Privacy Policy — fun77

1 Data Controller

The data controller responsible for the personal data processed in connection with the fun 77 platform is fun77 ("we", "us", "our"), operating the website accessible at fun77.cam. For all data protection enquiries, you may contact fun77's designated data protection contact using the details set out in Clause 13 of this Policy.

fun77 determines the purposes and means of processing your personal data in connection with account registration, transaction processing, identity verification, responsible gaming obligations, and customer support. Where fun77 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations that require them to process data only on fun77's documented instructions.

2 Data We Collect

fun77 collects personal data through several channels — directly from you at registration and during account use, automatically through your interaction with the Platform, and in limited circumstances from third-party verification providers. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a fun77 account, we collect: full name, date of birth, email address, mobile telephone number, city of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan), preferred username, and encrypted password hash.

2.2 Identity Verification (KYC) Data

To comply with our age verification and anti-money laundering obligations, we collect: government-issued photo identification (KTP — Kartu Tanda Penduduk, or passport), and, where required, documentation confirming your registered payment method is held in your own name. These documents are processed solely for identity verification and are stored in encrypted form.

2.3 Transaction Data

We collect records of all financial transactions conducted through your fun77 account, including deposit amounts, withdrawal amounts, transaction timestamps, payment method identifiers (e.g., the last four digits of a BCA or BRI account, or an OVO or GoPay account reference), and transaction status. All amounts are denominated in Indonesian Rupiah (IDR).

2.4 Gameplay Data

We record your gameplay activity on the Platform, including game sessions, bet amounts, outcomes, bonus utilisation, and session duration. This data is used to administer your account, resolve disputes, fulfil responsible gaming obligations, and detect patterns of fraudulent or abusive play.

2.5 Technical and Device Data

2.6 Customer Support Data

When you contact fun77 via live chat or email, we collect the content of your communications, any attachments you submit, the channel used, and timestamps of interactions. This data is used to respond to your query and to improve service quality through internal review.

2.7 Data We Do Not Collect

fun77 does not collect or store full payment card numbers, CVV codes, or full bank account numbers. Payment processing is handled through secure third-party gateway integrations with the relevant Indonesian banks and e-wallet providers, and full financial credentials are not transmitted to or stored on the fun77 platform.

3 Legal Basis for Processing

fun77 processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, transaction data, and KYC documents is necessary to perform the contract between you and fun77 — namely, to provide you with a functioning account and the ability to deposit, wager, and withdraw funds.
• Legal obligation: Age verification, identity verification, transaction monitoring, and record-keeping are required by the anti-money laundering and responsible gaming obligations applicable to fun77's operations.
• Legitimate interests: fun77 processes technical and device data, gameplay data, and access logs on the basis of legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where fun77 sends you promotional communications (including offers tied to events such as Idul Fitri, Imlek, or major sporting tournaments like the BRI Liga 1 season or the AFF Cup), such communications are sent only where you have opted in. You may withdraw consent at any time through your account settings or by contacting support.

4 How We Use Your Data

fun77 uses the personal data it collects for the following purposes:

• Account creation and management: Creating, maintaining, and securing your fun77 account, processing login authentication, and managing account settings and preferences.
• Transaction processing: Facilitating deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity verification: Fulfilling our KYC obligations by verifying your age and identity before processing your first withdrawal request.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing self-exclusion arrangements, and administering deposit limit and session reminder tools.
• Fraud prevention and security: Detecting and investigating suspected fraud, money laundering, collusion, bonus abuse, and unauthorised account access.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of the fun77 support service.
• Platform improvement: Analysing aggregated and anonymised usage data to identify areas of the Platform that can be improved, new features to be developed, and performance bottlenecks to be addressed.
• Promotional communications: Sending you bonus offers, free spins promotions, sportsbook enhanced odds notifications, and seasonal promotions — but only where you have provided explicit consent to receive such communications.

5 Sharing Your Data

fun77 does not sell or rent your personal data. We share your data only in the following limited circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, fun77 shares the minimum necessary transaction data with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers in respect of the financial transaction data they receive and are subject to their own privacy policies and applicable Indonesian banking regulations.

5.2 Identity Verification Providers

fun77 may engage third-party KYC and identity verification service providers to assist with document authentication and age verification. These providers process your identity data solely on fun77's instructions and under contractual data processing agreements that prohibit any secondary use.

5.3 Game Studios and Platform Providers

Where you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, or Spribe, those studios may receive a pseudonymous player identifier and gameplay session data for the purpose of game delivery and technical support. Personal identifiers such as your name or email address are not shared with game studios.

5.4 Legal and Regulatory Disclosure

fun77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or to protect the legitimate rights and interests of fun77 or its users.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of fun77's business assets, personal data held by fun77 may be transferred to the acquiring entity. Affected users will be notified prior to any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

6 Cookies & Tracking Technologies

fun77 uses cookies and similar tracking technologies to maintain your logged-in session, remember your preferences, and analyse Platform usage. The categories of cookies used are:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the fun77 platform and may prevent you from logging in or completing transactions.

7 Data Retention

fun77 retains personal data for the periods set out below. Where applicable law requires a longer retention period, the legal requirement takes precedence.

• Active account data: Retained for the duration of your active fun77 account relationship.
• Closed account data: Following verified account closure, personal data is retained for a minimum of five years to satisfy anti-money laundering record-keeping obligations. After this period, data is deleted or irreversibly anonymised.
• KYC documents: Retained for a minimum of five years from the date of submission, in line with applicable financial crime compliance requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for two years from the date of the communication, unless the communication relates to a dispute that remains open or to a legal matter, in which case retention continues until final resolution.
• Marketing consent records: Retained for the duration of the consent period plus three years, to enable fun77 to demonstrate that marketing was sent on a valid consent basis.

8 Data Security

fun77 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. Key measures include:

• Transport layer encryption: All data in transit between your device and the fun77 platform is encrypted using TLS 1.3, ensuring that your login credentials, personal details, and transaction data cannot be intercepted in transit.
• Data at rest encryption: Sensitive data fields — including KYC documents, payment method identifiers, and account credentials — are encrypted at the database level using AES-256.
• Access controls: Access to personal data within fun77's internal systems is role-restricted on a least-privilege basis. Only personnel whose role requires access to a specific data category are granted access, and access events are logged.
• Password security: Passwords are stored as salted cryptographic hashes. fun77 never stores or has access to your plaintext password. You are responsible for choosing a strong, unique password for your fun77 account.
• Penetration testing: The fun77 platform undergoes regular security testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: fun77 maintains a documented data breach response plan. In the event of a confirmed breach affecting your data, you will be notified within 72 hours of fun77 becoming aware of the incident, as set out in our commitment in the Key Commitments section above.

9 Your Rights

As a fun77 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, contact fun77 using the details in Clause 13. We will respond to verified requests within 30 calendar days.

To submit a data rights request, contact fun77 support via live chat or email at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request to prevent unauthorised access to your data.

10 Minors

The fun77 platform is strictly for adults aged 21 and over. fun77 does not knowingly collect or process personal data belonging to individuals under the age of 21. All registration data is subject to age verification, and any account found to have been registered by a person under 21 will be immediately closed, associated data will be deleted (subject to legal obligations), and any deposits will be returned to the originating payment method.

If you have reason to believe that a person under the age of 21 has registered a fun77 account or is accessing the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 International Data Transfers

fun77's primary data infrastructure is hosted in secure data centres serving the Southeast Asian region. In some circumstances, personal data may be processed by third-party service providers — such as KYC verification vendors or game studio technical support teams — whose operations are based outside Indonesia.

Where such international transfers occur, fun77 takes steps to ensure that an adequate level of data protection is maintained, including by entering into contractual clauses with the relevant data processor that impose obligations equivalent to those applicable under fun77's data protection framework. By using the fun77 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia in the circumstances described above.

12 Policy Amendments

fun77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material — meaning they affect your rights or how fun77 uses your data in a way that is meaningfully different from what was described in the previous version — fun77 will notify you by email to your registered address at least 14 calendar days before the changes take effect.

Minor updates, such as clarifications of existing practices or corrections of typographical errors, may be published without prior notice. The "Last Updated" date at the top of this Policy will be revised with each change. Your continued use of the fun77 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13 Contact & Complaints

For all enquiries relating to this Privacy Policy, data rights requests, or concerns about how your personal data is being processed by fun77, please contact us through the following channels:

• Live Chat: Available 24 hours a day, seven days a week through the fun77.cam website. This is the fastest channel for general privacy enquiries and urgent data security concerns.
• Email: [email protected] — for formal data rights requests, document submissions, and written correspondence. Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line. Responses are provided within 30 calendar days for data rights requests and within two business days for general enquiries.

fun77's Indonesian-speaking support agents are available around the clock and are trained to assist with data privacy enquiries from players across Indonesia — including Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, and Makassar. Formal legal correspondence should be submitted in English via email.

If you are not satisfied with fun77's response to a data privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.