Privacy Policy

1 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Platform" — the iso777 website at https://iso777.cam and all associated mobile interfaces, applications, and APIs.
• "Controller" / "We" / "Us" / "iso777" — the data controller responsible for the processing of personal data described in this Policy, being the licensed operator of the Platform.
• "Data Subject" / "You" / "Player" — any identified or identifiable natural person whose personal data is processed by iso777, including registered Players and site visitors.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to that person's identity.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, use, disclosure, or deletion.
• "Third-Party Processor" — any external service provider that processes Personal Data on behalf of iso777 under a contractual data-processing agreement.
• "KYC" — Know Your Customer, the identity-verification process used to confirm the identity of Players in accordance with anti-money-laundering obligations.

2 Data We Collect

iso777 collects the following categories of Personal Data from Players and site visitors:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, gender, nationality, Indonesian KTP number or equivalent government-issued ID	Mandatory (KYC)
Contact Data	Email address, WhatsApp or phone number, residential address (including city, province, and postal code in Indonesia)	Mandatory
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), transaction history, deposit and withdrawal records	Mandatory
Account Data	Username, password hash, account preferences, communication preferences, language settings, bonus history	Mandatory
Technical Data	IP address, device type and model, browser type and version, operating system, session timestamps, login history	Automatic
Usage Data	Pages visited, games played, bet history, session duration, click-stream data, referral source	Automatic
Communications Data	Records of live chat conversations, email correspondence, support ticket content, and call recordings where applicable	Where applicable
Responsible Gaming Data	Self-imposed deposit limits, loss limits, session time limits, self-exclusion status, and responsible gaming quiz responses	Where applicable

We do not intentionally collect special-category sensitive data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where strictly required by applicable KYC regulations, in which case it is processed under explicit consent or legal obligation.

3 How We Collect Data

iso777 collects Personal Data through the following means:

• Direct interactions: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to surveys and promotions.
• Automated technologies: Technical and Usage Data collected automatically when you access the Platform via cookies, web beacons, pixel tags, server logs, and similar tracking technologies. See Clause 10 for full cookie details.
• Third-party sources: Identity and financial verification data obtained from KYC service providers, fraud-detection agencies, and payment processors in order to verify your identity and protect the Platform from misuse.
• Public sources: Publicly available databases consulted during anti-money-laundering (AML) screening, sanctions list checks, and politically exposed persons (PEP) verification where required by law.

4 Purposes of Processing

iso777 processes your Personal Data for the following purposes:

• Account management: To create, maintain, and administer your Account, authenticate your login sessions, and communicate important account-related information to you.
• Service delivery: To process your bets, deposits, and withdrawals; to deliver game content; and to operate the Platform's features in accordance with our Terms & Conditions.
• Identity verification (KYC): To verify your identity, age (21+), and payment method ownership as required by our licensing obligations and anti-money-laundering policies.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, bonus abuse, and other prohibited conduct.
• Responsible gaming: To enforce self-imposed player limits, monitor for signs of problem gambling, and provide appropriate interventions in accordance with our Responsible Gaming commitment.
• Customer support: To respond to your inquiries, complaints, and support requests in a timely and effective manner.
• Marketing communications: To send you promotional offers, bonuses, and platform news where you have opted in to receive such communications. You may opt out at any time by contacting our support team.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and fulfill our obligations under international gaming licensing requirements.
• Platform improvement: To analyze usage patterns, test new features, and improve the overall performance, design, and content of the iso777 Platform based on aggregated behavioral insights.

5 Legal Basis for Processing

iso777 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accept when registering an Account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, responsible gaming mandates, and lawful regulatory requests.
• Legitimate interests: Processing undertaken to pursue our legitimate business interests — including fraud prevention, Platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing

iso777 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: Banks and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay) receive only the transaction data necessary to process your deposits and withdrawals.
• KYC and fraud-detection providers: Third-party identity verification and AML screening services process your identity documents strictly to verify your eligibility and protect the Platform from abuse.
• Game content providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, and NetEnt) may receive a pseudonymized player identifier and session data necessary to deliver game content. They do not receive your full identity or financial details.
• Customer support platforms: Our support infrastructure providers process communications data (chat transcripts, email content) on our behalf to facilitate customer service delivery.
• Regulatory authorities: We disclose Personal Data to licensing bodies, law enforcement agencies, and other competent authorities where required by law or a valid legal order. We will notify affected Players of such disclosures where permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections and prompt notification to affected Players.

All Third-Party Processors engaged by iso777 are contractually required to process Personal Data only for the specified purposes, to maintain appropriate security measures, and to refrain from any unauthorized use or onward transfer of your data.

7 International Data Transfers

As an internationally operated platform serving Players in Indonesia and other markets, iso777 may transfer Personal Data to servers and processors located outside the Republic of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual clauses between iso777 and the recipient entity that impose data protection obligations equivalent to those applicable in the originating jurisdiction.
• Transfers to jurisdictions recognized as providing adequate data protection standards by relevant regulatory authorities.
• Technical and organizational security measures that apply regardless of the location where data is processed or stored.

By using the iso777 Platform, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

8 Data Retention

iso777 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, in accordance with standard AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction to comply with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the verification process or Account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute or complaint.
• Marketing preferences and opt-out records: Retained indefinitely to ensure we honor your communication preferences and do not send unwanted marketing material.
• Technical and usage logs: Retained for up to twelve (12) months for security monitoring and Platform analytics purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where anonymization is not technically feasible, the data is securely archived and access is strictly restricted.

9 Your Rights

As a Data Subject, you hold the following rights with respect to your Personal Data processed by iso777. To exercise any of these rights, please contact our Data Protection team using the details in Clause 14:

• Right of access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed, the purposes of processing, and the categories of recipients to whom it has been disclosed.
• Right to rectification: You may request the correction of any inaccurate or incomplete Personal Data we hold about you. You may also update certain Account details directly through your Account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent on which processing was based. This right is subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a rectification request is under review or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing of your Personal Data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

10 Cookies & Tracking Technologies

The iso777 Platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure browsing experience. The following categories of cookies are used:

Cookie Type	Purpose	Duration
Strictly Necessary	Required for the Platform to function, including session management, authentication, and security features. Cannot be disabled.	Session / up to 1 year
Functional	Remember your preferences such as language settings, display preferences, and previously entered information to improve your experience.	Up to 1 year
Analytics	Collect aggregated, anonymized data on how Players use the Platform to help us improve performance, navigation, and content relevance.	Up to 2 years
Marketing	Track your interactions with promotional content to measure campaign effectiveness and deliver relevant offers. Only placed with your consent.	Up to 90 days

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the Platform, including your ability to log in or place bets. Your cookie preferences are respected and stored in accordance with applicable data protection law.

11 Security Measures

iso777 implements a comprehensive, layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols, indicated by the padlock icon and "https" prefix in your browser address bar.
• Data encryption at rest: Sensitive Personal Data, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. All iso777 staff and processors with access to Personal Data are subject to confidentiality obligations and regular access reviews.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their Accounts. All administrative access to systems holding Personal Data requires 2FA.
• Intrusion detection and monitoring: Our systems are continuously monitored for signs of unauthorized access, unusual activity, and potential security threats using automated intrusion-detection tools and security operations oversight.
• Data breach response: In the event of a Personal Data breach that poses a risk to your rights and freedoms, iso777 will notify affected Players and relevant regulatory authorities within the timeframes required by applicable law.
• Vendor security assessments: All Third-Party Processors are assessed for security compliance before engagement and are contractually required to maintain appropriate data-security standards.

12 Minors

The iso777 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain Personal Data belonging to individuals under the age of 21. If you are under 21 years of age, you must not register an Account, access the Platform, or provide any Personal Data to iso777.

If we become aware — through our age-verification processes or by any other means — that Personal Data has been collected from an individual under 21 years of age, we will immediately suspend the associated Account, delete the relevant data as soon as practicable, and report the matter to the relevant regulatory body where required by law.

We encourage parents and guardians to monitor their children's online activity and to make use of parental-control tools and filtering software to prevent access to gambling-related websites. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Clause 14.

13 Amendments to This Policy

13.1  Right to Amend. iso777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. The revised Policy will be published on this page with an updated "Last Updated" date.

13.2  Notification of Material Changes. Where we make material changes to this Policy — such as introducing new processing purposes or sharing data with new categories of recipients — we will notify active Players via their registered email address or through a prominent in-Platform notice at least fourteen (14) days before the changes take effect, where practicable.

13.3  Continued Use. Your continued use of the iso777 Platform after the effective date of any revised Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request closure of your Account.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data-subject rights, or wish to raise a privacy-related complaint, please contact the iso777 Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Privacy Request — [Your Registered Username]
• Live Chat: Available 24/7 via the support widget on the Platform

To protect your privacy, we may require you to verify your identity before processing any data-subject request. This is to ensure that Personal Data is not disclosed to, or acted upon at the request of, any unauthorized individual.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. Players in Indonesia may also seek guidance from the Kementerian Komunikasi dan Informatika (Ministry of Communication and Informatics) regarding the protection of personal data under applicable Indonesian law.

For matters related to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page.