Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

dot777 collects only the Personal Data that is necessary for the lawful operation of the Platform and the delivery of services to Members. The categories of data we collect are set out in the table below:

dot777 does not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification.

dot777 collects Personal Data through the following mechanisms:

• Direct collection: Information you provide voluntarily when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser fingerprinting, and session cookies.
• Third-party verification services: Identity and age verification data received from certified KYC and document authentication partners engaged by dot777.
• Payment processor data: Transaction confirmation and payment status information received from banking and e-wallet partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or request a withdrawal.
• Analytics and tracking tools: Aggregated usage data collected via first-party analytics systems embedded in the Platform to measure performance and user behavior.

dot777 processes Personal Data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: Processing required to perform our contractual obligations to you as a Member — including Account registration, processing wagers, and handling deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable legal, regulatory, or anti-money-laundering obligations, including KYC identity verification and transaction monitoring.
• Legitimate interests: Processing conducted for dot777's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, and product analytics.
• Consent: Marketing communications sent to you based on your opt-in consent at registration or via Account settings. You may withdraw this consent at any time.

dot777 uses the Personal Data we collect for the following specific purposes:

• Account management: Creating, maintaining, and administering your dot777 Account, including processing login sessions, password resets, and Account settings changes.
• Age and identity verification: Confirming that every Member meets the minimum age requirement of 21 years and is the genuine owner of the payment methods linked to their Account.
• Payment processing: Facilitating deposits in Indonesian Rupiah (IDR) via local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to the same registered payment methods.
• Fraud prevention and security: Detecting, investigating, and preventing unauthorized access, multi-accounting, bonus abuse, money laundering, and other fraudulent or prohibited activity on the Platform.
• Customer support: Responding to queries, resolving disputes, processing complaints, and improving the quality of our support interactions.
• Responsible gaming monitoring: Identifying behavioral patterns that may indicate problem gambling, applying self-exclusion measures when requested, enforcing deposit limits and session time controls, and reaching out proactively where a Member's activity raises welfare concerns.
• Regulatory compliance: Fulfilling our anti-money-laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations, including transaction monitoring and suspicious activity reporting where required.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve the functionality, performance, and user experience of the Platform.
• Marketing communications (consent-based only): Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive marketing communications. This may include seasonal promotions tied to Indonesian cultural events such as Ramadhan, Idul Fitri, and Indonesian Independence Day (17 August).
• Legal and compliance purposes: Establishing, exercising, or defending legal claims; complying with court orders, regulatory directions, or law enforcement requests.

dot777 will not use your Personal Data for any purpose that is incompatible with those described above without first obtaining your explicit consent or unless required by law.

6.1 General Principle. dot777 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only where strictly necessary and only with the categories of recipients described below.

6.2 Third-Party Service Providers. We engage trusted third-party vendors to assist with the delivery of our services. These providers are contractually bound to process your data only on our instructions, only for the specific purpose for which they were engaged, and to maintain appropriate security standards. Categories of engaged providers include:

• Payment gateway and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — for processing financial transactions;
• KYC and identity verification providers: Certified third-party verification platforms used to authenticate government-issued Indonesian identity documents (KTP, passport, SIM);
• Game content providers: Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — who may receive session identifiers to deliver game content;
• Infrastructure and cloud providers: Hosting, data storage, and content delivery network providers who store Platform data in secure, encrypted environments;
• Analytics providers: First-party analytics systems used to measure Platform performance and user engagement on an aggregated, pseudonymized basis.

6.3 Legal Disclosure. dot777 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory directive. In such cases, dot777 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected Member of the disclosure.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of dot777's business assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. Members will be notified via their registered email address prior to any such transfer taking effect, and the receiving entity will be required to honor the terms of this Privacy Policy.

7.1 Retention Period. dot777 retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

7.2 Deletion and Anonymization. Upon expiry of the applicable retention period, Personal Data is either securely deleted from our systems or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.

7.3 Inactive Accounts. Where a Member's Account has been inactive for a continuous period of twelve (12) months and the Member has not responded to dot777's outreach communications, the Account may be closed and Personal Data archived in accordance with the retention schedule above.

dot777 implements a comprehensive, layered security framework to protect Member Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Encryption: All data transmitted between your browser or device and the dot777 Platform is encrypted using 256-bit TLS (Transport Layer Security). Our SSL certificate status is displayed in your browser's address bar.
• At-Rest Encryption: Sensitive Personal Data — including KYC documents, bank account details, and identity records — is encrypted at rest in our database systems using AES-256 encryption.
• Access Controls: Access to Member Personal Data is restricted on a strict need-to-know basis. Only authorized dot777 personnel with a legitimate operational requirement may access identifiable Member data, and all such access is logged and audited.
• Firewall and Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and block unauthorized access attempts.
• Two-Factor Authentication (2FA): dot777 supports and encourages Members to enable 2FA on their Accounts as an additional layer of protection against unauthorized login.
• Penetration Testing: The Platform undergoes regular third-party security penetration testing and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Data Breach Response: dot777 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected Members without undue delay and take all necessary steps to contain and remediate the incident.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the dot777 Platform. They allow the Platform to remember your preferences, maintain your login session, and collect analytical data about how you interact with the site.

9.2 Types of Cookies We Use. dot777 uses the following categories of cookies:

9.3 Managing Cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the dot777 Platform and may prevent you from logging in or accessing core features. dot777 does not use third-party advertising cookies or cross-site tracking technologies for retargeting purposes.

As a Member of dot777, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

• Right of Access: You have the right to request a copy of the Personal Data dot777 holds about you, along with information about how it is processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update basic contact information directly through your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that dot777 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to our overriding legal obligations — for example, we are required to retain KYC and financial transaction records for a minimum of five years under applicable AML regulations, and such data cannot be erased on request during that mandatory retention period.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on our legitimate interests at any time. You also have an absolute right to object to your Personal Data being used for direct marketing purposes, which we will honor immediately upon receipt of your objection.
• Rights Related to Automated Decision-Making: dot777 may use automated systems to flag suspicious account activity or to apply responsible gaming interventions. You have the right to request human review of any automated decision that has a significant effect on you.

11.1 Age Requirement. The dot777 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Registration by minors is prohibited under our Terms & Conditions.

11.2 Detection and Removal. Where dot777 becomes aware — through KYC verification, age screening, or any other means — that a Member is under 21 years of age, we will immediately suspend the Account, cease all data processing beyond what is required to close the Account, and delete the minor's Personal Data from our active systems within thirty (30) days, subject to any mandatory retention obligations.

11.3 Parental Guidance. Parents and guardians are strongly encouraged to use parental control software and to monitor the devices accessible to minors in their household to prevent underage access to gambling platforms. dot777 is not liable for unauthorized access by minors that results from a failure to secure household devices or login credentials.

12.1 Game Providers. Games on the dot777 Platform are delivered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers operate under their own privacy frameworks in addition to the contractual data-processing obligations imposed by dot777. Game session data (including session duration and wager amounts) may be shared with the relevant provider to deliver and record the game outcome.

12.2 Payment Partners. When you make a deposit or withdrawal, your transaction is processed by the relevant bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers' own privacy policies govern the handling of your financial data within their systems. dot777 does not store your full bank account credentials — only the account name, account number, and bank code necessary to route your transaction.

12.3 No Responsibility for External Sites. The dot777 Platform does not contain links to external third-party websites. Should you independently navigate to any external website, dot777 accepts no responsibility for the privacy practices or data security of those external sites.

13.1 Right to Update. dot777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent update is displayed at the top of this page and in the Table of Contents sidebar.

13.2 Notification of Material Changes. Where any amendment materially affects your rights or the way in which we process your Personal Data, dot777 will notify registered Members via their registered email address at least seven (7) days before the revised policy takes effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

13.3 Governing Version. The English-language version of this Privacy Policy published at dot777.cam/privacy-policy is the governing, authoritative version. Any translation provided for reader convenience is non-binding, and the English version shall prevail in the event of any discrepancy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the dot777 Data Protection team through the following channel:

For matters relating to responsible gaming, self-exclusion, or problem gambling support, please visit our dedicated Responsible Gaming page, where immediate self-help tools are available at no cost to all registered Members.