Privacy Policy — op777

In this Privacy Policy, the following terms carry the meanings assigned to them below. Terms not defined here carry the meanings given in the op777 Terms & Conditions.

2.1 This Privacy Policy applies to all Personal Data collected by op777 through the website at https://op777.cam, any associated mobile web interface, and all related customer communications including email and live chat support interactions.

2.2 This policy applies to all Members and to visitors who browse op777 without creating an account. Where your use of op777 is governed by an additional agreement (for example, a VIP membership agreement or an affiliate agreement), this Privacy Policy applies alongside that agreement.

2.3 op777 is an internationally operated platform serving users principally in Indonesia. By using op777, you acknowledge that your Personal Data will be processed in accordance with this policy and under the data governance framework applicable to our operating jurisdiction.

op777 collects the following categories of Personal Data, depending on your level of interaction with the platform:

op777 does not collect or store full payment card numbers. Payment processing is handled by certified third-party payment processors who are responsible for their own PCI-DSS compliance.

4.1 Directly from You. We collect Personal Data that you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotion. You are not obligated to provide optional data, but failure to provide required data may prevent account creation or withdrawal processing.

4.2 Automatically. When you access the op777 platform, our servers automatically record Technical Data and Usage Data. This is standard industry practice and is necessary for platform security, fraud detection, and performance monitoring. We use cookies and similar tracking technologies for this purpose, as described in Section 10.

4.3 From Third Parties. op777 may receive Personal Data about you from third-party identity verification providers (for KYC purposes), payment processors (to confirm transaction status), and fraud prevention services (to cross-reference risk signals). In each case, op777 has contractual arrangements with these parties that require them to handle your data lawfully.

op777 processes your Personal Data only where we have a clear lawful basis to do so. The table below maps our processing purposes to the applicable legal basis:

6.1 Payment Processors. Financial Data is shared with our certified third-party payment processing partners to execute deposits and withdrawals. These partners include banking interface providers for BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP, as well as e-wallet aggregators for OVO, DANA, and GoPay. Payment processors are contractually bound to use your data solely to process transactions on op777's behalf.

6.2 Identity Verification Services. KYC Data is shared with third-party identity verification platforms that compare submitted documents against authoritative data sources. These providers are certified for identity verification services and process data under strict confidentiality obligations.

6.3 Fraud Prevention and Security. Technical Data and Usage Data may be shared with specialist fraud prevention service providers to detect and prevent account takeover, bonus abuse, and money laundering. These providers process data as Data Processors under written agreements with op777.

6.4 Legal Disclosure. op777 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, a valid legal process, or to protect the rights, property, or safety of op777, its Members, or the public.

6.5 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of op777's assets, your Personal Data may be transferred to the successor entity. op777 will notify affected Members by email prior to any such transfer and before Personal Data becomes subject to a materially different privacy policy.

6.6 No Sale of Data. op777 does not sell, rent, or otherwise trade your Personal Data to third parties for their own independent marketing or commercial purposes.

7.1 As an internationally operated platform serving Members principally in Indonesia, op777 may transfer your Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, op777 implements appropriate safeguards — including contractual data protection clauses — to ensure your data receives a consistent level of protection regardless of where it is processed.

7.2 op777's primary data infrastructure is hosted on servers maintained by reputable cloud infrastructure providers with demonstrated security certifications. op777 conducts periodic reviews of its hosting arrangements to verify continued adequacy of data protection standards.

8.1 op777 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, to maintain an active account relationship, and to comply with applicable legal and regulatory obligations.

8.2 The standard retention periods applied by op777 are as follows:

• Account and Identity Data: Retained for the duration of account activity and for a minimum of 5 years after account closure, to meet anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Retained for a minimum of 5 years after the KYC verification date or after account closure, whichever is later.
• Technical and Usage Data: Retained for up to 24 months in identifiable form, then anonymized for aggregate analytics purposes.
• Support Communications: Retained for up to 3 years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw consent or close your account.

8.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and research purposes.

9.1 Technical Measures. op777 implements industry-standard technical security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include 256-bit TLS encryption for all data transmitted between your device and op777 servers, AES-256 encryption for sensitive data stored at rest, and multi-factor authentication requirements for staff accessing backend systems.

9.2 Organizational Measures. Access to Personal Data within op777's team is restricted to individuals who require it to perform their specific job functions. All staff with access to Member data are subject to confidentiality obligations and receive data protection training. Third-party Data Processors are subject to contractual security requirements.

9.3 Breach Response. In the event of a personal data breach that poses a risk to Members' rights, op777 will notify affected Members without undue delay and take immediate remedial action. The nature of the breach, the data involved, and the steps taken will be communicated clearly.

9.4 Your Responsibilities. The security of your account also depends on you. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and logging out of your account on shared devices. op777 will never ask you for your password by email, live chat, or any other channel.

10.1 op777 uses cookies and similar technologies (including local storage and session identifiers) to operate the platform, maintain your logged-in session, remember your preferences, and collect analytics data about how the platform is used.

10.2 The categories of cookies op777 uses are as follows:

• Strictly Necessary Cookies: Essential for basic platform functionality including login session management, security tokens, and shopping-cart-equivalent betting slip retention. These cannot be disabled without impairing core functionality.
• Analytical/Performance Cookies: Used to understand how Members navigate op777 — which pages are visited most frequently, where errors occur, and how load times can be improved. Data collected is aggregated and does not identify individuals.
• Functional Cookies: Store your display preferences, language settings, and notification opt-in status to improve your experience across sessions.

10.3 op777 does not use third-party advertising cookies or behaviorally targeted advertising networks. No cookie data collected on op777 is shared with external advertising platforms.

10.4 You may control cookie settings through your browser. Disabling strictly necessary cookies will impair platform functionality including login and session persistence. Analytical and functional cookies may be disabled without affecting core access.

As a Member of op777, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact support at [email protected] (plain text — not a clickable link).

op777 will respond to data rights requests within 30 calendar days of receipt. For complex or multiple requests, this may be extended by a further 60 days with notice provided to you.

12.1 The op777 platform is strictly for adults aged 21 and above. op777 does not knowingly collect Personal Data from persons under 21. If you are under 21, you must not register an account or submit any Personal Data to op777.

12.2 If op777 becomes aware that Personal Data has been collected from a person under 21, that data will be deleted promptly, the associated account will be closed, and any real-money funds will be returned to the deposit source after deducting any processed bonus credits.

12.3 If you are a parent or guardian and believe that a person in your care has registered on op777, please contact us immediately at [email protected] (plain text only). We will investigate and act within 48 hours of receiving credible notification.

13.1 op777 may send you promotional emails, platform notifications, and bonus offer alerts where you have explicitly opted in to receive such communications during account registration or at a later stage via your account preferences.

13.2 Marketing communications from op777 will always clearly identify op777 as the sender and will include a straightforward mechanism to opt out of future communications. Opting out of marketing communications does not affect the delivery of transactional notifications (such as deposit confirmations, withdrawal updates, and KYC status alerts), which are part of the service and will continue regardless of marketing preference.

13.3 op777 does not purchase email lists or engage in unsolicited bulk email campaigns. All marketing communications are sent only to Members who have actively opted in.

14.1 The op777 platform integrates with third-party services including payment processors, identity verification platforms, live game streaming providers, and analytics tools. Each of these third-party services has its own privacy policy governing its handling of data.

14.2 op777 is not responsible for the data practices of third-party services beyond the contractual obligations it imposes on its Data Processors. Where a third party operates as an independent Data Controller — for example, a bank processing a payment under its own regulatory obligations — that entity's privacy policy governs its processing of your data.

14.3 op777 does not endorse or take responsibility for the privacy practices of any website or service that may be linked to or from the op777 platform in an informational context. Users who follow any such link do so at their own risk.

15.1 op777 reserves the right to update this Privacy Policy at any time. Where changes materially affect your rights or the way we process your data, we will notify you by email (to the address registered on your account) at least 14 days before the changes take effect.

15.2 Minor updates — such as corrections to typographical errors, updated contact details, or clarifications of existing practices — may be published without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

15.3 Your continued use of op777 after the effective date of any policy update constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

16.1 Data Queries and Rights Requests. For any query about this Privacy Policy, to exercise your data rights, or to report a suspected data security incident, please contact op777 at:

• Data and privacy matters: [email protected] (plain text — not a clickable link)
• General support: [email protected] (plain text — not a clickable link)

16.2 Response Times. op777 aims to acknowledge all privacy-related communications within 2 business days (WIB) and to provide a substantive response within 30 calendar days. Complex requests involving large volumes of data or cross-jurisdictional considerations may require up to 90 days, with notice provided.

16.3 Complaints. If you believe op777 has handled your Personal Data in a manner that violates this policy or applicable law, you have the right to raise a formal complaint. Please contact us in the first instance so that we have the opportunity to investigate and resolve the matter directly. If you remain dissatisfied after our response, you may pursue the matter through your applicable regulatory or supervisory authority.