uus77 Privacy Policy

Introduction

uus77 ("we", "us", "our") operates the online betting and gaming platform accessible at uus77.lat (the "Platform"), providing sportsbook, live casino, and slot gaming services primarily to adult players based in Indonesia. As part of delivering these services, we necessarily collect and process certain categories of personal data relating to our members ("you", "your").

We take this responsibility seriously. Every data-handling decision at uus77 is assessed against two core principles: minimum necessary collection — we collect only the data we genuinely need to provide a safe, compliant, and high-quality service — and purpose limitation — data collected for one purpose is not repurposed for unrelated uses without your explicit knowledge and, where required, your consent.

This policy covers all personal data processing activities carried out by uus77 in connection with the Platform, including data collected during registration, account verification (KYC), deposits and withdrawals, gameplay, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions, which set out the broader contractual framework governing your use of the Platform.

Data Controller

For the purposes of applicable data protection legislation, uus77 acts as the data controller with respect to the personal data of its members. This means uus77 determines the purposes for which personal data is processed and the means by which that processing occurs.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data subject rights set out in Section 11, please contact our Data Protection Officer at:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response target: We aim to acknowledge all data-related requests within 3 business days and resolve them within 30 calendar days.

Data We Collect

The categories of personal data uus77 collects and processes in the course of operating the Platform are set out in the table below. This list is not exhaustive — in specific circumstances (for example, where enhanced due-diligence checks are required), we may request additional categories of information, which will be explained to you at the time of the request.

We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is inherent in a KTP document photograph used solely for identity verification purposes.

How We Collect Data

uus77 collects personal data through the following channels:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal request, contact our support team, adjust your account settings, or respond to a promotion.
• Automatically: When you visit or interact with the Platform, our servers, analytics systems, and cookie infrastructure automatically record Technical Data and Usage Data as described in Section 3 and Section 6.
• From payment providers: When you transact via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider shares transaction confirmation data with us for the purpose of crediting your account balance or processing your withdrawal. We receive only the minimum data necessary to confirm and record the transaction — we do not receive your full banking credentials or card PINs.
• From identity verification services: Where third-party KYC service providers are engaged to assist with document verification, those providers may return a verification outcome and confidence score to uus77. The underlying documents are processed in accordance with this policy and the provider's own privacy notice, which is made available at the time of verification.
• From fraud prevention and security services: uus77 may receive risk signals, device fingerprint scores, and IP reputation data from third-party fraud prevention partners solely for the purposes of protecting the integrity of the Platform and its members.

Purposes & Legal Basis

Every processing activity carried out by uus77 is grounded in at least one of the following legal bases. Where multiple bases apply to the same activity, all applicable bases are listed.

• Performance of a contract: Processing your Identity Data, Contact Data, Financial Data, and KYC Document Data is necessary to open and maintain your account, verify your identity, process deposits and withdrawals, and settle bets — all of which constitute core obligations under the uus77 Terms & Conditions.
• Legal obligation: Anti-money-laundering (AML) compliance, fraud detection, and identity verification requirements oblige uus77 to collect and retain certain categories of data for defined periods regardless of your preferences.
• Legitimate interests: uus77 processes Technical Data, Usage Data, and Communications Data to improve the Platform, investigate disputes, prevent abuse, and ensure the security and stability of our systems. These legitimate interests are balanced against member privacy rights and do not override your fundamental data protection rights.
• Consent: Where we send you promotional communications by email or SMS, we do so only where you have opted in to receive such communications during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

uus77 does not engage in automated decision-making — including profiling — that produces legal or similarly significant effects on members without human review. Responsible gaming monitoring algorithms flag accounts for human assessment; they do not autonomously restrict accounts without review by a qualified member of the uus77 team.

Cookies & Tracking

uus77 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively, maintain your logged-in session, remember your preferences, and understand how members use the Platform so we can improve it.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and last-visited game category. Disabling these does not prevent Platform use but may reduce convenience.
• Analytics Cookies: Collect aggregated, anonymised data about how members navigate the Platform — pages visited, features used, session duration. This data helps uus77 identify usability improvements. No individual member is identified in analytics reports.
• Security and Fraud-Detection Cookies: Used by our fraud prevention partners to assign risk scores to login and transaction events based on device consistency and behavioural patterns. These are essential to Platform security and cannot be disabled.

uus77 does not use third-party advertising or retargeting cookies. We do not share cookie data with ad networks or data brokers. Your browsing behaviour on the uus77 Platform is not used to serve you targeted advertisements on other websites.

Most modern browsers allow you to control cookie behaviour through their settings panels. Blocking strictly necessary or security cookies will impair your ability to log in and transact on the Platform.

Data Sharing

uus77 does not sell your personal data to any third party under any circumstances. We share your data only in the following controlled situations:

• Game content providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and bet-placement data necessary to operate their games on our Platform. These providers act as data processors under contractual data-processing agreements and are prohibited from using member data for their own independent marketing or profiling purposes.
• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum financial data required to execute the specific transaction you have initiated. Each provider operates under its own regulatory obligations and privacy frameworks applicable to licensed financial services in Indonesia.
• Identity verification partners: Third-party KYC providers receive the identity documents you submit and return a verification result to uus77. Document images are not retained by these providers beyond the period required to complete verification.
• Fraud prevention and security partners: Risk-scoring and fraud-detection services receive Technical Data and behavioural signals to generate transaction risk assessments. No marketing use of this data is permitted under our agreements with these partners.
• Legal and regulatory authorities: uus77 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by a valid legal obligation, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Business restructuring: In the event of a merger, acquisition, or sale of all or substantially all of uus77's assets, member personal data may be transferred to the acquiring entity as part of that transaction, provided the acquiring entity agrees to honour this Privacy Policy or a substantially equivalent successor policy.

International Transfers

The uus77 Platform serves members primarily located in Indonesia (WIB / UTC+7, WITA / UTC+8, and WIT / UTC+9). Some of our third-party service providers — including certain game content providers and fraud prevention partners — operate data infrastructure in jurisdictions outside Indonesia. Where personal data is transferred internationally, uus77 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to process personal data to the same standard as set out in this Privacy Policy
• Data processing agreements that restrict the recipient from using transferred data for any purpose other than the contracted service
• Technical measures including encrypted data transmission over TLS and at-rest encryption of stored data

If you would like specific information about the international transfers applicable to your data, please contact us at [email protected] with the subject line "International Transfer Query".

Data Retention

uus77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following general retention schedules apply:

• Active account data (Identity, Contact, Financial): Retained for the full duration of your membership and for a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years after the date of submission or account closure (whichever is later), in compliance with applicable financial crime prevention regulations.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction.
• Customer support communications: Retained for 2 years following the closure of the relevant support ticket or complaint.
• Analytics and usage data: Retained in anonymised, aggregated form indefinitely. Non-anonymised usage data linked to an individual account is deleted 12 months after account closure.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier. A record of your consent and its withdrawal is retained for 3 years for audit purposes.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with uus77's internal data disposal procedures.

Security Measures

uus77 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the uus77 Platform is encrypted in transit using industry-standard TLS 1.3. The Platform enforces HTTPS on all pages and redirects any HTTP requests automatically.
• At-rest encryption: Personal data stored in uus77 databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256.
• Access controls: Access to member personal data by uus77 staff is governed by the principle of least privilege. Only personnel with a documented business need are granted access, and all access events are logged and subject to periodic audit.
• Password security: Member passwords are hashed using a modern adaptive hashing algorithm (bcrypt with a work factor of no less than 12). Plaintext passwords are never stored.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their accounts via one-time passwords (OTP) delivered to their registered mobile number. 2FA is mandatory for withdrawal requests above defined thresholds.
• Intrusion detection and monitoring: uus77's infrastructure is monitored continuously for anomalous access patterns, and automated alerts are generated for potential security incidents.
• Penetration testing: The Platform undergoes scheduled penetration testing by independent security professionals. Critical findings are remediated within defined SLA windows.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your account has been compromised, please notify us immediately at [email protected].

Your Rights

As a uus77 member, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient detail for us to identify your account and the specific right you wish to exercise.

We will respond to all valid data rights requests within 30 calendar days of receipt. Complex requests may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We do not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Minors & Age Restriction

Parents and guardians who believe a minor has accessed the uus77 Platform should contact us immediately at [email protected] with the subject line "Minor Account Report". We take these reports seriously and will act on them promptly.

uus77 participates in industry-standard age-gating measures and actively encourages the use of parental control tools at the device and internet-service-provider level as a supplementary safeguard. For guidance on available tools, please visit our Responsible Gaming page.

Third-Party Links

The uus77 Platform may contain links to third-party websites or services — for example, the websites of payment providers such as BCA or BRI when redirected for bank-transfer confirmation. These third-party sites operate under their own privacy policies, and uus77 has no control over and accepts no responsibility for their data-handling practices.

We recommend reviewing the privacy policy of any third-party site before submitting personal information to it. The presence of a link to a third-party website on the uus77 Platform does not constitute an endorsement of that site's privacy practices by uus77.

Policy Changes

uus77 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the services we offer. When material changes are made, we will notify active members via their registered email address and/or through a prominent banner on the Platform at least 7 calendar days before the changes take effect.

The "Last Updated" date at the top of this document will be revised with each update. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of any change constitutes acceptance of the revised Privacy Policy.

Archived versions of this policy are available upon written request to [email protected].

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way uus77 handles your personal data, please contact our Data Protection Officer using the details below. All privacy-related communications should be addressed to:

• Email: [email protected] — use the subject line "Privacy / Data Request" for all data rights requests and "Privacy Complaint" for complaints
• Support Hours: 24/7 for general support; Data Protection Officer reviews are conducted during business hours (Monday–Friday, 09:00–18:00 WIB)
• Response Commitment: Acknowledgement within 3 business days; full response within 30 calendar days

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to a competent supervisory authority or to seek redress through appropriate legal channels. uus77 will cooperate fully with any such proceedings and will not penalise members for exercising their data rights in good faith.

For responsible gaming support — which involves the handling of sensitive Responsible Gaming Data as described in Section 3 — please visit the dedicated Responsible Gaming page or email [email protected] with the subject line "Responsible Gaming Request" for priority handling.