Privacy Policy
abo77 Online Casino

1 Definitions

Throughout this Privacy Policy, the following defined terms apply:

• "abo77" / "we" / "us" / "the Company" — the legal entity operating the online gaming platform at abo77.club.
• "Platform" — the abo77 website, mobile web interface, and all associated digital services accessible at abo77.club.
• "Member" / "you" — any individual who has registered an account on the Platform or whose personal data is otherwise processed by abo77.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, date of birth, mobile number, email address, national identity number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For data processed in connection with the Platform, abo77 is the Data Controller.
• "Third-Party Processor" — a third party that processes Personal Data on behalf of abo77 under a contractual agreement and in accordance with abo77's instructions.
• "KYC" — Know Your Customer identity and age verification procedures required by abo77 prior to processing withdrawals.

2 Data Controller

abo77 acts as the Data Controller for Personal Data collected through the Platform and in the course of delivering its gaming services to Members in Indonesia. As Data Controller, abo77 determines the purposes for which your Personal Data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to the processing of your Personal Data, you may contact abo77 using the contact details set out in Section 15 of this Policy.

3 Data We Collect

abo77 collects the following categories of Personal Data in connection with account registration, platform use, and the delivery of gaming services:

3.1 Identity Data

• Full legal name as it appears on your Indonesian national identity card (KTP) or other government-issued identity document.
• Date of birth.
• Gender (where provided).
• Nationality and country of residence.
• Identity document number and document scan or photograph (collected during KYC verification).

3.2 Contact Data

• Indonesian mobile telephone number.
• Email address.
• Residential address (where provided or required for KYC).

3.3 Account and Transaction Data

• Account username and encrypted password hash.
• Account registration date and account status history.
• Wallet balance history, deposit records, withdrawal requests, and transaction receipts.
• Payment method details — bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) — retained in accordance with payment security standards.
• Bonus activation, wagering history, and promotional redemption records.

3.4 Gaming Activity Data

• Game session records including game titles played, bet amounts, results, and session duration.
• Sportsbook wager records including markets selected, odds accepted, and settlement outcomes.
• Responsible gaming settings, including deposit limits, session reminders, and self-exclusion records.

3.5 Technical and Device Data

• IP address and geolocation derived from IP.
• Device type, operating system, browser type and version.
• Platform access logs, session timestamps, and login history.
• Cookies and similar tracking technology data (see Section 11).

3.6 Communications Data

• Records of live chat, email, and other communications between you and abo77's customer support team.
• Complaint records and resolution notes.

4 How We Collect Your Data

abo77 collects Personal Data through the following channels:

• Direct collection: information you provide during account registration, KYC submission, deposit and withdrawal requests, responsible gaming tool configuration, and customer support interactions.
• Automated collection: technical and device data collected automatically when you access and use the Platform, including through cookies and server-side access logs.
• Third-party sources: identity verification data from KYC service providers; fraud and risk signals from payment processors and anti-fraud service providers; geolocation data from IP intelligence services.

5 Purposes of Processing

abo77 processes your Personal Data for the following specific purposes:

abo77 does not sell your Personal Data to third parties for marketing purposes, and does not use your Personal Data to deliver advertising on behalf of third-party brands.

6 Legal Basis for Processing

abo77 processes Personal Data on one or more of the following legal bases depending on the specific processing activity:

• Contract performance: processing necessary to register your account, process transactions, and deliver the gaming services you have contracted for.
• Legal obligation: processing necessary to comply with anti-money laundering regulations, KYC requirements, and data retention obligations under applicable law.
• Legitimate interests: processing for fraud prevention, platform security, and improving the quality and stability of the gaming services, where abo77's legitimate interests are not overridden by your rights and interests.
• Consent: where we rely on your consent for a specific processing activity (such as optional marketing communications), you have the right to withdraw that consent at any time by contacting customer support.

7 Data Sharing with Third Parties

abo77 shares Personal Data with third parties only where necessary and in accordance with this Privacy Policy. Categories of third parties who may receive your data include:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and their processing intermediaries — for the purpose of executing deposit and withdrawal transactions.
• KYC and identity verification service providers — third-party providers contracted to assist with identity document verification, age verification, and fraud screening.
• Gaming content suppliers — providers such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, and Spribe may receive session-level data necessary for game delivery and integrity monitoring.
• Technology and infrastructure providers — cloud hosting, content delivery, and cybersecurity service providers operating under data processing agreements with abo77.
• Anti-fraud and AML compliance providers — risk and compliance technology platforms that process transaction and identity data to detect fraud, money laundering, and account abuse.
• Regulatory and law enforcement authorities — where abo77 is legally required or compelled by a competent authority to disclose data.

All Third-Party Processors engaged by abo77 are contractually bound to process Personal Data only as instructed by abo77, to implement appropriate technical and organisational security measures, and to not retain data beyond the purpose for which it was shared.

8 International Data Transfers

abo77 and its Third-Party Processors operate infrastructure and services in multiple countries. Your Personal Data may therefore be transferred to and processed in jurisdictions outside Indonesia, including countries in Asia and Europe where abo77's technology partners and gaming content suppliers are based.

Where Personal Data is transferred internationally, abo77 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the recipient equivalent to those applied within abo77's own operations. If you require further information about the specific safeguards applied to international transfers of your data, please contact abo77 using the details in Section 15.

9 Data Retention

abo77 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal Data associated with an active account is retained for the duration of the account's active status and for a period of five (5) years following account closure, in order to meet legal, regulatory, and AML record-keeping obligations.
• Transaction records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Identity documents submitted for KYC verification are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Written support and complaint records are retained for three (3) years from the date of resolution.
• Technical and log data: Server access logs and IP records are retained for up to twelve (12) months for security monitoring purposes.

Data that is no longer required for any active purpose and has reached the end of its retention period is securely deleted or anonymised in a manner that prevents re-identification.

10 Security Measures

abo77 implements a comprehensive range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS technology. Any connection not supporting TLS is automatically redirected.
• Encryption at rest: Sensitive Personal Data, including identity document scans and payment account details, is encrypted at rest in abo77's database infrastructure.
• Password security: Account passwords are stored as salted cryptographic hashes. Plaintext passwords are never stored or transmitted by abo77's systems.
• Two-factor authentication: Members may enable two-factor authentication (2FA) on their accounts, adding an additional layer of access control beyond username and password.
• Access controls: Internal access to Member Personal Data is restricted to abo77 staff with a documented business need, and is subject to role-based access controls and audit logging.
• Intrusion detection and monitoring: abo77's infrastructure is continuously monitored for anomalous access patterns, potential intrusions, and security events.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, abo77 will notify affected Members without undue delay and will take all reasonable steps to contain and mitigate the breach.

11 Cookies & Tracking Technologies

abo77 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your logged-in session, remembering your language and currency preferences, and supporting the security of your session. These cookies cannot be disabled.
• Functional cookies: Used to remember your platform preferences such as the last game section visited or display settings, improving your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data on how Members use the Platform — such as which sections are most visited and where users encounter friction — to guide product improvement. abo77 uses first-party analytics only; no data is shared with third-party advertising networks.
• Security cookies: Used by abo77's fraud prevention and anomaly detection systems to distinguish legitimate users from automated or malicious access attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform, including the ability to remain logged in to your account.

12 Your Data Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your Personal Data held by abo77:

• Right of access: You may request a copy of the Personal Data abo77 holds about you and information about how it is processed.
• Right to rectification: You may request the correction of inaccurate or incomplete Personal Data held in your account. Some data corrections must be made through the KYC verification process.
• Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that legal, regulatory, and AML retention obligations may prevent abo77 from fulfilling erasure requests in full.
• Right to restriction: You may request that abo77 restricts the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: You may request a structured, machine-readable copy of Personal Data you have provided to abo77 where processing is based on your consent or contract performance.
• Right to object: You may object to processing carried out on the basis of abo77's legitimate interests. abo77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact abo77 customer support using the details in Section 15. abo77 will respond to all data rights requests within 30 days. Identity verification will be required before any Personal Data is disclosed or amended in response to a data rights request.

13 Minors

The abo77 Platform is strictly intended for individuals aged 21 years and older. abo77 does not knowingly collect Personal Data from persons under the age of 21. Account registration requires confirmation of age, and KYC verification is mandatory for all withdrawal requests.

If abo77 discovers or has reasonable grounds to believe that an Account belongs to a person under 21, that Account will be immediately suspended, all associated Personal Data will be handled in accordance with abo77's age verification policy, and the matter will be escalated under abo77's compliance procedures.

If you are a parent or guardian and believe that a minor under your care has registered an Account on the Platform, please contact abo77 immediately using the contact details in Section 15.

14 Policy Amendments

abo77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or the scope of our services. Material changes to this Policy will be communicated to Members via the email address registered to their Account and via a notice published on the Platform, with a minimum of seven days' advance notice before the amended Policy takes effect.

The effective date shown at the top of this page indicates when the current version took effect. We encourage you to review this Policy periodically. Continued use of the Platform after an updated Policy takes effect constitutes your acceptance of the revised terms.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint regarding the handling of your Personal Data, please contact abo77 through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform, staffed by Indonesian-speaking agents who can direct your data query to the appropriate team.

abo77 will acknowledge all written data-related enquiries within 24 hours and provide a substantive response within 30 days. Where a complaint cannot be resolved to your satisfaction through abo77's internal process, you retain the right to escalate the matter to the applicable data protection supervisory authority in the relevant jurisdiction.