bis77 Privacy Policy

1 Introduction

1.1  bis77 operates the online betting and gaming platform accessible at bis77.bet. In the course of providing sportsbook, live casino, slot, and card game services to registered players in Indonesia, bis77 necessarily collects and processes certain categories of personal data. This Privacy Policy sets out in plain, structured terms how that data is handled throughout its lifecycle — from initial collection at registration through to deletion following the closure of an Account.

1.2  bis77 is committed to handling personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. This Policy applies to all data subjects who interact with bis77 in any capacity, including registered players, prospective players who begin but do not complete registration, and individuals who contact the bis77 support team without holding an active Account.

1.3  This Privacy Policy should be read in conjunction with the bis77 Terms & Conditions, which govern the contractual relationship between bis77 and its registered players. Defined terms used in the Terms & Conditions carry the same meaning here unless separately defined.

2 Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, mobile number, Indonesian identity card (KTP) number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means bis77, the entity that determines the purposes and means of processing Personal Data collected through the bis77 platform.
• "Data Processor" means a third party that processes Personal Data on behalf of bis77 under a contractual arrangement — for example, a KYC verification provider or payment gateway.
• "Data Subject" or "you" means the individual whose Personal Data is being processed — in most cases, a registered bis77 player based in Indonesia.
• "KYC" means Know Your Customer — the identity and age verification process mandated by bis77 prior to authorizing withdrawals from a player Account.
• "Cookies" means small text files placed on your device by the bis77 platform for session management, analytics, and functional purposes as described in Section 10.

3 Data We Collect

3.1  bis77 collects Personal Data across several categories, which vary depending on your stage of interaction with the platform:

Registration Data

When you create a bis77 Account, we collect the information you provide during the registration process, including:

• Full legal name (as it appears on your Indonesian KTP or passport).
• Date of birth (to verify the 21+ age requirement).
• Indonesian mobile phone number (used as the primary contact channel and for SMS-based two-factor authentication).
• Account username and hashed password credential.
• Preferred currency (IDR — the sole transactional currency of the bis77 platform).

KYC & Verification Data

Prior to authorizing your first withdrawal, bis77 conducts Know Your Customer (KYC) verification. This requires:

• A copy of your government-issued identity document — Indonesian KTP (Kartu Tanda Penduduk) or passport.
• Proof of residential address (utility bill, bank statement, or similar document issued within the past three months).
• Confirmation of payment method ownership — for example, a screenshot or statement confirming that the BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or other payment account belongs to you.

Transaction & Activity Data

• All deposit and withdrawal records, including amounts in IDR, timestamps, and payment channel identifiers.
• Full wagering history across all bis77 product categories — sportsbook, live casino, slots, Sakong, and Bandar Ceme.
• Bonus and promotion usage records.
• Account balance history and fund-movement logs.

Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session timestamps and login history.
• Cookie identifiers and analytics session tokens (see Section 10).

Communications Data

• Records of live chat conversations with the bis77 support team.
• Email correspondence sent to or from support@bis77.bet.
• Feedback, complaints, and dispute records.

4 How Data Is Collected

4.1  Directly from you — through the Account registration form, the KYC submission portal, deposit and withdrawal request forms, live chat conversations, and any other interaction where you voluntarily provide information to bis77.

4.2  Automatically — through your use of the bis77 platform, which generates technical logs including IP addresses, session data, device fingerprints, and browsing behavior within the platform. This data is collected via server-side logging and client-side cookies.

4.3  From third parties — bis77 may receive data from payment gateway partners (confirming the status of a BCA, BRI, or OVO transaction), KYC verification service providers (confirming identity document authenticity), and fraud detection services (flagging suspicious account activity). All third-party data providers engaged by bis77 are subject to contractual data protection obligations.

5 Purposes of Processing

5.1  bis77 processes your Personal Data for the following purposes:

6 Legal Basis for Processing

6.1  bis77 relies on the following legal bases for processing your Personal Data:

• Contract performance: Processing necessary to deliver the bis77 service to you under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable financial crime laws, KYC regulations, and lawful requests from regulatory or law enforcement authorities.
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw this consent at any time by contacting the bis77 support team via live chat.

7 Data Sharing & Third Parties

7.1  bis77 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. bis77 shares Personal Data only in the circumstances described below:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposit or withdrawal. Each provider processes this data under its own privacy policy and applicable Indonesian financial regulation.
• KYC verification providers: Third-party identity verification services receive the identity documents you submit during the KYC process. These providers are engaged under strict data processing agreements that prohibit use of your data for any purpose other than the verification service contracted by bis77.
• Game studio providers: Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, Asia Gaming, and other game providers receive the session data necessary to deliver game content and settle wagers. Game studios do not receive your full identity or payment data.
• Fraud and security services: bis77 uses fraud detection and cybersecurity service providers who process technical identifiers (IP address, device fingerprint, session tokens) to flag suspicious account activity.
• Legal and regulatory authorities: bis77 will disclose Personal Data to law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law or by a valid legal order. bis77 will notify affected data subjects of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all bis77 assets, player data may be transferred to the acquiring entity, subject to that entity being bound by privacy obligations no less protective than those in this Policy.

8 Data Retention

8.1  bis77 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active Account data — retained for the full duration of your Account relationship with bis77, plus a minimum of five (5) years following Account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC documents — retained for a minimum of five (5) years following the completion of the KYC process, regardless of Account status.
• Transaction records — retained for a minimum of five (5) years following the date of each transaction.
• Support communications — live chat and email records are retained for three (3) years following the date of the communication.
• Technical logs — IP and session logs are retained for twelve (12) months, after which they are deleted or permanently anonymized.
• Marketing consent records — retained for a minimum of three (3) years following the date consent was given or withdrawn, as evidence of compliance.

8.2  Upon expiry of the applicable retention period, Personal Data is securely deleted from bis77 systems or permanently anonymized such that you can no longer be identified from the remaining data.

9 Security Measures

9.1  bis77 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bis77 servers, including login credentials, payment data, and game session traffic.
• Password hashing — bis77 does not store your password in plaintext. Passwords are processed using a one-way cryptographic hash with a unique salt per account.
• Access controls — bis77 staff access to player Personal Data is restricted on a strict need-to-know basis. Access logs are maintained and audited.
• Two-factor authentication (2FA) — available to all registered players as an optional additional layer of Account security. bis77 strongly recommends enabling 2FA.
• Suspicious-login detection — automated systems flag login attempts from unrecognized devices or locations and may require additional verification before granting access.
• Penetration testing and security audits — conducted periodically to identify and remediate vulnerabilities in the bis77 platform infrastructure.

9.2  Notwithstanding the above measures, no internet-based system can be guaranteed to be completely secure. bis77 will notify affected players promptly in the event of a Personal Data breach that is likely to result in a risk to their rights or interests.

10 Cookies & Tracking Technologies

10.1  bis77 uses cookies and similar client-side tracking technologies on the platform. The categories of cookies in use are as follows:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during an active session and security tokens that protect against cross-site request forgery. Essential cookies cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your platform preferences — such as your preferred game lobby view or live casino filter settings — so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymized data about how players navigate the bis77 platform — which pages are visited most, where players enter and exit, and how long sessions last. This data is used exclusively to improve the platform and is not linked to your personal identity.
• Marketing cookies: Used where you have consented to receiving promotional communications from bis77. These cookies help bis77 avoid showing you promotions you have already seen or claimed.

10.2  You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the bis77 platform, though some functional preferences may not be retained between sessions.

10.3  bis77 does not use third-party advertising networks or permit external advertisers to place tracking cookies on the bis77 platform.

11 Your Rights Over Your Personal Data

11.1  As a data subject, you hold the following rights with respect to your Personal Data processed by bis77. To exercise any of these rights, contact the bis77 support team via live chat or at support@bis77.bet. bis77 will respond to all rights requests within thirty (30) days.

• Right of access: You may request a copy of the Personal Data bis77 holds about you and information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data held by bis77. Certain data elements — particularly those verified during KYC — may require re-submission of supporting documents before correction can be applied.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to bis77's legal obligation to retain certain data for anti-money-laundering and regulatory purposes as described in Section 8.
• Right to restriction: You may request that bis77 suspend processing of your Personal Data — for example, while a dispute over data accuracy is being resolved.
• Right to data portability: You may request that your Personal Data be provided to you in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: You may object to processing carried out on the basis of bis77's legitimate interests, including fraud prevention analytics. bis77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — including marketing communications — you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12 Minors

12.1  The bis77 platform is strictly intended for individuals who are 21 years of age or older. bis77 does not knowingly collect Personal Data from persons under the age of 21. If bis77 becomes aware that an Account has been registered by or on behalf of a person under 21, the Account will be immediately closed, all associated Personal Data will be deleted from bis77 systems (subject only to any mandatory legal retention obligations), and any balance will be returned to the original deposit method.

12.2  If you are a parent or guardian and believe that a person under 21 in your care has registered an Account with bis77, please contact the support team immediately at support@bis77.bet so that the Account can be investigated and closed without delay.

13 International Data Transfers

13.1  The bis77 platform serves players primarily based in Indonesia. However, certain third-party service providers engaged by bis77 — including game studio providers such as Evolution Gaming, Pragmatic Play, and PG Soft, and KYC verification services — may process Personal Data on servers located outside Indonesia.

13.2  Where Personal Data is transferred outside Indonesia, bis77 ensures that such transfers are protected by appropriate safeguards, including contractual clauses that require the recipient to process your data to a standard consistent with the principles set out in this Privacy Policy.

14 Changes to This Privacy Policy

14.1  bis77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered players via the contact channel on file — which may include an in-platform notification, SMS to your registered Indonesian mobile number, or both — not less than seven (7) days before the updated Policy takes effect.

14.2  The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the bis77 platform after the effective date of any revision constitutes acceptance of the updated Policy.

15 Contact & Data Enquiries

15.1  For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data bis77 holds about you, please contact the bis77 support team through the following channels:

• Live Chat: Available 24/7 directly on the bis77 platform — the recommended channel for urgent data security concerns or account access issues.
• Email: support@bis77.bet — for formal rights requests, please include "Privacy Request" in the subject line along with your registered mobile number so the team can locate your Account.

15.2  bis77 aims to acknowledge all written privacy requests within 48 hours and to resolve them fully within thirty (30) days. For complex requests requiring extended investigation, bis77 will provide an interim update within the initial thirty-day period and a final resolution within sixty (60) days.