes. Where third-party services are integrated into the platform (such as payment gateways or identity verification tools), those services operate under their own privacy policies, which are independent of this Policy.

ide77 is not responsible for the privacy practices of any third-party service provider. We recommend reviewing the privacy policy of any third-party service you interact with in connection with your ide77 account — particularly your chosen payment provider.

ide77 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify you by email to your registered address and/or by displaying a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. Your continued use of the ide77 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept an amended Privacy Policy, you must cease using the platform and request account closure.

For all privacy-related enquiries, data subject rights requests, or complaints regarding the handling of your personal data by ide77, please use the contact details below. All contact information is provided as plain text only — these are not clickable links.