Your Privacy Matters at ss777

The following terms carry the meanings set out below wherever they appear in this Privacy Policy. Terms not defined here carry the same meaning as in ss777's Terms & Conditions.

ss777 acts as the data controller in respect of all Personal Data collected from Players through the Platform. As data controller, ss777 determines the purposes and means by which your Personal Data is processed, and bears primary responsibility for ensuring that such processing complies with applicable data protection standards.

ss777 operates as a Trusted and Secure Platform, Licensed and Regulated Internationally. Our data protection practices are aligned with internationally recognized privacy frameworks, including principles of data minimization, purpose limitation, storage limitation, and data subject rights.

For all data protection inquiries, rights requests, or formal privacy complaints, please contact our dedicated data protection contact at [email protected] (plain text — not a clickable link), marking your subject line "Privacy & Data Protection Request".

ss777 collects the following categories of Personal Data from Players and visitors to the Platform:

ss777 collects Personal Data through the following means:

• Direct collection: Information you provide voluntarily when registering an Account, completing the KYC process, making a deposit or withdrawal, contacting our support team, participating in promotions, or updating your Account Settings.
• Automated technical collection: Information collected automatically as you interact with the Platform — including Cookies (see Clause 8), server logs, and session tracking technologies that record your IP address, device characteristics, and browsing behavior within the Platform.
• Payment processor data: Transaction confirmation data returned to ss777 by your chosen payment method — including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — following a deposit or withdrawal instruction. ss777 receives confirmation of transaction status and the name and account reference associated with the payment; ss777 does not receive or store your full payment credentials.
• KYC verification provider data: Where ss777 uses a third-party KYC verification provider, that provider may return identity verification results, document authenticity scores, and age verification outcomes to ss777. The raw document images are processed by the KYC provider under a data processing agreement and are not retained by ss777 beyond the period required by our licensing obligations.
• Third-party game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe return game session results and RNG outcome records to ss777 for display in your account transaction history. These records do not include independent Personal Data collected by the studio beyond what is necessary to process the game round.

ss777 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform ss777's obligations under the agreement formed when you create an Account and accept the Terms & Conditions — including account management, processing deposits and withdrawals in IDR, and delivering game services.
• Legal obligation: Processing required to comply with ss777's international licensing obligations — including KYC identity verification, anti-money-laundering (AML) record-keeping, age verification (21+), and fraud prevention measures.
• Legitimate interests: Processing carried out for ss777's legitimate business interests, where those interests are not overridden by your privacy rights — including Platform security monitoring, fraud detection, service improvement analytics, and responsible gaming monitoring (e.g., identifying abnormal deposit patterns that may indicate problem gambling).
• Consent: Where ss777 relies on your consent to send optional marketing communications (e.g., promotional email newsletters about bonuses, seasonal offers tied to Ramadhan, Idul Fitri, or Indonesian Independence Day). You may withdraw your consent at any time by updating your notification preferences in Account Settings or by contacting [email protected].

ss777 uses the Personal Data described in Clause 3 for the following purposes:

• Account management: Creating and maintaining your Player Account, authenticating your identity at login, and managing your IDR wallet balance.
• Payment processing: Facilitating deposits and withdrawals through your registered BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja account; reconciling transaction records; and issuing receipts.
• Identity & age verification: Conducting KYC checks to confirm that you are at least 21 years of age and that your payment accounts match your registered identity, in accordance with our licensing obligations.
• Fraud prevention & AML compliance: Monitoring account activity for indicators of fraud, money laundering, multi-accounting, bonus abuse, and other Prohibited Conduct as defined in the Terms & Conditions.
• Platform operations: Delivering game content from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and other studios; processing sportsbook bets on BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, and other markets; and providing togel (Indonesia's traditional numbers lottery) and Dragon Tiger game services.
• Customer support: Responding to your inquiries via live chat and email; investigating disputes; and delivering support in English and Indonesian across all 24/7 support hours.
• Responsible gaming: Monitoring deposit patterns and gaming behavior to identify potential indicators of problem gambling; enforcing self-exclusion requests and cooling-off periods; and triggering proactive responsible gaming communications where monitoring flags a concern.
• Marketing communications (with consent): Sending you promotional offers, bonus announcements, and seasonal campaign messages by email or on-Platform notification, where you have provided consent or where we have a legitimate interest in communicating with active Members.
• Platform improvement: Analyzing aggregated, anonymized Usage Data to identify opportunities to improve Platform performance, navigation, game selection, and the overall player experience for our Indonesian user base.
• Legal compliance & enforcement: Complying with court orders, regulatory requests, or arbitration proceedings; enforcing our Terms & Conditions; and protecting the rights, property, and safety of ss777, its players, and third parties.

ss777 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Third-Party Processors under contract: ss777 engages carefully vetted Third-Party Processors to support Platform operations — including payment gateway providers (connecting to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), KYC document verification services, cloud hosting providers, Platform analytics tools, and anti-fraud systems. Each processor is bound by a data processing agreement that restricts their use of your data solely to the services they provide to ss777.
• Game studio providers: Minimum necessary session data (such as a pseudonymous player token, wager amount in IDR, and game outcome) is transmitted to and from game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — solely to process game rounds and return results. These studios are prohibited from using this data for any purpose beyond game delivery.
• Regulatory & legal authorities: ss777 will disclose Personal Data to competent regulatory authorities, law enforcement bodies, or courts where required to do so by a valid legal obligation, court order, or as part of ss777's cooperation with AML and counter-fraud investigations. ss777 will endeavor to notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ss777's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the privacy terms applicable to your data in advance of the transfer taking effect.
• With your explicit consent: In any other circumstance not listed above, ss777 will share your Personal Data only with your prior informed consent.

ss777 uses Cookies and similar tracking technologies to operate the Platform effectively and to understand how Players interact with it. The following categories of Cookies are in use:

You may manage your Cookie preferences through your browser settings. Disabling Strictly Necessary Cookies will prevent the Platform from functioning correctly; disabling other Cookie categories will not affect core Platform access but may limit certain personalization and security features.

ss777 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and licensing obligations. The following retention periods apply as a general guide:

• Account and transaction data: Retained for a minimum of 5 years following Account closure, in accordance with AML record-keeping requirements applicable to ss777's international operating licence.
• KYC documents: Retained for a minimum of 5 years from the date of submission. After this period, documents are securely destroyed unless a longer retention period is required by a specific regulatory directive.
• Support communications: Live chat transcripts and email correspondence are retained for 3 years from the date of the last communication in a thread, to support dispute resolution and quality assurance.
• Analytics data: Aggregated and anonymized usage analytics are retained indefinitely for platform improvement purposes. The anonymization process irreversibly removes all Personal Data from these records.
• Marketing preference data: Retained until you withdraw consent or close your Account, whichever is sooner. Opt-out records are retained for 3 years to demonstrate compliance with your preference.
• Security logs: IP access logs and security event records are retained for 12 months and then deleted, unless they are material to an ongoing fraud or AML investigation.

Where you request deletion of your Personal Data under Clause 11 and no legal retention obligation prevents deletion, ss777 will complete the deletion within 30 days of receiving your verified request.

ss777 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the ss777 Platform. All connections to https://ss777.asia are encrypted; plain-text HTTP connections are automatically redirected to HTTPS.
• Encryption at rest for sensitive data fields including KYC document images, financial account references, and account passwords (which are stored as salted cryptographic hashes — ss777 staff cannot view your password in plain text).
• Access controls and role-based permissions ensuring that ss777 employees can access Personal Data only to the extent required for their specific job function. Access to sensitive data categories (KYC documents, financial records) is restricted to authorized compliance and finance personnel.
• Regular security assessments including penetration testing and vulnerability scans of the Platform infrastructure, conducted by qualified security professionals at least annually.
• Incident response procedures: In the event of a confirmed data breach that is likely to result in a risk to your rights, ss777 will notify affected Players within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the data affected, and the steps ss777 is taking to address it.

As a Player whose Personal Data is processed by ss777, you have the following rights in relation to your data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered username and Account email address.

• Right of access: You may request a copy of the Personal Data ss777 holds about you, along with information about how it is being processed. ss777 will respond to access requests within 30 days.
• Right to rectification: If any Personal Data ss777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details (email, phone, address), you can update these directly in Account Settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to ss777's legal obligation to retain certain records under AML and licensing requirements (see Clause 9).
• Right to restriction of processing: You may request that ss777 restrict the processing of your data in specific circumstances — for example, where you contest the accuracy of data and while ss777 verifies your correction request.
• Right to data portability: Where processing is based on your consent or on contract, and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to object: You may object to processing based on ss777's legitimate interests, including profiling for responsible gaming purposes. You may also opt out of direct marketing communications at any time via Account Settings or by emailing [email protected].
• Rights related to automated decision-making: If ss777 makes a decision about you solely by automated means that produces a significant legal effect (e.g., automatic Account suspension triggered by AML monitoring), you have the right to request human review of that decision.

ss777 will not charge a fee for processing legitimate data rights requests. ss777 may request proof of identity before processing a request to protect against fraudulent access attempts. If ss777 is unable to fulfill a request due to a competing legal obligation, it will explain the reason in writing within the applicable response period.

The ss777 Platform is strictly intended for adults aged 21 and over. ss777 does not knowingly collect Personal Data from any individual under the age of 21. Age is verified at the point of registration and again during the KYC process prior to first withdrawal.

If ss777 discovers that Personal Data has been collected from an individual who is under 21 years of age, the Account will be immediately suspended, all Personal Data associated with that Account will be deleted as soon as practicable (subject to any minimal retention required for legal record purposes), and any deposited funds will be returned to the originating payment method.

If you are a parent or guardian and you believe that a minor in your care has registered an Account on the ss777 Platform, please contact our support team immediately at [email protected]. We will investigate and take action within 24 hours of receiving a verified report.

The ss777 Platform may contain references to or integrations with third-party services — including game studio interfaces (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) and payment gateway screens for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. These third-party services operate under their own independent privacy policies, for which ss777 accepts no responsibility.

When you interact with a third-party service interface (for example, completing a bank transfer via BCA's own redirect page), you are subject to that third party's data practices for the duration of your interaction with their interface. ss777 recommends that you review the privacy policies of any payment provider or financial institution you use.

ss777 exercises reasonable due diligence in selecting and contracting with third-party game studios and payment processors, and requires that they maintain data security standards commensurate with the sensitivity of the data involved. However, ss777 cannot guarantee the data security practices of independent third-party systems that operate outside the ss777 Platform's direct technical control.

ss777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform operations. The "Last Updated" and version number displayed in the Table of Contents indicate when the current version came into effect.

Where a change is material — meaning it affects how we use your Personal Data in a way that may be unexpected or that reduces your rights — we will notify you in advance by email to your registered address, giving you a minimum of 14 days notice before the revised Policy takes effect. For non-material changes (such as clarifications of existing practice, corrections of typographical errors, or updates to contact details), the revised Policy will take effect immediately upon publication.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the update. If you do not accept the revised Policy, you must stop using the Platform and contact us at [email protected] to request Account closure and deletion of your Personal Data, subject to legal retention obligations.

For all privacy-related inquiries, data rights requests, or concerns about ss777's data practices, please contact our support team using the details below. All communications should be submitted in English and must include your registered username and Account email address to enable us to locate and verify your records.

• Email (plain text — not a clickable link): [email protected] — use the subject line "Privacy & Data Protection Request" for all data rights requests or privacy complaints.
• Live Chat: Available 24 hours a day, 7 days a week on the ss777 Platform. Typical response time under 2 minutes. Indonesian-speaking agents available at all hours.
• Response time: ss777 targets an acknowledgment within 12 hours for all privacy-related email inquiries, and a substantive response or data delivery within 30 days for formal data rights requests.

ss777 is committed to resolving all privacy concerns informally and promptly. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection supervisory authority or, where applicable, to refer the dispute to arbitration in accordance with the Governing Law clause of ss777's Terms & Conditions.