Your privacy matters to us. This Privacy Policy explains what personal data san77 collects, why we collect it, how it is used and protected, and what rights you hold over your information.
The six principles below summarise how san77 approaches the handling of your personal data. Full details are in the policy document below.
All personal data stored by san77 is encrypted at rest using AES-256 and transmitted via TLS 1.3. Our infrastructure is subject to regular independent security audits to maintain the integrity of your information at all times.
san77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared externally only with contracted service providers who require it solely to deliver our Services to you.
Marketing communications from san77 are opt-in only. You may withdraw consent, request data access, or ask for deletion at any time by contacting our Data Protection team at [email protected].
san77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is held for a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping obligations.
When you transact via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or any other supported Indonesian payment channel, san77 receives only the minimum transaction data necessary to confirm and reconcile your deposit or withdrawal. Full payment credentials are never stored on our servers.
Identity verification documents submitted for KYC are processed by accredited third-party verification partners under strict data-processing agreements. Verified documents are stored in an access-controlled, encrypted vault and are never used for any purpose beyond identity and age confirmation.
This Privacy Policy applies to all Players registered with san77 and to all visitors who access the san77.ws website. By creating an Account or continuing to use the Platform, you confirm that you have read, understood, and accepted this Privacy Policy in full. If you do not agree, please cease using the Platform and contact our support team to close your Account.
The following definitions apply throughout this Privacy Policy. Terms defined in the san77 Terms & Conditions and not separately defined here carry the same meaning assigned to them in that document.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, mobile number, national identity number, financial account details, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction, whether by automated or manual means. |
| "Data Controller" | The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is san77, operating at san77.ws. |
| "Data Processor" | A third party that Processes Personal Data on behalf of the Data Controller under a written data-processing agreement. |
| "Player" / "you" / "your" | Any natural person who accesses, registers on, or places a wager through the san77 Platform. |
| "Account" | The unique registered profile created by a Player on the Platform. |
| "KYC" | Know Your Customer — the identity and age verification process required before processing withdrawals or activating certain account features. |
| "Cookies" | Small text files stored on a Player's browser or device when they visit the Platform, used to enable functionality, remember preferences, and support analytics. |
This Privacy Policy governs the collection and Processing of Personal Data by san77 in connection with the operation of the Platform at san77.ws, including all associated sub-domains and mobile-optimised versions thereof. It applies to:
san77 is the Data Controller for all Personal Data collected through the Platform. Where san77 engages third-party Data Processors — such as KYC verification providers, payment processors, fraud-detection services, and game studio analytics platforms — those third parties act strictly under written data-processing agreements that prohibit any use of Personal Data beyond the specific purpose for which it was shared.
Our primary market is Indonesia. Players accessing the Platform from cities including Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Yogyakarta, Palembang, and Makassar are subject to the same data protections described in this Policy regardless of the local regulatory framework applicable in their region.
san77 collects Personal Data through several channels. The categories of data collected, and the context in which each category is collected, are described below.
3.1 Registration Data
When you create a san77 Account, you are required to provide: your full legal name, date of birth, residential address, email address, and mobile phone number. This information is mandatory — without it, we cannot create or verify your Account.
3.2 Identity Verification (KYC) Data
Before your first withdrawal can be processed, you will be asked to submit identity verification documents. These typically include a government-issued photo ID (national identity card / KTP, passport, or driving licence), proof of ownership of your registered payment method, and in some cases a selfie photograph. These documents are processed by our accredited KYC partner and the results are recorded in your Account profile.
3.3 Financial Data
When you make a deposit or request a withdrawal, san77 receives transaction metadata from the payment provider: the payment method type, the masked account or wallet identifier, the transaction amount in Indonesian Rupiah (IDR / Rp), and the transaction timestamp. Supported payment channels include BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Full account numbers, PINs, and passwords for these services are never transmitted to or stored by san77.
3.4 Transactional & Gaming Data
san77 maintains a detailed record of all betting and gaming activity on your Account, including: wager amounts, markets or games selected, odds accepted, settlement outcomes, session start and end times, and any use of Responsible Gaming tools such as deposit limits or self-exclusion. This data is used for account management, dispute resolution, and regulatory compliance.
3.5 Technical & Device Data
When you access the Platform, our servers automatically log technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data is collected via server logs and first-party analytics tools and is used to maintain platform security, diagnose technical issues, and improve user experience.
3.6 Communications Data
If you contact the san77 support team via live chat or email, we retain a record of those communications, including your name, contact details, and the content of the exchange. This data is used to resolve your query and to improve the quality of our support service.
3.7 Marketing Preferences
Where you have opted in to receive promotional communications from san77, we hold a record of your marketing consent and your preferences regarding communication channel (email, SMS, or push notification). We do not send unsolicited marketing messages to Players who have not opted in.
san77 uses Personal Data for the following purposes, each of which is tied to a specific legal basis described in Clause 5:
san77 does not use Personal Data for automated profiling or automated decision-making that produces legal or similarly significant effects on Players, beyond standard fraud-detection scoring that triggers a human review rather than an automatic outcome.
Each Processing activity carried out by san77 rests on one or more of the following legal bases:
san77 does not sell Personal Data. We share Personal Data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
san77 operates on an international platform and some of our third-party service providers are located outside Indonesia. Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that applicable in your home jurisdiction, san77 ensures that appropriate safeguards are in place before the transfer takes place. These safeguards may include:
You may request details of the specific safeguards applicable to any international transfer of your Personal Data by contacting our Data Protection Officer at the address set out in Clause 14.
san77 retains Personal Data for the periods set out below, after which data is securely deleted or anonymised so that it can no longer be attributed to an individual Player.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account plus 5 years following closure, to satisfy anti-money-laundering record-keeping requirements. |
| KYC / identity verification documents | 5 years from the date of verification or account closure, whichever is later. |
| Financial transaction records | 7 years from the date of the transaction, in line with standard financial record-keeping obligations. |
| Betting and gaming history | 5 years from the date of each wager, for dispute resolution and responsible gaming audit purposes. |
| Customer support communications | 3 years from the date of the final communication in each support thread. |
| Marketing consent records | Duration of consent plus 3 years, to demonstrate compliance in the event of a complaint. |
| Technical / server log data | 90 days from the date of collection, unless retained longer in connection with an active security investigation. |
Where you have applied a self-exclusion to your Account, we retain sufficient data to enforce that exclusion for its full duration, even if you request deletion of other data categories during the exclusion period.
san77 implements a layered security architecture designed to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Our principal technical and organisational security measures include:
No system is completely immune to attack. If you believe your san77 Account has been accessed without your authorisation, please contact our support team immediately via live chat or email at [email protected]. We recommend enabling two-factor authentication (2FA) on your Account for an additional layer of personal protection.
san77 uses Cookies and similar tracking technologies on the Platform to deliver functionality, remember your preferences, analyse usage patterns, and support fraud prevention. The categories of Cookies we use are described below.
You can manage Cookie preferences through your browser settings. Disabling functional or analytics Cookies will not prevent you from accessing the Platform, but may affect your user experience. Disabling strictly necessary Cookies will prevent you from logging in to your Account.
san77 does not use third-party advertising Cookies or any tracking technology that enables third parties to build a profile of your browsing behaviour across external websites for advertising purposes.
As a Player whose Personal Data is Processed by san77, you hold a number of rights in relation to that data. These rights are described below. To exercise any of them, please contact our Data Protection Officer as described in Clause 14. We will respond to all rights requests within 30 calendar days of receipt.
Please note that certain rights are not absolute. For example, san77 cannot delete financial transaction records that are subject to a statutory retention requirement, and we cannot provide data portability for data that is not technically structured in a portable format. Where a right cannot be fulfilled in full, we will explain the reason in our response.
san77 operates a strict minimum age policy. The Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21, and we do not permit anyone under 21 to register an Account or place a wager.
Age verification is a mandatory step in the Account registration process. Where our KYC process reveals that a Player is under the minimum age, the Account will be immediately suspended, all wagers placed will be voided, and any funds deposited will be returned to the payment method from which they originated, net of any bonus funds.
Parents and guardians who believe that a minor in their household has accessed the san77 Platform or created an Account are urged to contact us immediately at [email protected]. We will treat such reports as a priority and take immediate action to close the Account and return any funds deposited.
san77 also recommends that households with minors install parental control software on shared devices to prevent access to gambling websites. Independent tools such as Net Nanny and Kaspersky Safe Kids provide effective filtering capabilities for this purpose.
san77 reserves the right to update this Privacy Policy at any time to reflect changes in our data Processing practices, new legal or regulatory requirements, or improvements to our security measures. When material changes are made, we will:
Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please cease using the Platform and contact the support team to close your Account and withdraw any eligible balance.
We encourage all Players to review this Privacy Policy periodically to remain informed about how their data is being used and protected. Archived versions of previous Privacy Policies are available upon request.
If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Clause 11, or wish to raise a concern about how san77 handles your Personal Data, please contact our Data Protection team using the details below.
Data Protection Officer — san77
Email:
Response time: within 30 calendar days of receipt of your request.
For urgent account security concerns, please use the live chat function available on the Platform — our support team is available 24 hours a day, 7 days a week, with native Indonesian-speaking agents on hand to assist you.
All formal data rights requests must be submitted in writing to the email address above. To allow us to locate your records efficiently, please include your registered email address and Account username in any correspondence. We may request additional identity verification before fulfilling a data access or erasure request to ensure we are responding to the correct individual.
If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
Now that you've reviewed how san77 protects your personal information, it's time to enjoy the action. Explore our full range of sports betting, live casino, slots, and more — all backed by the security standards described in this policy.