Privacy Policy

This Privacy Policy ("Policy") describes how 777rt ("we", "us", "our") collects, uses, stores, and discloses personal information in connection with the 777rt online betting and gaming platform, accessible at https://777rt.bio (the "Platform"). This Policy applies to all registered Members and to any visitor who accesses the Platform, regardless of whether they complete the registration process.

By registering an account on the Platform or by continuing to browse the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange closure of any existing account.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming page, which together govern your relationship with 777rt.

For the purposes of this Policy, 777rt acts as the data controller in respect of all personal data collected through the Platform. As data controller, 777rt determines the purposes for which personal data is processed and the means by which that processing takes place.

Where 777rt engages third-party service providers to process personal data on its behalf — for example, KYC verification partners, payment processors, and fraud-detection services — those third parties act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purposes for which it was shared.

All enquiries regarding 777rt's data controller responsibilities, including requests to exercise your data rights under Clause 11, should be directed to our support team via live chat on the Platform or by email to [email protected] (plain text — not a clickable link).

777rt collects the following categories of personal data from Members and Platform visitors. We collect only what is reasonably necessary to deliver our services safely and in compliance with our responsible gaming obligations.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is incidentally present in a government-issued ID photograph submitted for KYC purposes.

777rt collects personal data through the following channels:

• Direct submission: Information you provide when you register an account, complete the KYC verification process, make a deposit or withdrawal, interact with our live chat support team, or update your account profile.
• Automated technology: When you access the Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and session timestamps. This data is collected via server logs and first-party cookies (see Clause 6).
• Payment processors: When you initiate a deposit or withdrawal via DANA, OVO, GoPay, BCA, BRI, BNI, Mandiri, or another supported channel, our payment processing partners may share transaction confirmation data with us to reconcile your account balance.
• KYC verification partners: Our identity verification service providers may return structured data fields (such as a verification pass/fail status and extracted ID fields) derived from the documents you submit during the KYC process.
• Fraud and security tools: Our fraud-detection systems may correlate data points across sessions — such as IP address, device fingerprint, and betting patterns — to identify anomalous activity and protect both you and the Platform.

We process your personal data for the following purposes. For each purpose, we have identified the legal basis on which we rely:

• Account creation and management — To register your Member account, maintain your profile, and provide you with access to the Platform's products. Legal basis: Performance of contract.
• Identity verification (KYC) — To confirm that you are a real person, that you are at least 21 years of age, and that you are a resident of Indonesia. Legal basis: Legal obligation; legitimate interests.
• Processing deposits and withdrawals — To credit incoming payments to your account balance and to disburse withdrawal requests to your nominated payment method (DANA, OVO, BCA, BRI, etc.). Legal basis: Performance of contract.
• Responsible gaming compliance — To monitor for signs of problem gambling, enforce self-exclusion and deposit limit settings, and meet our duty-of-care obligations to Members. Legal basis: Legal obligation; legitimate interests.
• Fraud prevention and security — To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities. Legal basis: Legitimate interests; legal obligation.
• Customer support — To respond to your enquiries and resolve disputes submitted via live chat or email. Legal basis: Performance of contract; legitimate interests.
• Platform improvement — To analyse aggregated usage data to improve the functionality, performance, and content of the Platform. Legal basis: Legitimate interests.
• Marketing communications — To send you promotional offers, bonus notifications, and updates about new Platform features, where you have opted in to receive such communications. Legal basis: Consent. You may withdraw this consent at any time by updating your communication preferences in your account settings.

777rt uses first-party cookies and similar technologies (such as local storage and session storage) to operate the Platform, maintain your logged-in session, remember your preferences, and gather aggregated analytics data. We do not deploy third-party advertising cookies or cross-site tracking pixels.

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery attacks. You cannot opt out of essential cookies without ceasing to use the Platform.
• Preference cookies: Store your display preferences, such as your chosen language setting and any responsible gaming reminder intervals you have configured. These cookies persist across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Members interact with the Platform — such as which pages are visited most frequently and where users encounter errors. This data is used exclusively to improve Platform performance and is not linked to your personal identity.
• Security and fraud-prevention cookies: Help us detect unusual activity patterns — for example, multiple accounts being accessed from the same device — and are an essential component of our anti-fraud and responsible gaming systems.

Most web browsers allow you to control cookie settings through the browser's preferences menu. Disabling cookies may impair the functionality of the Platform, including your ability to remain logged in or to access certain features. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

777rt does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below:

• Payment processors: We share the minimum necessary financial and identity data with our payment processing partners (including the operators of DANA, OVO, GoPay, ShopeePay, LinkAja, BCA, BRI, BNI, Mandiri, CIMB Niaga, and BSI) to process your deposit and withdrawal requests.
• KYC and identity verification vendors: We share the identity documents you submit during the KYC process with our third-party verification partners for the purpose of confirming your identity and age. These partners are contractually prohibited from using your data for any purpose beyond identity verification.
• Fraud detection services: Aggregated technical and behavioural data may be shared with our fraud-detection service providers to identify and prevent fraudulent activity on the Platform.
• Professional advisors: We may disclose personal data to our legal advisors, auditors, or insurance providers where strictly necessary in the context of professional engagements.
• Law enforcement and regulatory authorities: Where we are required by applicable law, court order, or regulatory directive to disclose personal data, we will comply with that legal obligation. Where legally permitted to do so, we will notify you of such a disclosure request before complying.
• Business transfers: In the event that 777rt undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via your registered email address prior to any such transfer taking effect and will ensure that the acquiring entity is bound by data protection obligations at least equivalent to those in this Policy.

777rt primarily serves Members in Indonesia. However, as an internationally operated platform, some of the third-party service providers we engage — including cloud infrastructure providers, KYC vendors, and fraud-detection services — may process data on servers located outside Indonesia.

Where personal data is transferred to a jurisdiction outside Indonesia, 777rt takes reasonable steps to ensure that such transfers are conducted under appropriate data-protection safeguards, including:

• Contractual data-processing agreements that bind the recipient to data protection standards equivalent to those applied by 777rt under this Policy.
• Limiting international transfers to service providers located in jurisdictions with recognised data protection frameworks.
• Conducting due diligence on all international service providers prior to engagement and periodically thereafter.

By registering an account on the Platform, you acknowledge and consent to the transfer of your personal data to third-party processors located outside Indonesia, subject to the safeguards described in this clause.

777rt retains your personal data for as long as your account remains active and for a defined period following account closure, as set out below:

• Active account data: Retained for the full duration of your account's active status, plus a minimum period of 5 years following account closure, to meet our record-keeping and anti-money-laundering obligations.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Deposit and withdrawal transaction logs are retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Live chat transcripts and email correspondence are retained for a period of 2 years from the date of each interaction, unless the correspondence relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved.
• Marketing preference data: If you have opted in to receive marketing communications and subsequently opt out, we retain a record of your opt-out for an indefinite period to ensure we do not inadvertently contact you again.
• Technical and analytics data: Anonymised, aggregated analytics data may be retained indefinitely for platform improvement purposes. Data that can be linked to your personal identity is deleted or anonymised within 12 months of your account closure.

When personal data is no longer required for the purposes for which it was collected and the applicable retention period has expired, 777rt will securely delete or irreversibly anonymise that data.

777rt applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes, but is not limited to, the following measures:

• TLS/SSL encryption: All data in transit between your device and the 777rt Platform is encrypted using industry-standard Transport Layer Security (TLS). You can verify the secure connection by checking for the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data stored on our servers — including financial data, KYC documents, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. All access is logged, audited, and reviewed regularly.
• Two-factor authentication (2FA): 777rt strongly recommends that all Members enable two-factor authentication on their accounts. 2FA adds a second layer of protection beyond your password, requiring a one-time code sent to your registered mobile number before each login.
• Penetration testing and vulnerability scanning: The Platform undergoes regular security assessments by independent security professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that poses a material risk to your personal data, 777rt will notify affected Members promptly and will take all reasonable steps to contain and remediate the incident.

As a Member of the 777rt Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or by email at [email protected]. We will respond to all verified requests within 30 days.

• Right of access: You may request a copy of all personal data that 777rt holds about you, together with information about how and why that data is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Note that this right is subject to our legal retention obligations — we cannot erase data that we are required by law to retain.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data where that processing is based on 777rt's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We may request proof of identity before processing a data rights request to protect against fraudulent or unauthorised requests. We will not charge a fee for processing reasonable requests; however, for manifestly unfounded or excessive requests, we reserve the right to charge a reasonable administrative fee or to decline to act.

The 777rt Platform is strictly for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps, and we conduct additional KYC checks to confirm that all Members meet the minimum age requirement.

If we become aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, delete the data collected, and — where applicable — report the matter in accordance with our responsible gaming obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on the Platform using false age information, please contact our support team via live chat immediately. We will investigate and take appropriate action without delay.

The 777rt Platform does not contain links to third-party websites as a matter of policy. However, if you access the Platform via a search engine result, an affiliate link, or a referral from a third-party website, please be aware that those third-party sites operate under their own privacy policies, and 777rt accepts no responsibility for their data practices.

We recommend that you review the privacy policy of any website you visit before providing personal information on that site. The presence of a link to the 777rt Platform on a third-party website does not constitute an endorsement of that website by 777rt, nor does it imply any affiliation or partnership.

777rt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy — for example, changes that expand the categories of data we collect or alter the purposes for which we use your data — we will notify you by displaying a prominent notice within your account dashboard and by sending a notification to your registered email address at least 7 days before the changes take effect.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of a provision, or updates to reflect new payment processor integrations — may take effect immediately without prior notice. The "Last updated" date at the top of this Policy will always reflect the date on which the most recent change was made.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and contact our support team to arrange account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or regarding 777rt's data practices generally, please reach out to us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your authenticated 777rt account dashboard. This is the fastest route for data rights requests and privacy-related enquiries.
• Email: [email protected] (plain text — not a clickable link). Please allow up to 30 days for a full response to data rights requests submitted by email. For urgent matters, use live chat.
• Subject line guidance: When emailing regarding a data rights request, please include the subject line "Data Rights Request — [Your Registered Name]" to ensure your message is routed to the appropriate team member without delay.
• Support hours: 24/7, including all Indonesian public holidays (Idul Fitri, Idul Adha, Nyepi, Indonesian Independence Day, and others). Native Indonesian-speaking agents are available at all times and can assist you in Bahasa Indonesia if you prefer.