Privacy Policy

The following terms are used throughout this Privacy Policy with the meanings specified below:

eth77 collects personal data in the categories described below. We collect only the data that is necessary for the purpose stated and do not engage in speculative or unnecessary data collection.

Registration & Account Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you are at least 21 years of age). 21+
• Residential address in Indonesia (city, province, postal code).
• Email address (used as your primary account identifier and for communications).
• Username and encrypted password.
• Mobile phone number (used for account verification and security alerts).

Identity Verification (KYC) Data:

• Scanned or photographed copy of your Indonesian National Identity Card (KTP) or valid passport.
• Proof of address document, where requested (e.g., utility bill or bank statement issued within the past three months).
• Selfie photograph, where required for biometric identity confirmation.

Financial Data:

• Bank account details for withdrawal processing: bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga), account number, and account holder name.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions.
• Transaction records including deposit amounts, withdrawal requests, dates, and statuses — denominated in Indonesian Rupiah (IDR).

Gaming & Behavioral Data:

• Game session history, wager amounts, win/loss outcomes, and game preferences.
• Sportsbook selections and bet settlement records.
• Bonus participation history and wagering requirement completion data.
• Responsible gaming tool usage, including limit settings, cooling-off periods, and self-exclusion requests.

Technical & Device Data:

• IP address and approximate geolocation derived from IP.
• Browser type, version, and operating system.
• Device type and screen resolution.
• Session timestamps, page navigation paths, and time spent on specific platform sections.
• Cookies, web beacons, and similar tracking technologies as described in Section 7 of this Policy.

Communications Data:

• Records of your correspondence with eth77's customer support team, including live chat transcripts, email exchanges, and any attachments you submit.
• Feedback, survey responses, and complaint records.

eth77 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or update your account profile settings.
• Automatically via the Platform: Through cookies, web beacons, log files, and server-side analytics tools that record technical and behavioral data each time you access the eth77 platform. See Section 7 for full details.
• From third-party payment processors: When you initiate a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), those providers may share transaction confirmation data with eth77 for reconciliation purposes.
• From identity verification and fraud detection providers: Where eth77 engages a third-party KYC or AML (anti-money laundering) screening provider, that provider may return match results, risk scores, or adverse media flags relating to your identity documents or account activity.
• From publicly available sources: Publicly accessible records may be consulted as part of AML screening or problem gambling self-exclusion cross-referencing processes.

eth77 processes your personal data on one or more of the following legal bases:

eth77 uses the personal data we collect exclusively for the purposes described below. We do not use your data for purposes incompatible with those stated at the time of collection without first obtaining your explicit consent or unless required by law.

• Account management: Creating, maintaining, verifying, and securing your eth77 member account, including processing password resets and security alerts.
• Payment processing: Executing deposit crediting and withdrawal disbursement transactions in Indonesian Rupiah (IDR) via your nominated bank or e-wallet, and maintaining accurate financial records thereof.
• KYC and compliance: Verifying your identity and age (21+) to satisfy our platform's responsible gaming and anti-fraud obligations, and screening against AML watchlists as required by our operating license conditions.
• Game and sportsbook delivery: Delivering slot games from providers including Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft; live casino streams from Evolution Gaming and Asia Gaming; sportsbook markets covering BRI Liga 1, EPL, La Liga, Champions League, Timnas Indonesia fixtures, and other events; and other gaming products including togel (Indonesia's traditional numbers lottery), bingo, and poker tournaments.
• Bonus and promotion administration: Tracking wagering requirement completion, managing promotional eligibility, and delivering bonus awards to qualifying accounts.
• Responsible gaming: Monitoring gaming behavior to identify patterns consistent with problem gambling, enforcing member-set deposit limits, loss limits, and session timers, and processing cooling-off and self-exclusion requests.
• Fraud prevention and security: Detecting duplicate accounts, identifying suspicious transaction patterns, investigating chargebacks, and protecting the platform from exploitation by automated tools or bad actors.
• Customer support: Responding to account queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance.
• Platform improvement: Analyzing aggregated, anonymized usage data to identify technical performance issues, improve game discovery, optimize the mobile web experience, and develop new features.
• Marketing communications: Sending promotional offers, new game announcements, and seasonal bonus notifications via email or SMS — only where you have given explicit consent and have not subsequently withdrawn it.

eth77 does not sell, rent, or trade your personal data to any third party. Your data may be disclosed only in the following carefully controlled circumstances:

• Payment service providers: Your bank account number, e-wallet identifier, and transaction amounts are shared with the relevant Indonesian payment processor (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to execute your deposit or withdrawal instruction. These providers act as independent data controllers in respect of their own payment processing obligations.
• Game content studios: Your session identifiers and game round data are shared with the relevant game provider (e.g., Pragmatic Play, Evolution Gaming, Spribe, Microgaming) to deliver real-time game content and calculate outcomes. Game studios do not receive your full identity or financial details.
• KYC and AML verification providers: Identity document images and biometric data submitted during the KYC process may be transmitted to our contracted identity verification partner for automated matching and risk assessment. These partners operate under strict data processing agreements with eth77.
• Fraud and security analytics providers: IP addresses, device fingerprints, and behavioral signals may be analyzed by a contracted fraud detection provider to identify account takeover attempts, bonus abuse, and other security threats.
• Legal and regulatory authorities: eth77 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order, court judgment, or statutory obligation. Where permitted by law, eth77 will notify the affected member prior to such disclosure.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving eth77, member personal data may be transferred to the acquiring entity as part of the transaction. Members will be notified via their registered email address prior to any such transfer taking effect, and the terms of this Privacy Policy will continue to apply to the transferred data.

eth77 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

You may manage optional cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not prevent you from using the platform, but may affect the quality of your personalized experience. Disabling strictly necessary or security cookies may impair core platform functionality and is not recommended.

eth77 does not use cookies to serve third-party advertising on the platform or to track your activity on external websites.

eth77 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law or our operating license conditions. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized in accordance with eth77's internal data disposal procedures.

eth77 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and the eth77 platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The padlock icon displayed in your browser address bar confirms an active encrypted connection at all times.
• Password hashing: Account passwords are never stored in plain text. eth77 uses a modern cryptographic hashing algorithm with salting to render stored password data unreadable even in the unlikely event of a database compromise.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of login security. Where eth77 detects a login from an unrecognized device or IP address, additional verification steps are triggered automatically.
• Access controls: Internal access to personal data is strictly limited to eth77 staff and authorized processors who have a demonstrated need for access to perform their job functions. Access rights are reviewed on a regular basis and revoked promptly upon change of role or employment.
• Intrusion detection and monitoring: eth77's infrastructure is monitored continuously for anomalous access patterns, injection attempts, and other indicators of attack or unauthorized access.
• Regular security audits: eth77 conducts periodic third-party security assessments of its platform infrastructure and data handling processes to identify and remediate vulnerabilities proactively.

As a data subject whose personal data is processed by eth77, you hold the following rights in respect of that data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and provide sufficient information to verify your identity before we process your request.

• Right of access: You may request a copy of the personal data eth77 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Minor account details (email address, phone number) may be updated directly via your account profile settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was otherwise unlawful. Note that this right is subject to our legal obligation to retain certain data (particularly financial and KYC records) for the minimum periods described in Section 8.
• Right to restriction of processing: You may request that eth77 restrict the processing of your data in specific circumstances — for example, while the accuracy of disputed data is being verified, or pending the outcome of an objection you have raised.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to object: You may object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for fraud detection or responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account dashboard or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

eth77 aims to respond to all data rights requests within 30 days of receipt of a valid, verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

The eth77 platform is strictly intended for adults aged 21 and over. 21+ eth77 does not knowingly collect, store, or process the personal data of any person under the age of 21.

Age verification is a mandatory step in the registration process. If eth77 becomes aware at any point — through KYC verification, a complaint, or any other means — that a member account is held by a person under the age of 21, we will:

• Immediately suspend the account and halt all associated transaction processing.
• Delete the account and all associated personal data as promptly as technically feasible, except where retention is required to satisfy AML or fraud investigation obligations.
• Reverse any deposits received, net of any winnings derived from real-money play (which are not payable to a minor under any circumstances).

If you are a parent or legal guardian and believe that a minor in your household has accessed or registered on the eth77 platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

The eth77 platform integrates content and services from third-party providers including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), and technical infrastructure providers. When you interact with these integrated services — for example, by launching a slot game or initiating a bank transfer — your data is processed by the relevant third party in accordance with their own privacy policies.

eth77 exercises due diligence in selecting third-party providers and requires all providers with whom we share personal data to maintain data protection standards consistent with this Privacy Policy. However, eth77 is not responsible for the privacy practices of independent third-party controllers, and we encourage you to review the privacy documentation of any third-party service with which you interact directly.

eth77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this document.
• Publish a notice on the eth77 platform informing logged-in members of the changes.
• Where the changes materially affect how your data is used or your rights as a data subject, send a notification to your registered email address at least 14 days before the changes take effect.

Your continued use of the eth77 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the changes, you should cease using the platform and contact [email protected] to arrange account closure and data handling in accordance with Section 10 (Your Data Rights).

We recommend reviewing this Privacy Policy periodically — at minimum whenever you receive a notification of an update — to remain informed of how your personal data is being protected and used.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about eth77's data handling practices, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is directed to the appropriate team.
• Live Chat: Available 24/7 via your eth77 account dashboard following login at eth77 Login. Our Indonesian-speaking support agents can log your request and escalate to the Data Protection team on your behalf.
• Response commitment: eth77 aims to acknowledge all privacy-related enquiries within 48 hours (WIB, UTC+7) and to provide a substantive response within 30 days of receiving a valid, verified request.

If you are not satisfied with eth77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction governing our operating license. Details of the applicable supervisory authority are available upon request from our support team.

For responsible gaming concerns — including self-exclusion requests, deposit limit adjustments, or referrals to support resources — please visit our dedicated Responsible Gaming page. These matters are handled by a specialist team with full confidentiality.