Privacy Policy

1. Introduction

bp0777 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information about you when you use our website, mobile applications, and related services (collectively, the "Platform"). This policy applies to all users of bp0777 services, including visitors who do not create accounts, registered players, and former customers.

By accessing or using bp0777 services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any provision of this policy, you must immediately discontinue use of the Platform and refrain from creating an account. Your continued use of bp0777 services following any modifications to this Privacy Policy constitutes acceptance of such changes.

This Privacy Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and Cookie Policy. In the event of any conflict between this Privacy Policy and other policies, this Privacy Policy shall prevail with respect to data protection and privacy matters.

We take our privacy obligations seriously and have implemented comprehensive technical and organizational measures to ensure that your personal information is processed securely and in compliance with applicable data protection laws and regulations, including Indonesian privacy regulations and international standards where applicable.

2. Data Controller Information

bp0777 acts as the data controller for the personal information processed through our Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable privacy laws.

For questions, concerns, or requests related to this Privacy Policy or the processing of your personal information, please contact our Data Protection Officer at [email protected] or through our general customer support channels at [email protected]. We will respond to all privacy-related inquiries within 30 days of receipt.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, use our services, or communicate with us, we collect information that you provide directly, including:

• Account Registration Information: Full legal name, date of birth, gender, email address, phone number, residential address, and chosen username and password.
• Identity Verification (KYC) Documents: Government-issued photo identification (Indonesian KTP or passport), proof of address (utility bills, bank statements), and proof of payment method ownership (bank account statements, e-wallet screenshots). These documents are required to verify your identity, age (minimum 21 years), and residency in Indonesia.
• Financial Information: Bank account numbers, e-wallet account details, transaction history, deposit and withdrawal records, payment method preferences, and betting activity including stake amounts, odds, selections, and outcomes.
• Communications: Messages you send through live chat, email correspondence with customer support, feedback forms, survey responses, and promotional preference settings.
• Self-Limitation Settings: Deposit limits, loss limits, session time limits, reality check preferences, and self-exclusion requests you configure as part of our responsible gaming tools.

3.2 Information Collected Automatically

When you access the bp0777 Platform, we automatically collect certain information about your device and usage patterns, including:

• Device Information: IP address, device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifier (advertising ID, IMEI), and device fingerprinting data used for security and fraud prevention.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, game activity (games played, session duration, bet patterns), referral sources (how you arrived at our site), and timestamps of all activities.
• Location Data: Approximate geographic location based on IP address (city/region level, not precise GPS coordinates). We use this to verify that you are accessing our services from within Indonesia and to detect suspicious access patterns.
• Cookies and Similar Technologies: Small text files and tracking pixels that recognize your device across sessions, remember your preferences, authenticate your login status, and analyze Platform usage patterns. See Section 10 for detailed information on our cookie practices.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data, payment method validation, and fraud risk scores from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Age verification results, identity document authenticity checks, and watchlist screening data from KYC service providers we engage to verify player eligibility.
• Fraud Prevention Networks: Information about suspicious activity patterns, known fraudulent accounts, and risk assessments shared through industry fraud prevention consortiums to protect against criminal activity.
• Affiliate Partners: Referral source information and marketing campaign identifiers if you access bp0777 through a third-party affiliate link or advertisement.

4. How We Use Your Information

We process your personal information for the following purposes:

• Account Management: Creating and maintaining your account, authenticating your identity during login, processing profile updates, and enabling access to Platform features.
• Service Delivery: Processing deposits and withdrawals, settling bets, crediting winnings, managing bonus balances, and facilitating gameplay across sports betting, casino, and other gaming products.
• Regulatory Compliance: Verifying your age (21+ requirement), confirming Indonesian residency, conducting KYC due diligence, monitoring for money laundering or terrorist financing indicators, reporting to regulatory authorities as required by law, and maintaining records for audit purposes.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorized access, multi-accounting, collusion, bonus abuse, payment fraud, and other violations of our Terms and Conditions. This includes analyzing betting patterns, device fingerprints, and IP addresses to identify suspicious behavior.
• Customer Support: Responding to inquiries via live chat and email, troubleshooting technical issues, resolving disputes, investigating complaints, and providing assistance with account and payment matters.
• Responsible Gaming: Implementing self-limitation tools you configure (deposit limits, loss limits, time limits), processing self-exclusion requests, monitoring for problem gambling indicators, and providing information about responsible gaming resources.
• Marketing and Promotions: Sending promotional offers, bonus notifications, and personalized recommendations based on your gaming preferences (only if you have opted in to marketing communications). You may opt out at any time through your account settings or by clicking unsubscribe links in emails.
• Platform Improvement: Analyzing usage patterns, conducting A/B testing, gathering feedback, identifying technical bugs, optimizing user experience, developing new features, and enhancing game selection based on player preferences.
• Legal Obligations: Complying with court orders, subpoenas, law enforcement requests, tax reporting requirements, and other legal obligations applicable to our business operations.

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions) and to provide the services you have requested, including account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with legal obligations we are subject to, including age verification requirements, anti-money laundering regulations, tax reporting obligations, regulatory licensing conditions, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests or those of third parties, provided such interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, security measures, network and information security, business analytics, product improvement, and direct marketing to existing customers (with opt-out capability).
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal information, such as marketing communications beyond existing customer relationships or certain cookie tracking activities. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

• Payment Processors: We share necessary payment information (account details, transaction amounts, identification data) with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These processors are contractually obligated to use your information only for payment processing purposes and to maintain appropriate security measures.
• Game Providers: We share limited information (user ID, bet data, session information) with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, and Spribe to enable gameplay, settle bets, and investigate disputes. Game providers are bound by strict confidentiality obligations.
• Identity Verification Services: We share identity documents and personal information with KYC service providers to verify your age, identity, and address. These providers act as data processors under our instruction and are prohibited from using your information for their own purposes.
• Fraud Prevention Networks: We participate in industry fraud prevention consortiums and may share information about fraudulent activity, suspicious patterns, and high-risk accounts to protect the gaming ecosystem. Shared information is limited to that necessary for fraud prevention purposes.
• Professional Advisors: We may share information with lawyers, accountants, auditors, and other professional advisors as necessary to obtain advice and ensure proper business operations.
• Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of all or part of bp0777's assets, your personal information may be transferred to the acquiring entity, which will be bound by this Privacy Policy or will provide notice before implementing any material changes.
• Legal Requirements: We disclose information when required by law, including in response to court orders, subpoenas, search warrants, regulatory investigations, law enforcement requests, or to comply with reporting obligations. We may also disclose information to protect our legal rights, enforce our Terms and Conditions, investigate fraud, or protect the safety and security of our users.

All third parties with whom we share information are required to maintain appropriate security measures and use your information only for the specific purposes for which it was disclosed. We conduct due diligence on third-party service providers to ensure they meet our data protection standards.

7. Data Security Measures

bp0777 employs industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same encryption standard used by banks and financial institutions. Sensitive personal information (passwords, payment details, identification documents) is also encrypted at rest in our databases.
• Access Controls: Personal information is accessible only to authorized bp0777 personnel who require access to perform their job functions. Access is granted on a need-to-know basis and is protected by multi-factor authentication, strong password policies, and regular access reviews.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, DDoS protection, regular security patching, and vulnerability scanning. We employ both perimeter and internal security measures to protect against external attacks and insider threats.
• Data Segregation: Personal information is logically segregated from other data, with separate databases and access controls for sensitive information categories (financial data, KYC documents, gaming activity).
• Security Monitoring: We maintain 24/7 security monitoring to detect and respond to suspicious activity, unauthorized access attempts, data breach indicators, and other security incidents. Automated alerting systems notify our security team of potential threats in real time.
• Employee Training: All bp0777 employees receive regular training on data protection principles, security best practices, phishing awareness, and incident response procedures. Employees sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Third-Party Audits: Our security practices and infrastructure are regularly audited by independent third-party security firms to identify vulnerabilities and ensure ongoing compliance with industry standards including PCI DSS (Payment Card Industry Data Security Standard).

While we implement robust security measures, no system is completely immune to security breaches. In the unlikely event of a data breach that compromises your personal information, we will notify you and applicable regulatory authorities as required by law, and will take immediate steps to contain the breach, mitigate harm, and prevent recurrence.

8. Data Retention and Storage

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status plus any period required to fulfill ongoing obligations (processing withdrawals, resolving disputes, complying with regulatory requirements).
• Closed Accounts: After voluntary account closure, we retain personal information for a minimum of 5 years to comply with anti-money laundering regulations, tax reporting requirements, and to respond to potential legal claims. After this period, information is securely deleted unless longer retention is required by law.
• Financial Records: Transaction records, deposit and withdrawal history, and payment information are retained for 7 years after the last transaction to comply with financial record-keeping obligations and to support potential audits or investigations.
• KYC Documents: Identity verification documents are retained for 5 years after account closure or the last verification event, as required by regulatory frameworks governing customer due diligence.
• Marketing Communications: If you have opted in to marketing, your contact preferences and communication history are retained until you opt out or close your account, after which marketing data is promptly deleted (except where retention is required for legal defense purposes).
• Security and Fraud Data: Information related to fraud investigations, security incidents, or Terms violations may be retained indefinitely to protect against future fraud, defend legal claims, and share with industry fraud prevention networks.

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized such that you can no longer be identified from it. Deletion is performed using industry-standard data sanitization methods that render data unrecoverable.

9. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right of Access: You may request confirmation of whether we process your personal information and obtain a copy of such information, along with details about how it is used, stored, and shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal information in certain circumstances, including when it is no longer necessary for the purposes for which it was collected, when you withdraw consent (where processing is based on consent), or when you object to processing and there are no overriding legitimate grounds. Note that we may be required to retain certain information to comply with legal obligations even after a deletion request.
• Right to Restriction: You may request that we restrict processing of your personal information in certain situations, such as when you contest the accuracy of the information or object to processing, pending verification of your claims.
• Right to Data Portability: You may request that we provide your personal information in a structured, commonly used, machine-readable format, and may request direct transmission to another controller where technically feasible.
• Right to Object: You may object to processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately. For other objections, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us at [email protected] or through our customer support channels. We will respond to your request within 30 days and may request additional information to verify your identity before fulfilling the request. There is no fee for exercising these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse to act on the request.

If you believe we have processed your personal information in violation of applicable privacy laws, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

10. Cookies and Tracking Technologies

bp0777 uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze Platform usage, authenticate logins, and deliver personalized content. A cookie is a small text file stored on your device that contains information about your visit and preferences.

10.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality, including authentication, session management, security features, and fraud prevention. These cookies cannot be disabled as they are necessary for the Platform to operate.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, including pages visited, time spent, error messages encountered, and navigation paths. This helps us optimize user experience and identify technical issues.
• Functional Cookies: Remember your preferences (language, display settings, recently played games) to provide a more personalized experience across sessions.
• Advertising Cookies: Track your browsing activity to deliver relevant promotional offers and measure advertising campaign effectiveness. These cookies may be set by third-party advertising partners and are subject to your consent preferences.

10.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are being set. However, disabling essential cookies may impair Platform functionality and prevent you from using certain features. Disabling performance or functional cookies may result in a less personalized experience but will not prevent basic Platform usage.

For detailed information about specific cookies used on the bp0777 Platform, including cookie names, purposes, durations, and third-party providers, please refer to our Cookie Policy accessible through your account settings.

11. International Data Transfers

While bp0777 primarily serves the Indonesian market, your personal information may be transferred to, stored in, and processed in jurisdictions outside Indonesia where our servers, service providers, or business partners are located. These jurisdictions may have data protection laws that differ from Indonesian law.

When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your information and comply with applicable data protection requirements. These safeguards may include standard contractual clauses approved by relevant regulatory authorities, adequacy decisions recognizing equivalent data protection standards in the destination country, or certification under recognized privacy frameworks.

By using bp0777 services, you acknowledge and consent to the transfer of your personal information to international destinations as necessary to provide our services, subject to the protections outlined in this Privacy Policy.

12. Protection of Minors

bp0777 services are strictly intended for individuals aged 21 years or older in compliance with Indonesian age-of-majority laws applicable to gambling activities. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age.

Our registration process requires date of birth disclosure and age verification through government-issued identification during the KYC process. If we become aware that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete such information, close the associated account, refund any deposits, and forfeit any winnings in accordance with our Terms and Conditions.

Parents and legal guardians are encouraged to monitor their children's internet usage and to use parental control software to restrict access to gambling websites. If you believe a minor has accessed bp0777 services or provided personal information to us, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, technological developments, or business operations. When we make material changes to this policy, we will notify you by posting a prominent notice on the Platform, sending an email to your registered email address, or displaying a notification upon login.

The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of bp0777 services following the posting of changes constitutes your acceptance of such changes.

If you do not agree with any modifications to this Privacy Policy, you must discontinue use of the Platform and may request account closure and data deletion in accordance with Section 9 (Your Privacy Rights). Material changes that affect previously collected information will be applied prospectively only unless you provide explicit consent to retroactive application.

14. Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data processing practices, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the Platform (request to speak with a privacy specialist for data protection matters)
• Response Time: Privacy inquiries will receive an initial response within 72 hours and will be fully resolved within 30 days

When contacting us regarding privacy matters, please include "Privacy Request" in your subject line and provide sufficient detail about your inquiry or request to enable us to respond effectively. For identity verification purposes, we may request additional information before fulfilling data subject requests to ensure we disclose personal information only to the individual to whom it pertains.