At 777ag, the privacy and security of your personal data is a responsibility we take seriously. This Privacy Policy explains precisely what information we collect when you use our platform, why we collect it, how it is stored and protected, who it may be shared with, and the rights available to you as a player based in Indonesia.
Six core principles that guide every data-handling decision we make at 777ag — summarised here before the full policy text below.
777ag collects only the personal data that is strictly necessary to provide our services, comply with our legal obligations, and verify your identity. We do not collect or retain data beyond what is required for these specific, documented purposes.
All personal data stored by 777ag is protected using AES-256 encryption at rest and TLS 1.3 in transit. Your payment account details, identity documents, and transaction history are held on access-controlled servers with multi-factor authentication enforced for all administrative access.
777ag does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with third parties — such as payment processors, identity verification providers, and game suppliers — is limited to what those partners strictly require to deliver their contracted services.
777ag uses cookies and similar tracking technologies solely for session management, fraud prevention, platform analytics, and basic personalisation. We do not use third-party advertising trackers or cross-site behavioural profiling cookies. You can review and manage cookie preferences from your account settings.
You have the right to access, correct, export, or request deletion of the personal data 777ag holds about you. We honour these requests promptly and without requiring you to justify why you are exercising them. All data rights requests are handled by our dedicated privacy team within 30 calendar days.
Personal data is retained only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. Account transaction data, for example, is retained for seven years after account closure to meet financial record-keeping obligations. Once the retention period expires, data is securely deleted or irreversibly anonymised.
In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:
777ag operates as the Data Controller for all Personal Data collected from players and visitors to the platform. As Data Controller, 777ag determines why and how your Personal Data is processed, and is responsible for ensuring that such processing complies with applicable data protection law and the principles set out in this Privacy Policy.
For all data protection enquiries — including requests to exercise your rights under Clause 10 — please contact us using the details provided in Clause 14. We have designated a Privacy Contact responsible for overseeing data protection compliance across the 777ag platform.
Indonesia market context: 777ag primarily serves English-preference players based in Indonesia. While Indonesia's Personal Data Protection Law (UU PDP, Law No. 27 of 2022) applies to the processing of personal data belonging to Indonesian data subjects, 777ag also applies internationally recognised data protection standards — including principles derived from the GDPR — as the baseline for all data handling decisions, where these provide a higher level of protection.
777ag collects Personal Data from you in three ways: data you provide directly, data generated automatically by your use of the platform, and data obtained from authorised third parties. The table below summarises the categories of data we collect and the context in which each category arises.
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration; KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, city of residence | Account registration; support interactions |
| Document Data | KTP or passport scan, utility bill or bank statement (proof of address), selfie with document | KYC verification prior to first withdrawal |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history | Payment processing; withdrawal verification |
| Transaction Data | Bet history, game session logs, win/loss records, bonus activations, wagering activity | Automatically generated during platform use |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, session timestamps | Automatically collected via server logs and cookies |
| Usage Data | Pages visited, features accessed, search terms used, time spent per page, referral source | Automatically collected via analytics tools |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, cooling-off periods activated, self-exclusion status | Responsible gaming tool usage |
777ag does not collect payment card numbers directly. All card-based transactions (where applicable) are processed by certified third-party payment gateways that comply with PCI-DSS standards. 777ag receives only a tokenised reference and transaction status — never the full card number, CVV, or expiry date.
777ag processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are as follows:
We use your Identity Data and Contact Data to create, maintain, and administer your 777ag account, including verifying your identity at registration and prior to withdrawal, communicating account-related notifications, and enabling you to update your account preferences.
We use your Financial Data to process deposit and withdrawal transactions via local Indonesian payment methods — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — and to comply with our anti-money-laundering (AML) obligations, which require us to verify the source and ownership of funds.
We use your Transaction Data and Usage Data to operate the sportsbook, live casino, slots, and togel (Indonesia's traditional numbers lottery) products on the platform, to calculate and credit winnings, and to apply promotional bonuses in accordance with the terms of each promotion.
We are required by applicable law to retain certain Personal Data — including KYC Documents, Financial Data, and Transaction Data — for defined periods. We use this data to respond to lawful requests from regulatory authorities, to investigate suspected fraud or money laundering, and to fulfil our obligations under international gaming regulations.
We use Technical Data and Transaction Data to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other conduct that violates our Terms & Conditions. This includes automated screening of login attempts, deposit patterns, and betting behaviour for anomalies indicative of fraud or collusion.
We use Transaction Data and Responsible Gaming Data to monitor player behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion restrictions set by players, and to comply with our obligations to protect vulnerable individuals. 777ag enforces a strict 21+ age requirement for all registered players.
We use Communications Data to respond to your support enquiries via live chat and email, to maintain records of dispute resolution outcomes, and to improve the quality and consistency of our support service. Live chat sessions are available with native Indonesian-speaking agents 24 hours a day, seven days a week (WIB, UTC+7).
We use aggregated and anonymised Usage Data and Technical Data to analyse platform performance, identify and resolve technical issues, improve navigation and user experience, and develop new features. Anonymised data used for these purposes cannot be linked back to any individual player.
Where you have provided consent or where we have a legitimate interest, we may send you promotional emails or SMS notifications about new games, bonus offers, or seasonal promotions relevant to your playing history. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the account dashboard or by contacting support.
Every processing activity carried out by 777ag rests on one or more of the following legal bases:
Note on consent withdrawal: Withdrawing consent for marketing communications does not affect your ability to maintain and use your 777ag account. All account-essential processing (payments, KYC, responsible gaming) is based on contractual necessity or legal obligation, not consent, and therefore continues regardless of your marketing communication preferences.
777ag uses cookies and similar technologies (including local storage objects and session tokens) on the platform. These technologies serve the following specific purposes:
777ag does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology that tracks your behaviour across websites outside the 777ag platform. You may manage your cookie preferences from your account settings. Please note that disabling essential or security cookies will impair platform functionality and may prevent you from logging in or placing bets.
777ag does not sell, rent, or trade your Personal Data. We share your data with third parties only in the following strictly limited circumstances:
We share the minimum necessary Financial Data with payment processors operating our approved Indonesian payment channels (bank transfers via BCA, BRI, BNI, Mandiri, and others; e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja) to facilitate deposit and withdrawal transactions. These providers are bound by data processing agreements that prohibit use of your data for any purpose other than transaction processing.
KYC Documents submitted for account verification are processed by our authorised identity verification partner. This partner receives only the documents necessary to complete the verification check and is contractually prohibited from retaining or further processing your documents beyond the scope of that check.
Game Providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive Technical Data (specifically, an anonymised session token and IP address) necessary to launch and operate their games within the 777ag platform. Game Providers do not receive your name, contact details, or financial information.
777ag may disclose your Personal Data to law enforcement agencies, courts, or regulatory authorities where required by law, pursuant to a valid legal order, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or serious harm to any person.
In the event of a merger, acquisition, or sale of substantially all of 777ag's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy. We will notify you of any such transfer via email or a prominent notice on the platform before it takes effect.
777ag is an internationally operated platform. Your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia where our hosting infrastructure, identity verification partners, or game providers are located. We take the following safeguards to protect your data in connection with such transfers:
Your rights are not affected by international transfers: Regardless of where your data is processed, you retain the full set of data rights described in Clause 10, and all rights requests are handled by the 777ag privacy team in accordance with this Policy.
777ag retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted using industry-standard deletion methods, or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.
As a player based in Indonesia, you have the following rights in respect of the Personal Data that 777ag holds about you. You may exercise any of these rights at any time by contacting our privacy team using the details in Clause 14.
You have the right to request a copy of the Personal Data 777ag holds about you, together with information about how it is used, who it has been shared with, and how long it will be retained. We will provide this information within 30 calendar days of a verified request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly from your account dashboard. For KYC document corrections, please contact our support team.
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that certain data must be retained to comply with legal obligations — we will specify what data can and cannot be deleted in response to your request.
You may request that 777ag restrict its processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data we hold, or while we assess an objection you have raised. During a restriction period, we will not use your data for any purpose other than storage.
Where processing is based on your consent or on contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
You have the right to object to processing of your Personal Data based on legitimate interests at any time. You also have an absolute right to object to processing for direct marketing purposes; 777ag will cease marketing communications immediately upon receipt of such an objection without requiring justification.
How to submit a rights request: Email [email protected] with the subject line "Privacy Rights Request — [your username]". Include your full name, registered email address, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days; we will notify you if an extension is required.
777ag implements a multi-layered security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Key technical and organisational measures in place include:
While 777ag takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying us promptly if you suspect unauthorised access to your account.
The 777ag platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Account registration requires an age declaration, and all accounts are subject to KYC verification to confirm that the player meets the minimum age requirement.
If 777ag becomes aware that Personal Data has been collected from a person under the age of 21, all data associated with that individual will be immediately and permanently deleted, the account will be suspended, and all bets will be voided in accordance with our Terms & Conditions. If you are a parent or guardian and believe your child has registered on the platform, please contact us immediately at [email protected].
777ag also supports the use of third-party parental control and internet filtering software to help parents and guardians restrict access to online gambling platforms. For guidance on available tools, please refer to our Responsible Gaming page.
777ag reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made to this Policy, we will notify you by:
The current version number and effective date of this Policy are displayed at the top of this page. Your continued use of the 777ag platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the platform and request account closure before the effective date. Previous versions of this Policy are available on request by contacting our privacy team.
For all data protection and privacy enquiries — including exercising your rights under Clause 10, raising a concern about how your data has been handled, or requesting a copy of a previous version of this Policy — please contact the 777ag Privacy Team using the following details:
777ag aims to acknowledge all privacy enquiries within 5 business days and to provide a substantive response within 30 calendar days of receipt. If you are dissatisfied with our response to your privacy enquiry, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Response timeframes: Acknowledgement within 5 business days · Substantive response within 30 calendar days · Complex cases: up to 60 calendar days (with prior notice to you).
Your data is protected. Your privacy is respected. Now explore everything 777ag has to offer — from live sports betting to premium slots and live casino tables.