Privacy Policy

1. Introduction

satu77 ("we", "us", "our", or "the Company") operates the online sports-betting and casino gaming platform accessible at https://satu77.cam (the "Platform"). In delivering our Services to Users based primarily in Indonesia and internationally, we necessarily collect and process certain categories of personal data. This Privacy Policy sets out, in clear and transparent terms, how that data is handled throughout its lifecycle — from the moment it is collected to the point it is securely deleted or anonymised.

This policy applies to all individuals who visit, browse, register on, or otherwise interact with the Platform, regardless of the device or method used to access it. It covers data collected via the website, in-platform communications, customer support channels, and any other touchpoint through which satu77 and a User may exchange information.

This Privacy Policy should be read in conjunction with our Terms & Conditions , which govern the overall use of the Platform and are incorporated here by reference.

2. Definitions

The following terms are used throughout this Privacy Policy with the meanings assigned below:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, directly or in combination with other data. This includes names, email addresses, national identity numbers, financial account details, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, transfer, and deletion.
• "Data Controller" — satu77, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of and under the instruction of satu77.
• "User" — Any natural person who accesses, registers on, or uses the satu77 Platform.
• "KYC Data" — Identity verification documentation including government-issued identification, proof of address, and related materials submitted during the Know Your Customer process.
• "Cookies" — Small text files placed on a User's device by the Platform to store session information and usage preferences.

3. Data We Collect

satu77 collects only the data that is necessary for the purposes outlined in this policy. The categories of Personal Data we may collect include, but are not limited to, the following:

4. How We Collect Data

satu77 collects Personal Data through several distinct channels:

• Direct Submission: When you register an Account, complete the KYC process, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide data directly to us.
• Automated Collection: When you use the Platform, our servers automatically record Technical Data and Usage Data such as your IP address, browser type, pages visited, and session duration. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: When you transact via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or other supported payment channels, our payment processing partners share transaction confirmation data with us necessary for crediting or debiting your Account.
• Third-Party Verification Services: We may use third-party identity verification providers to cross-reference the KYC documents you submit. These services process your data strictly under our instruction and in accordance with confidentiality agreements.
• Game Providers: Licensed game studios integrated into our Platform (such as Pragmatic Play, Evolution Gaming, and Microgaming) may share session-level gameplay data with satu77 for the purposes of dispute resolution and account reconciliation.
• Fraud Prevention Partners: We may receive flagging signals from industry-standard fraud detection networks to protect the Platform and its Users from financial crime.

5. How We Use Your Data

satu77 processes Personal Data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process Personal Data are:

• Account Management: To create, maintain, and administer your satu77 Account, including processing deposits and withdrawals, managing bonus eligibility, and enforcing account limits.
• Identity Verification: To verify your identity and age (21+) in compliance with our KYC obligations, and to confirm that you meet the eligibility criteria set out in our Terms & Conditions.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported institutions) and to maintain an accurate record of all financial transactions on your Account.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) frameworks. This includes retaining records for the minimum periods required by law.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, collusion, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to enforce self-imposed limits and self-exclusion requests, and to deliver responsible gaming communications where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support services.
• Platform Improvement: To analyse usage patterns and technical performance data in order to enhance the functionality, speed, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus announcements, and relevant gaming news — but only where you have given your explicit consent, and always with a clear option to unsubscribe.

6. Legal Basis for Processing

satu77 processes Personal Data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between satu77 and the User — including Account registration, payment processing, and game delivery.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including AML/KYC obligations and record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of satu77's legitimate business interests, provided those interests are not overridden by your fundamental rights — for example, fraud detection, security monitoring, and platform analytics.
• Consent: Processing carried out with your explicit prior consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

satu77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where strictly necessary:

• Payment Service Providers: Banks and payment processors (including BCA, BRI, BNI, Mandiri, and other integrated financial institutions) receive the minimum financial data required to execute deposit and withdrawal transactions.
• Identity Verification Partners: Third-party KYC service providers process your identity documents under binding data processing agreements and are prohibited from using that data for any purpose beyond the verification task.
• Game Studio Providers: Licensed content providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session identifiers and wagering data necessary for game delivery and result verification.
• Fraud Prevention Services: Specialist third-party providers that assist satu77 in detecting and preventing fraudulent activity may receive Technical Data and behavioural signals for risk scoring purposes.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or governmental directive, satu77 may disclose Personal Data to competent authorities. We will inform affected Users of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations may access Personal Data to the extent necessary to provide their services to satu77.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving satu77, User data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Affected Users will be notified in advance of any such transfer.

8. Data Retention

satu77 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

9. Security Measures

satu77 applies a layered security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and satu77 servers is encrypted in transit using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• At-Rest Encryption: Sensitive Personal Data stored in satu77's databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is strictly limited to satu77 personnel who require it to perform their job functions. All staff members with data access are bound by confidentiality obligations and receive mandatory privacy training.
• Two-Factor Authentication (2FA): Internal systems holding Personal Data are protected by multi-factor authentication to prevent unauthorised staff access.
• Penetration Testing: satu77 conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities in our infrastructure.
• Incident Response Plan: In the event of a confirmed data breach affecting your Personal Data, satu77 will notify affected Users without undue delay and take immediate remediation steps.

10. Cookies & Tracking

satu77 uses cookies and similar tracking technologies to enhance the functionality of the Platform, maintain your session, and gather analytics data. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in as you navigate between pages and security cookies that help detect fraudulent activity. These cookies cannot be disabled.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the Platform — such as which pages are visited most often and how long sessions last. This data helps us improve the Platform experience.
• Functional Cookies: Remember your preferences, such as your last-used game category, display settings, and notification choices, to provide a more personalised experience.
• Marketing Cookies: Used only with your prior consent, these track your activity to help us deliver relevant promotional offers. You may opt out of marketing cookies at any time.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and place bets. Disabling non-essential cookies will not affect your core Account access.

11. Your Rights

As a User of satu77, you hold a set of rights in relation to your Personal Data. satu77 is committed to honouring these rights within the timeframes specified below. To exercise any of the following rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

12. Third-Party Services

The satu77 Platform integrates with a number of third-party services to deliver a complete gaming experience. These include game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment processors, and analytics tools. Each of these third parties operates under its own privacy policy and data practices.

satu77 is not responsible for the privacy practices of third-party providers. We perform due diligence on all third-party integrations and require partners to maintain a standard of data protection consistent with our own commitments. However, we encourage you to review the privacy policies of any third-party service you interact with directly.

The Platform does not contain links to external third-party websites. Any third-party functionality embedded within the Platform (such as live game streams) is subject to data sharing arrangements governed by binding data processing agreements between satu77 and the relevant provider.

13. Minors

The satu77 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 21. If we discover that a User is under the minimum age, their Account will be immediately suspended, any collected data will be deleted, and any associated funds may be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an Account on satu77, please contact us immediately at [email protected] so that we can take prompt corrective action.

14. Changes to This Policy

satu77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our business. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Post a prominent notice on the Platform's main page for a minimum of 7 days following the change.
• Where reasonably practicable, notify registered Users of significant changes via email to their registered address.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you should cease using the Platform and contact our support team to arrange Account closure and any applicable final withdrawal.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the satu77 Data Protection team using the details below. All contact information is provided as plain text for security reasons — please copy details manually as needed.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 via the in-platform chat widget
• Response Time: Data rights requests are acknowledged within 48 hours and fulfilled within 30 calendar days
• Support Hours: 24/7, with Indonesian-speaking agents available at all times (WIB, UTC+7)

For complaints that are not resolved to your satisfaction by our internal Data Protection team, you may escalate your concern to the relevant data protection supervisory authority in your jurisdiction.