Privacy Policy — day77

1. Overview

day77 is committed to protecting the personal information of every member who uses our Platform. We collect only the data that is necessary to provide you with a secure, personalized, and legally compliant betting and gaming experience. This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data processed by day77 in connection with your use of the day77 Platform and all associated services.

This policy has been drafted to reflect internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, integrity and confidentiality, and accountability. We treat your personal data with the same level of care that BCA, BRI, and other leading Indonesian financial institutions apply to their own customer data — encrypted in transit, access-controlled at rest, and never sold to advertisers or third-party data brokers.

If you are a resident of Indonesia, you interact with the day77 Platform as an individual consumer. This policy therefore addresses your rights and our obligations in that context. We encourage you to read this document carefully and contact our support team if any section is unclear.

2. Definitions

The following defined terms are used throughout this Privacy Policy. Where the same terms appear in the day77 Terms & Conditions, they carry the same meaning unless otherwise specified.

• "day77 Platform" / "Platform" — The website at day77.pro, including all sub-pages, features, games, betting markets, account management tools, and customer support channels operated by day77.
• "Member" / "you" / "your" — Any natural person who has registered an account with day77 and uses any service provided on the Platform.
• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, including name, identification number, location data, online identifiers, or information specific to the physical, economic, or social identity of that person.
• "Processing" — Any operation performed on Personal Data, including but not limited to collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" — day77, acting as the entity that determines the purposes and means of Processing your Personal Data.
• "Third-Party Processor" — An external service provider engaged by day77 to process Personal Data on day77's behalf and under day77's documented instructions.
• "KYC" (Know Your Customer) — The identity and age verification process that day77 uses to confirm that Members meet eligibility requirements, including the 21+ age restriction applicable to all Indonesian members.

3. Data We Collect

day77 collects Personal Data in the following categories. We collect only the minimum data necessary for each specific purpose, in accordance with the data minimization principle.

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, national ID (KTP) number, passport number	Account registration, KYC verification, age verification (21+)
Contact Data	Indonesian mobile phone number, email address, city of residence (e.g., Jakarta, Surabaya, Bandung)	Account communication, two-factor authentication, customer support
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)	Processing Rupiah deposits and withdrawals, anti-money laundering checks
Transaction Data	Deposit amounts, withdrawal amounts, bet history, game session records, win/loss records	Account management, fraud prevention, bonus eligibility, responsible gaming monitoring
Technical Data	IP address, browser type and version, device type and operating system, session timestamps, cookie identifiers	Platform security, fraud detection, geo-restriction compliance, service optimization
Usage Data	Pages visited, games played, betting patterns, feature interactions, session duration	Platform improvement, personalized experience, responsible gaming detection
Communications Data	Live chat transcripts, email correspondence, customer support ticket records	Dispute resolution, service quality assurance, compliance record-keeping
KYC Documents	Scanned copies or photographs of KTP, passport, utility bills, payment method ownership evidence	Identity verification, regulatory compliance, fraud prevention

4. How We Collect Your Data

4.1 Directly from You. The majority of Personal Data we hold is provided by you directly during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional opt-ins. You control what information you provide, but withholding required information may prevent us from offering certain services.

4.2 Automatically via the Platform. When you visit or use the day77 Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. This data is collected as a by-product of your normal use of the Platform and is used primarily for security and service optimization purposes. See Section 10 for more information on our use of cookies.

4.3 From Third-Party Processors. In limited circumstances, day77 may receive Personal Data about you from third-party sources, including:

• Payment processors and Indonesian banking partners, who confirm the status and ownership of the payment method used for deposits and withdrawals.
• Identity verification service providers, who assist in validating government-issued identity documents during the KYC process.
• Fraud detection and anti-money laundering (AML) screening services, which provide risk signals based on publicly available and commercially licensed data.
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who may share session-level technical data necessary for game integrity and dispute resolution.

5. Purpose of Processing

day77 processes your Personal Data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent.

• Account Administration: Creating, maintaining, and securing your day77 account, including authentication, password recovery, and session management.
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and are a resident of Indonesia, in compliance with our responsible gaming obligations.
• Payment Processing: Facilitating Rupiah deposits and withdrawals through your nominated Indonesian bank account or e-wallet, and ensuring payments are directed to the correct and verified recipient.
• Fraud Prevention & AML Compliance: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of our interactions for quality assurance and regulatory purposes.
• Responsible Gaming: Monitoring your usage patterns to identify indicators of problem gambling behavior and, where appropriate, initiating responsible gaming interventions or implementing member-requested tools such as deposit limits and self-exclusion.
• Marketing Communications: Sending you information about day77 promotions, bonuses, and new features — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the performance, design, and content of the day77 Platform.
• Legal & Regulatory Compliance: Meeting obligations imposed by applicable laws and regulations, responding to lawful requests from authorities, and maintaining records required for audit purposes.

6. Legal Basis for Processing

day77 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and day77, as governed by the Terms & Conditions. This covers account registration, payment processing, game access, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, and record-keeping mandates.
• Legitimate Interests: Processing is necessary for day77's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — in particular, for direct marketing communications and the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

7.1 No Sale of Personal Data. day77 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes under any circumstances.

7.2 Sharing with Third-Party Processors. day77 engages carefully selected Third-Party Processors to assist in delivering services on the Platform. These processors are contractually obligated to process your data only on day77's documented instructions, to maintain appropriate technical and organizational security measures, and not to sub-process your data without day77's prior written authorization. Categories of Third-Party Processors include:

• Indonesian payment gateway and banking integration providers facilitating transactions via BCA, BRI, BNI, Mandiri, and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity verification (eKYC) service providers that validate KTP and passport documents.
• Cloud infrastructure and hosting providers that store Platform data within secure, access-controlled environments.
• Customer support platform providers that power day77's 24/7 live chat and ticketing systems.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for session integrity and dispute resolution purposes only.
• AML screening and fraud detection service providers.

7.3 Disclosure to Authorities. day77 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by law, by valid court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect our legal rights, or protect the safety of our members or the public.

7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of day77's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before your data is transferred.

8. Data Retention

day77 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Accounts: Personal Data associated with an active day77 account is retained for the duration of the membership relationship and for a period of five years following account closure, to satisfy AML record-keeping requirements.
• KYC Documents: Identity documents submitted for verification are retained for a minimum of five years from the date of submission, in accordance with standard financial compliance obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years to support dispute resolution, regulatory audit, and AML reporting obligations.
• Customer Support Records: Live chat transcripts and support ticket records are retained for three years from the date of closure of the relevant interaction.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as necessary to demonstrate compliance with our obligations, even after the underlying data has been deleted.
• Technical & Usage Data: Anonymized and aggregated Technical and Usage Data may be retained indefinitely for the purposes of Platform analytics and improvement, as it can no longer be linked to any identifiable individual.

When Personal Data is no longer required and no legal retention obligation applies, day77 will securely delete or anonymize it so that it can no longer be associated with you.

9. Data Security

9.1 day77 implements a comprehensive suite of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the day77 Platform is encrypted using the same 256-bit SSL standard used by BCA and BRI for their internet banking platforms.
• Encrypted Data at Rest: Sensitive Personal Data, including KYC documents and financial data, is encrypted at the storage layer using AES-256 encryption.
• Access Controls: Access to Personal Data within day77's systems is granted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit.
• Two-Factor Authentication (2FA): day77 supports 2FA for Member account login via your registered Indonesian mobile number, providing an additional layer of protection against unauthorized account access.
• Intrusion Detection & Monitoring: day77's infrastructure is protected by real-time intrusion detection systems, firewall controls, and continuous security monitoring.
• Regular Security Audits: day77 conducts periodic internal security reviews and engages independent third-party security specialists to conduct vulnerability assessments and penetration testing.

9.2 Data Breach Response. In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, day77 will notify affected Members without undue delay via their registered contact details, and will take immediate steps to contain and remediate the breach.

9.3 While day77 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying day77 immediately if you suspect unauthorized access to your account.

10. Cookies & Tracking Technologies

10.1 The day77 Platform uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to deliver essential functionality, enhance your experience, and analyze Platform usage. A cookie is a small text file placed on your device by your browser when you visit a website.

10.2 day77 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login session management, security token validation, and shopping cart-equivalent bet slip functionality. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how Members use the Platform — such as which pages are visited most frequently and whether error messages are encountered — to help day77 improve the Platform. This data is aggregated and does not identify individual users.
• Functional Cookies: These cookies enable the Platform to remember your preferences, such as your preferred language (English), display settings, and recently played games, to provide a more personalized experience.
• Security Cookies: These cookies support day77's fraud detection and account security systems by identifying anomalous session behavior or suspicious login patterns.

10.3 Managing Cookies. You can control the placement of non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is placed. Please note that disabling certain cookies may affect the functionality of the day77 Platform, including your ability to log in or access certain features.

10.4 day77 does not use third-party advertising cookies or tracking pixels that relay your browsing behavior to external advertising networks.

11. Your Privacy Rights

As a day77 Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team using the details provided in Section 16. day77 will respond to verified rights requests within 30 calendar days of receipt.

12. Minors & Age Policy

The day77 Platform is strictly restricted to adults who are 21 years of age or older. day77 does not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you are not permitted to register an account, use any service on the Platform, or submit any Personal Data to day77.

If day77 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be immediately and securely deleted, the associated account will be suspended, and any deposited funds will be returned to their source after completing applicable AML checks.

If you are the parent or legal guardian of a minor and believe that your child has registered an account with day77, please contact our support team immediately using the contact details in Section 16. We will investigate and take appropriate action without delay.

13. International Data Transfers

day77 primarily stores and processes Member data within secure infrastructure located in jurisdictions with established data protection frameworks. In some circumstances, Personal Data may be transferred to or accessed by Third-Party Processors operating in countries outside Indonesia. Where such transfers occur, day77 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by day77.
• Transfers only to processors operating in jurisdictions recognized as providing adequate data protection standards.
• Technical controls that limit the scope of data accessible to overseas processors to the minimum necessary for the relevant processing purpose.

By registering an account with day77, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia in the circumstances described above, subject to the safeguards outlined in this section.

14. Third-Party Links & Services

The day77 Platform may display references to third-party service providers — such as payment processors, game content providers, and sports data feed providers — in the course of delivering our services. This Privacy Policy applies solely to Personal Data processed by day77 on the day77 Platform. day77 is not responsible for the privacy practices of third-party services, and we recommend that you review the privacy policies of any third-party provider whose services you use in connection with your day77 account.

15. Updates to This Privacy Policy

15.1 day77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Material changes to this policy will be communicated to registered Members via their registered email address or Indonesian mobile number at least seven days prior to the effective date of the change, except where immediate changes are required for legal or security reasons.

15.2 The updated Privacy Policy will always be accessible at day77.pro/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

15.3 Your continued use of the day77 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and may request account closure in accordance with Section 15 of the Terms & Conditions.

16. Contact Us & Data Protection Inquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about how day77 has handled your Personal Data, please contact our support team. Our 24/7 Indonesian-speaking support team is available via live chat on the Platform and by email at the address below.