Privacy Policy

rrr77 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at https://rrr77.onl and all associated sub-domains and mobile interfaces. We are committed to handling the personal data of our registered players and website visitors with the highest degree of care, transparency, and security.

This Privacy Policy applies to all individuals who visit the rrr77 website, register an Account, use any of our gaming or payment services, or interact with our support team. It governs the collection, use, storage, disclosure, and protection of personal data in connection with those activities.

This Policy should be read alongside our Terms & Conditions, which together constitute the full legal framework governing your relationship with rrr77. By accessing the Platform or creating an Account, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

rrr77 primarily serves players based in Indonesia, including in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and other major cities across the archipelago. We recognize that our players place significant trust in us when sharing their personal information, and we take that responsibility seriously.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Account" means a registered player account on the rrr77 platform, created through the registration process and uniquely associated with one individual.
• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including but not limited to name, date of birth, residential address, email address, phone number, national identity number, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, deletion, or destruction.
• "Controller" means rrr77, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third party that processes Personal Data on behalf of rrr77, under documented instructions and subject to appropriate contractual obligations.
• "User" / "You" means any natural person who visits, registers on, or uses the rrr77 platform, whether as a registered player or an unregistered visitor.
• "KYC" means Know Your Customer — the identity and age verification process rrr77 applies to all registered players in accordance with anti-money-laundering (AML) and responsible gaming obligations.
• "IDR" means Indonesian Rupiah, the currency in which all transactions on rrr77 are denominated.

rrr77 collects Personal Data across several categories depending on how you interact with the platform. The table below summarizes the main categories of data we collect and representative examples of each:

rrr77 collects Personal Data through the following channels:

4.1 Directly From You

The majority of the data we hold is provided directly by you during the account registration process, the KYC verification process, when you make deposits or withdrawal requests, when you contact our support team, or when you update your account preferences. You are responsible for ensuring that all data you provide is accurate and kept up to date.

4.2 Automatically During Platform Use

When you visit the rrr77 website or use our gaming platform, our servers and analytics systems automatically record Technical Data including your IP address, device characteristics, browser type, pages visited, time spent on each page, and the source URL that referred you to our site. This data is collected using standard web server logs, cookies, and similar tracking technologies as described further in Section 8.

4.3 From Third-Party Payment Providers

When you make a deposit or withdrawal, rrr77 receives transaction confirmation data from our payment processing partners, including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). This data is limited to what is necessary to reconcile the transaction with your rrr77 Account and does not include your full bank account login credentials.

4.4 From Identity Verification Services

During KYC verification, rrr77 may use regulated third-party identity verification services to cross-reference the documents you submit against authoritative records. These services operate under strict data processing agreements with rrr77 and do not retain your data beyond the period required to complete the verification check.

4.5 From Game Studios

Our game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — may share session-level gaming activity data with rrr77 for the purposes of dispute resolution, responsible gaming monitoring, and regulatory compliance. No additional Personal Data beyond what rrr77 has already collected is shared from game studios back to rrr77.

rrr77 processes your Personal Data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your Account, process deposits and withdrawals in IDR, provide access to gaming products, and deliver customer support.
• Legal Obligation: Processing is required for rrr77 to comply with applicable legal obligations, including KYC/AML requirements under our international operating licence, fraud prevention duties, and compliance with requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing is necessary for rrr77's legitimate business interests, provided those interests do not override your fundamental data rights. Examples include security monitoring, fraud detection, platform analytics, and service improvement. rrr77 conducts a balancing assessment before relying on this basis.
• Consent: For optional processing activities — specifically, sending you marketing communications about promotions, bonuses, and new game releases — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time by updating your Account preferences or contacting support.

rrr77 uses your Personal Data strictly for the purposes outlined below. We do not use your data in any way that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing a new lawful basis.

6.1 Account Management

Your Identity Data and Contact Data are used to create and maintain your rrr77 Account, authenticate your identity at login, enforce the single-account policy, communicate account status changes, and respond to account-related enquiries.

6.2 Payment Processing

Your Financial Data is used to process deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets, to reconcile transactions, to detect and prevent payment fraud, and to comply with anti-money-laundering obligations. rrr77 does not store full bank credentials; payment processing is handled by regulated third-party processors.

6.3 KYC and Compliance

Your Identity Data, Contact Data, and supporting documentation submitted during KYC are used to verify your age (minimum 21 years), confirm your identity, establish the source of your funds where required, and maintain records necessary under our international licence obligations. These records may be retained for a period of up to seven years following account closure in accordance with standard AML retention schedules.

6.4 Gaming and Platform Operations

Your Gaming Activity Data and Technical Data are used to deliver the games and services you access on rrr77, to maintain platform security and stability, to investigate disputed game results, to detect and prevent cheating or bot activity, and to optimize platform performance for users across Indonesia's diverse connectivity landscape — from high-speed fiber connections in Jakarta to mobile data in Sulawesi and Papua.

6.5 Responsible Gaming

Your Responsible Gaming Data and Gaming Activity Data are used to monitor for patterns that may indicate problem gambling behavior, to enforce self-imposed limits and exclusions, and to provide proactive outreach to players who may benefit from responsible gaming support. This processing is conducted in your genuine interest and in accordance with our responsible gaming obligations.

6.6 Customer Support

Your Communication Data is used to respond to your support requests, investigate complaints, and improve our support services. Live chat and email interactions are recorded for quality assurance and dispute resolution purposes. Transcripts are retained for a maximum of three years.

6.7 Marketing Communications

With your consent, rrr77 may use your Contact Data and Marketing Preferences to send you information about bonuses, promotions, new game launches, and seasonal offers relevant to your location and gaming preferences. You can opt out at any time. rrr77 does not share your Contact Data with third-party marketers for their own promotional use.

6.8 Security and Fraud Prevention

Technical Data and transaction patterns are analyzed continuously to detect unauthorized account access, multi-accounting, bonus abuse, and financial fraud. Where suspicious activity is confirmed, rrr77 reserves the right to report it to the relevant law enforcement or regulatory authorities as required by our compliance obligations.

rrr77 does not sell your Personal Data. We share data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

7.1 Payment Service Providers

To process your deposits and withdrawals, rrr77 shares the minimum required financial and identity data with our payment processing partners, including the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent controllers or as processors under contract with rrr77 and are subject to their own published privacy policies.

7.2 Game Studios and Software Providers

To deliver live casino, slots, sports betting, and other gaming products, rrr77 shares a session token and an anonymized or pseudonymized player identifier with the relevant game studio (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe, etc.). Full Identity Data is not transmitted to game studios; they receive only what is necessary to run a gaming session and settle the result.

7.3 Identity Verification and KYC Providers

To fulfill our KYC obligations, rrr77 shares your identity documents and personal details with regulated identity verification service providers. These providers process your data on our behalf under strict data processing agreements and are prohibited from using your data for any other purpose.

7.4 Regulatory and Law Enforcement Authorities

rrr77 may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, by court order, or in connection with the investigation or prosecution of financial crime, fraud, or other illegal activity. Such disclosures are made only to the extent legally required and, where permissible, with prior notice to you.

7.5 Group Companies and Corporate Transactions

rrr77 may share data with affiliated group entities that provide infrastructure, compliance, or operational support services to the platform. In the event of a merger, acquisition, or sale of all or a substantial part of rrr77's business, your Personal Data may be transferred to the acquiring entity, subject to the same protections described in this Policy. You will be notified of any such transfer in advance where this is legally permissible.

rrr77 uses cookies and similar tracking technologies to operate the platform effectively, ensure security, and improve the user experience. The following categories of cookies are used on the rrr77 website:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as your preferred gaming category, display language, and notification settings. These enhance your experience but are not critical to core functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the rrr77 website — pages visited, time on page, click paths, and navigation patterns. This information is used to improve the platform. Analytics are conducted using privacy-respecting tooling and do not identify individual users.
• Security Cookies: Used to detect and prevent bot activity, credential stuffing attacks, and suspicious login patterns. These operate at a technical level and are not associated with your personal browsing history outside of rrr77.

rrr77 does not use third-party advertising cookies or behavioral profiling cookies that track your activity across other websites. Most modern browsers allow you to manage cookie preferences through the browser settings menu. Note that disabling strictly necessary cookies will prevent you from logging in to your rrr77 Account.

rrr77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected or to comply with legal and regulatory retention requirements. The following retention periods apply:

After the applicable retention period has expired, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized data may be retained for longer periods for statistical and platform improvement purposes.

rrr77 implements a layered, defense-in-depth approach to the security of your Personal Data. Our technical and organizational security measures include:

• TLS/SSL Encryption: All data transmitted between your device and rrr77's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is maintained with a reputable Certificate Authority and can be verified in your browser's address bar.
• Encryption at Rest: Sensitive Personal Data stored in rrr77's databases — including Identity Data and Financial Data — is encrypted at rest using AES-256 encryption or equivalent standards.
• Access Controls: Access to Personal Data within rrr77 is strictly controlled on a need-to-know basis. Staff members are granted only the minimum access rights necessary to perform their job functions. All access to sensitive data is logged and audited.
• Password Security: rrr77 stores account passwords in hashed form using a computationally expensive hashing algorithm. Plain-text passwords are never stored or transmitted. rrr77 staff will never ask for your password under any circumstances.
• Two-Factor Authentication: Where available, rrr77 strongly recommends enabling two-factor authentication (2FA) on your Account for an additional layer of login security.
• Penetration Testing: rrr77's platform undergoes regular security assessments and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, rrr77 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

As a data subject, you have a range of rights with respect to the Personal Data rrr77 holds about you. The following accordion summarizes each right and how to exercise it. To submit a data rights request, contact us at [email protected] with the subject line "Data Rights Request" and your registered Account username. We will respond within 30 days.

rrr77 operates as an internationally licensed gaming platform. As a result, your Personal Data may be transferred to, stored in, or processed by systems located in jurisdictions outside Indonesia. These jurisdictions may include the country in which rrr77 holds its operating licence as well as the locations of third-party service providers such as cloud infrastructure providers, identity verification services, and game studios.

Where Personal Data is transferred outside of your home jurisdiction, rrr77 takes appropriate safeguards to ensure that the data receives a level of protection equivalent to that described in this Privacy Policy. These safeguards may include contractual clauses, binding corporate rules, or transfer to jurisdictions that have been assessed as providing an adequate level of data protection.

For any queries regarding specific international transfer safeguards applicable to your data, please contact our Data Protection team at [email protected].

rrr77's services are strictly intended for adults aged 21 years or older. rrr77 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and any Account found to belong to a person under 21 will be immediately suspended and all funds returned through the original payment method after completing the required compliance checks.

If you are a parent or guardian and believe that a minor in your care has registered an Account on rrr77, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and deletion of the minor's Personal Data to the extent permitted by our legal retention obligations.

rrr77 employs technical controls — including mandatory date-of-birth entry at registration and document-based age verification during KYC — to prevent underage access to the platform. We also support parental control software and encourage parents and guardians to make use of such tools to prevent minors from accessing online gaming platforms.

rrr77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the rrr77 website for a minimum of 14 days following the change;
• Send a notification to your registered email address where the changes are significant and directly affect your rights.

Your continued use of the rrr77 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your Account and request deletion of your data (subject to mandatory legal retention obligations) before the change takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how rrr77 protects your Personal Data. The most current version of this Policy is always available at https://rrr77.onl/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or rrr77's handling of your Personal Data, please contact our Data Protection team using the details below. All privacy-related enquiries will be acknowledged within 48 hours and fully responded to within 30 days.

When submitting a data rights request or privacy enquiry, please include your registered Account username and a description of your request or concern. This helps us locate your records quickly and respond accurately. For identity-sensitive requests (access, erasure, portability), we may ask you to verify your identity before proceeding.