padi77 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how padi77 ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data when you use the padi77 website at https://padi77.cam, our mobile applications, or any associated services (collectively, "the Services"). This Policy applies to all users of the Services, including registered members, visitors, and prospective players.

padi77 is committed to protecting the personal data of users across Indonesia, including those in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and all other regions we serve. We comply with applicable Indonesian data protection principles under Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi) as well as internationally recognized privacy standards. By accessing or using the Services, you acknowledge that you have read and understood this Policy.

2. Definitions

• "Personal Data" means any information that directly or indirectly identifies you as a natural person, including your name, email address, telephone number, identification number, bank account details, and IP address.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise — including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" refers to padi77, the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means the identified or identifiable natural person whose Personal Data is being processed — in most cases, you, the Platform user.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for specific purposes.
• "Third Party" means any natural or legal person other than you, padi77, or parties who operate under our direct authority to process Personal Data.

3. Data We Collect

3.1 Data You Provide Directly

When you register for a padi77 Account, complete identity verification (KYC), make deposits, request withdrawals, or contact our support team, you provide us with data including:

• Identity Data: Full legal name, date of birth, gender, nationality, Indonesian KTP number, passport number, or driver's license number.
• Contact Data: Email address, mobile phone number (including WhatsApp number), and residential address in Indonesia.
• Financial Data: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet IDs (OVO, GoPay, DANA, ShopeePay, LinkAja), transaction histories, and deposit/withdrawal records denominated in Indonesian Rupiah (IDR).
• Account Credentials: Username and hashed password. We never store your password in plain text.
• KYC Documentation: Photographs of government-issued ID documents and selfie verification images submitted during the account verification process.
• Communication Records: The content of any messages you send to our support team via Live Chat, email, WhatsApp, or in-app messaging.

3.2 Data Collected Automatically

When you access and interact with the padi77 platform, our systems automatically collect certain technical and behavioral data:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network operator.
• Usage Data: Pages visited, time spent on each page, betting patterns, game preferences, session duration, click paths, and navigation behavior.
• Location Data: Approximate geographic location derived from your IP address (city and region level — we do not collect precise GPS coordinates without your explicit consent).
• Transaction Data: Betting history, stake amounts, game results, bonus usage, withdrawal requests, and account balance movements.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar tracking technologies as described in Section 9 of this Policy.

3.3 Data Received from Third Parties

In some cases, we receive Personal Data about you from third parties, including:

• Identity verification providers and KYC service partners who assist in confirming the authenticity of documents you submit.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet platforms) who share transaction confirmation data necessary to credit or debit your Account.
• Fraud detection and anti-money-laundering (AML) screening services that assess the risk profile of accounts and transactions.
• Analytics and marketing partners who may share aggregated behavioral data to help us improve the Platform experience.

4. Legal Basis for Processing

padi77 processes your Personal Data on the following legal grounds:

1. Contractual Necessity: Processing required to perform the contract we have with you — specifically, to operate your account, process deposits and withdrawals, settle bets, and provide customer support.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, anti-money-laundering requirements, and tax reporting obligations.
3. Legitimate Interests: Processing carried out to pursue padi77's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and direct marketing — provided these interests do not override your fundamental rights.
4. Consent: Processing based on your explicit, informed consent — for example, for marketing communications. You may withdraw consent at any time by contacting our support team.

5. How We Use Your Data

padi77 uses your Personal Data for the following specific purposes:

• Account Management: Creating, verifying, maintaining, and securing your padi77 Account.
• Service Delivery: Processing bets on sports (including BRI Liga 1, EPL, Champions League, Timnas Indonesia fixtures), togel (numbers lottery), sabung ayam (cockfighting), casino games, and slot titles; settling winnings; and managing your account balance.
• Payment Processing: Processing deposits and withdrawals via Indonesian banks and e-wallets; reconciling transactions; and investigating payment disputes.
• Identity Verification: Fulfilling KYC requirements to verify your age (21+), identity, and residency status as required by our operating license and Indonesian regulations.
• Fraud Prevention and Security: Detecting and preventing unauthorized access, fraud, money laundering, bonus abuse, and other malicious activities.
• Responsible Gaming: Monitoring for signs of problem gambling, enforcing self-exclusion requests, applying deposit limits and loss limits, and assisting players who seek help.
• Customer Support: Responding to your queries, complaints, and requests via Live Chat, email ([email protected]), WhatsApp, and in-app messaging.
• Marketing Communications: Sending promotional offers, bonus notifications, and event announcements — only with your consent and always with a clear opt-out option.
• Platform Improvement: Analyzing usage patterns to improve game selection, site performance, payment flows, and the overall user experience.
• Legal Compliance: Meeting our obligations under applicable Indonesian law and international regulations.

6. Data Sharing and Disclosure

padi77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited circumstances:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process Personal Data on our behalf, subject to strict data processing agreements that prohibit them from using your data for any purpose other than providing services to padi77. These include payment processors (banking partners and e-wallet platforms), KYC verification providers, cloud infrastructure providers, analytics vendors, fraud detection services, and customer support platform providers.

6.2 Game Providers

To deliver casino games, slots, and live dealer products, we share limited account and transaction data with our licensed game providers including Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, Spribe, and Pocket Games Soft. This data is used solely to facilitate fair gameplay and is subject to each provider's own privacy and security standards.

6.3 Legal and Regulatory Authorities

padi77 may disclose Personal Data to government authorities, regulators, law enforcement agencies, or courts where required by applicable law, court order, or legal process. We will, where legally permissible, notify you of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of padi77's assets, your Personal Data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data becomes subject to a different privacy policy.

7. Data Retention

padi77 retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable law. Specific retention periods are:

• Account Data: Retained for the duration of your active Account plus 5 years following Account closure, to comply with anti-money-laundering and tax record requirements.
• KYC Documentation: Retained for a minimum of 5 years from the date of verification, in accordance with Indonesian financial regulations.
• Transaction Records: Retained for 5 years from the date of each transaction.
• Communication Records: Support communications retained for 2 years from the date of last contact.
• Marketing Consent Records: Retained until you withdraw consent, plus 1 year thereafter to evidence compliance.

When Personal Data is no longer required, padi77 will securely delete or anonymize it in a manner that prevents reconstruction or re-identification.

8. Data Security

padi77 implements industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same standard used by major Indonesian banks.
• Encrypted Data Storage: Sensitive data including passwords (stored as irreversible hashes), financial records, and KYC documents are encrypted at rest.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access sensitive Personal Data, and only to the extent necessary for their job function.
• Regular Security Audits: Our systems un dergo regular penetration testing and vulnerability assessments by independent third-party security firms.
• Fraud Monitoring: Real-time transaction monitoring and anomaly detection systems flag suspicious activity for immediate investigation.
• Two-Factor Authentication (2FA): Optional 2FA is available for all accounts and strongly recommended for enhanced security.

While padi77 takes every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable law.

9. Cookies and Tracking Technologies

padi77 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our Services.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These enable core features such as user authentication, session management, and security checks. These cookies cannot be disabled.
• Functional Cookies: Allow the Platform to remember your preferences, such as your language setting, preferred payment method, and display options, to provide a more personalized experience.
• Performance and Analytics Cookies: Help us understand how visitors interact with the Platform by collecting aggregated, anonymized data about page visits, session duration, and navigation paths. This information helps us improve Platform performance and content.
• Marketing and Targeting Cookies: Used to deliver relevant promotional offers and advertisements. These cookies track your browsing activity across sessions and may be set by our trusted marketing partners. They are only activated with your consent.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of certain Platform features. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation. Note that disabling strictly necessary cookies may prevent you from logging into your padi77 Account or completing transactions.

10. Your Rights

As a data subject, you have the following rights in relation to the Personal Data padi77 holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: In certain circumstances, you may request that we delete your Personal Data. Note that we may be required to retain certain data to comply with legal obligations, even after account closure.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while a correction request is being resolved.
• Right to Data Portability: Where technically feasible, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to our processing of your Personal Data where we rely on legitimate interests as our legal basis. You may also object at any time to receiving direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. Children's Privacy

padi77 is strictly an adults-only platform. You must be at least 21 years of age to register for an Account and use our Services. We do not knowingly collect, store, or process Personal Data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately suspend the associated Account, delete all related Personal Data, and report the matter to relevant authorities if required.

If you are a parent or guardian and believe that your child has registered on padi77 without your knowledge, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly to address any such cases.

12. International Data Transfers

padi77 operates globally, and your Personal Data may be stored or processed in countries outside Indonesia, including in the jurisdictions where our cloud infrastructure providers, game providers, and KYC partners maintain data centers. When transferring data internationally, padi77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Indonesian data protection requirements.

These safeguards include contractual data processing agreements incorporating standard data protection clauses, and — where applicable — adequacy decisions or equivalent frameworks recognized by Indonesian regulatory authorities. By using the padi77 platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia.

13. Changes to This Privacy Policy

padi77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or a prominent in-Platform notice.

We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Services following the posting of any changes constitutes your acknowledgment of those changes.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way padi77 handles your Personal Data, please contact our Privacy Team through any of the following channels:

• Email: [email protected] (subject: "Privacy Inquiry")
• Live Chat: Available 24/7 via the padi77 website
• WhatsApp: +62 812-3456-7890 (available 24/7, WIB)
• In-App Messaging: Via your Account dashboard

We aim to acknowledge all privacy-related inquiries within 48 hours and provide a full response within 30 calendar days. For complex requests, we may require additional time and will keep you informed of progress.