Privacy Policy — kdg77

This Privacy Policy applies to all personal data processed by kdg77 in connection with the operation of the online betting and casino platform accessible at kdg77.vip (the "Platform"), including all associated sub-pages, mobile-optimized interfaces, and customer support channels (live chat, WhatsApp, and email).

The data controller responsible for your personal information is kdg77, an internationally licensed online gaming operator. For all data-related inquiries, the designated point of contact is our Data Protection team, reachable at [email protected].

This policy applies to all users of the Platform, including registered Members, prospective registrants who have begun but not completed the sign-up process, and visitors who interact with kdg77.vip without creating an account. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy in full.

kdg77 collects personal data across several categories. The table below summarizes each category, the specific data points within it, and whether collection is mandatory or optional for Platform use.

kdg77 collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion. This is the primary source of identity, contact, and financial data.
• Automated collection: Usage data, IP addresses, device identifiers, and session information are collected automatically when you interact with kdg77.vip, using server logs, cookies, and similar technologies. See Section 7 for full details on our cookie practices.
• Third-party sources: We may receive data about you from payment processors (for example, to confirm that a bank transfer originated from an account registered in your name), identity verification partners (for KYC cross-checks), and fraud detection services. All third parties with whom we share data for this purpose are contractually bound to maintain its confidentiality and to use it solely for the stated purpose.
• Responsible gaming monitoring: Our platform automatically generates usage metrics — such as session frequency, average session length, and bet size progression — that feed into our responsible gaming monitoring tools. This process is described in detail in our Responsible Gaming Policy.

kdg77 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing that is required to create and manage your account, process deposits and withdrawals, settle bets, and provide customer support. Without this processing, kdg77 cannot deliver its services to you.
• Legal obligation: Processing required to comply with international anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other legal obligations imposed on kdg77 as a licensed gaming operator. This includes the retention of transaction records for the periods specified in Section 9.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform (fraud detection, bot prevention, security monitoring), to improve Platform performance through analytics, and to enforce our Terms & Conditions. We apply a balancing test before relying on this basis and will not override your fundamental rights or freedoms.
• Consent: Processing for direct marketing communications (promotional emails, WhatsApp notifications about bonuses and seasonal offers). You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

kdg77 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or establishing a new legal basis.

• Account management: Creating, maintaining, and securing your Member account; authenticating your identity at login; and processing account closure requests.
• Service delivery: Processing deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja); settling sportsbook bets, casino game rounds, togel (Indonesia's traditional numbers lottery) draw results, and crash game outcomes; and crediting bonuses to your Wallet.
• Identity verification (KYC): Confirming that you meet our eligibility criteria — including the requirement to be at least 21 years of age and a resident of Indonesia — in compliance with our international licensing obligations.
• Fraud prevention and security: Detecting and preventing unauthorized access, multi-accounting, bonus abuse, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling; enforcing self-imposed limits and exclusions; and facilitating referrals to professional support services where appropriate.
• Customer support: Responding to queries, complaints, disputes, and technical issues submitted via live chat, WhatsApp, or email.
• Marketing communications: Sending promotional emails and WhatsApp messages about bonuses, seasonal offers (such as Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and new product launches — where you have consented to receive such communications.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the Platform's performance, user experience, game selection, and payment processing efficiency.
• Legal compliance: Maintaining records required by applicable international regulations, responding to lawful requests from regulatory bodies, and enforcing our contractual rights.

kdg77 does not sell your personal data. We share data only with the categories of recipients listed below, and only to the extent necessary for the specified purpose.

• Payment processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable Indonesian financial regulations.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session identifiers to facilitate the delivery of their games on the Platform. No personally identifiable information is shared with game studios beyond what is technically required for game delivery and fairness certification.
• Identity verification partners: Third-party KYC and AML compliance services that assist us in verifying your identity documents and screening against international watchlists. These partners are bound by strict data processing agreements and may only use your data for the purposes we specify.
• Fraud detection and cybersecurity services: Specialized providers that help us detect bot activity, multi-accounting, and other security threats. Data shared with these services is limited to technical identifiers (IP addresses, device fingerprints) and aggregated behavioral signals.
• Legal and regulatory authorities: We may disclose personal data to international regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in the context of an AML investigation or a court order. We will notify you of such disclosure where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of kdg77's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance.

kdg77.vip uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyze how users interact with our site. The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent the Platform from functioning correctly and may result in you being unable to log in or complete transactions. Disabling functional or analytics cookies will not affect your ability to place bets or access games but may reduce the quality of your experience.

kdg77 implements a comprehensive, layered security architecture to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data exchanged between your browser or mobile device and kdg77.vip is encrypted using TLS 1.3 with forward secrecy. Our SSL certificate is renewed automatically and monitored continuously for validity.
• Encryption at rest: Personal data and financial records stored in kdg77's databases are encrypted using AES-256, the same encryption standard used by international banks and financial institutions.
• Access controls: Access to personal data within kdg77's internal systems is restricted on a strict need-to-know basis, enforced through role-based access control (RBAC). All staff with access to Member data undergo background screening and regular privacy training.
• Intrusion detection: kdg77's infrastructure is protected by real-time intrusion detection and prevention systems (IDS/IPS) that monitor for anomalous access patterns, SQL injection attempts, and other known attack vectors.
• Regular audits: Our security posture is reviewed through annual penetration testing conducted by independent cybersecurity specialists, and through ongoing automated vulnerability scanning.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, kdg77 will notify affected Members within 72 hours of becoming aware of the breach, in accordance with internationally recognized breach notification standards.

kdg77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account our legal and regulatory obligations. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely deleted using NIST SP 800-88-compliant data sanitization procedures, or anonymized such that it can no longer be linked to any individual. Backups containing personal data are subject to the same retention schedule and are overwritten on a rolling basis.

As a Member of kdg77, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will respond within 72 hours and fulfil the request within 30 days.

• Right of Access: You may request a copy of all personal data that kdg77 holds about you. We will provide this in a structured, commonly used format (PDF or CSV).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For minor details (such as a misspelled address), you can update these yourself via the account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. Please note that this right does not override our legal retention obligations — for example, we cannot delete transaction records that we are required to retain for AML compliance purposes.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a rectification request is pending, or where you contest the lawfulness of our processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes; upon receipt of such an objection, we will cease marketing communications immediately.
• Rights Related to Automated Decision-Making: kdg77 uses automated systems for fraud detection and responsible gaming monitoring. Where an automated decision produces a significant effect on you (for example, account suspension triggered by automated fraud detection), you have the right to request human review of that decision.

kdg77 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts, and our KYC procedure requires submission of a government-issued identity document confirming the Member's date of birth.

If kdg77 becomes aware — through our verification processes, a parental notification, or any other means — that a person under 21 has registered an account or submitted personal data, we will:

• Immediately suspend and permanently close the account;
• Void any bets placed and reverse any deposits where technically and legally possible;
• Securely delete all personal data associated with the underage individual within 30 days, except where retention is required for legal or AML compliance purposes;
• Notify the relevant responsible gaming support service where the circumstances suggest the minor may require assistance.

For guidance on parental controls and tools to restrict access to online gambling platforms, please visit our Responsible Gaming page.

kdg77 operates as an internationally licensed platform. This means that your personal data may be processed and stored on servers located outside of Indonesia. Specifically, our primary data infrastructure is hosted in ISO 27001-certified data centers, and certain third-party service providers (including game studios and KYC partners) may process data in their own jurisdictions.

Whenever personal data is transferred outside Indonesia, kdg77 ensures that appropriate safeguards are in place, including:

• Contractual safeguards: Data Processing Agreements (DPAs) that incorporate standard contractual clauses equivalent to those recognized under GDPR, ensuring the recipient applies equivalent protections to your data regardless of their location.
• Adequacy assessments: Before engaging a new international data processor, kdg77's Data Protection team conducts a transfer impact assessment to evaluate the recipient country's data protection framework and identify any additional safeguards required.
• Technical measures: All international transfers are encrypted end-to-end. Data is transmitted only over secure, authenticated channels, and access is restricted to personnel with a documented operational need.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure that any such transfer is conducted with the same level of care and security as processing within Indonesia.

The kdg77 Platform integrates third-party services to deliver certain features. While we apply strict data processing agreements with all such providers, kdg77 is not responsible for the independent privacy practices of third-party organizations. The third-party services integrated into the Platform include:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft deliver game content through iframes embedded within kdg77.vip. These studios may collect anonymized technical data (game session IDs, RTP audit logs) for fairness certification purposes. No personally identifiable Member data is passed to game studios beyond what is necessary for session continuity.
• Payment infrastructure: Payment gateways facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja process transaction data subject to their own terms and privacy policies, as well as Bank Indonesia and OJK regulations applicable to licensed payment service providers in Indonesia.
• Customer support tooling: Our live chat and WhatsApp support channels are facilitated through third-party customer communication platforms. Message data is stored securely and subject to the same retention schedule described in Section 9.
• Analytics infrastructure: Aggregated, anonymized usage data may be processed through third-party analytics platforms. Individual Member data is never transmitted to analytics services; only anonymized aggregate metrics are used.

kdg77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made — meaning changes that affect your rights or the way we handle your personal data in a significant way — we will:

• Send an email notification to the address registered on your account at least 14 days before the changes take effect;
• Display a prominent notice on kdg77.vip for at least 14 days following publication of the revised policy;
• Update the "Last Updated" date at the top of this page to reflect the date of the most recent revision.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and contact support to request account closure before the amendment takes effect. Upon account closure, your data will be handled in accordance with the retention schedule in Section 9.

Minor amendments — such as typographical corrections, clarifications of existing practices, or updates to contact details — may be made without prior notice and will take effect immediately upon publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints about this Privacy Policy or about how kdg77 handles your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly through kdg77.vip. Our Indonesian-speaking support agents can assist you in real time with any privacy-related query, including requests to access, correct, or delete your personal data.
• WhatsApp: Available 07:00–23:00 WIB (Western Indonesia Time, UTC+7) every day. Ideal for straightforward queries; for formal privacy rights requests, we recommend using email to create a documented record.
• Email: [email protected] — please use the subject line "Privacy Request — [Your Username]" and include a clear description of your query. We acknowledge all privacy-related emails within 24 hours and resolve the majority of requests within 30 days.

If you believe that kdg77 has processed your personal data in a manner that violates applicable data protection standards and we have been unable to resolve your complaint to your satisfaction, you have the right to escalate your complaint to the relevant international data protection supervisory authority or to seek legal remedies through a court of competent jurisdiction.