Privacy Policy

rr77 is an internationally operated online betting platform serving players primarily based in Indonesia. We are committed to handling your personal data responsibly and transparently. This Policy applies to all personal data collected through your use of the rr77 website, mobile-optimized interface, live chat support, email communications, and any other touchpoint through which you interact with us.

We do not collect personal data beyond what is strictly necessary for the operation of our platform, the fulfilment of our legal and compliance obligations, and the delivery of a safe, high-quality user experience. We do not sell your data. We do not use your data to make automated decisions that produce significant legal effects without your knowledge.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, national identity number, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means rr77, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third-party entity that processes personal data on behalf of rr77 under a data processing agreement (e.g., a KYC verification provider or payment processor).
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookie" means a small text file placed on your device by a website that stores information about your browsing session or preferences.
• "KYC" (Know Your Customer) means the identity verification process through which rr77 confirms the identity of registered Players in accordance with our compliance obligations.

3.1 Registration Data

When you create an rr77 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify that you are at least 21 years of age);
• Indonesian National Identity Card number (NIK) or passport number;
• Residential address (including city, province, and postal code);
• Active email address;
• Mobile phone number registered in Indonesia.

3.2 KYC Verification Data

As part of our Know Your Customer process, we may additionally collect:

• Scanned copies or photographs of identity documents (KTP, passport);
• Proof of residential address (utility bills, bank statements);
• Selfie photographs — including selfies taken while holding an identity document;
• Proof of ownership of the payment method used for deposits.

3.3 Financial Data

To facilitate deposits and withdrawals, we collect information about the payment methods you use on the platform. This may include your bank account name and number (for transfers via BCA, BRI, Mandiri, BNI, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), or your registered e-wallet account name and number (OVO, DANA, GoPay, ShopeePay, LinkAja). rr77 does not store full card numbers or banking credentials; payment information is processed through encrypted channels only.

3.4 Transaction Data

We record all financial transactions on the platform, including deposit amounts, withdrawal requests, bet placement history, game session records, and bonus redemption activity. This data is retained for compliance, auditing, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical and Usage Data

When you access the rr77 platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation path;
• Language preference and screen resolution;
• Referring URL (the website or page that brought you to rr77);
• Session duration and interaction events.

This data is collected through cookies, server logs, and analytics tools to monitor platform performance, detect security threats, and improve user experience.

3.6 Communications Data

When you contact rr77 customer support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages, attachments, timestamps, and any resolution actions taken by our support team.

rr77 collects personal data through the following channels:

rr77 processes your personal data for the following specific, legitimate, and lawful purposes:

5.1 Account Management

To create, maintain, and secure your rr77 account; to authenticate your identity at login; and to allow you to access all platform features and services.

5.2 KYC and Regulatory Compliance

To verify your age and identity in compliance with our legal obligations to prevent underage gambling, money laundering, terrorist financing, and fraud. This includes performing ongoing due diligence checks and filing reports to relevant authorities where required by law.

5.3 Financial Transactions

To process deposits, withdrawals, and bonus credits; to reconcile account balances; and to investigate and resolve payment disputes or failed transactions.

5.4 Customer Support

To respond to your inquiries, resolve technical issues, address complaints, and provide guidance on platform features, game rules, responsible gaming tools, and account settings.

5.5 Responsible Gaming

To monitor betting patterns and identify behaviors that may indicate problem gambling; to apply deposit limits, loss limits, and self-exclusion settings that you have requested; and to provide early intervention support where appropriate.

5.6 Platform Security and Fraud Prevention

To detect and prevent unauthorized account access, bonus abuse, multi-accounting, collusion, match-fixing, money laundering, chargeback fraud, and other forms of prohibited conduct described in our Terms & Conditions.

5.7 Marketing and Promotions (With Consent)

To send promotional emails, SMS messages, or push notifications about bonuses, loyalty rewards, new games, and special offers — only where you have provided explicit opt-in consent. You may withdraw this consent at any time.

5.8 Analytics and Platform Improvement

To analyze aggregated, anonymized usage data to understand user preferences, optimize website performance, improve game selection, refine user interface design, and develop new features.

5.9 Legal Obligations and Dispute Resolution

To comply with court orders, regulatory inquiries, or law enforcement requests; to establish, exercise, or defend legal claims; and to enforce the Terms & Conditions and this Privacy Policy.

rr77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and rr77, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering statutes, age verification mandates, and tax reporting obligations.
• Legitimate Interest: Processing is necessary for our legitimate business interests in preventing fraud, securing the platform, and improving services, provided these interests do not override your fundamental rights.
• Consent: Where processing relies on consent (e.g., marketing communications), you have provided clear, informed, and freely given consent, which you may withdraw at any time.

7.1 What Are Cookies?

Cookies are small text files stored on your device by websites you visit. They help websites remember your preferences, authenticate your session, and analyze how you use the site.

7.2 Types of Cookies We Use

7.3 Managing Cookies

Most browsers allow you to refuse or delete cookies through their settings. However, disabling essential cookies will prevent you from using certain features of the rr77 platform. For instructions on managing cookies in your browser, visit your browser's help documentation.

8.1 When We Share Data

rr77 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only in the following limited circumstances:

8.2 Service Providers

We work with trusted third-party service providers who perform essential functions on our behalf, including:

• Payment processors (to facilitate deposits and withdrawals via BCA, BRI, Mandiri, BNI, e-wallets);
• KYC verification partners (to confirm identity documents and prevent fraud);
• Cloud hosting providers (to store and secure platform data);
• Customer support platforms (to manage and route live chat and email inquiries);
• Analytics providers (to generate anonymized performance and usage reports).

All service providers are bound by strict data processing agreements that require them to protect your data with the same level of care as rr77 does, and to use data only for the specific purpose for which it was shared.

8.3 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, courts, tax authorities, or regulatory bodies where required by law, by court order, or where necessary to investigate suspected illegal activity, comply with regulatory obligations, or protect the rights and safety of rr77, our users, or the public.

8.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving rr77, your personal data may be transferred to the acquiring entity. You will be notified of any such change of control, and the acquiring entity will remain bound by the commitments made in this Privacy Policy.

8.5 With Your Consent

In all other cases, we will seek your explicit consent before sharing your personal data with any third party.

rr77 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by law. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus five (5) years after account closure, in accordance with anti-money-laundering and financial record-keeping obligations.
• KYC Documents: Retained for five (5) years after the last verification event or account closure, whichever is later.
• Transaction Records: Retained for seven (7) years from the date of the transaction to comply with financial auditing and tax reporting requirements.
• Communications Data: Retained for three (3) years from the date of the communication to support dispute resolution and service quality monitoring.
• Marketing Consent Records: Retained until you withdraw consent, and for one (1) additional year thereafter to document compliance.

At the end of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be used to identify you.

10.1 Technical Safeguards

rr77 employs industry-standard technical measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest on secure, access-controlled servers;
• Multi-factor authentication and role-based access controls for internal systems;
• Regular security audits, vulnerability scanning, and penetration testing;
• Automated intrusion detection and monitoring systems to identify and respond to security threats in real time.

10.2 Organizational Safeguards

In addition to technical measures, rr77 maintains strict organizational policies including:

• Limiting access to personal data to employees and contractors who require it to perform their job functions;
• Conducting background checks and data protection training for all personnel who handle personal data;
• Implementing data breach response protocols to detect, contain, and report security incidents promptly;
• Requiring all third-party service providers to meet equivalent security standards through contractual data processing agreements.

10.3 Your Role in Security

You play a critical role in protecting your account. You must not share your password with anyone, and you should choose a strong, unique password that combines letters, numbers, and special characters. If you suspect that your account has been accessed without authorization, contact rr77 support immediately.

You have the following rights with respect to your personal data held by rr77:

11.1 Right to Access

You may request a copy of all personal data we hold about you. We will provide this data in a structured, commonly used, and machine-readable format where technically feasible.

11.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or complete it. You can update certain account details directly through your account settings.

11.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent on which processing was based and no other legal ground applies; or (c) you object to processing and no overriding legitimate grounds exist. Note that we may be legally required to retain certain data for compliance purposes.

11.4 Right to Restrict Processing

You may request that we limit how we use your personal data while we verify the accuracy of disputed data, or where processing is unlawful but you do not wish the data to be erased.

11.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit that data to another service provider, where technically feasible and where processing is based on consent or contract.

11.6 Right to Object

You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests by demonstrating compelling grounds relating to your particular situation.

11.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

11.8 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection team using the contact details provided in Section 15 of this Policy. We will respond to all valid requests within 30 calendar days. We may require proof of identity to process your request.

The rr77 platform is intended exclusively for individuals who are at least 21 years of age. We do not knowingly collect personal data from minors under the age of 21. If we discover that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account without prior notice. Any deposits made will be returned to the verified source payment method after deduction of processing fees, and any winnings will be forfeited.

If you believe that rr77 has collected personal data from a minor, please contact us immediately at the address provided in Section 15.

The rr77 platform may contain links to third-party websites, services, or game providers. This Privacy Policy applies only to personal data collected by rr77. We are not responsible for the privacy practices of third-party websites or services. We encourage you to read the privacy policies of any external sites you visit.

When you interact with third-party game providers through the rr77 platform, those providers may collect their own usage data in accordance with their respective privacy policies. rr77 does not control and is not responsible for third-party data collection practices.

rr77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Where a change is material — such as expanding the purposes for which data is processed or introducing new categories of data recipients — we will provide at least 30 calendar days' advance notice by publishing the updated Policy on this page and, where operationally feasible, by sending email notification to registered users.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the rr77 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may close your account in accordance with the procedures set out in our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection and Customer Support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Protection Inquiries: "Privacy / Data Protection Request"
• Live Chat: Available 24/7 via the rr77 platform
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
• Language: Indonesian and English supported

We aim to respond to all privacy-related inquiries within 48 hours and to fulfil valid data subject rights requests within 30 calendar days of verification.