Privacy Policy — bali77

1 Definitions

The following terms, when used in this Privacy Policy, carry the meanings defined below:

• "bali77" / "Platform" / "We" / "Us" / "Our" — the online gaming platform operated at https://bali77.cam and its affiliated operating entities.
• "Player" / "You" / "Your" / "Data Subject" — any individual who registers, accesses, or uses the bali77 platform, or whose personal data is processed by bali77.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, date of birth, national ID number, email address, phone number, IP address, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, bali77.
• "Data Processor" — a third party that processes Personal Data on behalf of bali77 under a data-processing agreement (e.g., payment gateways, fraud detection providers).
• "Cookies" — small text files placed on a Player's device by the Platform to store session preferences, analytics data, and security tokens.
• "KYC" (Know Your Customer) — the identity and age verification process bali77 uses to confirm Player eligibility and comply with anti-money-laundering obligations.

2 Data Controller

bali77, operating through https://bali77.cam, is the Data Controller responsible for the personal data of its Players. All data collected through the Platform is processed under the authority and oversight of bali77's data governance framework.

bali77 has appointed a dedicated Data Protection contact point for all privacy-related enquiries, data subject access requests, and complaints. Contact details are set out in Section 15 of this Policy.

3 Data We Collect

bali77 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name (as shown on government-issued ID)
• Date of birth and age verification documents
• Gender (optional, where provided voluntarily)
• Nationality and country of residence
• Government-issued ID number (KTP, Passport, or SIM)
• Scanned or photographed copies of identity documents submitted during KYC

3.2 Contact & Communication Data

• Email address
• Mobile phone number (including WhatsApp number where provided)
• Preferred language for customer service interactions
• Records of all communications with bali77 support, including live chat transcripts, email exchanges, and support ticket histories

3.3 Financial & Payment Data

• Bank account numbers, account holder names, and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction records, including amounts in IDR (Rp), timestamps, and payment method used
• Chargeback and refund history where applicable

3.4 Technical & Device Data

• IP address and geolocation data derived from IP
• Device type, operating system, and browser version
• Mobile device identifiers (IMEI, device ID) where applicable
• Session duration, login timestamps, and access logs
• Cookie identifiers and similar tracking technologies

3.5 Gaming Activity Data

• Wager history, game selections, bet am ounts, and outcomes across all game types (sports betting, live casino, togel (Indonesia's traditional numbers lottery), slots, and sabung ayam (traditional cockfighting) livestream events)
• Bonus claims, wagering requirement progress, and promotional participation records
• Self-exclusion requests, deposit limit settings, and responsible gaming tool usage
• VIP tier status and loyalty point balances

3.6 Voluntarily Provided Data

• Any additional information you choose to provide when contacting support or completing optional profile fields
• Feedback, survey responses, or testimonials submitted voluntarily

4 How We Collect Data

bali77 collects personal data through the following channels:

• Direct provision: Data you provide when registering an Account, completing KYC verification, submitting deposit or withdrawal requests, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, and session logs captured by our servers and analytics systems.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.
• Third-party sources: Identity verification data returned by our KYC partners; fraud-signal data from fraud prevention providers; payment confirmation data from banking partners and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); and publicly available information used for enhanced due-diligence purposes.

5 Purpose & Legal Basis for Processing

bali77 processes your personal data only where a lawful basis exists. The table below summarises the primary purposes of processing and the corresponding legal basis for each:

6 Data Sharing

bali77 does not sell, rent, or trade your personal data to any third party for marketing purposes. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Service Providers & Data Processors

We engage carefully selected third-party service providers who process data on our behalf under binding data-processing agreements, including:

• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• KYC & identity verification providers: Third-party services used to validate government-issued ID documents and perform age verification checks.
• Fraud detection & security providers: Specialists who analyse transaction patterns and device signals to detect and prevent fraud, bonus abuse, and money laundering.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session identifiers to facilitate game delivery; these studios do not receive your personally identifiable information.
• Analytics providers: Platform performance and user experience analytics services operating under strict data minimisation obligations.
• Customer support platforms: Software providers supporting our live chat and ticketing infrastructure, bound by confidentiality agreements.

6.2 Legal & Regulatory Disclosure

bali77 may disclose personal data to competent authorities, regulators, courts, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction, or where bali77 reasonably believes disclosure is necessary to prevent fraud, protect the safety of any person, or enforce its legal rights.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bali77's business assets, personal data held by bali77 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via email or a prominent notice on the Platform prior to the transfer taking effect, and the acquiring entity will be bound by terms at least as protective as this Policy.

7 Cookies & Tracking Technologies

The bali77 platform uses cookies and similar tracking technologies to deliver a secure, personalised, and high-performance gaming experience. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.

7.1 Types of Cookies Used

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of certain Platform features, including staying logged in between sessions. Strictly necessary cookies cannot be disabled without significantly impairing Platform security and usability.

8 Data Retention

bali77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. Our general retention schedule is as follows:

• Active Account data: Retained for the full duration of your Account's active status plus a minimum of 5 years following Account closure, to comply with anti-money-laundering and financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of last transaction or Account closure, whichever is later.
• Transaction records: Retained for a minimum of 7 years to satisfy financial audit and regulatory reporting obligations.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the content relates to an ongoing dispute or legal claim.
• Marketing consent records: Retained for the duration of your marketing subscription plus 2 years following withdrawal of consent, as evidence of the lawful basis for any communications sent.
• Technical logs (IP address, device data): Retained for up to 12 months for security and fraud analysis purposes, then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

9 Data Security

bali77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the bali77 Platform.
• Encryption at rest for all stored personal data and financial records using AES-256 encryption.
• Access controls: Strict role-based access controls ensuring that only authorised personnel with a demonstrated business need can access personal data.
• Two-factor authentication (2FA) available for all Player Accounts and enforced for all internal staff accounts.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Incident response procedures: A formal data breach response plan, including a commitment to notify affected Players without undue delay if a breach is likely to result in a high risk to their rights and freedoms.

10 Your Rights

As a Data Subject, you hold the following rights with respect to your personal data processed by bali77. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request — [Your Account Username]". bali77 will respond within 30 calendar days of receiving a valid, verifiable request.

11 Children & Minors

The bali77 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step during Account registration and at the point of any withdrawal request.

If bali77 becomes aware that personal data has been collected from a person under 21 — whether through a failure of our verification systems or through deliberate misrepresentation — we will immediately suspend the Account, delete all associated personal data to the extent permitted by law, void any transactions made, and report the matter to relevant authorities where legally required.

Parents and guardians who believe their child may have accessed the Platform are encouraged to contact us immediately at [email protected]. We will investigate and act without delay.

12 International Data Transfers

bali77 operates as an internationally licensed platform. As a result, your personal data may be transferred to, stored in, or processed in countries outside Indonesia. These countries may not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, bali77 implements appropriate safeguards to ensure that your personal data receives a level of protection consistent with the standards described in this Policy. These safeguards include contractual clauses with all Data Processors operating outside Indonesia, requiring them to process data in accordance with internationally recognised data protection principles.

By using the bali77 platform and agreeing to this Privacy Policy, you acknowledge and consent to such international transfers, subject to the safeguards described above.

13 Third-Party Links

The bali77 platform may, on occasion, reference or display content from third-party game studios or data providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft). These third-party services operate under their own privacy policies, over which bali77 has no control.

bali77 accepts no responsibility for the privacy practices of any third-party service provider, and we encourage you to review the privacy policies of any third-party platform or service you interact with in connection with your use of bali77. Our Privacy Policy applies solely to the bali77 platform at https://bali77.cam.

14 Policy Changes

bali77 reserves the right to update or modify this Privacy Policy at any time. Material changes — meaning changes that significantly affect the way your personal data is collected, used, or shared — will be communicated to registered Players via email notification to the address on file, or by a prominent notice displayed upon login to the Platform, no fewer than 14 calendar days before the revised Policy takes effect.

Non-material changes (such as corrections of typographical errors or minor clarifications that do not affect the substance of our data practices) may be made without prior notice, though the "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with a revised Policy, you must discontinue use of the Platform and request Account closure in accordance with our Terms & Conditions.

15 Contact & Data Protection

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding bali77's handling of your personal data, please use the contact details below. Our data protection contact and customer support team are available around the clock, including during Indonesian public holidays such as Idul Fitri, Ramadhan, and Nyepi.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Subject Request — [Your Account Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Account Username]"
• Response Commitment: Acknowledgement within 24 hours; substantive response within 30 calendar days
• Operating Hours: 24/7, 365 days per year (WIB, UTC+7)