77raja Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "77raja" / "we" / "us" / "our" — refers to the 77raja platform and its operating entity, accessible at https://77raja.asia.
• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or in combination with other data. This includes name, email address , date of birth, phone number, financial account details, IP address, device identifiers, and similar identifiers.
• "Member" / "you" / "your" — any individual who has registered an account on the 77raja platform or who accesses the platform as a visitor.
• "Account" — the personal membership account created by a Member upon successful registration, through which all gaming, betting, and financial activities are conducted.
• "Platform" — the 77raja website, mobile-optimised site, and any associated applications or services accessible at https://77raja.asia.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) — the identity and document verification process used to confirm a Member's identity, age, and payment ownership before withdrawals or as otherwise required.
• "Cookie" — a small text file placed on your device by the Platform for the purposes described in Section 10 of this Policy.

This Privacy Policy applies to all Personal Data collected by 77raja in connection with your use of the Platform, regardless of the device or method of access. It applies to all current and former Members, as well as to visitors who browse the Platform without registering an account.

77raja's primary player base consists of Indonesian players accessing the Platform from cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang. Where this Policy references local legal obligations, those references reflect applicable data-protection principles as understood in the international online-gaming context.

This Privacy Policy is incorporated by reference into the 77raja Terms & Conditions and should be read alongside them. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Policy.

This Policy does not apply to third-party websites, services, or platforms to which the 77raja Platform may link (see Section 14). We recommend reviewing the privacy policies of any third parties before interacting with their services.

77raja collects the following categories of Personal Data from Members and visitors:

77raja collects Personal Data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, respond to a survey, or otherwise interact with any feature of the Platform.
• Automatically — when you access the Platform, our servers, analytics tools, and cookie mechanisms automatically record Technical Data and Usage Data about your session. See Section 10 for full details on cookies and tracking technologies.
• From payment providers — when you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja, the payment provider may share transaction-reference data with us to confirm the transaction's status.
• From identity-verification services — we may use third-party KYC service providers who cross-reference the documents you supply against authoritative databases to confirm your identity and age.
• From fraud-prevention and anti-money-laundering (AML) services — we may receive risk signals or watchlist-match data from specialist third-party compliance services in connection with our legal obligations.

77raja processes your Personal Data for the following purposes:

• Account creation and management — to register your account, authenticate your 77raja Login sessions, and manage your account settings and preferences.
• Service delivery — to provide access to the full range of 77raja games and betting products, including the casino, live casino, sportsbook, slot gacor (high-RTP slot) games, and scratch cards.
• Financial transactions — to process deposits, withdrawals, and bonus payments accurately and in IDR currency, and to maintain complete transaction records.
• KYC and age verification — to confirm that every Member is a genuine individual who is at least 21 years of age, in compliance with our age-restriction policy and international gaming standards.
• Fraud prevention and security — to detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, collusion, and other prohibited activities on the Platform.
• Legal and regulatory compliance — to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data-protection obligations, and to respond to lawful requests from competent authorities.
• Customer support — to respond to your inquiries, resolve disputes, and deliver 24/7 Indonesian-speaking support via live chat and email.
• Responsible gaming — to administer deposit limits, session timers, cooling-off periods, and self-exclusion tools you have activated, and to monitor for indicators of problem gambling.
• Platform improvement — to analyse usage patterns and technical performance data to improve the Platform's features, design, stability, and overall Member experience.
• Marketing communications — to send you promotional offers, bonus notifications, and seasonal promotions (such as Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day specials) where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out at any time.

77raja relies on the following legal bases when processing your Personal Data:

• Contractual necessity — processing required to perform our contract with you as a Member (account creation, service delivery, financial transactions, customer support).
• Legal obligation — processing required to comply with applicable AML, CTF, KYC, and other regulatory requirements.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by your rights and freedoms.
• Consent — processing for direct marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

77raja does not sell, rent, or otherwise disclose your Personal Data to unaffiliated third parties for their own commercial purposes. We share Personal Data only in the following circumstances and only to the extent strictly necessary:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja receive transaction-reference data necessary to process your deposits and withdrawals. These parties process such data under their own privacy policies as independent data controllers.
• KYC and identity-verification providers — specialist third-party verification services receive the identity documents and personal details you submit during the KYC process, solely for the purpose of verifying your identity and age on behalf of 77raja.
• Game-studio technology providers — studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive the minimum technical data necessary (such as a pseudonymous session token) to deliver game content. They do not receive your full identity or financial data.
• Fraud prevention and AML compliance services — specialist third-party compliance providers may receive data necessary to screen transactions and accounts against watchlists and risk databases.
• IT infrastructure and cloud service providers — our hosting, database, and security infrastructure providers process data on our behalf under strict data-processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities — we may disclose Personal Data to law-enforcement agencies, regulatory bodies, or courts where required by a lawful order or where 77raja is otherwise legally obligated to do so. We will notify you of such disclosures to the extent permitted by law.
• Business transfers — in the event of a merger, acquisition, or sale of all or substantially all of 77raja's assets, Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

77raja's Platform serves players across Indonesia, and our infrastructure may be hosted in data centres located outside of Indonesia. When your Personal Data is transferred to, stored in, or processed in a jurisdiction outside Indonesia, 77raja ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that described in this Policy. Such safeguards may include:

• Standard contractual clauses (SCCs) incorporated into agreements with relevant third-party processors.
• Binding corporate rules where applicable to group entities.
• Transfers to recipients in jurisdictions that have been recognised as providing an adequate level of data protection.

By using the Platform and submitting your Personal Data, you acknowledge that your data may be transferred internationally as described in this section. If you have concerns about international data transfers, please contact us at [email protected].

77raja retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply as a general guide:

When Personal Data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be attributed to any individual.

77raja uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies — essential for the Platform to function. They enable core features such as session management, secure 77raja Login authentication, and shopping-cart equivalents (active game sessions). These cookies cannot be disabled without affecting Platform functionality.
• Performance / Analytics Cookies — collect anonymised data about how visitors use the Platform (pages visited, time on site, error logs). This data is used in aggregate to improve Platform performance and user experience.
• Functional Cookies — remember your preferences such as language settings, preferred payment method, and responsible gaming reminder frequency, to personalise your experience across sessions.
• Marketing / Targeting Cookies — used (with your consent) to deliver promotional content and bonus offers relevant to your activity on the Platform. We do not use third-party advertising networks to track you across external websites.

Most web browsers allow you to control cookie settings through the browser's preferences panel. Disabling strictly necessary cookies will affect your ability to use core Platform features, including the 77raja Login process. You may withdraw consent to non-essential cookies at any time by adjusting your browser settings or by contacting us at [email protected].

77raja applies a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption — all data transmitted between your device and the 77raja Platform is encrypted using bank-grade Transport Layer Security (TLS). This is the same standard used by Indonesia's leading financial institutions.
• Encrypted Data at Rest — sensitive data stored on our servers, including KYC documents and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls — access to Personal Data is restricted on a strict need-to-know basis. Staff members access only the data required for their specific role; access logs are maintained and reviewed regularly.
• Two-Factor Authentication (2FA) — all internal administrative systems require 2FA. Members are also strongly encouraged to enable 2FA on their own 77raja accounts.
• 24/7 Security Monitoring — our infrastructure is monitored continuously for anomalous activity, intrusion attempts, and data breaches. Automated alerts trigger immediate investigation by the security team.
• Penetration Testing — 77raja commissions regular independent security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff Training — all staff who handle Personal Data receive data-protection and security awareness training as part of their onboarding and on an ongoing basis.

Subject to applicable law and certain exceptions, you have the following rights with respect to your Personal Data held by 77raja:

• Right of Access — you may request a copy of the Personal Data 77raja holds about you, along with information about how it is processed.
• Right to Rectification — you may request correction of any Personal Data that is inaccurate or incomplete. You may update many of your details directly through your account settings; for changes to identity or financial data, contact our support team.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding retention obligations (see Section 9), particularly with respect to AML and KYC records.
• Right to Restrict Processing — you may request that 77raja limit its processing of your Personal Data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object — you may object to processing based on our legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making — where 77raja makes decisions about you through solely automated means that produce significant legal or similar effects, you have the right to request human review and to contest the decision.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, subject to identity verification and any applicable exemptions. There is no fee for exercising your rights, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The 77raja Platform is strictly for adults aged 21 years and older. We do not knowingly collect, process, or store Personal Data belonging to individuals under the age of 21. All registration applications are subject to age-verification checks, and any account found to belong to a person under 21 will be immediately suspended and all associated data reviewed in accordance with our legal obligations.

If you are a parent or guardian and you believe that a minor under your care has registered an account or provided Personal Data to 77raja, please contact us immediately at [email protected]. We will take prompt action to investigate, suspend the account, and delete or anonymise any Personal Data that belongs to the minor, to the extent permitted by our legal retention obligations.

The 77raja Platform may from time to time contain references to third-party services, payment providers, or game studios. Where the Platform links to an external site or service, that site or service operates under its own privacy policy, for which 77raja bears no responsibility. 77raja is not responsible for the privacy practices or content of any third-party site.

We recommend that you review the privacy policies of any third-party services you use in connection with your 77raja account — in particular the payment providers you use to deposit and withdraw funds (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) — before sharing Personal Data with those parties.

77raja reserves the right to update or modify this Privacy Policy at any time. The version currently published at https://77raja.asia/privacy-policy is the version in force. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Where a change is material — for example, a change to the categories of data collected, a new sharing arrangement with a third party, or a change to your rights — 77raja will notify Members by posting a notice on the Platform and/or by sending an email to your registered address at least 7 days before the change takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to a revised Policy, you must cease using the Platform and may request closure of your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or 77raja's handling of your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link). Use subject line "Privacy Inquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week, via the support widget on the 77raja Platform. Our team includes native Indonesian-speaking agents on all shifts.
• Response Time: Privacy inquiries are acknowledged within 24 hours and substantively addressed within 5 business days. Data-rights requests are fulfilled within 30 calendar days.