Privacy Policy — Your Data, Protected

we77 recognizes that your personal data is a valuable asset and treats its protection as a fundamental operational priority. This Privacy Policy has been drafted to comply with:

• The General Data Protection Regulation (GDPR) of the European Union, which we apply as a global baseline standard even though we77 operates outside EU jurisdiction;
• Indonesian data-protection principles as articulated in Law No. 27 of 2022 on Personal Data Protection (UU PDP), which came into full effect in October 2024;
• International anti-money-laundering (AML) and counter-terrorist financing (CTF) standards published by the Financial Action Task Force (FATF);
• Know Your Customer (KYC) best practices required by international online gaming regulators.

This policy covers all personal data collected through the we77 website, mobile-optimized interfaces, customer support channels (live chat, email, WhatsApp), and any API or software tool provided by we77 to facilitate account access or game play. It does not cover data practices of third-party game studios (e.g., Pragmatic Play, Evolution Gaming) whose games are integrated into our platform — those providers operate under their own privacy policies, which we recommend you review independently.

For the purposes of applicable data protection law, the data controller responsible for your personal data is:

All questions, complaints, or data-subject-access requests relating to this Privacy Policy should be directed to the contact details above. Our data protection team aims to respond to all inquiries within 72 hours and resolve formal data-subject requests within 30 calendar days.

we77 collects the following categories of personal data, all of which are necessary to operate your account and comply with legal obligations:

3.1 Registration Data

When you create an account, we collect: full legal name (as it appears on your KTP / national identity card), date of birth, gender, residential address (province, city, postal code), email address, and mobile phone number. We also record your chosen username and password (stored in hashed form only — we cannot view your plain-text password at any time).

3.2 Know Your Customer (KYC) Documents

To comply with Indonesian identity-verification requirements and international AML standards, we collect: a clear photograph or scan of your KTP (Kartu Tanda Penduduk / national identity card); a photograph or scan of the bank passbook or statement for each withdrawal bank account you register (to verify account ownership); and a selfie photograph holding your KTP, if requested during enhanced verification processes. These documents are reviewed by our compliance team and stored in encrypted archives accessible only to authorized personnel.

3.3 Financial Transaction Data

All deposits and withdrawals are logged with the following details: transaction amount (in IDR), payment method (e.g., BCA transfer, OVO e-wallet), timestamp, transaction status (pending, completed, declined), and — where applicable — the last four digits of the bank account or e-wallet account used. We do not store full bank account numbers, credit card numbers, or e-wallet PINs. Payment processing is handled by third-party processors (bank APIs, OVO/DANA/GoPay integrations) who maintain their own secure environments.

3.4 Gaming Activity & Betting History

We log all bets placed, games played, outcomes, stakes, winnings, losses, and bonus funds used. This data is used to settle bets correctly, calculate bonus-wagering progress, identify problem-gambling patterns, and investigate disputes. We retain full betting histories for six years from the date of each transaction.

3.5 Device & Technical Data

When you access we77, we automatically collect: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, preferred language settings, and access timestamps. This data is used to detect fraudulent login attempts, prevent duplicate accounts, optimize the user interface for your device, and enforce geographical access restrictions where applicable.

3.6 Customer Support Communications

All live chat transcripts, email correspondence, and WhatsApp messages exchanged with our support team are logged for quality-assurance purposes, dispute resolution, and regulatory compliance. These records are retained for three years.

3.7 Responsible Gaming Data

If you set deposit limits, loss limits, session time limits, or initiate self-exclusion, those settings and the dates on which they were activated are recorded. If you complete a problem-gambling self-assessment quiz, your responses are stored confidentially and are never used for marketing purposes.

we77 processes your personal data exclusively for the following lawful purposes:

1. Account Creation & Management: To register your account, authenticate your identity, maintain your profile settings, and enable secure login.
2. Transaction Processing: To process deposits, execute withdrawals, reconcile payment records, and resolve transaction disputes.
3. KYC Verification & AML Compliance: To verify that you are over 21, that you are a resident of Indonesia (or another permitted jurisdiction), that the payment methods you use are registered in your own name, and that funds deposited into your account are not proceeds of crime. This is a legal obligation under international AML standards.
4. Game Provisioning & Bet Settlement: To deliver the games you choose to play, accept your bets, calculate outcomes, credit winnings, and maintain accurate betting histories.
5. Bonus Administration: To track your eligibility for bonuses, calculate wagering-requirement progress, and prevent bonus abuse.
6. Customer Support: To respond to your inquiries, troubleshoot technical issues, investigate complaints, and provide assistance in English or Bahasa Indonesia.
7. Responsible Gaming Protection: To enforce your chosen limits (deposit, loss, time), honor self-exclusion requests, and proactively contact players whose behavior patterns suggest problem gambling.
8. Fraud Prevention & Security: To detect duplicate accounts, identify collusion between players, prevent payment fraud, and protect the platform from cyber-attacks and unauthorized access.
9. Legal Compliance & Regulatory Reporting: To respond to lawful requests from courts, regulators, law enforcement, and financial intelligence units. we77 is required to report suspicious transactions under AML law.
10. Platform Improvement & Analytics: To analyze aggregated, anonymized data about game popularity, deposit trends, and user-interface performance. We do not use your personal data for behavioral profiling or targeted advertising outside the platform.
11. Marketing Communications (Opt-In Only): To send you promotional emails about new games, bonuses, and special offers — but only if you have explicitly consented to receive marketing emails. You may withdraw consent at any time by clicking "Unsubscribe" in any promotional email or by contacting support.

Under GDPR and Indonesian data-protection principles, we77 must have a lawful basis for processing your personal data. Our legal bases are:

• Contractual Necessity: Processing your data is essential to perform the service contract created when you register an account. We cannot operate your account, process your bets, or pay your winnings without collecting and using your registration data, transaction data, and KYC documents.
• Legal Obligation: KYC verification, AML transaction monitoring, and retention of financial records are required by law. we77 is subject to international AML standards and must comply with lawful requests from regulators and law enforcement.
• Legitimate Interests: Fraud prevention, cyber-security measures, platform optimization, and aggregate analytics are justified by we77's legitimate business interest in operating a secure, efficient, and financially sustainable platform. These interests are balanced against your privacy rights, and we take steps to minimize data collection where possible.
• Consent: Marketing emails, optional responsible-gaming surveys, and certain non-essential cookies are processed only where you have given explicit, freely-given, informed consent. You may withdraw consent at any time without penalty.

we77 does not sell, rent, or share your personal data with third-party marketers or data brokers. We do, however, share limited data with the following categories of trusted third parties under strict contractual data-processing agreements:

• Payment Processors: To process deposits and withdrawals, we share your name, bank account details (last four digits only), and transaction amounts with Indonesian bank APIs (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay). These processors handle payment data in compliance with Indonesian financial regulations and PCI DSS (Payment Card Industry Data Security Standard) where applicable.
• Game Studios: When you play a slot or live casino game, your session data (username, bet amounts, game outcomes) is transmitted to the game provider's servers (e.g., Pragmatic Play, Evolution Gaming, Habanero) to enable gameplay. Game providers process this data under their own privacy policies and are contractually prohibited from using it for purposes unrelated to game delivery.
• KYC Verification Services: We may use third-party identity-verification services to cross-check KTP data against government databases or to perform facial-recognition matching between your selfie and your ID photo. These services are bound by strict confidentiality agreements.
• Cloud Infrastructure Providers: we77's databases and encrypted file storage are hosted on secure cloud servers operated by internationally recognized infrastructure providers. These providers cannot access the contents of encrypted files or database records.
• Legal & Regulatory Authorities: we77 will disclose personal data when legally required to do so, including in response to court orders, subpoenas, warrants, or formal requests from financial intelligence units investigating money laundering or terrorist financing. We will notify you of such disclosures unless prohibited by law.

we77 does not share data with social media platforms, advertising networks, or analytics services outside the platform. We do not participate in data-brokerage arrangements.

we77 operates from an offshore jurisdiction and uses cloud infrastructure located in multiple countries. This means your personal data may be transferred to, stored in, and processed in countries outside Indonesia. Where data is transferred to countries that do not offer equivalent legal protections to Indonesian or EU data-protection law, we77 ensures that:

• All data transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, which impose GDPR-level obligations on the receiving party;
• Data is encrypted in transit (using TLS 1.3 or higher) and at rest (using AES-256 encryption);
• Access to data is restricted to personnel with a legitimate need-to-know, and all access is logged for audit purposes;
• We conduct due-diligence assessments of all third-party processors to verify their security practices and legal compliance.

By using we77, you acknowledge and consent to the international nature of our operations and the data transfers described above.

we77 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, accidental loss, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and we77's servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to login credentials, KTP uploads, payment details, and all other sensitive data.
• Password Hashing: Your account password is never stored in plain text. We use bcrypt hashing with a minimum work factor of 12, making it computationally infeasible to reverse-engineer passwords from database breaches.
• Two-Factor Authentication (2FA): we77 offers optional 2FA via TOTP (time-based one-time passwords), which we strongly recommend enabling. 2FA adds an additional layer of security beyond your password.
• Database Encryption: All personal data at rest is encrypted using AES-256. Encryption keys are rotated quarterly and are stored separately from the encrypted data.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All access attempts are logged with timestamps and user identities. Privileged accounts require multi-factor authentication.
• Intrusion Detection & Prevention: we77's infrastructure is monitored 24/7 for suspicious activity, DDoS attacks, SQL injection attempts, and other cyber threats. Automated systems block malicious IP addresses and alert our security team to anomalies.
• Regular Security Audits: we77 undergoes annual third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Employee Training: All employees with access to personal data receive mandatory annual training on data protection, phishing awareness, and social-engineering tactics.

Despite these measures, no internet-based system is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we77 will notify affected users within 72 hours and report the breach to relevant authorities as required by law.

we77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

9.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They enable you to log in, navigate pages, maintain your session, and use secure features like the cashier. Essential cookies cannot be disabled without severely impairing functionality.

9.2 Functional Cookies

These cookies remember your preferences such as language selection, preferred odds format, and interface layout. They enhance usability but are not strictly necessary. You can disable functional cookies through your browser settings.

9.3 Performance & Analytics Cookies

we77 uses first-party analytics cookies to collect aggregated, anonymized data about how users interact with the platform (e.g., which games are most popular, average session duration, page-load times). This data helps us optimize performance and identify technical issues. We do not use third-party analytics services such as Google Analytics.

9.4 What We Do NOT Use

we77 does not use: (a) third-party advertising cookies or tracking pixels from ad networks; (b) social media tracking pixels (Facebook Pixel, Twitter conversion tags, etc.); (c) cross-site tracking technologies that follow your browsing activity outside we77.cam; (d) fingerprinting techniques beyond what is necessary for fraud prevention.

9.5 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, and receive notifications before cookies are set. Be aware that blocking essential cookies will prevent you from logging in or placing bets.

we77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are:

• KYC Documents: Retained for six years from the date of account closure, as required by Indonesian anti-money-laundering regulations and international FATF standards.
• Transaction Records: Retained for six years from the date of each transaction, in line with financial record-keeping requirements.
• Betting History: Retained for six years to enable dispute resolution, audit trails, and compliance reporting.
• Account Profile Data: Retained while your account is active, plus six years after closure.
• Customer Support Communications: Retained for three years from the date of the last interaction.
• Marketing Consent Records: Retained indefinitely to demonstrate compliance with consent requirements, unless you request deletion.
• IP Logs & Device Data: Retained for 12 months for security and fraud-prevention purposes, then automatically deleted.

At the end of each retention period, data is securely deleted using industry-standard data-destruction methods (secure overwriting for electronic files, physical destruction for paper documents where applicable).

Under GDPR and Indonesian Law No. 27/2022, you have the following rights over your personal data:

1. Right of Access: You may request a copy of all personal data we hold about you. This will be provided in a commonly used electronic format (PDF or CSV) within 30 days.
2. Right to Rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor updates (email address, phone number) can be made directly through your account settings; material changes (name, date of birth) require re-verification via KYC.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; (c) you object to processing and no overriding legitimate grounds exist; or (d) the data was unlawfully processed. Note that we77 cannot delete data that we are legally required to retain (e.g., transaction records subject to six-year retention obligations).
4. Right to Restriction of Processing: In certain circumstances (e.g., while we verify disputed data accuracy), you may request that we temporarily suspend processing of your data.
5. Right to Data Portability: You may request a machine-readable copy of your data that can be transferred to another service provider.
6. Right to Object: You may object to processing based on legitimate interests, including marketing communications (even where consent was initially given). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
8. Right to Lodge a Complaint: If you believe we77 has violated your data-protection rights, you have the right to lodge a complaint with your national data-protection authority (in Indonesia: Kementerian Komunikasi dan Informatika — Ministry of Communication and Information Technology).

To exercise any of these rights, contact our support team via email at [email protected] or WhatsApp at +62-812-3456-7890 with the subject line "Data Subject Request". We will respond within 72 hours and fulfill your request within 30 days, unless the request is manifestly unfounded or excessive (in which case we may charge a reasonable administrative fee or extend the response period by an additional 60 days with justification).

we77 is an adults-only platform. We do not knowingly collect personal data from individuals under 21 years of age. All account registrations are subject to KYC verification, which includes mandatory age verification via KTP (national identity card).

If we discover that an account belongs to a person under 21, we will immediately close the account, void all bets, and return deposited funds (minus any withdrawals already made). Bonus funds and winnings derived from underage play will be forfeited.

If you are a parent or guardian and believe your child has created an account on we77, please contact our support team immediately at [email protected].

we77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Material changes will be communicated to all registered users via the email address on file at least 14 days before taking effect.

The current version of this policy is always available on this page, with the "Last Updated" date clearly displayed at the top. We recommend bookmarking this page and reviewing it periodically to stay informed about how we protect your data.

Continued use of the platform after a policy update takes effect constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the platform and contact support to arrange account closure.

For questions, concerns, or formal requests relating to this Privacy Policy or your personal data, please contact the we77 data protection team through any of the following channels:

• Email: [email protected] (Subject line: "Privacy Inquiry" or "Data Subject Request")
• WhatsApp: +62-812-3456-7890
• Live Chat: Available 24/7 directly within the platform (select "Privacy & Data" as your inquiry category for fastest routing)

We aim to acknowledge all privacy inquiries within 72 hours and provide substantive responses or fulfill data-subject requests within 30 calendar days. For complex requests (e.g., full data portability, erasure subject to legal-retention review), we may extend this period by an additional 60 days with advance notification and justification.

You may also consult our FAQ page for answers to common privacy and security questions.