Privacy Policy

1 Introduction & Scope

dg77 ("we", "us", "our") operates the online sportsbook and casino platform accessible at dg77.cam (the "Platform"). As part of operating this Platform, we collect and process personal data relating to our members and visitors. This Privacy Policy describes our data practices in full and applies to all personal data processing activities conducted by dg77 in connection with the Platform.

This policy applies regardless of whether you access the Platform via a desktop browser, mobile browser, or any other means. It covers data collected from the moment you first visit the Platform, through registration, account use, and for the duration of the legally required post-closure retention period.

dg77 primarily serves players located in Indonesia. Where this policy references local regulatory context, it does so with reference to the Indonesian market, though the Platform operates under an international gaming license issued by an offshore regulatory authority. By using the Platform, you acknowledge that your personal data will be processed as described in this policy.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly. This includes names, email addresses, phone numbers, IP addresses, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means dg77, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of dg77, acting under contractual instruction and data processing agreements.
• "Data Subject" means the individual natural person to whom personal data relates — in the context of this policy, this is the Platform member or visitor.
• "KYC" means Know Your Customer — the identity and age verification process required under our licensing obligations before withdrawal requests are processed.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 10.

3 Personal Data We Collect

The categories of personal data dg77 collects and processes are set out in the table below. Collection is limited to what is necessary for the stated purpose.

4 How We Collect Your Data

dg77 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in any promotion or survey on the Platform.
• Automatically: Technical data is collected automatically when you browse the Platform through server logs, cookies, and similar tracking technologies as described in Section 10.
• From payment processors: When you initiate a deposit or withdrawal, dg77 receives confirmation data from your bank (BCA, BRI, BNI, Mandiri, and others) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) confirming the transaction reference, amount, and originating account name.
• From identity verification providers: Our KYC process may involve automated document verification services that cross-reference submitted documents against relevant databases. These providers act as data processors under contract with dg77.
• From fraud prevention and security services: dg77 may receive risk signals from third-party fraud detection services that analyze device fingerprints and behavioral patterns to flag potentially fraudulent activity.

5 Legal Basis for Processing

dg77 processes personal data on the following legal bases, depending on the purpose of processing:

• Contract performance: Processing necessary to create and manage your account, process deposits and withdrawals, settle wagers, and deliver customer support. Without this processing, we cannot provide the Platform services to you.
• Legal obligation: Processing required to comply with our international gaming license conditions, including KYC age and identity verification, anti-money laundering (AML) record-keeping, and fraud reporting obligations.
• Legitimate interests: Processing necessary for dg77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided such interests are not overridden by your rights and interests.
• Consent: Where dg77 sends you direct marketing communications (such as promotional emails or SMS notifications about bonuses), we do so only on the basis of your explicit opt-in consent at the time of registration or subsequently via your account preferences. You may withdraw this consent at any time.

6 How We Use Your Personal Data

dg77 uses the personal data we collect for the following purposes:

• Account creation and management: Registering your account, verifying your identity and age (21+ requirement strictly enforced), managing account settings, and maintaining accurate account records.
• Transaction processing: Crediting deposits to your account balance, processing withdrawal requests to your verified BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or other registered payment method, and maintaining complete transaction records.
• Customer support: Responding to your queries, resolving disputes, and maintaining a record of support interactions for quality assurance and training purposes.
• Responsible gaming: Monitoring wagering behavior to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion requests, and proactively reaching out to members who exhibit concerning behavior patterns.
• Security and fraud prevention: Detecting and preventing unauthorized access to accounts, identifying fraudulent deposit or withdrawal activity, and investigating suspected breaches of our Terms & Conditions.
• Platform improvement: Analyzing aggregated, anonymized behavioral data to understand how members use the Platform and to prioritize product improvements and new feature development.
• Marketing communications: Sending you information about bonuses, promotions, and new products — but only where you have provided explicit opt-in consent. You can unsubscribe at any time via the link in any marketing email or by contacting support.
• Legal compliance: Maintaining records as required by our licensing authority, responding to lawful information requests from regulatory bodies, and meeting any applicable anti-money laundering reporting obligations.

7 Data Sharing & Disclosure

dg77 does not sell your personal data. We share personal data with third parties only in the circumstances set out below, and in each case only to the minimum extent necessary:

• Payment processors: Your bank account name, account number, and transaction amount are shared with the relevant payment institution (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay) to process deposits and withdrawals. These institutions are independent data controllers governed by their own privacy policies.
• KYC and identity verification providers: KYC document data is shared with contracted identity verification service providers who verify document authenticity and cross-reference identity records on our behalf. These providers are bound by data processing agreements.
• Game content providers: When you play games hosted by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others), a session token and pseudonymized player identifier are shared with the relevant studio to enable gameplay. Full identity data is not shared with game studios.
• Fraud and security service providers: Pseudonymized technical data (IP address, device fingerprint) may be shared with contracted fraud detection services to assess transaction risk. These providers act as data processors under contractual instruction.
• Legal and regulatory authorities: dg77 will disclose personal data to its licensing authority, law enforcement agencies, or courts of competent jurisdiction where required by law or where we have a good-faith belief that disclosure is necessary to protect our legal rights, prevent fraud, or comply with a judicial or regulatory order.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer by email prior to the transaction completing.

8 Data Retention

dg77 retains personal data for the periods set out below. After the applicable retention period expires, data is securely deleted or irreversibly anonymized.

Where a legal claim is brought or threatened during an applicable retention period, we may extend the retention of relevant data until the claim is fully and finally resolved.

9 Your Data Subject Rights

As a data subject, you have the following rights in relation to your personal data held by dg77. To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within 30 calendar days.

10 Cookies & Tracking Technologies

dg77 uses cookies and similar tracking technologies to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and support core security features. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: These cookies remember your preferences — such as your default language setting, display preferences, and last-used payment method — to provide a more personalized experience. Disabling these cookies may reduce Platform functionality but will not prevent access.
• Analytics Cookies: dg77 uses privacy-configured analytics to understand how members navigate the Platform, which features are most used, and where usability issues occur. Analytics data is aggregated and pseudonymized before analysis and is not used to identify individual users.
• Security Cookies: These cookies support our fraud detection and bot prevention infrastructure, helping us distinguish legitimate member sessions from automated or malicious access attempts.

You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your account. dg77 does not use third-party advertising cookies or cross-site tracking pixels.

11 Security Measures

dg77 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, and unlawful destruction. Our security infrastructure includes:

• Encryption in transit: All data transmitted between members and the Platform is protected by 256-bit TLS/SSL encryption. Connections that do not meet this standard are automatically rejected.
• Encryption at rest: Personal data and financial records stored within dg77's infrastructure are encrypted at the storage layer using AES-256 encryption.
• Access controls: Access to systems holding personal data is restricted on a need-to-know basis. Multi-factor authentication is required for all administrative access. Access logs are retained and reviewed regularly.
• Penetration testing: dg77's platform infrastructure undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response: dg77 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected members without undue delay and will report to our licensing authority as required.

While dg77 takes all reasonable precautions, no transmission over the internet or electronic storage system is completely impenetrable. Members are responsible for maintaining the security of their own account credentials and for logging out of shared or public devices after each session.

12 Children's Privacy

The dg77 Platform is strictly for adults. No person under the age of 21 is permitted to register, access, or use the Platform in any capacity. dg77 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, delete all associated personal data, and return any deposits made to the originating payment method.

If you believe a person under the age of 21 has registered an account on dg77, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 International Data Transfers

dg77 operates under an international gaming license and its infrastructure is hosted in data centers outside of Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia. These countries may have data protection laws that differ from those in Indonesia.

Where personal data is transferred internationally, dg77 ensures that appropriate safeguards are in place to protect that data, including:

• Transfers to countries recognized as providing an adequate level of data protection by relevant international standards.
• Where adequacy is not recognized, the use of contractual clauses with data processors that impose obligations equivalent to those applicable under our licensing authority's data protection requirements.
• Transfers to payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) that are governed by Indonesian banking regulations and are subject to Bank Indonesia's data security requirements.

14 Third-Party Services & Links

The dg77 Platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game from one of these providers, you are interacting with software hosted or co-hosted by that provider. Each studio maintains its own privacy and data security practices, which are governed by their respective agreements with dg77.

dg77 does not include links to external websites in its Platform content. If any third-party link were to appear in a communication from dg77 (such as a support email), dg77 is not responsible for the privacy practices or content of that third-party website. We encourage you to review the privacy policy of any external service before providing it with your personal data.

15 Updates to This Privacy Policy

dg77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or licensing requirements. When a material change is made — meaning a change that affects your rights or how your data is used in a significant way — we will notify all registered members by email to the address on their account at least 14 calendar days before the updated policy takes effect.

For minor, non-material updates (such as typographical corrections or clarifications that do not alter the substance of our commitments), we will update the "Last Updated" date at the top of this page without individual notification. We encourage you to review this page periodically.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated policy, you should stop using the Platform and request account closure in accordance with our Terms & Conditions.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to how dg77 processes your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject line: Please include "Privacy Request" or "Data Protection" in your subject line so your message is routed to the correct team promptly.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. For privacy-specific matters, our support agents will escalate your query to the data protection team within one business day.
• Response time: dg77 aims to acknowledge all privacy-related inquiries within 24 hours and to provide a substantive response within 30 calendar days of receiving a complete request.