us777 Privacy Policy

1 Definitions

The following terms are used throughout this Privacy Policy with the meanings assigned below. Where a term is also defined in the us777 Terms & Conditions, the definition in the Terms & Conditions applies unless this Policy expressly states otherwise.

• "us777", "we", "our", or "us" — the online betting and casino platform operating at us777.one and its associated services.
• "Player", "you", or "your" — any individual who visits, registers on, or transacts through the us777 Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a specific individual, including name, date of birth, email address, mobile number, government-issued ID number, device identifier, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, transfer, restriction, or deletion.
• "KYC" — Know Your Customer; the identity and age verification procedure us777 conducts using government-issued documents (KTP, SIM, or passport) before processing any withdrawal request.
• "Third-Party Service Providers" — external companies that assist us777 in delivering its services, including payment processors, identity verification vendors, game studio partners, and customer support platforms, each bound by data processing agreements.
• "Cookies" — small text files placed on a Player's device by the us777 Platform to enable session management, preference storage, analytics, and fraud detection.
• "Platform" — the us777 website at us777.one and all related pages, features, and services accessible through a web browser.

2 Data We Collect

us777 collects Personal Data through several distinct channels depending on how you interact with the Platform. We group the data we collect into the following categories:

Registration Data. When you create a us777 account, we collect your chosen username, full legal name, date of birth, Indonesian residential address, email address, and Indonesian mobile number (+62). This data is mandatory — without it, an account cannot be created or verified.

KYC Verification Data. Before processing your first withdrawal, we request a government-issued photo ID (KTP — Kartu Tanda Penduduk, SIM, or passport), a selfie with the document, and in some cases a proof-of-address document. KYC data is processed exclusively for identity and age verification purposes and is stored in a segregated encrypted archive.

Financial Transaction Data. Every deposit and withdrawal you make generates a transaction record comprising the payment channel used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, or other), the IDR amount, timestamp (WIB), and a system-generated transaction reference number. We do not store raw bank account numbers or full e-wallet credentials on us777 servers; those are handled by our PCI-compliant payment processing partners.

Gameplay & Betting Data. We record all bets placed, games launched, session durations, wager amounts, win/loss outcomes, and bonus fund movements. This data is used for account statement generation, bonus settlement, responsible gaming monitoring, and fraud detection.

Technical & Device Data. Our servers automatically log your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, and session timestamps each time you access the Platform. This data is used for security, fraud prevention, and platform performance optimisation.

Communication Data. When you contact us via live chat, WhatsApp (+62 811 777 0001), or email ([email protected]), we retain the full content of those communications, including any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

Marketing Preference Data. If you opt in to receive promotional communications during or after registration, we record your consent together with a timestamp and the channel(s) you agreed to (email, WhatsApp, or browser push notifications). Consent can be withdrawn at any time.

3 How We Use Your Data

us777 uses the Personal Data it collects strictly for the purposes listed below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

Where we send you personalised promotional offers — such as bonus notifications tied to Indonesian cultural events like Idul Fitri or Ramadhan — we do so based solely on your account activity and your explicit marketing consent. We do not profile you using data purchased from external data brokers.

4 Legal Basis for Processing

us777 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to create and administer your account, process your transactions, and deliver the betting and gaming services you have contracted for. Without this processing, us777 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, KYC/identity verification obligations, tax reporting requirements, and any lawful request from a competent authority.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming oversight, and internal analytics, where those interests are not overridden by your rights and interests. We apply a balancing test before relying on this basis.
• Consent: Processing for marketing communications, use of non-essential cookies, and any other purpose where we have explicitly requested and obtained your agreement. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

us777 does not sell your Personal Data. We share Personal Data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with at least the same level of protection as us777 applies internally.

• Payment Processors & Banking Partners: To process your IDR deposits and withdrawals, we share the minimum necessary transaction data with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These parties act as independent data controllers for their own regulated services.
• KYC & Identity Verification Vendors: We engage third-party identity verification specialists to assist with document authentication during the KYC process. These vendors process your identity documents solely on our instructions and are prohibited from using that data for any other purpose.
• Game Studio Partners: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session-level data (player ID, wager amounts, game outcomes) necessary to deliver their games and ensure game-integrity compliance. They do not receive your name, email, or financial account details.
• Customer Support Platforms: Our live chat and ticketing infrastructure is provided by third-party software vendors. Communication data processed through these platforms is governed by data processing agreements that restrict use to support delivery only.
• Legal & Regulatory Authorities: us777 will disclose Personal Data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or our licensing authority's audit requirements. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of us777's assets, Personal Data may be transferred to the acquiring entity, subject to that entity providing equivalent privacy protections. Players will be notified of any such transfer by email.

us777 does not transfer your Personal Data to countries or territories outside your region without ensuring that appropriate safeguards are in place, such as data processing agreements incorporating standard contractual clauses.

6 Data Retention

us777 retains your Personal Data for only as long as is necessary for the purposes for which it was collected or as required by law. The following retention schedule applies:

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregate data (e.g., platform-wide betting statistics) may be retained indefinitely for analytical purposes.

7 Cookies & Tracking Technologies

us777 uses cookies and similar technologies to operate the Platform correctly, improve your experience, and detect fraudulent activity. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for core Platform functionality — maintaining your login session, routing requests to the correct server, and preventing cross-site request forgery. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-used deposit method to personalise your experience on return visits.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are most visited, how long sessions last, and where players exit. This data is used solely to improve Platform design and performance.
• Security & Fraud Detection Cookies: Help us identify unusual access patterns, bot activity, multiple-account behaviour, and other signals associated with fraud or bonus abuse.

You can manage cookie preferences through your browser settings. Disabling functional and analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience. Disabling strictly necessary cookies will prevent login and normal Platform operation.

8 Security Measures

us777 maintains a comprehensive, layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• Transport Encryption: All data transmitted between your device and us777 servers is protected by TLS 1.2 or TLS 1.3 encryption. Our SSL certificate is renewed continuously and audited periodically by an independent security firm.
• Data-at-Rest Encryption: Sensitive database fields — including email addresses, mobile numbers, and hashed passwords — are encrypted at rest using AES-256 encryption. KYC document files are stored in a separately encrypted archive with access restricted to the verification team.
• Access Controls: Internal access to Personal Data is granted on a strict need-to-know basis. Each member of us777 staff who handles player data is subject to role-based access controls, and all data access events are logged and auditable.
• Password Security: Player passwords are stored exclusively as salted cryptographic hashes. us777 never stores passwords in plaintext and cannot retrieve your password — only reset it via verified email or SMS.
• Intrusion Detection: Our infrastructure is monitored around the clock by automated intrusion detection and anomaly-alerting systems. Suspicious access patterns trigger immediate security review.
• Penetration Testing: us777 commissions independent penetration tests of its infrastructure on a regular schedule. Critical vulnerabilities identified through testing or responsible disclosure are remediated within defined SLA windows.
• Data Breach Response: In the event of a confirmed data breach affecting your Personal Data, us777 will notify affected players within 72 hours of becoming aware of the breach, describing the nature of the data involved and the steps we have taken to contain and remediate the incident.

9 Your Data Rights

As a player on the us777 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered email address. We respond to all requests within 14 business days of receipt.

• Right of Access: You may request a copy of all Personal Data us777 holds about you, together with information about how it is used, who it has been shared with, and how long it will be retained.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing on legitimate-interests grounds. Note that some data must be retained to satisfy legal obligations (see Section 6) and cannot be deleted on request.
• Right to Restriction: You may request that we restrict the processing of your data — for example, while the accuracy of the data is being contested — without requiring full deletion.
• Right to Data Portability: You may request a structured, machine-readable export of the Personal Data you have directly provided to us (e.g., registration data and transaction history) for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your Personal Data on legitimate-interests grounds, including profiling for responsible gaming monitoring. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

us777 will not discriminate against you for exercising any of these rights — your account will not be restricted, and no services will be withheld as a consequence of making a legitimate data rights request.

10 Minors & Age Verification

us777 strictly prohibits access to the Platform by any person under the age of 21. We enforce this through mandatory age declaration at registration and KYC verification before any withdrawal is processed. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under 21 years of age.

If us777 discovers or has reasonable grounds to suspect that a registered account is held by an individual under 21 years of age, we will immediately suspend the account, initiate a KYC review, and — if the suspicion is confirmed — permanently close the account. Any funds deposited by a verified minor will be returned to the originating payment method after deducting any winnings derived from those funds, as winnings derived from underage play are not payable.

11 Changes to This Privacy Policy

us777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. When material changes are made, we will notify registered players by email to their registered address and by displaying a prominent notice on the Platform for a minimum of 30 days prior to the changes taking effect.

The "Last updated" date at the top of this Policy will be revised each time a change is made. The version number is also incremented with each material revision so that you can easily determine whether you are reading the most current version. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the updated terms, you must stop using the Platform and may close your account in accordance with the procedure described in the us777 Terms & Conditions.

We encourage all players to review this Policy periodically — particularly before making a significant deposit or engaging with a new feature of the Platform. Previous versions of this Policy are available on request by emailing [email protected].

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way us777 handles your Personal Data, please contact our dedicated Data Protection team through any of the following channels:

• Email: [email protected] — for formal data rights requests, privacy complaints, and KYC document queries. Please include "Privacy Policy" or "Data Rights Request" in the subject line.
• WhatsApp: +62 811 777 0001 — for general enquiries, available 24/7 in both Indonesian and English.
• Live Chat: Available inside your us777 account dashboard, 24 hours a day, 7 days a week, including all WIB public holidays.

us777's support team includes native Indonesian-speaking agents who can assist players from Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and across Indonesia in their preferred language. All formal data rights requests must be submitted in writing — either by email or via the in-account messaging system — to ensure a complete record is maintained.