Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context clearly requires otherwise:

• "bps777" / "we" / "us" / "our" refers to the operator of the bps777 platform accessible at https://bps777.app, including all related services, game lobbies, sportsbook interfaces, and customer support channels.
• "Platform" means the bps777 website, mobile-optimized web application, and any related digital service operated under the bps777.app domain.
• "Player" / "you" / "your" means any natural person who accesses, registers on, or uses the Platform, whether as a registered account holder or as an unauthenticated visitor.
• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person — including name, date of birth, contact information, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" means Know Your Customer — the identity and age-verification procedure carried out by bps777 before approving withdrawals or responding to suspicious account activity.
• "Cookies" means small text files placed on your device by the Platform to enable core functionality, session management, and aggregate analytics.
• "Third-Party Processor" means any external service provider engaged by bps777 to assist in operating the Platform — for example, payment gateway operators such as BCA, BRI, OVO, and DANA — who may receive limited Personal Data solely to fulfil their contracted role.

bps777 collects Personal Data across the following categories, depending on how you interact with the Platform:

bps777 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than KTP photograph used solely for age and identity verification), or health information beyond what a player voluntarily discloses in the context of a responsible gaming self-exclusion request.

Personal Data reaches bps777 through three primary channels:

1. Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account preferences. All information you enter into the Platform is collected and stored by bps777.
2. Automatically via technology — when you visit any page of the Platform, our servers automatically log your IP address, device identifiers, browser characteristics, and behavioral interaction data (clicks, scrolls, time on page). This collection is passive and does not require any action on your part.
3. From Third-Party Processors — our payment partners (e.g., the gateway processing your BCA bank transfer or your OVO e-wallet top-up) may return transaction confirmation data — such as a transaction reference number and masked account identifier — to bps777 to allow us to credit your account and maintain accurate financial records. bps777 does not receive full bank account numbers or e-wallet passwords from these partners.

bps777 processes Personal Data only where there is a clear, lawful basis for doing so. The purposes for which we process your data, and the corresponding legal basis for each, are set out below:

• Account creation and management — processing your registration data is necessary to form and perform the contract between you and bps777 that governs your use of the Platform.
• Age and identity verification (KYC) — verifying that you are at least 21 years of age and are the person you claim to be is a legal obligation and a contractual prerequisite under bps777's responsible gaming commitments.
• Payment processing — processing your financial data is necessary to execute deposit and withdrawal transactions via your chosen Indonesian payment channel (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja).
• Fraud prevention and security — we analyze Technical Data and Usage Data to detect suspicious login patterns, automated bot activity, multi-account abuse, and potential money-laundering indicators. This processing is in bps777's legitimate interest and is proportionate to the risks involved.
• Responsible gaming compliance — we monitor Usage Data to identify markers of problem gambling behavior and to enforce the deposit limits, session time reminders, and self-exclusion settings that players have activated. This processing is both a legal obligation and a legitimate interest.
• Customer support — Communications Data is processed to respond to your inquiries, investigate disputes, and improve the quality of our support service.
• Legal and regulatory compliance — we retain transaction and identity records for anti-money-laundering reporting purposes and may disclose data to law-enforcement or regulatory authorities where required by applicable law.
• Platform improvement — aggregated and anonymized Usage Data is analyzed to understand how players interact with bps777's game lobby, sportsbook, and togel (Indonesia's traditional numbers lottery) markets, enabling us to improve navigation, game selection, and overall user experience.

bps777 does not process your Personal Data for purposes that are incompatible with those listed above without first obtaining your explicit consent.

bps777 may share your Personal Data with the following categories of recipients:

1. Payment processors and banking partners — to execute deposit and withdrawal transactions, we share the minimum necessary financial identifiers with our payment gateway partners and the Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) involved in each transaction. These parties receive only what is required to complete the transaction and are not permitted to use your data for any other purpose.
2. Identity verification providers — KYC document data may be processed by a third-party identity verification service. Any such provider is contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
3. Game content providers — live casino game streams from studios such as Evolution Gaming involve their own servers processing the game round. Game providers may receive a pseudonymous player identifier and bet/outcome data to enable gameplay and resolve disputes. They do not receive your name, contact details, or financial information.
4. Law enforcement and regulatory authorities — bps777 will disclose Personal Data to competent authorities where required by a valid legal obligation, court order, or regulatory demand. We will notify you of such disclosure where legally permitted to do so.
5. Successors in business — in the event of a merger, acquisition, or sale of all or part of bps777's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer before your data is subject to a materially different privacy policy.

bps777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration your account remains open, plus five (5) years from the date of account closure, in compliance with applicable anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for the duration your account is active plus five (5) years after closure. Scanned identity documents are stored in encrypted form and access is restricted to bps777's compliance team on a need-to-know basis.
• Financial transaction records: Retained for five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• Technical and Usage Data (logs): Server access logs are retained for a maximum of twelve (12) months, after which they are automatically purged. Aggregated, anonymized analytics data derived from usage logs may be retained indefinitely as it can no longer identify any individual.
• Customer support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the last message in each conversation, unless the subject matter relates to an unresolved dispute, in which case the record is retained until the dispute is fully resolved plus one (1) year.

At the end of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized. Anonymized data derived from your activity may be retained for statistical analysis and platform improvement purposes after your account has been closed and your personal identifiers have been removed.

bps777 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between your device and the bps777 servers is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites. The bps777 platform enforces HTTPS on all pages; unencrypted HTTP connections are automatically redirected.
• Data-at-rest encryption: Sensitive data fields — including KYC document storage, payment identifiers, and password hashes — are encrypted at rest using industry-standard encryption algorithms. Plain-text passwords are never stored.
• Access controls: Access to production systems and Player data is restricted to bps777 personnel with a verified operational need. Access is governed by role-based permissions, multi-factor authentication, and audit logging.
• Regular security assessments: The bps777 platform undergoes periodic penetration testing and vulnerability assessments by independent security professionals. Critical and high-severity findings are remediated on a priority basis.
• Incident response: bps777 maintains an internal data breach response procedure. In the event of a confirmed breach involving your Personal Data, you will be notified without undue delay where the breach is likely to result in a high risk to your rights and interests.

While bps777 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for using a strong, unique password. If you suspect unauthorized access to your account, contact us immediately at [email protected].

The bps777 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session integrity, and gather aggregate statistical insights. We do not use cookies to serve behavioral advertising or to track you across third-party websites.

The cookies placed by bps777 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and display preferences, and protect against cross-site request forgery (CSRF) attacks. The Platform cannot operate without them and they cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymous, aggregated data about how visitors use the Platform — which pages are visited most frequently, where users encounter errors, and how they navigate between sections. This data helps bps777 improve the user experience. No personally identifiable information is collected via these cookies.
• Functional cookies: These cookies remember choices you have made on the Platform — such as your preferred lobby view, game category filter, or responsible gaming display settings — so you do not need to reconfigure them on each visit.

You may control or delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling performance or functional cookies will not prevent access but may degrade certain features. Most modern browsers (Chrome, Firefox, Safari, Edge) provide granular cookie controls; please refer to your browser's help documentation for instructions.

As a bps777 player, you hold the following rights with respect to the Personal Data we hold about you. To exercise any of these rights, contact us in writing at [email protected] with your registered username and a description of your request. bps777 will acknowledge your request within 48 hours (WIB) and provide a substantive response within 30 calendar days.

bps777 takes its obligation to prevent underage gambling with the utmost seriousness. The Platform enforces a mandatory age-verification check as part of the KYC process, requiring all players to demonstrate that they are at least 21 years of age before their first withdrawal is approved.

If bps777 discovers or has reasonable grounds to believe that a registered account is held by or being used by a person under the age of 21, we will immediately suspend the account, freeze the balance pending investigation, and initiate a formal KYC review. If the underage status is confirmed, the account will be permanently closed, any deposits made will be returned to the originating payment method, and all winnings accumulated during the underage period will be forfeited.

We strongly encourage adults with responsibility for minors — whether as parents, guardians, or caregivers — to install parental control software on shared devices to prevent access to the bps777 website and other online gambling platforms. Free parental control tools are available through most Indonesian internet service providers and major mobile operating system providers.

If you have reason to believe that a minor has accessed the bps777 Platform using your account or another account, please notify us immediately at [email protected] so that we can take prompt protective action.

The bps777 Platform does not contain links to third-party websites for commercial or advertising purposes. Any references to external brands — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) or payment providers (BCA, BRI, OVO, DANA, GoPay) — are made in a purely informational context to describe the services available on the Platform.

To the extent that third-party services are integrated into the Platform — for example, the Evolution Gaming live casino streaming infrastructure or payment gateway processing pages — those services operate under their own privacy policies. bps777 is not responsible for the privacy practices of third-party services and encourages you to review their policies independently if you have concerns about how they handle your data.

bps777 exercises due diligence in selecting third-party processors and requires all such partners to maintain data protection standards commensurate with this Privacy Policy as a condition of their engagement.

bps777 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — such as adding a new data processing purpose, engaging a new category of third-party processor, or altering retention periods — we will notify registered players via the email address associated with their account at least seven (7) days before the revised policy takes effect.

Non-material changes (such as formatting corrections, clarifications that do not alter the substance of how data is processed, or updated contact information) may be made at any time without advance notice. The "Last Updated" date at the top of this page reflects the date the current version was published.

Your continued use of the bps777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of that revision. If you do not agree with the revised policy, you should contact us to request account closure before the revised policy takes effect. You may review the current version of this policy at any time at https://bps777.app/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the bps777 support team through one of the following channels:

• Live Chat: Available 24/7 directly on any bps777 page. Our native Indonesian-speaking support agents are fully briefed on data rights requests and can log your enquiry immediately. Response times are typically under two minutes during peak WIB hours.
• Email: [email protected] — for privacy-related requests, please use the subject line "Privacy Request" and include your registered username. We aim to provide a substantive response within 30 calendar days of receiving a clearly stated request.

When submitting a data rights request, please include your registered username, the specific right you wish to exercise (e.g., access, rectification, erasure), and any relevant context that will help us locate and process the correct records efficiently. bps777 may ask for identity verification before fulfilling a data access or erasure request, to ensure that we are disclosing or deleting the data of the correct account holder.

bps777 is committed to resolving all privacy enquiries fairly and transparently. If you are not satisfied with our response, you have the right to escalate the matter to a relevant supervisory authority or seek independent legal advice.