Your privacy matters to us. This policy explains exactly what personal data ind77 collects, why we collect it, how it is used and protected, and what rights you hold over your own information.
ind77 handles member data with the same care and precision we bring to every aspect of the platform — securely, transparently, and only for purposes that genuinely serve you.
All data transmitted between your device and the ind77 servers is encrypted using industry-standard TLS 1.3. No sensitive information ever travels in plain text, including login credentials, payment details, and personal documents submitted for KYC.
Personal data is stored in access-controlled, encrypted databases hosted in secure data centres. Access is granted only to staff with a legitimate operational need. All internal access events are logged and audited on a regular cycle.
ind77 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared only with trusted processors — such as payment providers and identity verification services — strictly to deliver the platform services you use.
You may request access to, correction of, or deletion of your personal data at any time by contacting support. Where deletion conflicts with a legal obligation to retain records (such as anti-money-laundering requirements), ind77 will inform you of the specific retention period that applies.
ind77 uses cookies and similar technologies to maintain session state, prevent fraud, and improve platform performance. We do not deploy advertising trackers or cross-site profiling cookies. You can manage cookie preferences through your browser settings at any time.
ind77 retains personal data only for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. KYC documents are typically held for five years following account closure in line with international financial crime prevention standards.
ind77 ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how ind77 collects, uses, stores, shares, and protects personal data obtained through the ind77 platform at https://ind77.bet, including all sub-pages, mobile interfaces, and related services (collectively, the "Platform").
This policy applies to all current and prospective members who access the Platform, regardless of the device or method used to do so. By registering an account or continuing to use the Platform after the effective date of this policy, you acknowledge that you have read and understood this document in full.
This Privacy Policy should be read alongside the ind77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
ind77 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is used solely to deliver, improve, and secure the ind77 service for you.
2.1 For the purposes of applicable data protection legislation, ind77 acts as the data controller in respect of personal data collected through the Platform. As data controller, ind77 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and securely.
2.2 If you have any questions, concerns, or requests relating to your personal data, you may contact us directly using the details provided in Section 14 of this policy.
2.3 ind77 is an internationally licensed online gaming platform. While the Platform primarily serves members based in Indonesia — including in Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta — it may also serve members in other permitted jurisdictions. Applicable data protection obligations are determined by the laws of the jurisdiction in which ind77 holds its international gaming licence, as well as any directly applicable provisions of Indonesian law.
ind77 collects the following categories of personal data, depending on how you interact with the Platform:
| Category | Examples of Data Points | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, national identity number (KTP/passport), nationality | Registration and KYC verification |
| Contact Data | Email address, mobile phone number, city and province of residence | Registration and account updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Deposits, withdrawals, and KYC compliance |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session timestamps, referring URL | Automatically, on every Platform visit |
| Usage Data | Pages viewed, games played, bets placed (sport, market, stake, odds), session duration, search queries within the Platform | Automatically, during active sessions |
| Communications Data | Live chat transcripts, support email content, complaint records | When you contact support or submit a complaint |
| Verification Documents | Copies of government-issued ID, selfie photographs, proof of bank account ownership, source-of-funds documents | During KYC verification upon request |
| Responsible Gaming Data | Deposit limits set, cool-off periods requested, self-exclusion status, problem-gambling assessment responses | When using Responsible Gaming tools |
ind77 does not collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where a member voluntarily discloses such information in the course of a support interaction, in which case it is treated with the highest level of confidentiality and is not retained beyond the resolution of the relevant query.
ind77 collects personal data through the following methods:
ind77 processes personal data for the following purposes, each grounded in a recognised legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Account — registration, authentication, account settings | Performance of contract |
| Processing deposits and withdrawals — reconciling IDR transactions via local banks and e-wallets | Performance of contract |
| Identity verification (KYC) — confirming age (21+), identity, and source of funds | Legal obligation / legitimate interests |
| Fraud prevention and security — detecting unauthorised access, money laundering, and bonus abuse | Legitimate interests / legal obligation |
| Responsible gaming — administering deposit limits, cool-off periods, and self-exclusions | Legal obligation / legitimate interests |
| Customer support — responding to queries, resolving disputes, processing complaints | Performance of contract / legitimate interests |
| Platform improvement — analysing usage patterns to improve game selection, UX, and performance | Legitimate interests |
| Marketing communications — sending promotional emails, bonus alerts, and offers (where opted in) | Consent |
| Legal compliance — responding to lawful requests from regulators, courts, or law enforcement | Legal obligation |
You may withdraw consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew consent.
6.1 Third-Party Processors. ind77 engages carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These include:
6.2 Legal Disclosure. ind77 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or government authorities where required to do so by applicable law, or where such disclosure is necessary to protect the legal rights of ind77 or the safety of Platform members.
6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of ind77's assets, personal data held at the time of the transaction may be transferred to the acquiring entity. Members will be notified of any such transfer via the Platform or by email, and the transferee will be bound by privacy obligations no less protective than those set out in this policy.
6.4 Aggregate and Anonymised Data. ind77 may share aggregated, anonymised statistical data (for example, total bets placed on BRI Liga 1 matches, or platform-wide slot game RTP averages) with third parties for research, marketing, or reporting purposes. Such data cannot be used to identify any individual member.
ind77 will never sell your personally identifiable data to data brokers, advertising networks, or any other commercial third party. Any entity claiming to represent ind77 and offering to purchase your data should be treated as fraudulent.
7.1 As an internationally licensed platform, ind77's infrastructure and some of its third-party service providers are located outside of Indonesia. As a result, your personal data may be transferred to and processed in countries other than your country of residence.
7.2 Whenever personal data is transferred internationally, ind77 ensures that appropriate safeguards are in place to protect it. These safeguards may include contractual clauses that impose data protection obligations on the recipient equivalent to those described in this policy, or reliance on the recipient's participation in a recognised international data protection framework.
7.3 By using the ind77 Platform, you acknowledge that your data may be processed in jurisdictions outside Indonesia. If you would like further information about the specific safeguards applied to any particular international transfer, please contact the support team using the details in Section 14.
ind77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory, or reporting obligations that require continued retention. The table below outlines the primary retention periods applied to each data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML and financial crime prevention obligations |
| KYC Verification Documents | 5 years from date of verification or account closure | International KYC/AML regulatory standards |
| Financial Transaction Records | 5 years from transaction date | Audit trail and financial compliance |
| Usage & Technical Data | 13 months from collection | Platform analytics and fraud detection |
| Support Communications | 3 years from date of interaction | Dispute resolution and quality assurance |
| Responsible Gaming Records | Duration of any active exclusion + 5 years | Player protection and regulatory compliance |
| Marketing Consent Records | Until consent withdrawn + 3 years | Evidence of lawful marketing basis |
When the applicable retention period expires, ind77 will securely delete or irreversibly anonymise your personal data. Where deletion is technically complex (for example, data held in encrypted backup archives), the data will be securely isolated and overwritten at the next scheduled backup cycle.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across pages and sessions, enabling features such as persistent login, session continuity, and preference storage.
9.2 Cookies Used by ind77. The Platform uses the following categories of cookies:
9.3 Third-Party Cookies. Some game studio integrations may set their own functional cookies to maintain game-session state. These are governed by the respective studio's privacy practices and are limited to the session context of the game being played. ind77 does not permit third-party advertising cookies on the Platform.
9.4 Managing Cookies. You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. For detailed instructions on managing cookies in popular browsers, refer to your browser's official support documentation.
ind77 does not use cross-site tracking, behavioural advertising pixels, or social media retargeting technologies. The cookies we set are limited to those required for a secure, functional, and improved gaming experience.
10.1 ind77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
10.2 Despite the measures above, no internet-based system can guarantee absolute security. ind77 encourages members to contribute to account security by using a strong, unique password, enabling any available two-factor authentication, and logging out of the Platform on shared devices. If you suspect that your account credentials have been compromised, contact support immediately via live chat.
10.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ind77 will notify affected members as soon as reasonably practicable, describing the nature of the breach, the likely consequences, and the steps ind77 is taking to address it.
Depending on applicable law, you may have the following rights in relation to the personal data ind77 holds about you:
To exercise any of the above rights, contact the ind77 support team using the details in Section 14. ind77 will verify your identity before processing any data rights request. There is no fee for exercising your rights in standard circumstances; ind77 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
For responsible gaming-related data rights — including requests to modify, review, or lift a self-exclusion — please contact the dedicated Responsible Gaming team via live chat or visit the Responsible Gaming page.
12.1 The ind77 Platform is strictly intended for adults aged 21 and over. ind77 does not knowingly collect personal data from individuals under the age of 21. The registration process requires age confirmation, and KYC procedures are in place to verify that members meet this requirement.
12.2 If ind77 discovers that personal data has been collected from an individual under the age of 21, all data associated with that account will be permanently deleted, the account will be closed, any funds deposited will be returned to the originating payment method, and the matter may be referred to the appropriate authorities.
12.3 Parents and guardians who believe that a minor has registered on the Platform should contact support immediately via live chat or by emailing [email protected]. ind77 will investigate and act on all such reports within one business day (WIB, UTC+7).
21+ Only. Gambling can be harmful if misused. ind77 enforces strict age verification and encourages parents to use parental control tools on shared devices to prevent underage access to gambling platforms.
13.1 ind77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational needs. The "Last Updated" date at the top of this page will be revised each time a change is made.
13.2 Where changes are material — meaning they significantly affect the way ind77 processes your personal data or alter your rights — we will notify active members via email or through a prominent notice on the Platform at least 14 days before the changes take effect, except where a shorter period is required by law.
13.3 Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you should close your account in accordance with the process described in the ind77 Terms & Conditions before the amendment takes effect.
13.4 Archived versions of prior Privacy Policies are available on request by contacting the support team.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way ind77 handles your personal data, please reach out through one of the following channels:
When submitting a data rights request by email, please include your registered account username and the email address associated with your account to allow us to verify your identity promptly. Do not include your password, full bank account number, or other sensitive credentials in your correspondence.
For questions about responsible gaming data — including self-exclusion records, deposit limit history, or cool-off period status — please visit the Responsible Gaming page or raise your request directly with a live chat agent.
This Privacy Policy was last reviewed and updated on 1 January 2026. By using the ind77 Platform on or after this date, you confirm that you have read and understood the terms set out in this document.
Your data is protected, your identity is verified, and your withdrawals arrive fast. Join over two million members who trust ind77 for their online sports betting and casino experience.