Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Security Measures
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Minors & Age Policy
- 13. Third-Party Services
- 14. Policy Amendments
- 15. Contact & DPO
This Privacy Policy applies to all personal data processed by kopi77 in connection with your use of the Platform at https://kopi77.cam, including account registration, deposits and withdrawals, gaming activity, customer support interactions, and marketing communications. By registering an Account or using the Platform, you acknowledge that you have read, understood, and agreed to the data practices described herein. This Policy forms part of our broader Terms & Conditions.
1 Introduction
kopi77 ("we", "us", "our", "the Platform") is committed to protecting the privacy of every Player who registers and interacts with our services. We operate the online gaming and sports betting platform accessible at https://kopi77.cam, serving Players primarily located in Indonesia and internationally. This Privacy Policy is designed to give you a clear and complete understanding of how your personal information flows through our organization — from the moment you visit the Platform to the moment you close your Account.
Privacy protection at kopi77 is not limited to a legal compliance exercise. We actively design our data systems with privacy principles embedded from the outset — a practice commonly known as Privacy by Design. This means data minimization, purpose limitation, and access controls are built into our infrastructure rather than bolted on after the fact.
If you have questions about any aspect of this Policy, or wish to exercise any of your data rights described in Section 11, please contact our Data Protection contact as detailed in Section 15.
2 Definitions
In this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, IP address, or one or more factors specific to the physical, physiological, economic, or social identity of that person. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Controller" | kopi77, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of kopi77 under a contractual obligation and only according to kopi77's documented instructions. |
| "Player" / "User" / "you" | Any individual who has registered or is in the process of registering an Account on the Platform, or who otherwise interacts with kopi77 services. |
| "Platform" | The kopi77 website at https://kopi77.cam, including all sub-pages, APIs, mobile-optimized interfaces, and associated digital services. |
| "KYC" | Know Your Customer — the identity and document verification process used to confirm a Player's identity and comply with anti-money-laundering obligations. |
| "Cookie" | A small text file stored on your device by the Platform, used to recognize your browser, maintain session state, and analyze usage patterns. |
3 Data We Collect
kopi77 collects only the Personal Data that is necessary and proportionate to the specific purposes for which it is collected. The categories of data we may hold about you include:
3.1 Identity Data
- Full legal name as it appears on your government-issued ID
- Date of birth and age verification documentation
- National Identity Card (KTP), driving licence (SIM), or passport number and copy
- Profile photograph (where submitted for KYC purposes)
3.2 Contact Data
- Residential address, city, and province within Indonesia
- Email address registered to your Account
- Mobile phone number (used for OTP verification and support communications)
- WhatsApp or Telegram handle (if provided to our support team)
3.3 Financial Data
- Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or other supported institutions)
- E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
- Transaction records including deposit amounts, withdrawal requ ests, dates, and payment method references
- Source of funds declarations submitted for high-volume account reviews
3.4 Technical & Usage Data
- IP address and approximate geolocation derived from it
- Browser type, version, and operating system
- Device fingerprint and unique device identifiers
- Pages visited, time spent on each page, click paths, and referral URLs
- Session timestamps and login history
3.5 Gaming Activity Data
- Bet history, stake amounts, game selections, and settlement results across all product verticals (sports betting, slots, live casino, togel (Indonesia's traditional numbers lottery), and sabung ayam (live cockfighting markets))
- Bonus redemption and wagering progress records
- Responsible gaming tool settings — deposit limits, loss limits, session limits, and self-exclusion status
3.6 Communications Data
- Records of all communications between you and our customer support team, whether by live chat, email, WhatsApp, or Telegram
- Survey responses and feedback submissions
- Complaint records and their resolution outcomes
4 How We Collect Data
kopi77 collects Personal Data through the following channels and mechanisms:
- Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
- Automated technologies: Data collected automatically as you browse the Platform, including cookies, server logs, pixel tags, and session-replay tools. See Section 10 for full details on our cookie practices.
- Third-party KYC and payment providers: Identity and fraud-screening data returned by our contracted KYC verification partners and payment processors when you submit documents or initiate a transaction.
- Publicly available sources: In limited circumstances related to fraud prevention, we may cross-reference information against publicly available databases or sanctions screening lists.
- Referral programs: If you arrive at the Platform through a referral link, we may receive your referral identifier from the referring party. We do not receive your Personal Data from the referrer beyond the referral token itself.
5 How We Use Your Data
kopi77 processes your Personal Data only for defined, legitimate purposes. The table below sets out the primary purposes for which we use each category of data:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity Data, Contact Data |
| Identity verification (KYC) and age confirmation (21+) | Identity Data, Financial Data |
| Processing deposits and withdrawals via local Indonesian banks and e-wallets | Financial Data, Identity Data |
| Delivering gaming services and settling bets accurately | Gaming Activity Data, Technical Data |
| Fraud prevention, anti-money-laundering screening, and security monitoring | All categories as required |
| Responsible gaming monitoring and player-protection tool management | Gaming Activity Data, Contact Data |
| Customer support and complaint resolution | Communications Data, Identity Data |
| Sending transactional notifications (deposit confirmations, withdrawal alerts, security notices) | Contact Data, Financial Data |
| Marketing communications and personalized promotions (with consent) | Contact Data, Gaming Activity Data |
| Platform analytics and product improvement | Technical & Usage Data |
kopi77 does not use your Personal Data for any purpose incompatible with those listed above without first obtaining your explicit consent or where required by applicable law.
6 Legal Basis for Processing
kopi77 relies on the following legal bases when processing your Personal Data:
- Contractual necessity: Processing required to register your Account, verify your identity, process financial transactions, and deliver gaming services under the Terms & Conditions you have accepted.
- Legal obligation: Processing necessary to comply with applicable anti-money-laundering regulations, financial crime prevention obligations, and regulatory reporting requirements.
- Legitimate interests: Processing undertaken to detect and prevent fraud, secure the Platform against unauthorized access, conduct analytics to improve our services, and manage responsible gaming obligations — provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for direct marketing communications and non-essential cookies, where we have obtained your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
7 Data Sharing & Disclosure
kopi77 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the limited circumstances described below, and always under contractual data protection obligations:
7.1 Service Providers (Data Processors)
We engage trusted third-party service providers to assist with specific Platform functions, including:
- KYC and identity verification partners — to confirm document authenticity and check against sanctions lists
- Payment processors — to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, and supported e-wallets
- Game content studios — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session tokens to deliver game content; they do not receive your full Personal Data profile
- Cloud infrastructure and data hosting providers — who store Platform data in secure, access-controlled environments
- Fraud detection and cybersecurity vendors — who analyze behavioral signals to identify suspicious activity
All Data Processors are bound by written data processing agreements that restrict them to processing your data only as instructed by kopi77 and prohibit any secondary use.
7.2 Legal and Regulatory Disclosure
kopi77 may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory directive. We will, where legally permissible, notify you of such disclosure promptly after it occurs.
7.3 Business Transfers
In the event of a merger, acquisition, asset sale, or corporate restructuring involving kopi77, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will notify you prior to any such transfer taking effect and will ensure the receiving party maintains data protection standards at least equivalent to those in this Policy.
kopi77 has never sold, and will never sell, your Personal Data to advertising networks, data brokers, or other third parties for commercial profiling or targeting purposes. This commitment applies regardless of any future change in ownership or business model.
8 Data Retention
kopi77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account and identity records | Duration of active Account, plus 5 years from Account closure |
| KYC documents | 5 years from Account closure, or longer if required by AML regulations |
| Financial transaction records | 7 years from the date of each transaction |
| Gaming activity and bet history | 3 years from the date of each wager |
| Customer support communications | 3 years from the date of last interaction |
| Technical and usage logs | 13 months from collection date |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes Personal Data.
9 Security Measures
kopi77 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or destruction. Our security program includes, but is not limited to:
- 256-bit SSL/TLS encryption applied across all data transmissions between your browser and the Platform, including login, registration, deposit, and withdrawal flows
- Data encryption at rest for sensitive fields including KYC documents, bank account details, and password hashes
- Role-based access controls ensuring that internal staff can only access the minimum Personal Data required to perform their specific job function
- Two-factor authentication (2FA) available for all Player Accounts and mandatory for all kopi77 administrative access
- Continuous intrusion detection and monitoring across all production systems, with automated alerting for anomalous access patterns
- Regular penetration testing conducted by independent third-party security professionals on at least an annual basis
- Incident response procedures ensuring that any confirmed data breach is assessed within 72 hours and affected Players are notified without undue delay
While kopi77 applies rigorous server-side security measures, the security of your Account also depends on the strength and confidentiality of your login credentials. We strongly recommend using a unique, complex password for your kopi77 Account, enabling 2FA, and never sharing your login details with any third party. kopi77 will never ask for your password via email, live chat, or any other channel.
10 Cookies & Tracking Technologies
kopi77 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session state, analyze aggregate usage patterns, and (with your consent) deliver relevant promotional content. The categories of cookies we use are as follows:
10.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be switched off. They are set in response to actions you take, such as logging in, setting deposit limits, or filling in forms. Without these cookies, the services you have requested cannot be provided.
10.2 Performance & Analytics Cookies
These cookies collect anonymized information about how visitors use the Platform — which pages are visited most often, how long sessions last, and whether error messages are encountered. The data helps us continuously improve the Platform experience. We use these cookies only with your consent.
10.3 Functionality Cookies
These cookies allow the Platform to remember your preferences, such as your preferred language display, time-zone setting, and responsible gaming tool configuration, so you do not need to re-enter these settings on every visit.
10.4 Managing Your Cookie Preferences
Non-essential cookies are only placed after you have provided consent through the Platform's cookie preference center. You may withdraw or adjust your cookie consent at any time by accessing the cookie settings panel. Please note that disabling certain categories of cookies may affect the functionality of some Platform features.
11 Your Rights
As a data subject, you hold a number of rights over the Personal Data that kopi77 holds about you. kopi77 is committed to facilitating the exercise of these rights promptly and without undue bureaucracy. A summary of your rights is set out below:
To exercise any of the rights above, please contact us as described in Section 15. We will respond to all verified requests within 30 calendar days of receipt. We may need to verify your identity before fulfilling a request to protect against unauthorized access to another person's data. There is no charge for exercising your rights in the vast majority of cases.
12 Minors & Age Policy
The kopi77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process Personal Data from individuals below the age of 21. All new Accounts are subject to age verification checks during KYC, and additional automated screening is applied during the registration process.
If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered on our Platform, please contact us immediately at the email address provided in Section 15 so that we can investigate and act without delay.
13 Third-Party Services
The kopi77 Platform may reference or integrate with third-party services — such as game content delivery networks operated by our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment gateways supporting BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay. These third parties operate under their own privacy policies, which govern any data they independently collect during service delivery.
kopi77 is not responsible for the privacy practices or content of third-party platforms. Where third-party services are used, we contractually require those providers to maintain appropriate data protection standards consistent with our own. We recommend that you review the privacy policies of any third-party services you interact with independently of the kopi77 Platform.
14 Policy Amendments
kopi77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material — meaning they significantly affect how we use your Personal Data or the rights available to you — we will notify you by email to your registered address and/or via a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.
Minor or clarificatory amendments may take effect immediately upon publication. The "Last Updated" date displayed at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how kopi77 protects your information. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
15 Contact & Data Protection
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kopi77 handles your Personal Data, please reach out to our support and data protection team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 directly on the kopi77 Platform
- WhatsApp & Telegram: Contact details available on the Platform's support page
- Operating Hours: All day, every day (WIB timezone, UTC+7)
When submitting a data rights request, please include your full registered name, Account username, and a brief description of your request so that we can verify your identity and respond efficiently. We are committed to resolving all privacy-related inquiries with thoroughness and respect for your rights.
kopi77 commits to acknowledging all data rights requests within 5 business days of receipt and providing a full substantive response within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it before the initial 30-day deadline expires.