Privacy Policy

net77 ("we", "us", "our") is an internationally licensed online betting and gaming platform operated primarily for players resident in Indonesia. We offer sportsbook markets, live casino tables, slots from leading studios including Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming, as well as togel (Indonesia's traditional numbers lottery) draw games.

This Privacy Policy ("Policy") describes how net77 collects, uses, stores, discloses, and protects the personal information of individuals who visit our website at net77.bio, register a Member Account, or otherwise interact with our Platform. It also describes the rights available to you in relation to your personal data and explains how to exercise those rights.

This Policy should be read together with our Terms & Conditions, available at net77.bio/terms-conditions, and our Responsible Gaming Policy, available at net77.bio/responsible-gaming. Together, these documents constitute the full framework governing your relationship with net77.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

net77 collects Personal Data across three broad categories: data you provide directly to us, data we collect automatically when you use the Platform, and data we receive from third parties in connection with identity verification and payment processing.

Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address in Indonesia (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all other Indonesian provinces), email address, phone number, and a username of your choosing.
• KYC Documents: Copies of your Indonesian National Identity Card (KTP) or passport, proof-of-address documents (utility bills, bank statements issued by BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or Bank Permata), photographs, and source-of-funds declarations where requested.
• Payment Information: Bank account numbers and account holder names for local Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. net77 does not store full card numbers; card-based payment data is processed exclusively by our PCI-DSS certified payment processor.
• Communications Data: Content of emails, live chat transcripts, and support ticket records exchanged between you and the net77 support team.
• Voluntary Survey Data: Responses to optional player satisfaction surveys, feedback forms, or promotional questionnaires.

Data Collected Automatically

• Usage Data: Pages visited, game sessions initiated, bets placed, wagers settled, bonus claims made, and navigation paths through the Platform.
• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone setting (WIB UTC+7, WITA UTC+8, or WIT UTC+9), and referring URL.
• Session Data: Login timestamps, session durations, logout timestamps, and concurrent session flags used for security monitoring.
• Geolocation Data: Approximate geographic location derived from IP address, used to enforce jurisdiction restrictions and to detect anomalous login activity from unusual locations.
• Cookie & Tracking Data: First-party session cookies and analytics cookies as described in Clause 8 of this Policy.

Data Received from Third Parties

• KYC Verification Results: Identity verification scores, document authenticity assessments, and age confirmation results returned by our contracted KYC verification provider.
• Payment Verification Data: Transaction confirmation references, payment status codes, and account name-matching results returned by Indonesian bank transfer gateways and e-wallet APIs.
• Fraud & AML Screening Data: Politically Exposed Person (PEP) status, sanctions list screening results, and adverse media flags returned by our contracted anti-money laundering (AML) screening provider.

net77 collects your personal data through the following channels and mechanisms:

• Account Registration Form: When you create a net77 Account, you complete a registration form that collects your core identity and contact information directly.
• KYC Document Upload Portal: When prompted to complete identity verification, you upload KYC documents through the secure document upload portal within your Account Settings dashboard.
• Deposit & Withdrawal Requests: When you initiate a financial transaction, your payment method details and transaction amounts are captured and recorded in your Account transaction history.
• Platform Interaction: Our servers automatically log technical and usage data each time your browser or device connects to the net77 Platform, regardless of whether you are logged in to a Member Account.
• Cookies & Similar Technologies: Cookies placed on your device collect session state and anonymised analytics data as described in Clause 8. You may manage cookie preferences through your browser settings, though disabling certain cookies may impair Platform functionality.
• Customer Support Channels: When you contact the net77 support team via email at [email protected] or via the live chat system embedded in the Platform, the content and metadata of those communications are recorded and associated with your Account.
• Third-Party Integrations: When our KYC, payment processing, or AML partners return verification results to net77 in response to queries we initiate, that data is ingested into your Account record.

net77 uses the Personal Data we collect for the following defined purposes only. We do not use your data for any purpose not listed here without obtaining your separate, explicit consent:

net77 processes your Personal Data on the following legal bases:

• Contractual Necessity: The majority of Personal Data processing is necessary to perform the contract between you and net77 as set out in the Terms & Conditions. This includes Account creation, identity verification, payment processing, and customer support.
• Legal Obligation: Certain processing activities are required to comply with net77's obligations under its international gaming licence, including KYC verification, AML screening, and the retention of transaction records for audit purposes.
• Legitimate Interests: net77 processes device data, session data, and usage data on the basis of legitimate interests in maintaining Platform security, detecting and preventing fraud, and improving the quality of our services. These interests are balanced against and do not override your fundamental rights.
• Consent: Personalised marketing communications and non-essential analytics cookies are processed on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without penalty.

net77 does not sell, rent, or trade your Personal Data. We share your data only with the categories of third-party recipients listed below, and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: net77 shares your identity documents and registration data with contracted KYC verification partners to confirm your identity, age, and address. These providers act as Processors under binding data processing agreements and may not use your data for any purpose other than completing the verification check.
• Payment Processors & Banking Partners: net77 shares payment identifiers and transaction amounts with Indonesian bank transfer gateways and e-wallet API partners (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) to process deposits and withdrawals. These entities are independently regulated financial institutions.
• AML & Fraud Screening Providers: net77 submits Member names, dates of birth, and nationalities to contracted AML screening services to check against sanctions lists, PEP databases, and adverse media sources.
• Licence Authority: net77's international gaming Licence Authority may require net77 to disclose Member data as part of periodic audits, regulatory investigations, or compliance reporting obligations. Such disclosures are made under legal compulsion and are strictly limited to what the Licence Authority requires.
• Law Enforcement & Courts: net77 may disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required by a valid legal order, subpoena, or statutory obligation. net77 will notify the affected Member of such a disclosure where legally permitted to do so.
• IT Infrastructure & Security Providers: net77's cloud hosting providers, content delivery networks (CDNs), and cybersecurity vendors process limited technical data (log files, IP addresses) as Processors in order to maintain Platform availability and security. These providers operate under strict contractual data protection obligations.

net77 uses cookies and similar tracking technologies on the Platform. The following categories of cookies may be set on your device when you visit net77.bio:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, store your Account preferences, and protect against cross-site request forgery (CSRF) attacks. Strictly necessary cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: These first-party cookies collect anonymised data about how Members interact with the Platform — including which pages are visited most frequently, where Members encounter errors, and how long sessions last. This data is used solely to improve the Platform and is never linked back to individual Member identities.
• Security & Fraud Detection Cookies: These cookies record device fingerprint data, browser characteristics, and IP address patterns to detect unusual login activity, multi-account fraud, and bot traffic. They are processed on the basis of net77's legitimate interest in Platform security.
• Functional Cookies: These cookies remember user preferences such as language settings, preferred game categories, and display configurations so that you do not need to re-enter them on each visit.

net77 does not use third-party advertising cookies, retargeting pixels, or cross-site behavioural tracking technologies from ad networks or social media platforms.

You may manage cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, though please note that blocking strictly necessary cookies will prevent you from logging in to your net77 Account. For detailed browser-specific cookie management instructions, please consult your browser's support documentation.

net77 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our international licence obligations, whichever is longer. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. KYC documents are shredded from our secure storage environment and are not recoverable after deletion.

net77 implements a multi-layered data security programme designed to protect your Personal Data against unauthorised access, accidental loss, destruction, and alteration. Our security measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher. All Personal Data and financial records stored in our databases are encrypted at rest using AES-256.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. net77 employees and contractors who process Member data are bound by confidentiality obligations and undergo background screening. Access privileges are reviewed quarterly.
• Two-Factor Authentication (2FA): net77 strongly recommends that Members enable 2FA on their Account. 2FA is available via authenticator app or SMS OTP and significantly reduces the risk of unauthorised Account access.
• Penetration Testing: The net77 Platform and supporting infrastructure undergo regular independent penetration tests and vulnerability assessments conducted by certified security professionals.
• Intrusion Detection: net77's security operations team monitors Platform infrastructure 24 hours a day, 7 days a week using automated intrusion detection and anomaly alerting systems.
• Incident Response: In the event of a Personal Data breach that poses a risk to Member rights, net77 will notify affected Members within 72 hours of becoming aware of the breach, consistent with our licence obligations.

As an internationally licensed platform, net77 may transfer certain categories of Personal Data to Processors and service providers located outside Indonesia. Such transfers may occur in connection with cloud infrastructure hosting, KYC verification processing, AML screening services, and communications with our Licence Authority.

Where Personal Data is transferred internationally, net77 ensures that appropriate safeguards are in place to protect that data, including:

• Contractual data processing agreements incorporating standard contractual clauses (SCCs) or equivalent transfer mechanisms recognised under applicable data protection standards.
• Transfers to Processors located in jurisdictions that maintain an adequate level of data protection as assessed by our Licence Authority's compliance framework.
• Technical controls, including encryption of data in transit across all international transfer channels.

net77 maintains an internal record of all international data transfer arrangements and reviews them annually to ensure continued adequacy. Members may request information about the safeguards governing international transfers applicable to their data by contacting [email protected].

As a net77 Member, you have the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to [email protected]. net77 will acknowledge your request within 24 hours and fulfil it within 30 calendar days, subject to identity verification and any applicable legal exceptions.

The net77 Platform is strictly for adults aged 21 and over. net77 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and net77 employs automated age screening as part of its registration flow.

If net77 becomes aware that Personal Data has been collected from a person under the age of 21, the associated Account will be immediately suspended, all data collected in connection with that Account will be securely deleted, and any Funds deposited will be returned via the original payment method following a brief hold for fraud-prevention review. Where required by our Licence Authority, the matter will be reported to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor under your care has created a net77 Account, please contact us immediately at [email protected] with the subject line "Underage Account — Urgent". We will prioritise such requests and respond within 24 hours.

The net77 Platform may contain references to third-party services — for example, links to the official websites of Indonesian banks such as BCA or BRI, or to the websites of sporting organisations such as BRI Liga 1, the AFF Cup, or All England Badminton. net77 does not control the content or privacy practices of any third-party website, and this Privacy Policy applies only to data processing carried out by net77 within the net77 Platform.

If you follow a link to a third-party website from the net77 Platform, you do so at your own risk and under the terms of that third party's own privacy policy. net77 encourages you to review the privacy notices of any external sites you visit. net77 accepts no responsibility for the data practices of third-party websites.

net77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing, share data with a new category of third party, or alter retention periods — we will notify Members by email to the registered Account address at least seven (7) days before the revised Policy takes effect.

Non-material amendments, such as typographical corrections or clarifications that do not alter the substantive rights or obligations of Members, may be made without prior notice. The current version of this Policy, together with its effective date, is always accessible at net77.bio/privacy-policy.

Your continued use of the Platform after the stated effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your Account before the revised Policy takes effect by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way net77 processes your Personal Data, please contact our Data Protection team using the details below. All communications must be in English or Indonesian and should clearly state your registered Account username and the nature of your enquiry.

If you are dissatisfied with net77's response to your data protection enquiry, you have the right to escalate your complaint to our international gaming Licence Authority. Details of the Licence Authority's complaints procedure are available upon request by emailing [email protected] with the subject line "Regulatory Escalation Request".

net77 takes all data protection complaints seriously and is committed to resolving them fairly, transparently, and in accordance with our licence obligations. We value the trust that Indonesian Members place in our Platform and treat the protection of your Personal Data as a core operational priority.