At san77, protecting the personal data of our players is a core responsibility — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and stored, and what rights You have over your data. We encourage You to read this document in full before registering an Account.
Last updated: January 2026 • Effective immediately upon account registration.
Six principles that define how san77 handles your personal data every day.
san77 collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and meet our legal obligations. We do not collect data speculatively or beyond what each specific purpose requires.
All personal data transmitted to and from the san77 platform is protected by 256-bit SSL/TLS encryption. Data stored on our servers is encrypted at rest using industry-standard protocols. Unauthorized access to your data is technologically and procedurally prevented.
san77 does not sell, rent, or trade your personal data to third parties for marketing, advertising, or any other commercial purpose. Your information belongs to you. We share it only with the specific service providers required to operate the platform, under strict contractual obligations.
You have the right to access, correct, and request deletion of your personal data held by san77, subject to legal retention requirements. You may also object to certain types of data processing. All data rights requests are handled by our support team within 30 days.
san77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Account data is typically retained for a minimum of five years following account closure to comply with anti-money laundering record-keeping requirements.
Promotional communications from san77 are entirely opt-in. If You have consented to receiving marketing messages and later wish to stop, You may withdraw consent at any time by contacting our support team. Opting out of marketing does not affect your Account status or access to the platform.
In this Privacy Policy, the following terms have the meanings set out below:
san77 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller , san77 determines the purposes for which your Personal Data is collected and the means by which it is processed. We are committed to handling your data lawfully, transparently, and in accordance with internationally recognized data protection principles.
For all privacy-related enquiries, data rights requests, or complaints, You may contact san77's data protection contact point directly:
Privacy Contact: [email protected]
Response Time: Within 30 calendar days of receiving a verifiable request
san77 collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:
san77 does not collect or store full payment card numbers. Any card-based payment processing is handled exclusively by certified third-party payment processors operating under PCI DSS compliance standards. san77 receives only a tokenized reference, not the underlying card data.
san77 collects Personal Data through the following channels:
The majority of your Personal Data is collected directly from You when You register an Account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or interact with any feature of the Platform that requires You to provide information.
When You access and use the san77 Platform, certain technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and browser information. See Section 11 for full details on our use of cookies.
Where You connect a payment method or e-wallet to your Account, san77 may receive confirmation data from the relevant payment service provider (for example, OVO, DANA, GoPay) to verify the ownership and status of the payment instrument. We may also receive fraud risk signals from third-party fraud prevention services that help us protect the Platform and its users.
In limited circumstances, san77 may cross-reference data You have provided against publicly available records or commercially available data sources solely for the purpose of verifying your identity or assessing fraud risk. This is distinct from any form of ongoing monitoring of your public profile or social media activity.
san77 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with You |
| Processing deposits and withdrawals in IDR | Performance of a contract with You |
| KYC identity verification | Legal obligation; legitimate interests (fraud prevention) |
| Anti-money laundering monitoring | Legal obligation |
| Responsible gaming monitoring | Legal obligation; legitimate interests (player protection) |
| Customer support communications | Performance of a contract with You; legitimate interests |
| Fraud detection and platform security | Legitimate interests |
| Sending promotional communications | Consent (opt-in only) |
| Platform analytics and improvement | Legitimate interests |
| Compliance with regulatory record-keeping | Legal obligation |
san77 uses the Personal Data we collect for the following specific purposes:
Your registration and identity data enables san77 to create, maintain, and secure your Account. This includes authenticating your identity at login, tracking your Account balance and transaction history, and applying responsible gaming tools and restrictions as requested or required.
Financial data is used to process your deposits and withdrawals in IDR via your chosen Indonesian payment method — whether bank transfer (BCA, BRI, BNI, Mandiri, and others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja). Transaction records are maintained to support dispute resolution and regulatory reporting.
KYC documents and identity data are used to verify that You meet san77's eligibility requirements (21+ years of age, resident of Indonesia) and that the payment methods You use are legitimately owned by You. This data is also used in our ongoing fraud detection and anti-money laundering monitoring programs.
Communications data, Account history, and transaction records enable our support team to investigate and resolve queries, complaints, and disputes effectively. Support records are retained to provide continuity of service and to assist in escalated complaint handling.
Gameplay and betting data is monitored by san77's responsible gaming systems to identify patterns that may indicate problem gambling behavior. Where such patterns are detected, san77 may proactively reach out to the player with information about responsible gaming tools. Full details are available in our Responsible Gaming Policy.
Where You have given explicit consent, san77 may use your contact details and gameplay preferences to send You personalized promotional offers, bonus notifications, and news about new games or features. You may withdraw this consent at any time without affecting your Account status.
Technical and device data, combined with aggregated usage statistics, helps san77 understand how the Platform is used, identify technical issues, optimize performance, and develop new features. Analytics processing uses aggregated or pseudonymized data wherever possible.
san77 does not sell your Personal Data. We share Personal Data with third parties only in the following specific circumstances:
To process your deposits and withdrawals, san77 shares relevant financial and identity data with the payment service providers that facilitate the transaction. All payment processors engaged by san77 are required to handle your data securely and in accordance with applicable financial services regulations.
KYC document verification may be facilitated by specialist third-party identity verification service providers. These providers process your KYC documents solely for the purpose of verifying your identity on san77's behalf and are bound by strict data processing agreements.
Where You play games provided by third-party studios — such as Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, or NetEnt — limited session data may be shared with the relevant studio to facilitate the game session. Game providers do not receive your full identity data and are contractually restricted from using any shared data for their own marketing or profiling purposes.
san77 uses specialist fraud prevention and platform security services. These providers may process IP addresses, device identifiers, and behavioral signals to generate risk scores. Data shared with fraud prevention providers is the minimum necessary for risk assessment purposes.
san77 may disclose your Personal Data to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of san77, our players, or the public.
Beyond the specific categories listed above, san77 will not share your Personal Data with any third party without your explicit prior consent, unless required by applicable law.
san77 operates as an international platform and some of the third-party service providers we engage — including game content studios, fraud prevention services, and cloud infrastructure providers — may process your Personal Data on servers located outside Indonesia. Where such international transfers occur, san77 takes reasonable steps to ensure that your data receives an equivalent level of protection to that required by internationally recognized data protection standards.
Transfers are safeguarded through one or more of the following mechanisms:
If You would like further information about the specific safeguards in place for a particular international transfer, please contact our support team at the address in Section 15.
san77 retains Personal Data for no longer than is necessary for the purpose for which it was collected, unless a longer retention period is required by law. The following retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration & identity data | Duration of Account + 5 years post-closure | AML regulatory requirement |
| KYC documents | Duration of Account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | Duration of Account + 5 years post-closure | AML / financial record-keeping |
| Betting and gameplay records | Duration of Account + 2 years post-closure | Dispute resolution; platform integrity |
| Customer support communications | 3 years from last interaction | Complaint handling; legitimate interests |
| Marketing consent records | Duration of consent + 2 years | Regulatory accountability for consent |
| Technical / device / session logs | 90 days rolling | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymized so that it can no longer be associated with an identifiable individual.
san77 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
While san77 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, san77 will notify affected players without undue delay and take all reasonable steps to mitigate the impact.
san77 uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, analyze usage patterns, and support fraud detection. The following categories of cookies are used:
These cookies are essential for the Platform to function. They manage your authenticated session, maintain your Account login state, and enable core security features. These cookies cannot be disabled without breaking the Platform's basic functionality.
Functional cookies store your preferences — such as your preferred language settings and any display customizations you have made — so that these are preserved across sessions. Disabling these cookies may result in a reduced experience on subsequent visits.
Analytics cookies collect aggregated, pseudonymized data about how visitors navigate and use the Platform. This data helps san77 identify technical issues, measure the effectiveness of features, and prioritize improvements. Analytics data is not used to build personal profiles for marketing purposes.
These cookies collect device and behavioral signals used by san77's fraud detection systems to identify suspicious activity, prevent unauthorized account access, and protect the integrity of the Platform. They are a component of our security infrastructure.
Most browsers allow You to control cookies through their settings. Blocking all cookies will significantly impair your ability to use the san77 Platform, as session authentication requires cookies to function. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
As a player on san77, You have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at the address in Section 15. We will respond within 30 calendar days of receiving a verifiable request.
You have the right to request a copy of the Personal Data san77 holds about You, together with information about how it is being used and with whom it has been shared. We may ask You to verify your identity before fulfilling an access request.
If the Personal Data san77 holds about You is inaccurate or incomplete, You have the right to request that it be corrected. For Account registration details, You may also update certain information directly within your Account settings.
You have the right to request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where You have withdrawn consent, or where the processing was unlawful. This right is subject to san77's legal obligations to retain certain records, as described in Section 9. Where erasure is not possible, we will explain the reason clearly.
You have the right to request that san77 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
You have the right to object to the processing of your Personal Data where that processing is based on san77's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes, which san77 will honor immediately upon receipt of your objection.
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
Where san77 processes your data on the basis of your consent (for example, for marketing communications), You may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Exercising any of the rights listed above will not result in any negative treatment of your Account, any reduction in service quality, or any penalty. san77 is committed to facilitating your privacy rights promptly and without obstruction.
The san77 Platform is strictly intended for adults aged 21 and over. san77 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. Minors are prohibited from registering an Account or accessing any service on the Platform.
If san77 becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and permanently close the associated Account. If You are a parent or guardian and believe that a minor under your care has registered on san77, please contact our support team immediately so that we can take appropriate action.
21+ Only: By using san77, You confirm that You are at least 21 years of age. Age verification checks are performed as part of the KYC process and may be conducted at any time during the Account lifecycle.
san77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The date of the most recent revision is displayed at the top of this page. Where changes are material, san77 will notify active Account holders via the Platform or by email to the address registered to their Account.
Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage You to review this page periodically. If You have concerns about any change to this Policy, please contact us before continuing to use the Platform.
For all privacy-related enquiries, data rights requests, or complaints regarding san77's handling of your Personal Data, please contact our support team using the details below. We aim to acknowledge all privacy enquiries within 5 business days and resolve them within 30 calendar days.
Privacy & Data Enquiries: [email protected]
Support Hours: 24 hours a day, 7 days a week — WIB (UTC+7)
Languages: English and Indonesian (Bahasa Indonesia)
If You are not satisfied with san77's response to a privacy complaint, You may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. san77 will cooperate fully with any such authority in the investigation of a complaint.
Our support team handles all privacy enquiries 24/7 in English and Indonesian. You can also review our full Terms & Conditions or visit our Responsible Gaming page.
21+ only. Gambling should be treated as entertainment, not a source of income. Visit our Responsible Gaming page for tools and support.