Privacy Policy of pp777

Definitions

The following definitions apply throughout this Privacy Policy:

• "pp777", "we", "us", or "our" refers to the operator of the online gaming platform accessible at https://pp777.my, including all associated sub-domains and mobile interfaces.
• "Member", "you", or "your" refers to any natural person who has registered an account on the pp777 Platform or who visits the pp777 website.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, IP address, device identifiers, financial account details, and gaming activity records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, combination, restriction, erasure, or destruction.
• "KYC" refers to Know Your Customer verification procedures applied by pp777 to confirm a Member's identity, age, and source of funds prior to enabling full account functionality.
• "Third Party" means any natural or legal person other than the Member and pp777, including game studio partners, payment processors, fraud-prevention service providers, and technology infrastructure vendors.
• "Cookies" means small text files placed on a Member's device by the pp777 Platform for the purposes of session management, preference storage, and analytics.
• "IDR" or "Rp" refers to Indonesian Rupiah, the base transaction currency of the pp777 Platform.

Data Controller

pp777 acts as the Data Controller in respect of all Personal Data collected from Members through the pp777 Platform. As Data Controller, pp777 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing is carried out lawfully and in accordance with this Privacy Policy.

All data-related inquiries, access requests, correction requests, and deletion requests should be directed to the pp777 data team via the contact details provided in Section 15 of this Policy. pp777 commits to acknowledging all data-related requests within 5 business days of receipt.

Data We Collect

pp777 collects Personal Data across several categories depending on how you interact with the Platform. We apply a data-minimization principle: we collect only what is genuinely necessary for the stated purpose.

How We Collect Your Data

pp777 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when completing the registration form, updating your account profile, submitting KYC documents, initiating a deposit or withdrawal, or contacting pp777 customer support at [email protected].
• Automated Collection: Technical Data and Usage Data collected automatically through server logs, cookies, web beacons, and pixel tags when you access and navigate the pp777 Platform. This collection occurs whether or not you are logged into an account.
• Payment Processors: Transaction confirmation data received from Indonesian bank and e-wallet payment gateways in connection with deposit and withdrawal processing. pp777 receives confirmation of transaction status but does not store full bank account credentials in an unencrypted format.
• Identity Verification Providers: Where pp777 uses a third-party KYC verification service, that provider may return a verification status, risk score, and document validation result to pp777 in connection with your identity check.
• Fraud Prevention Services: Device fingerprinting and behavioral analytics data received from fraud-detection technology partners used by pp777 to identify multi-accounting, bot activity, and other prohibited conduct as defined in the pp777 Terms & Conditions.
• Game Studios: Aggregated game session data received from certified game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) in relation to game rounds played by Members on the pp777 Platform.

Purpose & Legal Basis for Processing

pp777 processes Member Personal Data for the following specific purposes, each supported by a defined legal basis:

Data Sharing with Third Parties

pp777 does not sell, rent, or trade your Personal Data to any third party for that party's own commercial purposes. We share Member Personal Data only in the following limited and controlled circumstances:

• Payment Processors and Banking Partners: We share the minimum necessary financial data with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly for the purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: KYC Document Data and Identity Data may be shared with certified identity verification service providers engaged by pp777 to conduct age and identity checks on new and existing Members. These providers are contractually bound to process data solely for verification purposes.
• Game Studio Partners: A Member's account identifier and game session data are shared with the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, Spribe) to enable game delivery and round settlement. Studios do not receive additional Personal Data beyond what is required for game operation.
• Fraud Prevention and Security Providers: Technical Data and anonymized usage data may be shared with fraud-detection technology partners to identify and prevent prohibited conduct including multi-accounting and automated bot activity.
• Technology Infrastructure Providers: Data may be processed by third-party cloud infrastructure and hosting providers that supply the server, storage, and networking infrastructure underpinning the pp777 Platform. All such providers operate under data processing agreements with pp777.
• Legal and Regulatory Authorities: pp777 may be required to disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law or in response to a valid legal order. pp777 will inform the affected Member of such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pp777's business operations, Member Personal Data may be transferred to the acquiring entity as part of the transaction, subject to that entity providing equivalent data protection commitments.

International Data Transfers

As an internationally operated online gaming platform, pp777 may transfer, store, or process your Personal Data in jurisdictions outside of Indonesia, including in countries where data protection laws may differ from those applicable in Indonesia. Such transfers are necessary to operate the Platform and to engage the technology and service providers described in Section 6.

Where Personal Data is transferred internationally, pp777 takes the following steps to ensure appropriate protections are in place:

• Transfers to service providers are governed by contractual data processing agreements that include standard data protection clauses requiring recipients to apply security and confidentiality standards equivalent to those applied by pp777.
• pp777 conducts due diligence on all international service providers to assess their data security practices prior to engagement.
• Personal Data transferred internationally is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption.

Data Retention

pp777 retains Member Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with pp777's internal data disposal procedures.

Data Security

pp777 implements a comprehensive set of technical and organizational security measures to protect Member Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the pp777 Platform is encrypted using TLS 1.2 or TLS 1.3 protocols. The pp777 website operates exclusively over HTTPS.
• Encryption at Rest: Personal Data and financial records stored on pp777 servers are encrypted at rest using AES-256 encryption, one of the strongest symmetric encryption standards currently available.
• Access Controls: Access to Member Personal Data within pp777's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role.
• Two-Factor Authentication: pp777 offers two-factor authentication (2FA) for Member accounts and requires it for all internal staff with access to data management systems.
• Penetration Testing and Security Audits: The pp777 Platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pp777 maintains a documented data breach incident response plan. In the event of a confirmed data breach affecting Member Personal Data, pp777 will notify affected Members without undue delay and will take immediate steps to contain the breach and mitigate harm.
• Staff Training: All pp777 staff who handle Personal Data receive regular data protection and security awareness training as a condition of their access to Member data systems.

Cookies & Tracking Technologies

pp777 uses cookies and similar tracking technologies to operate and improve the Platform experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and previously entered form data to improve your browsing experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Members navigate and use the Platform. This data helps pp777 identify popular game categories, navigation bottlenecks, and page performance issues. Analytics data does not identify you personally.
• Security and Fraud-Detection Cookies: Used to identify unusual login patterns, detect bot traffic, and prevent unauthorized access to Member accounts. These cookies store device fingerprint components and behavioral indicators.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your pp777 account. pp777 does not use third-party advertising cookies or retargeting pixels for external ad networks.

Your Data Rights

As a Member of pp777, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the Personal Data that pp777 holds about you, along with information about how it is being processed. pp777 will provide this data within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held by pp777. Basic profile information (email, phone number, address) may be updated directly within your account settings.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to pp777's legal obligations to retain certain data categories for the periods specified in Section 8.
• Right to Restriction of Processing: You have the right to request that pp777 restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: You have the right to receive Personal Data you have provided to pp777 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where pp777 relies on legitimate interest as the legal basis. You have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Minors

The pp777 Platform is strictly intended for adults aged 21 years and older. pp777 does not knowingly collect Personal Data from any person under the age of 21.

All registration applicants are required to confirm their date of birth during the registration process, and pp777 conducts age verification as part of its KYC procedures. Where pp777 discovers or has reason to believe that a Member is under 21 years of age, the following steps will be taken immediately:

• The Member's account will be suspended pending age verification.
• Any balance held in the account will be frozen and, upon confirmation that the Member is under 21, will be returned to the original deposit source after deduction of any net winnings, which will be forfeited.
• All Personal Data associated with the underage account will be deleted from pp777's systems within 30 days of confirmed identification, except where retention is required to document the compliance action taken.

If you believe that a minor has registered an account on the pp777 Platform, please report this immediately to [email protected] with the subject line "Minor Account Report".

Third-Party Links & Integrations

The pp777 Platform may contain references to or integrations with third-party game studios, payment processors, and technology providers. pp777's Privacy Policy applies only to data processing carried out directly by pp777 and does not extend to the privacy practices of third-party organizations.

Third-party game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft operate their own game delivery infrastructure and may process certain game session data in accordance with their own privacy policies. pp777 requires all studio partners to process Member data only for the purpose of game delivery and to maintain data security standards consistent with those of pp777.

Payment processors handling Indonesian bank transfers and e-wallet transactions (including services connected to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) operate under their own privacy and data security frameworks. pp777 does not accept liability for the data handling practices of independent payment service providers.

Amendments to This Privacy Policy

pp777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The following process applies to material amendments:

• The updated Privacy Policy will be published at https://pp777.my/privacy-policy with a revised "Last Updated" date prominently displayed at the top of the page.
• For material changes that significantly affect Member rights — such as new categories of data collected, new third-party sharing arrangements, or changes to retention periods — pp777 will endeavour to notify affected Members by email to their registered address at least 7 days before the changes take effect.
• Your continued use of the pp777 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.
• If you do not agree with any amendment, you should cease using the Platform and may request voluntary account closure as described in the pp777 Terms & Conditions.

Contact Us

For all privacy-related inquiries, data rights requests, or concerns about how pp777 handles your Personal Data, please contact the pp777 data protection team through the following channel:

• Email: [email protected] — Please include "Data Privacy Request" or the relevant subject line in your email so your inquiry is routed to the correct team.
• Response Time: pp777 targets acknowledgment of all data privacy requests within 5 business days and full resolution within 30 calendar days of receipt.
• Language: Data privacy requests may be submitted in English or Indonesian (Bahasa Indonesia). pp777 will respond in the language used in your initial request where operationally feasible.
• Support Hours: Our support team including Indonesian-speaking agents is available 24 hours a day, 7 days a week. Initial responses to data requests are prioritized during peak hours (08:00–24:00 WIB).