Data & Privacy
Your privacy matters to us. This policy explains exactly what personal data web77 collects, why we collect it, how we use it, who we share it with, and what rights you hold over your own information as a player based in Indonesia.
web77 operates as an international online gaming service principally serving players based in Indonesia. All payment transactions are conducted in Indonesian Rupiah (IDR / Rp) via local banking channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. The data practices described in this Policy apply to all players regardless of which Indonesian city or region they are located in.
This Policy should be read alongside our Terms & Conditions, which govern the overall use of the web77 Platform, and our Responsible Gaming page, which describes how we use certain data to support player welfare and harm-minimisation obligations.
Section 1
In this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, national identity number, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | web77, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Subject" | The individual whose Personal Data is being processed — in this context, you, the registered Player. |
| "Third Party" | Any entity other than web77 and the Data Subject, including payment processors, game studios, KYC verification providers, and analytics services. |
| "Cookies" | Small text files placed on a Player's device by the Platform for the purposes described in Section 9 of this Policy. |
| "KYC" | Know Your Customer — the identity and age verification process required before processing withdrawals or as otherwise required by the Operator. |
Section 2
web77 collects the following categories of Personal Data from registered players and platform visitors:
Section 3
web77 collects Personal Data through the following channels:
Section 4
web77 processes Personal Data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, contact, and account data |
| Processing deposits and withdrawals in IDR | Financial and identity data |
| Age and identity verification (KYC) | Identity data and KYC documents |
| Delivering and settling bets and game results | Account and gaming activity data |
| Preventing fraud, money laundering, and account abuse | All categories, including technical data |
| Customer support and dispute resolution | Communications, identity, and financial data |
| Responsible gaming monitoring and tool delivery | Gaming activity and account data |
| Sending promotional communications (where consent given) | Contact and communications data |
| Platform analytics and performance optimisation | Technical and device data (aggregated) |
| Compliance with applicable legal obligations | All categories as required by law |
Section 5
web77 processes your Personal Data on the following legal grounds:
Processing your identity, financial, and gaming activity data is necessary to perform the contract between you and web77 — i.e., to operate your account, accept your bets, process payments, and provide customer support. Without this processing, we cannot deliver the services described in our Terms & Conditions.
We process certain Personal Data because we are required to do so by applicable law, including anti-money laundering obligations, identity verification requirements, and fraud-prevention mandates applicable to online gaming operators.
We process technical and gaming activity data to detect and prevent fraud, protect the security of the Platform, and improve our services. These interests are balanced against your privacy rights — we do not use this basis for processing that would disproportionately intrude on your privacy.
Where we send marketing or promotional communications, we do so only where you have provided explicit consent at the time of registration or subsequently via your account preferences. You may withdraw consent for marketing communications at any time by contacting our support team.
Section 6
web77 does not sell your Personal Data to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:
We share your financial data (bank account details, transaction amounts in IDR) with the relevant Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute deposit and withdrawal transactions on your behalf.
We share identity data with third-party KYC service providers for the purpose of verifying your age and identity. These providers are contractually bound to process your data only for KYC purposes and to maintain confidentiality.
To deliver game content, we share a session token and your account identifier (not your full personal profile) with our licensed game studio partners including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and others. These studios do not receive your financial data or contact details.
Aggregated and pseudonymised technical data may be processed by analytics platforms to help us understand how the Platform is used and to detect performance issues. Fraud-detection and cybersecurity providers may process technical identifiers to identify suspicious activity.
web77 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of the Platform, its players, or the public.
Section 7
As an internationally operated platform, web77 may process or store certain Personal Data on servers located outside Indonesia. Where data is transferred to jurisdictions that may not provide the same level of data protection as the laws applicable to you, web77 implements appropriate safeguards including contractual data protection clauses with all third-party data processors to ensure your data remains protected to a standard consistent with this Policy.
Payment transactions involving Indonesian banks and e-wallets are routed through local banking infrastructure and are subject to Indonesian financial regulations applicable to those institutions.
Section 8
web77 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Data that is no longer required for any legitimate purpose is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
Section 10
web77 takes the security of your Personal Data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure:
Despite these measures, no online platform can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team immediately via live chat or at [email protected].
Section 11
The web77 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect or process Personal Data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has provided Personal Data to web77 without your consent, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.
Section 12
As a registered player on web77, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us via live chat or at [email protected]. We aim to respond to all verified data requests within 30 days of receipt.
Section 13
web77 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — changes that meaningfully affect how your Personal Data is used — we will notify registered players via a prominent Platform notification or by email to the address registered on your account. The updated Policy will display a revised "Last Updated" date at the top of this page.
Your continued use of the web77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you object to any change, you may request account closure as described in our Terms & Conditions (Clause 3.5).
We encourage you to review this Policy periodically to stay informed about how web77 protects your data. The current version of this Policy supersedes all prior versions.
Section 14
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by web77, please reach out through the following channel:
Our support team operates primarily in WIB and provides assistance in both Indonesian and English. We aim to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 calendar days. Complex requests may require additional time; we will communicate any expected delay proactively.
For responsible gaming concerns relating to data held on your account — such as self-exclusion records or deposit limit settings — please also visit our Responsible Gaming page for additional information and self-service tools.
Data Protection Commitments
These are the practical, operational commitments that back up our written privacy obligations — not just promises on a page.
Every data exchange between your device and the web77 Platform — logins, deposits, and personal information — is protected by bank-grade 256-bit SSL encryption. Your data is unreadable to any intercepting party.
web77 does not sell, lease, or broker your Personal Data to any third party for commercial purposes. Data sharing occurs only with verified service partners strictly necessary for Platform operations.
Identity verification on web77 is applied proportionately — we request only the documentation necessary for the specific verification step. KYC data is handled with strict confidentiality and deleted once retention requirements are satisfied.
Marketing and promotional communications from web77 are strictly opt-in. You can withdraw your consent at any time through your account settings or by contacting support — and that withdrawal takes effect immediately.
web77 retains your data only as long as operationally or legally required. Once the applicable retention period has passed, Personal Data is securely deleted or permanently anonymised — not held indefinitely.
Your rights of access, rectification, erasure, and objection are genuinely actionable on web77 — not theoretical. Contact our support team to submit a data request and we will respond within 30 days as standard.
Related Pages
Our full set of player-facing documents covers everything from account rules to responsible gaming tools.