psg77 Privacy Policy

psg77 ("we", "us", "our", "the Platform") is committed to safeguarding the privacy of every individual who interacts with our services. This Privacy Policy sets out, in clear and accessible language, how psg77 collects, uses, stores, shares, and protects personal information in the course of operating Indonesia's premier online gaming and sportsbook platform.

Our platform serves over 2.5 million registered members across Jakarta, Surabaya, Medan, Bandung, Bali, and other cities throughout Indonesia. Given the sensitive nature of gaming and financial services, we recognise that responsible data stewardship is not just a legal obligation but a fundamental part of the trust that our members place in us. We take that trust seriously.

This Policy is incorporated by reference into the psg77 Terms & Conditions and should be read alongside that document. Capitalised terms used but not defined in this Policy have the meanings assigned to them in the Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

psg77 collects several categories of Personal Data depending on how you interact with the Platform. The categories below represent the complete scope of data we may hold about you as a registered Member.

3.1 Registration & Identity Data

• Full legal name (as it appears on your KTP)
• Date of birth
• Indonesian National Identity Card (KTP) number and a copy of the KTP document
• Selfie photograph taken alongside your KTP for identity verification
• Registered email address
• Mobile phone number (Indonesian format, e.g., 08xx)
• City of residence (e.g., Jakarta, Surabaya, Bandung, Bali)
• Username and encrypted password hash

3.2 Financial & Payment Data

• Bank account numbers and account holder names for BCA, BRI, BNI, Mandiri, and CIMB Niaga transfers
• E-wallet account identifiers for OVO, DANA, GoPay, and ShopeePay
• Deposit and withdrawal transaction records, including amounts in Indonesian Rupiah (Rp), timestamps, and payment method used
• Bonus credit and rollover activity records

3.3 Gaming Activity Data

• Wager history across all product categories: slots, live casino, sportsbook (bandar bola), togel (Indonesia's traditional numbers lottery), and all other Platform products
• Game session timestamps, duration, and frequency
• Bet amounts, outcomes, and account balance movements
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)

3.4 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Device fingerprint and unique device identifiers
• Session identifiers and login timestamps
• Referral URL and traffic source (where applicable)

3.5 Communications Data

• Records of all live chat, email, and support ticket interactions with the psg77 customer support team
• Feedback, complaints, and dispute correspondence
• Marketing preference settings and opt-in / opt-out records

4.1 Directly from You. The majority of Personal Data psg77 holds is provided directly by you: at the point of account registration, during KYC submission, when you make a deposit or withdrawal, when you contact customer support, or when you update your account profile or responsible gaming settings.

4.2 Automatically. When you access and use the psg77 Platform, certain technical and device data is collected automatically through cookies, server logs, and analytics technologies. This includes your IP address, browser type, session duration, pages visited, and game interactions. See Section 8 (Cookies & Tracking) for full details.

4.3 From Third Parties. psg77 may receive Personal Data from the following third-party sources:

• KYC Verification Providers: Where psg77 uses a third-party identity verification service, that provider may supply identity match scores and document authenticity assessments.
• Payment Processors: Your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) may confirm payment status and account holder details.
• Fraud Prevention Partners: Third-party anti-fraud services may supply risk scores or flag activity associated with your IP address, device, or payment details.
• Analytics Providers: Aggregated, anonymised behavioural data may be received from analytics tools to help psg77 improve the Platform experience.

psg77 processes your Personal Data only for specific, legitimate purposes. The table below sets out those purposes and the data categories used for each:

psg77 relies on the following legal bases for processing your Personal Data, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between psg77 and the Member (i.e., the Terms & Conditions), including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering, fraud prevention, and identity verification obligations.
• Legitimate Interests: Processing for the purposes of fraud detection, Platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by the Member's privacy rights.
• Consent: Processing for direct marketing communications, where you have opted in to receive such communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.1 No Sale of Personal Data. psg77 does not sell, rent, lease, or otherwise trade your Personal Data to any third party for that party's own marketing or commercial purposes. This is an absolute commitment.

7.2 Service Providers (Data Processors). psg77 shares Personal Data with a limited set of third-party service providers who act as Data Processors under binding contractual obligations. These include:

• Payment processing partners handling Rupiah transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay
• KYC and identity verification service providers
• Anti-fraud and risk management platform providers
• Cloud infrastructure and data hosting providers operating within secure, audited data centres
• Game content studios (Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming) — limited to session tokens and game-round identifiers necessary to deliver game content; no full identity data is shared
• Customer support software providers (live chat and ticketing platforms)

7.3 Legal Disclosure. psg77 may disclose Personal Data to government authorities, law enforcement agencies, or financial intelligence units where required to do so by a valid legal order, court order, or applicable regulatory requirement. psg77 will notify the affected Member of such a disclosure where legally permitted to do so.

7.4 Business Transfer. In the event of a merger, acquisition, or sale of all or substantially all of psg77's assets, Personal Data held by psg77 may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

8.1 What Are Cookies. Cookies are small text files placed on your device by the psg77 Platform when you visit. They allow the Platform to recognise your device across sessions, remember your preferences, and collect analytics data. psg77 also uses similar technologies including local storage, session storage, and pixel tags.

8.2 Types of Cookies Used.

8.3 Managing Cookies. You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to log in or place wagers. You may also clear stored cookies at any time through your browser or device settings.

9.1 Active Accounts. Personal Data relating to active Member accounts is retained for as long as the account remains open and for as long as necessary to fulfil the purposes described in this Policy.

9.2 Closed Accounts. Following account closure — whether voluntary or initiated by psg77 — Personal Data is retained for a minimum period of five (5) years. This retention period is necessary to comply with anti-money-laundering record-keeping obligations, to resolve any outstanding disputes, and to enforce the Terms & Conditions in relation to activity that occurred prior to closure.

9.3 Anonymisation. After the mandatory retention period has elapsed, psg77 will either securely delete Personal Data or anonymise it such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and product development purposes.

9.4 Reduced Retention. Where you have provided consent for marketing communications and you subsequently withdraw that consent, your data will be removed from active marketing lists within 7 business days. Your core account and transaction records are still subject to the minimum five-year retention requirement described above.

psg77 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard TLS protocols.
• Encrypted Password Storage: Passwords are never stored in plain text. We use industry-standard one-way hashing with a unique per-account salt.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA via Account Settings. 2FA significantly reduces the risk of unauthorised account access.
• Access Controls: Access to Member Personal Data by psg77 staff is restricted on a strict need-to-know basis. All staff with data access undergo background screening and regular security awareness training.
• Penetration Testing: The psg77 Platform undergoes periodic third-party penetration testing and security audits to identify and remediate vulnerabilities.
• Incident Response: psg77 maintains a documented data breach incident response procedure. In the event of a breach that poses a material risk to Members, affected individuals will be notified without undue delay.

As a psg77 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". psg77 will acknowledge your request within 3 business days and provide a substantive response within 14 business days.

• Right of Access: You may request a copy of all Personal Data psg77 holds about you, including transaction records, gaming history, and KYC documents.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. Note that corrections to identity documents require re-submission of KYC documentation.
• Right to Erasure: You may request deletion of Personal Data that is no longer necessary for the purposes for which it was collected, subject to our mandatory minimum retention obligations (see Section 9).
• Right to Restriction: You may request that psg77 restrict the processing of your Personal Data in certain circumstances, for example while a data accuracy dispute is under investigation.
• Right to Data Portability: You may request that psg77 provide your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV) for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. Where your objection is upheld, psg77 will cease the relevant processing unless overriding legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The psg77 Platform is strictly for adults aged 21 years and older. psg77 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a registered Member is under 21 years of age, we will immediately close the account, void all associated wagers and bonuses, and securely delete the Personal Data of the underage individual.

If you are a parent or guardian and believe that your child has registered an account with psg77, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and resolve all such reports as a matter of highest priority.

The psg77 Platform may contain references to third-party game studios, sports data providers, or payment partners. Where the Platform links to or integrates with third-party services, those services are governed by their own privacy policies. psg77 is not responsible for the privacy practices of any third party, and this Privacy Policy does not extend to any external website, application, or service. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the psg77 Platform.

psg77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will notify all registered Members via a prominent notice on the Platform or by email to the registered address at least 7 days before the changes take effect.

Your continued use of the psg77 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The current version of this Policy, including the date of last update, is always accessible from the footer of the psg77 website.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previously published versions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how psg77 handles your Personal Data, please contact our support team through the following channels:

• Email: [email protected] — responses within 24 hours on business days. For data rights requests, use the subject line "Data Rights Request".
• Live Chat: Available 24 hours a day, 7 days a week (including Indonesian public holidays) via the Live Chat icon on the psg77 Platform. Native Indonesian-speaking agents are available around the clock.

psg77 is committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to refer your complaint to the relevant data protection authority in your jurisdiction.