Privacy Policy

1. Information Controller

viv77, operating at the domain viv77.cam, acts as the data controller responsible for the collection, processing, and protection of your personal information. As the data controller, we determine the purposes and means of processing your personal data and are committed to ensuring that all data processing activities comply with international data protection standards and best practices. For any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our Data Protection Officer through the contact channels provided at the end of this document.

2. Types of Information We Collect

2.1 Personal Identification Information

When you register an account with viv77, we collect personal identification information necessary to verify your identity, ensure legal compliance, prevent fraud, and provide our services. This information includes:

• Full legal name as it appears on your Indonesian KTP (Kartu Tanda Penduduk) national identification card
• Date of birth to verify that you meet the minimum age requirement of 21 years
• Current residential address including street, city, province, and postal code
• Email address for account communications and verification purposes
• Mobile phone number for account security, two-factor authentication, and customer support communications
• Government-issued identification documents (KTP) including photograph and ID number for KYC verification
• Selfie photographs for facial recognition and identity verification purposes

2.2 Financial and Transaction Information

To process deposits, withdrawals, and gaming transactions, we collect and maintain records of your financial activities on the viv77 platform:

• Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), account number, and account holder name
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions
• Payment card information (last four digits, expiration date, card type) for Visa and Mastercard transactions—note that full card numbers are processed by our certified PCI-DSS compliant payment processors and are never stored on viv77 servers
• Transaction history including deposit amounts, withdrawal requests, timestamps, transaction status, and payment method used
• Currency preference and transaction currency (Indonesian Rupiah / IDR / Rp)

2.3 Gaming and Account Activity Data

We collect comprehensive information about your gaming activities and interactions with our platform to improve user experience, detect fraud, resolve disputes, and fulfill regulatory obligations:

• Game play history including games played, bets placed, outcomes, winnings, and losses
• Sports betting activity including markets selected, odds accepted, bet amounts, settlement results, and parlay combinations
• Bonus and promotion participation including bonuses claimed, wagering progress, and bonus terms compliance
• Account balance history, VIP tier status, loyalty points accumulation, and cashback eligibility
• Communication records including live chat transcripts, email correspondence, WhatsApp messages, and customer support tickets
• Responsible gaming tool usage including deposit limits set, self-exclusion requests, session time limits, and reality check preferences

2.4 Technical and Device Information

To ensure platform security, optimize performance, and prevent fraudulent activities, we automatically collect technical information when you access viv77:

• IP address and geographic location data (country, region, city level) to verify Indonesian residency and detect unauthorized access
• Device information including device type (mobile, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version
• Login timestamps, session duration, and frequency of platform access
• Cookies and similar tracking technologies (see Section 8 for detailed cookie policy)
• Clickstream data, page navigation patterns, and feature usage statistics for user experience optimization

3. How We Use Your Information

viv77 processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your viv77 gaming account
• Verifying your identity, age (21+), and Indonesian residency through KYC procedures
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting markets, live dealer tables, and promotional offers
• Managing your VIP tier status and delivering loyalty program benefits
• Administering bonuses, cashback, and promotional campaigns

3.2 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraud, collusion, money laundering, and other illegal activities
• Monitoring for suspicious account activity, multiple accounts, or terms violations
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Fulfilling legal obligations under applicable gaming regulations and Indonesian law
• Responding to law enforcement requests, court orders, and regulatory inquiries
• Protecting the security and integrity of the viv77 platform and user community

3.3 Customer Support and Communication

• Providing 24/7 customer support via live chat, email, WhatsApp, and in-app messaging
• Responding to inquiries, resolving disputes, and addressing technical issues
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account alerts
• Notifying you of changes to terms, policies, or platform features
• Delivering promotional communications about new games, bonuses, and VIP offers (with your consent and opt-out options)

3.4 Platform Improvement and Personalization

• Analyzing user behavior and gaming preferences to optimize platform performance
• Conducting market research and statistical analysis to enhance service offerings
• Personalizing game recommendations and promotional offers based on your activity
• Testing new features, games, and functionality improvements
• Generating aggregated, anonymized data for business intelligence purposes

4. Information Sharing and Disclosure

viv77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (Indonesian bank and e-wallet gateway providers), KYC verification services, game platform providers (Evolution Gaming, Pragmatic Play, Microgaming), customer support software vendors, hosting and cloud infrastructure providers, and data analytics services. These service providers are contractually obligated to use your personal information only for the specific purposes for which they were engaged and to maintain appropriate security and confidentiality standards. They are prohibited from using your data for their own purposes or sharing it with other parties.

4.2 Legal and Regulatory Obligations

We may disclose your personal information when required by law, legal process, court order, or government regulation, including responding to requests from Indonesian law enforcement authorities, tax authorities, or gaming regulators. We may also disclose information to protect our legal rights, enforce our Terms & Conditions, investigate suspected fraud or terms violations, protect the safety of users or the public, or defend against legal claims.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding involving viv77, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent notice on our platform before your personal information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

viv77 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and viv77 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by major financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in certified data centers with restricted physical access, environmental controls, and 24/7 monitoring.
• Access Controls: Access to personal data is restricted to authorized viv77 personnel on a strict need-to-know basis, with multi-factor authentication and activity logging.
• Payment Security: We are PCI-DSS (Payment Card Industry Data Security Standard) compliant for credit card processing. Full payment card numbers are never stored on our servers—tokenized references only.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security risks.
• Employee Training: All viv77 staff undergo regular data protection and information security training to ensure proper handling of personal data.
• Incident Response: We maintain a comprehensive data breach response plan to quickly detect, contain, and respond to any security incidents.

While we implement robust security measures, please note that no method of electronic transmission or storage is 100% secure. Users are responsible for maintaining the confidentiality of their account credentials and should immediately notify us of any suspected unauthorized access.

6. Data Retention

viv77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

Data Category	Retention Period
Account registration information	Duration of active account + 5 years after account closure
KYC verification documents	Duration of active account + 7 years for AML compliance
Transaction and financial records	Duration of active account + 7 years for tax/audit purposes
Gaming activity and bet history	Duration of active account + 5 years for dispute resolution
Customer support communications	3 years from last interaction
Marketing consent records	Duration of consent + 1 year after withdrawal

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention and destruction policies. Some anonymized data may be retained indefinitely for statistical analysis purposes, but such data cannot be linked back to individual users.

7. Your Privacy Rights

As a viv77 user, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal information held by viv77. You may request access by contacting our Data Protection Officer.

7.2 Right to Rectification

You have the right to request correction of inaccurate personal information. You can update most account information directly through your account dashboard, or contact customer support for assistance.

7.3 Right to Erasure

You have the right to request deletion of your personal information, subject to our legal obligations to retain certain data for regulatory compliance, fraud prevention, and dispute resolution purposes. Account closure requests can be submitted to customer support.

7.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

7.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of promotional communications by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings.

7.6 Right to Withdraw Consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may require verification of your identity before processing your request.

8. Cookies and Tracking Technologies

viv77 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality including account login, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how users interact with our platform to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, game filters, and display options.
• Marketing Cookies: Track your browsing activity to deliver personalized promotional offers and measure advertising campaign effectiveness (used only with your consent).

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to use some platform features. For detailed information about cookies we use and how to control them, please refer to our Cookie Policy.

9. Third-Party Links and Services

The viv77 platform may contain links to third-party websites, services, or payment providers (such as Indonesian bank portals or e-wallet applications). This Privacy Policy applies only to viv77 services. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access through our platform. viv77 does not control and is not liable for the data collection, use, or security practices of third parties.

10. Children's Privacy

viv77 services are strictly intended for individuals aged 21 years or older, in compliance with Indonesian legal requirements for online gaming. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected personal information from a person under 21, we will immediately delete that information and permanently close the associated account. Parents or guardians who believe their child under 21 has provided personal information to viv77 should contact us immediately at [email protected] for prompt investigation and remediation.

11. International Data Transfers

viv77 primarily serves users located in Indonesia. However, some of our service providers and data processing infrastructure may be located outside of Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data, including standard contractual clauses, data processing agreements, and compliance with applicable data protection regulations. By using viv77 services, you consent to the transfer of your information to countries outside Indonesia that may have different data protection standards, with the understanding that we maintain the security measures described in this Privacy Policy regardless of processing location.

12. Changes to This Privacy Policy

viv77 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated through prominent notice on our platform, email notification to registered users, or pop-up announcement upon login. The "Last Updated" date at the beginning of this document indicates the most recent revision. Your continued use of viv77 services following the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: