Privacy Policy

01 Definitions

The following definitions apply throughout this Privacy Policy and all related spo77 data-protection notices:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, email address, phone number, residential address, IP address, device identifiers, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means spo77 in its capacity as the entity that determines the purposes and means of Processing Personal Data collected through the platform.
• "Data Processor" means a third party that Processes Personal Data on behalf of spo77 under a contractual data-processing agreement.
• "Platform" means the spo77 website accessible at spo77.bet, including all pages, features, games, and services.
• "Player" / "You" means any individual who accesses the Platform, holds a registered spo77 account, or interacts with spo77 customer support.
• "KYC" means Know Your Customer — the identity and age verification process mandated by spo77's anti-money-laundering obligations.
• "Cookies" means small text files placed on a Player's device by the Platform for functional, analytical, or security purposes.

02 Data Controller

spo77 acts as the Data Controller in respect of all Personal Data collected through the Platform. spo77 determines the purposes for which your data is collected and the manner in which it is Processed. Enquiries relating to data protection, access requests, or objections to Processing should be directed to the spo77 support team as described in Clause 14 of this policy.

Where spo77 engages third-party service providers to assist in operating the Platform — such as payment processors, game providers, identity verification services, and fraud detection systems — those providers act as Data Processors operating under contractual terms that require them to handle your data strictly in accordance with spo77's instructions and in compliance with applicable data protection standards.

03 Personal Data We Collect

spo77 collects Personal Data through several channels: directly from you during registration and account use, automatically through the Platform's technical systems, and from third-party identity verification and payment processing providers. The categories of data we collect are set out below.

3.1 Registration & Identity Data

When you register a spo77 account, we collect your full legal name, date of birth, Indonesian residential address, email address, and mobile phone number. This information is required to create and maintain your account, verify your age (21+ requirement), and comply with our KYC obligations.

3.2 KYC & Verification Documents

As part of the KYC process, you may be required to submit copies of government-issued identity documents (such as your KTP — Indonesian National Identity Card — or passport), proof of address, and proof of payment method ownership. These documents are stored securely and used solely for identity verification and anti-money-laundering compliance purposes.

3.3 Financial & Transaction Data

spo77 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method details (bank account names and masked account numbers for BCA, BRI, BNI, Mandiri, and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja), and transaction timestamps. Full payment card or bank account numbers are never stored on spo77 systems — such data is handled exclusively by our PCI-compliant payment processing partners.

3.4 Betting & Gaming Activity

We maintain records of all bets placed on the spo77 sportsbook and casino, including market selections, stake amounts, odds accepted, game sessions, and outcomes. This data is used for account management, dispute resolution, bonus wagering verification, and responsible gaming monitoring.

3.5 Technical & Device Data

When you access the Platform, our systems automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, session timestamps, and page interaction logs. This data is used for security monitoring, fraud prevention, and improving Platform performance.

3.6 Communications Data

Records of your interactions with spo77 customer support — including live chat transcripts, email correspondence, and any attached documents — are retained to facilitate ongoing account assistance, quality assurance, and dispute resolution.

Data Category	Examples	Primary Purpose
Identity Data	Name, date of birth, KTP number	Account creation, KYC, age verification
Contact Data	Email address, phone number, address	Account communications, support
Financial Data	Bank name, masked account, transaction records	Deposits, withdrawals, AML compliance
Gaming Activity	Bets placed, games played, outcomes	Account management, responsible gaming
Technical Data	IP address, device ID, browser type	Security, fraud prevention, performance
Communications Data	Support chat logs, email records	Dispute resolution, quality assurance

04 How We Use Your Personal Data

spo77 uses the Personal Data it collects for the following specific purposes:

• Account management: Creating, maintaining, and securing your spo77 account, processing deposits and withdrawals, and managing your gaming activity and balance.
• Identity verification and KYC compliance: Confirming your age (21+), Indonesian residency, and the legitimacy of your payment methods in accordance with our anti-money-laundering obligations.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, duplicate account registrations, and potential match manipulation in connection with spo77 sportsbook markets.
• Responsible gaming: Monitoring betting patterns and account activity to identify indicators of problem gambling and to facilitate the delivery of responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer support: Responding to account enquiries, processing complaints, and resolving disputes.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money-laundering requirements, responding to lawful requests from regulatory and law enforcement bodies, and maintaining records as required by applicable law.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.
• Marketing communications: Sending promotional offers and bonus notifications to your registered email or phone number, where you have not opted out. You may withdraw consent for marketing communications at any time by contacting spo77 support.

05 Legal Basis for Processing

spo77 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between spo77 and the Account Holder — including account creation, transaction processing, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement is carried out on the basis of spo77's legitimate interest in operating a secure and functional platform, where that interest is not overridden by your rights.
• Legal obligation: KYC verification, anti-money-laundering record-keeping, and responses to lawful regulatory or law enforcement requests are carried out to comply with applicable legal obligations.
• Consent: Marketing communications are sent on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Third Parties

spo77 does not sell, rent, or trade your Personal Data to any third party. We share data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

spo77 engages the following categories of third-party service providers who may process your Personal Data on our behalf: payment processors (for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transaction processing); identity verification providers (for KYC document review); game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, for the delivery of casino and slot games); fraud detection and cybersecurity providers; and customer support platform operators. All service providers are contractually required to process your data only as instructed by spo77 and to maintain appropriate security standards.

6.2 Legal & Regulatory Disclosure

spo77 may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts where required by law, where necessary to protect the rights and safety of spo77 or other players, or where spo77 is required to respond to a lawful legal process. Such disclosures are made on a minimum-necessary basis and will be documented internally.

6.3 Business Transfers

In the event of a merger, acquisition, or asset sale affecting the spo77 platform, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

07 Cookies & Tracking Technologies

The spo77 Platform uses cookies and similar tracking technologies to operate core functionality, maintain session security, and analyse Platform usage. The cookies deployed by spo77 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active spo77 session. They cannot be disabled.
• Security cookies: Used to detect and prevent fraudulent activity, including multiple simultaneous sessions and automated bot access attempts.
• Functional cookies: Used to remember your preferences such as language settings and display preferences across sessions.
• Analytical cookies: Used to collect aggregated, anonymised data on how players navigate the Platform. This data informs improvements to the Platform experience but does not identify individual users.

You may manage cookie preferences through your browser settings. Disabling strictly necessary or security cookies may impair your ability to log in to and use the spo77 Platform.

08 Data Retention

spo77 retains your Personal Data for as long as your account is active and for a defined period thereafter, in accordance with the following schedule:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents: Retained for the duration of the account relationship and for five years following closure, in line with regulatory requirements.
• Customer support records: Retained for three years from the date of the last interaction, unless the interaction relates to a dispute, in which case records are retained until the dispute is fully resolved plus one year.
• Technical and device data: Retained for a rolling 12-month period unless flagged in connection with a security investigation, in which case retention may be extended.
• Marketing consent records: Retained for the duration of the account relationship to evidence consent status.

On expiry of applicable retention periods, Personal Data is either securely deleted or anonymised so that it can no longer be linked to a specific individual.

09 Security Measures

spo77 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher.
• Personal and financial data at rest is encrypted using AES-256 or equivalent industry-standard algorithms.
• Access to Personal Data within spo77's operational environment is restricted on a role-based, need-to-know basis. Staff members with access to Personal Data undergo regular security training.
• The Platform employs real-time intrusion detection and 24/7 security monitoring.
• Regular penetration testing and vulnerability assessments are conducted by qualified independent security professionals.
• Payment data is handled exclusively through PCI-DSS-compliant payment processing partners; spo77 does not store full payment card or bank account numbers on its own systems.

10 Your Data Rights

As a spo77 account holder, you hold the following rights in respect of your Personal Data. These rights are subject to applicable legal limitations and spo77's regulatory obligations:

• Right of access: You may request a copy of the Personal Data spo77 holds about you at any time.
• Right to rectification: If any Personal Data spo77 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request that spo77 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to spo77's legal obligation to retain certain data for defined periods.
• Right to restrict processing: You may request that spo77 limit the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of data or object to a particular processing activity.
• Right to data portability: You may request that spo77 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your Personal Data for direct marketing purposes at any time, and to processing carried out on the basis of legitimate interests where your individual circumstances warrant it.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting spo77 support.

To exercise any of these rights, contact the spo77 support team via live chat or by emailing [email protected]. Requests will be acknowledged within 72 hours and resolved within 30 calendar days. Where a request is complex or voluminous, an extension of up to an additional 30 days may apply, in which case you will be notified.

11 Minors

The spo77 Platform is strictly for adults aged 21 and above. spo77 does not knowingly collect Personal Data from individuals under the age of 21. If spo77 determines that Personal Data has been collected from a minor, the associated account will be permanently closed, all funds will be handled in accordance with our Terms & Conditions, and the data will be deleted as promptly as applicable regulatory obligations permit. If you believe a minor has registered a spo77 account, contact the support team immediately.

12 International Data Transfers

spo77 operates as a platform serving Indonesia and processes the majority of player data within its primary operating infrastructure. Where Personal Data is transferred to service providers located outside Indonesia — for example, game content providers or fraud detection services operating from other jurisdictions — spo77 ensures that such transfers are made only to recipients who provide an adequate level of data protection, whether through contractual standard clauses, equivalent legal frameworks, or appropriate technical safeguards.

13 Amendments to This Policy

spo77 reserves the right to update this Privacy Policy at any time to reflect changes in Platform operations, legal obligations, or data protection best practices. Where changes are material, spo77 will notify registered account holders by email or via an in-Platform notification at least seven days before the updated policy takes effect. For minor clarifications that do not affect the substance of your rights, updates may be made without advance notice.

The "Last updated" date at the top of this policy reflects the most recent revision. Your continued use of the spo77 Platform after an updated Privacy Policy takes effect constitutes acceptance of the revised terms. If you do not agree with changes, you may close your account before the effective date of the revision.

14 Contact & Data Requests

For all privacy-related enquiries, data access requests, rectification or erasure requests, or objections to processing, please contact the spo77 data protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the spo77 Platform. Indonesian-speaking agents are available across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.
• Email: [email protected] (plain text — this is not a clickable link). Please include "Privacy Request" in the subject line and provide your registered account email address and a brief description of your request. Response time is typically within 4 hours during WIB business hours.
• FAQ: Common questions about account data and security are answered on the spo77 FAQ page.

spo77 is committed to resolving all data-related enquiries fairly and transparently. If you are not satisfied with our handling of a privacy request, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.