Privacy Policy

km77a ("we", "us", or "our") is an internationally operated online betting and gaming platform serving English-preference players across Indonesia. This Privacy Policy describes how km77a collects, uses, stores, shares, and protects personal data obtained from individuals who visit km77a.cam, register an account, or otherwise interact with our services.

By registering an account with km77a or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means km77a, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of km77a under a contractual data-processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process km77a uses to confirm player eligibility.
• "AML" means Anti-Money Laundering — the regulatory framework that obliges km77a to monitor and report suspicious financial activity.
• "Cookie" means a small text file placed on your device by the km77a Platform to store session state, preferences, or analytics identifiers.
• "IDR" means Indonesian Rupiah, the sole account currency on km77a.

km77a collects the following categories of Personal Data, depending on how you interact with the Platform:

km77a collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, claim a bonus, or contact our support team.
• Automatically: through cookies, server logs, and similar tracking technologies as you browse and use the Platform. This includes your IP address, device identifiers, and browsing behaviour on km77a.cam.
• From payment processors: when a transaction is initiated via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, our payment gateway partners return confirmation data (transaction reference, amount in IDR, timestamp) to our systems.
• From KYC and identity-verification partners: where we use a third-party service to assist with document verification, that provider returns a verification result and risk score to km77a. We do not receive raw document images back from all such providers; retention practices vary by provider and are governed by their own data-processing agreements with km77a.
• From fraud-prevention and AML screening services: these providers may return data points used to assess transaction risk, detect multi-accounting, and flag potential money-laundering patterns.

km77a processes your Personal Data for the following purposes:

1. Account creation and management: to open, verify, maintain, and close your km77a account, including enforcing the one-account-per-player rule and the 21+ age restriction.
2. Identity and age verification (KYC): to confirm that you meet our eligibility requirements before we process withdrawals or resolve account disputes.
3. Payment processing: to facilitate deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet, and to maintain an accurate transaction ledger on your account.
4. Platform delivery and improvement: to operate the sportsbook, live casino, togel, slot gacor, and other product verticals reliably, and to analyse usage patterns to improve product quality and user experience.
5. Customer support: to investigate and resolve queries, disputes, and complaints submitted via email or live chat.
6. Fraud prevention and security: to detect, investigate, and prevent unauthorised access, multi-accounting, bonus abuse, payment fraud, and other prohibited activities described in our Terms & Conditions.
7. AML and regulatory compliance: to monitor transactions for suspicious activity, maintain records required by applicable anti-money laundering frameworks, and respond to lawful requests from competent authorities.
8. Responsible gaming: to monitor gambling behaviour for signs of problem gambling, enforce self-exclusion and deposit-limit requests, and contact players where our responsible-gaming systems flag a concern.
9. Marketing communications: to send you promotional offers, bonus notifications, and seasonal campaign messages — but only where you have provided explicit consent to receive such communications, and subject to your right to opt out at any time.

km77a relies on the following legal bases to process your Personal Data:

• Contractual necessity: processing required to perform the contract between you and km77a — covering account management, payment processing, KYC, and customer support.
• Legal obligation: processing required to comply with applicable AML, KYC, and regulatory frameworks — covering transaction monitoring, record retention, and responses to lawful authority requests.
• Legitimate interests: processing necessary for km77a's legitimate business interests, provided those interests are not overridden by your rights — covering fraud prevention, platform security, product analytics, and responsible-gaming monitoring.
• Consent: processing based on your freely given, specific, and informed consent — covering direct marketing communications. You may withdraw consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

km77a does not sell, rent, or trade your Personal Data. We share data only in the following circumstances:

• Payment processors and banking partners: we share the minimum data required (name, account number, transaction amount in IDR) to complete your deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja.
• KYC and identity verification providers: we share identity and document data with third-party KYC vendors solely for the purpose of verifying your eligibility. These providers operate under binding data-processing agreements and are prohibited from using your data for any other purpose.
• Fraud prevention and AML screening services: we may share transaction data and device identifiers with specialist third-party services to detect and prevent fraud, money laundering, and other prohibited activities.
• Game and platform technology providers: providers such as Evolution Gaming, Pragmatic Play, Spribe, and Pocket Games Soft receive pseudonymised session identifiers to deliver live casino and slot game content. They do not receive your full identity or financial data.
• Legal and regulatory authorities: we will disclose Personal Data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a valid legal order, without prior notice to you where legally prohibited from providing such notice.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of km77a's business assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

km77a operates internationally. Your Personal Data may be transferred to and stored on servers located outside Indonesia, including in jurisdictions whose data-protection laws may differ from those applicable in your country of residence.

Where such transfers occur, km77a takes steps to ensure that an appropriate level of protection is applied to your data, including:

• Entering into contractual data-processing agreements with receiving parties that impose data-protection obligations equivalent in effect to those set out in this Policy.
• Applying end-to-end encryption for data transmitted across international boundaries.
• Restricting access to transferred data on a strict need-to-know basis.

By using the km77a Platform and submitting your Personal Data, you acknowledge and consent to these international transfers as described in this clause.

km77a retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction.
• KYC verification documents: retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support and communications records: retained for two (2) years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal proceeding.
• Technical and usage logs: retained for up to twelve (12) months for security and fraud-prevention purposes, then anonymised or deleted.
• Marketing consent records: retained for as long as your consent remains active, plus one (1) year after withdrawal of consent as evidence of compliance.

km77a implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.2/1.3): all data transmitted between your browser or app and our servers is encrypted using industry-standard TLS protocols.
• At-rest encryption: sensitive data fields (including identity documents and financial records) are encrypted at rest using AES-256.
• Access controls: access to Personal Data within km77a is restricted to staff and systems that require it to perform their duties, enforced through role-based access controls and multi-factor authentication for administrative systems.
• Intrusion detection and monitoring: our infrastructure is monitored 24/7 for anomalous access patterns, automated attacks, and potential data breaches.
• Regular security assessments: km77a conducts periodic vulnerability assessments and penetration tests of its Platform and underlying infrastructure.
• Staff training: all km77a personnel with access to Personal Data receive regular data-protection and security awareness training.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, km77a will notify affected players promptly and take all reasonable remedial steps.

km77a uses cookies and similar technologies (including local storage and session tokens) to operate core Platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics data.

We use the following categories of cookies:

• Strictly necessary cookies: essential for the Platform to function. These cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancer routing cookies.
• Functional cookies: remember your preferences such as language settings and display options. Disabling these will not prevent access to the Platform but may reduce convenience.
• Analytics cookies: collect anonymised data about how players navigate the Platform — which pages are visited most, where sessions begin and end, and how features are used. This data informs product improvements. Analytics data is not linked to your personal identity.
• Security and fraud-detection cookies: assign a pseudonymous device fingerprint used to detect multi-accounting, automated bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. km77a does not use third-party advertising or retargeting cookies.

As a km77a member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected] (plain text, not a clickable link). We will respond within 14 business days.

• Right of access: you may request a copy of all Personal Data km77a holds about you, together with information on how it is processed.
• Right to rectification: you may ask us to correct any inaccurate or incomplete Personal Data without undue delay.
• Right to erasure ("right to be forgotten"): you may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or it has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete AML-required records before their mandatory retention period expires.
• Right to restriction: you may ask us to restrict processing of your data while a rectification request or objection is being assessed.
• Right to data portability: where processing is based on your consent or on a contract, you may request a structured, machine-readable copy of the Personal Data you have provided to km77a.
• Right to object: you may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

km77a's Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an account or provided us with Personal Data, we will immediately suspend the account, delete the associated data, and refund any deposits made.

If you believe that a minor has accessed km77a, please contact us immediately at [email protected]. We take child protection seriously and will act on all credible reports without delay.

km77a reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. We will provide notice of material changes by updating the "Last Updated" date at the top of this page and — where we hold a valid email address for your account — by sending a notification to your registered email address at least 7 days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you disagree with the amended Policy, you should cease using the Platform and request account closure before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way km77a handles your Personal Data, please reach out to our support team using the details below. All privacy-related enquiries are treated with the highest priority.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: please use "Privacy Enquiry" or "Data Rights Request" to ensure prompt routing to our data-protection team
• Response time: within 14 business days of receiving a complete request
• Support hours: 24/7, including Indonesian public holidays (WIB, UTC+7)
• Languages: English and Bahasa Indonesia